last executing test programs: 18m27.064469221s ago: executing program 4 (id=1444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x4, 0x2, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x84, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'veth0_to_team\x00', &(0x7f0000000480)=@ethtool_flash={0x33, 0x5, './file0\x00'}}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x6, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0xff, 0x0, 0x9}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'batadv_slave_1\x00', 0x3fa1dc947ffe4b81}) r6 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000001380)=@udp=r6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="40000000270001000000000000000001e77c61d895e2e4c5d5b31767431b0333da9113dace48b4e4a351b7b96beb8d6f8fbad9b4f2421de03da76a120fa4334a"], 0x40}], 0x1, 0x0, 0x0, 0x4002845}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) 18m25.862255989s ago: executing program 4 (id=1449): r0 = socket$inet_smc(0x2b, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x200000000000, 0x3fe, 0x1, 0x2, 0x0, 0xf7fffffffffffffd, 0x0, 0x10001, 0x1000, 0x7dab, 0x2, 0x3, 0xfffffffffffffffe, 0x3}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1f, @rand_addr=0x64010102}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = epoll_create1(0x80000) epoll_wait(r2, 0x0, 0x0, 0x200) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_setup(0x1fc3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 18m22.108057521s ago: executing program 4 (id=1455): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) 18m19.354192045s ago: executing program 4 (id=1460): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x8000002}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f0000000180)=0xf) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) syz_open_dev$sndmidi(0x0, 0x2, 0xa040) close_range(r3, r3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r6}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="a1ab0000000000000e0032"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) dup(r9) 18m17.227360807s ago: executing program 4 (id=1464): r0 = socket$inet_smc(0x2b, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x100, 0x200000000000, 0x3fe, 0x1, 0x2, 0x0, 0xf7fffffffffffffd, 0x0, 0x10001, 0x1000, 0x7dab, 0x2, 0x3, 0xfffffffffffffffe, 0x3}) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e1f, @rand_addr=0x64010102}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x338}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_wait(r1, 0x0, 0x0, 0x200) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) io_uring_setup(0x1fc3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) shutdown(r0, 0x1) 18m15.539376923s ago: executing program 4 (id=1468): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) syz_io_uring_setup(0x1b51, 0x0, &(0x7f0000000400), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0xc91f78d6fa1f2e6b, 0x8000, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @const={0x1, {0x2, 0xefe, 0x74c0, 0x5}}}) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000480)=ANY=[@ANYBLOB="01011003020000142505a1a44000010203f381760ff107878a37714ecc0109024700010104000609040080020206008b0b24060000bcc5631c98d505240003000d24080108000000040009004006241a0010050905820240003e58657a85a4e29e016e647d38bdbe9f95db3d8d330e12"], &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x9, 0x4, 0xff, 0x6}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x9, 0x86dc}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x300a}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "40597bb498db657ffafe93d0c50d9428c5d1332813cc0a82a2f838417d47f394fec67137ef44d9b2cc29913fe928f83e4a4f2161daa83b6023774a5aa4e49fef4fe5dad1f1a9804a7e982373c8f97c0fd544dfdec27ac5a621a2ca8b292f729c27607b288689a067057a2b4f8a91c6e470f37e830b2ba9c808122f01d4943f9a0012"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40f}}, {0x5e, &(0x7f0000000380)=@string={0x5e, 0x3, "48d7c37a34d3ef84cc23661511bc5409244f023b98310d084d4cfdac76816f99d296e26c0feaae25be455d291a92d2aed1b9375adf1118008304c6d7a9063d25e6d024f6d059c9c129df9c3dd9253a0ef4c8984f2ae2c5fe536c7106"}}]}) socket$netlink(0x10, 0x3, 0x8) 17m59.866444547s ago: executing program 32 (id=1468): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) syz_io_uring_setup(0x1b51, 0x0, &(0x7f0000000400), 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f00000000c0)=0x100, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0xc91f78d6fa1f2e6b, 0x8000, 0x560c, {0x803, 0x5d5}, {0xfffa, 0x2}, @const={0x1, {0x2, 0xefe, 0x74c0, 0x5}}}) syz_usb_connect$cdc_ecm(0x0, 0x59, &(0x7f0000000480)=ANY=[@ANYBLOB="01011003020000142505a1a44000010203f381760ff107878a37714ecc0109024700010104000609040080020206008b0b24060000bcc5631c98d505240003000d24080108000000040009004006241a0010050905820240003e58657a85a4e29e016e647d38bdbe9f95db3d8d330e12"], &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x0, 0x9, 0x4, 0xff, 0x6}, 0xc, &(0x7f0000000080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x9, 0x86dc}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x300a}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "40597bb498db657ffafe93d0c50d9428c5d1332813cc0a82a2f838417d47f394fec67137ef44d9b2cc29913fe928f83e4a4f2161daa83b6023774a5aa4e49fef4fe5dad1f1a9804a7e982373c8f97c0fd544dfdec27ac5a621a2ca8b292f729c27607b288689a067057a2b4f8a91c6e470f37e830b2ba9c808122f01d4943f9a0012"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40f}}, {0x5e, &(0x7f0000000380)=@string={0x5e, 0x3, "48d7c37a34d3ef84cc23661511bc5409244f023b98310d084d4cfdac76816f99d296e26c0feaae25be455d291a92d2aed1b9375adf1118008304c6d7a9063d25e6d024f6d059c9c129df9c3dd9253a0ef4c8984f2ae2c5fe536c7106"}}]}) socket$netlink(0x10, 0x3, 0x8) 16m23.447112524s ago: executing program 1 (id=1687): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f000000fb80)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109029500030107200d0904000000010100000a24010700030201020624040109250c24020302020440060000070904010000010200000904010101010200000b24020214080f00a9c78e0a2402028000080001c6090501090002fe050907250182000200090402000001020000090402010101020000082402010004091007240102080110090582090004096f0007250100060100"], &(0x7f000000fd80)={0x0, 0x0, 0x0, 0x0}) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2f8, 0x110, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xff000000, 0xffffff00, 0x6dc8f3d6512d1aed, 0xffffffff], [0xff, 0xff000000, 0xff000000], 'bond_slave_0\x00', 'batadv0\x00', {}, {}, 0x2f, 0x2, 0x3, 0xe}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @mcast1, [], [], 'veth1\x00', 'wlan1\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fffffff, 0x9, 0xb3, 0x1, 0x0, "86d6b549c4bf723e1f33da7c11e5cee0b1adedc05fbfc6af15c3f8b75adf8819ec9d8cd0614114f5f1d3b7ba1d33f3750c2e3b8acf37107767e107dac4688212"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x10000000}) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x12d142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x12, r2, 0xfffff000) (async) io_setup(0x80, &(0x7f0000002740)) setuid(0xee01) (async, rerun: 32) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) (async) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f0000000140)={{0x80, 0xfd}, 'port1\x00', 0x28, 0x120000, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000100)={r7, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x4], [0x0, 0x0, 0x0, 0x40000], [0x0, 0x0, 0x1]}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r7, 0x1, 0x5, 0x3, &(0x7f0000000000)=[{0x2, 0x17a, 0xff51, 0x9}, {0x7, 0x8830, 0x40}, {0x2, 0x1, 0x5, 0xaea2}]}) 16m22.859154605s ago: executing program 1 (id=1689): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r3, 0x4068aea3, &(0x7f0000000280)={0x8f, 0x0, 0x5}) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x17, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) waitid(0x3, 0x0, 0x0, 0x60000005, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000240)=0x14) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000000c0)=0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) close(r6) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009f000040"]) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue0\x00'}) write$sndseq(r10, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick=0x7, {0xfc, 0xfb}, {0x5, 0x3d}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x80, 0x83, @time={0x4, 0x3}, {0xf9, 0x6}, {}, @note={0x0, 0x0, 0x0, 0x6, 0xc}}, {0xf8, 0xb, 0x9, 0x3, @tick=0x2001, {0x10, 0x5}, {0xd, 0x2}, @control={0x3, 0x7, 0x107fff}}], 0x54) io_setup(0x6, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r14 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r14) ptrace$getregset(0x4212, r14, 0x202, &(0x7f0000000240)={0x0}) io_pgetevents(r11, 0x800, 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000200)={r12, r13+60000000}, &(0x7f0000000280)={&(0x7f0000000240)={[0x2bbf7f88]}, 0x8}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980903, 0x81, @value=0x327}) 16m17.528903734s ago: executing program 1 (id=1702): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780080012400000000005001500", @ANYRES16=r0], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x0, 0x4, 0x0, 0x3057, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x3, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffff9, 0xf96, 0x0, 0x1}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x2, 0x10, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000280), 0x0) 16m8.976061004s ago: executing program 1 (id=1717): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000100)) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) shutdown(r4, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r6, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f0000000240)={'vlan1\x00', 0x1}) syz_fuse_handle_req(r2, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x0, {0x4000000000003, 0x0, 0x0, {0x10000000000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000, 0x8001, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000400)={{0x6, 0x95f3}, 0x100, './file0\x00'}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000002800)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0xffffffff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 16m7.75058617s ago: executing program 1 (id=1723): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(&(0x7f0000000540)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x87Rv\x169\xdf\xe3>)\x10\xe0\xb0\xd4\xa5\xc0B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x01\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4t\xbfB\xe2H\x14H}\x03\x00\x00\x00\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\xcb\x1aT\xca\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4\x85{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'T\xc5\xc6_1<\xaa\xb1{(d\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xcd*\xa3\xb4\fJ\x00X\xab`\x89; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4k\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xcb\xfe\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xba\xd5@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x1c\x840!^L1)h#v7\x8a\b\x86\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\xdc\x1e\xd0d!\x94(\xfe\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5@8\x8d\xd8(\xf3\n\n\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xca\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\x9b\xf7\xf5\xf3\x12w\x90\xcb\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B\x00\x00\x00oL\"k\x84qsH.\x1e\xba&Q\xe5\r\xf4\xae\x03h\x1c\xf6\x03\xb4\xa0\x96\x9a\xe3\x1eLB\x9bj~\xd7\x00cw\x058\xa3\xf9g6f!\x9bLf\x838Z8\x9a\xa8\xb98\xf9\xaa\t\xe7\x89z\xea7V\x17\x14\xb2\xa2\xfay\x17\xa1\xbfb\xb6\xd8\xb5r\xbdU-b\x8fB\xd94\xc4@\n\xdb\xa8c\xa7I\xae1w]\xd0\xef\b\xd54\xf80\xd4u)\x82\x9c\x91\x86\x02\xe3\xe6\xd1\xdcd\xa7^\x06W\x85\xa9\xd1x\xdd\xf8\xe8\xbf\xe2\x9eDZ\xa2\xa5\xbfe\x1c\x01\r?\xc7\x96\xc0\xe0\x94\xf0*\x05\xb7\xbf\xb3\x00\xb3m\xf7\x98\\~\xde?\r\xa7Q]\xaf\xc7\xa5x \f\x03\xb3\xd3\n-[07q\x01\x14m\x04e\x11\xf0eQ<|\x17&B\xbc\xde\xfe\x8cf\xebc\xad\x99\xa6\xba\xf1\x91{\xc4\x7f\xd7/\x17\xb2\x18\xc9\t\xf8\xe5Y\x01GH\x9a\x81\x8d\xc2\xfb\xd7Lf\\r\a\xdd\x02\x00\xaeo\x19\xe2\xb0s\xd4\xf2*T\x01\xd6\x95{\x17\xd0B\xb20\xb8\xcbN;F\xd6\'\\\x15\xc6\xd2\xe8f\x0e\xab\\\aQ\xa2\xc2BYi\xc3\x03\xc8\x9e3u\xe1\xb3\x8c\x13fTo9\xf7\xbfw\xa0t\xbf\xf9\x82\xd5\x9b\x9d\xd5\xf1\xea)\xc9\xea\x86\xa0%\xb1\r\x03u\x85N|m\x96\x8d\f\xe9\x9bG\x87t\xb8\x84C\x85K}\x0e\xd4Z.\xa2S\x05;\x1aK\xa0\xa0H\xa0_\x02\xeb\x14\x19q\xcb\xa3\xd1\x87GW\xa5\xbd\b\xceN\xb9\xbc\xe35\x0f\xe6\x84\xc9\xc88\xb6\vc\x01\xf2\x80\x8bY\x18u\xffa\x9a7\xa2-\xd0\xb7\x111\xae\v\xa05t5\xb6C\xc9\x9f2\x1c\xbf\x19<]\xf8\'\xceKg\xfb\x94\xdc\xabn;\xaa\x0fb', 0x0) creat(0x0, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = getpid() epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000340)={0x4}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 16m4.543822847s ago: executing program 1 (id=1725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 15m48.95977513s ago: executing program 33 (id=1725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r1, &(0x7f0000000000)='\"', 0x1) recvmmsg(r1, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 17.429478754s ago: executing program 2 (id=4006): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r1 = dup(r0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="ca09fcec9a13f8f74afd27d3103d30183d468a1259648215f6b0ac9af6fabbaa4eca33d0361044e500616defbc8b028ae4220ba16af2beeac0e8ef5793324d7935a1e7c052d1536dcb43ac72070c0b21a80185579b14c00f1774deb1b0788a39c7345370b811aa1b0c57883790054e8d1b4379bf7c990ced6da82dade9ba9fd1b31a31b3e84dbd88da9f4081e8", @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf250f00000008000300", @ANYRES32=r3, @ANYBLOB="05002d00", @ANYRESDEC=0x0], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000140)={@rand_addr=0x64010102, @loopback, 0xffffffffffffffff, "e26d8a4096e73272f9040645f7234b563ad3efff15992fb1d06d1f7dc4aa0050", 0xfffffff2, 0x4, 0x2}, 0x3c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r9) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718"], 0x398}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000ff00000000000000000000009500000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b00000002000000", @ANYRES32, @ANYBLOB="001cab9309", @ANYBLOB], 0x50) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 14.76218386s ago: executing program 2 (id=4013): io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000000140), 0x1) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0x800002a, 0xf0]) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x281}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') fchdir(r3) move_mount(r3, &(0x7f0000000000)='./mnt\x00', r3, &(0x7f0000000100)='./mnt\x00', 0x33) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "f4"}, @global=@item_4={0x3, 0x1, 0x8, "fe702310"}]}}, 0x0}, 0x0) 14.596314476s ago: executing program 5 (id=4014): socket(0x11, 0x800000003, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1400907800000000d5a48689e1e345ed88cc11c8fb23927a8bd390600f2768a2ddda3f1c88de599c96facd957dbb05024c224feba2be222b54d93bcb84ee9470132a1400b5702c3526d32d94313c825a26b7b9aec0"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000740)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7674f43b8038d6c868297732c07667d6ca10d4c2072e259e74ac8d4bd5da999736ee2336a601a74b4a454c94894ffe795919cafe395eb398bb025410911dba606d2bff3abf42fec2fdc8ab6d35523aceb24a2e3be5270432502a4b4b0710220d8173db08dc870a479ceaec6d5d510b7833e66bfb6129898cbdcab927adc29babb4e506ec2739bb8372f31fe9ead59c87a399988c9da816f863e0060f1e67111772e4159e26b3775bb87c87a56851cec06e7f0685e166c0d80e102052", 0xbc}, {&(0x7f0000000140)="cbc1c6b288", 0x5}], 0x2}}], 0x2, 0x0) 13.803845877s ago: executing program 6 (id=4017): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r6, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000c0c0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000", @ANYRES16=r8, @ANYBLOB="00042dbd7000fddbdf25180000000c00308005000200020000005000308024000300aa84df3f3ec0e0bffeeedfc201fc957a064e35441b1781310f28fd18189cf05b0500020082000000040001801c00018008000400feffffff050002000200000008000400db00000018003080140004009868706a187069d5c44644976cfdf4540c000600030000000000000098003080400001803c0003800600010002000000080002000000000006000300a3aa000008000200030000000c0004000200aaaaaaaaaaaa0c0004000000000000000080050002007f000000140004007b9f79ebf52d1d2746b87bd707a5757f28000180080004000b020000080001000100000005000200000000000c0005000700000000000000050002000800000005000200070000000c0030800500020001000000280030802400030083f0354d2ffa3fa67816fd30986218f0bac33a840c8b1d286a9919e7dee6b6a1"], 0x160}}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 13.803428721s ago: executing program 3 (id=4018): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x40, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x25, 0x1, 0x0) syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3}) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) 13.60016413s ago: executing program 5 (id=4019): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x40, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x25, 0x1, 0x0) syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3}) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f00000002c0)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r6, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r5, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) 13.469468415s ago: executing program 0 (id=4020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000500)={0x20, 0xc, 0x2, {0x2, 0xf}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010080000000fddbdf25", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/kernel/profiling', 0xef918be498d5ce6b, 0x61) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xc}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x1f4, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe6, 0x6, "a3d5acc6bf352f5d4350ef394af8fc98529179e5cc61c32367568debfc2605fd03ccb183bfd083444f77d81f3336594e794935d25088e9d7a0ed47b121d2ef035a3fd58c2f14f37fda2bcc652b451c62f87ad10cb30962bb64c9be3baafaf1562d2c2492ad25c9454db0b84b3c2f1aae2c088431cef852b469da1f832803c35ea330efeaf76a1751bb59a22761f36b32426cc1154d172d6ce68f47ee70c05fa57b3cc43810a77c3f4a7ca2100c218fada7d22120000841deae6d48b8eafecb7871f5bfb8fbee32c979efd1ba1af268a784e40d2c16a566c7c4ba0b7b9421ce56c24e"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xce, 0x6, "110a0002f2cff7231a711f89c7d48e15ce3020be373f2b2909f5a4187b4dc1418d14da24dcb701bd6c8ba868c27b4d1a1f9b94abe4ca4f6e6c660ecf125970e3dd1e4bebee9c48fead8c55ca3d5b294b1647fe9c6f787ac2d3a5219d278868ff7d5e522b00cdac608e93fa4d42fb8ddaa05db0f5007f26a9f7483d3f1695beb82d7fd44a9cf7474f1eb9e8dea4d64e91f5740938445a7081ac8f7c9207816e631a658f3a839282dfb5cd2e559aefc4cb1f9c287c60f9eba7d85db3764b245891ebe89621e132bc4aa2e0"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xd0, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_USERDATA={0xb9, 0xd, 0x1, 0x0, "1b8613cf6aeb5a381f3d4f6052d71b4b25385a1b21a5f0081dc2e0e431e4a68fb293d57338104de8558b316cc758f1b71a02c23b02d2d76d468ba36e5eb44c305be3ffc5db58d6de222a5d9560f6476b89bc472feeb780b1a65a80b86281302b76041b5f7b748a4e8ca9c373bf6cf8b3160d54c9c2a0c6a8b9ebcad3658b96c6fec5bb5e5de4ad28cd1fb35d0246c28674e8e647a20520c1924d19193f211328b431066384754f3404aa86b69d0f88f764133477c5"}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2291}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) fstat(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, 0x0) setreuid(r5, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, &(0x7f0000000800)={0x0, 0x3, 0x43, {0x43, 0xb, "f791a004000070f32dc65472c4bed42cd6529cc0bbb6f0798557a691580411666521f56d28f50aba587425863a893800d825f17a7bf39a8d1f94592844bf000000"}}, &(0x7f0000000d40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}, &(0x7f0000000480)={0x0, 0x22, 0x15, {[@main=@item_012={0x2, 0x0, 0xf, '/T'}, @global=@item_012={0x2, 0x1, 0x3, "65e3"}, @local=@item_012={0x1, 0x2, 0x0, "d3"}, @local=@item_012={0x2, 0x2, 0x9, "972a"}, @main=@item_4={0x3, 0x0, 0xa, "8886dfa3"}, @local=@item_4={0x3, 0x2, 0x9, "03aa337c"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1ff, 0x3, 0x1, {0x22, 0xb5}}}}, &(0x7f0000001640)={0x2c, &(0x7f0000001480)={0x20, 0x5, 0x8e, "92035ad5a635a3ecd36afa44823295cd7828abdbb6e2ebe3079d9ac89ac85375dedc3452237122998fec615a710f3e3f5cb93547fa73034a3a2a86c7786f5875476a31d13a9976e53c615e6cead1e93fdba2137c058a8c6d5a4820b2f62f6fb9ac45986105bedc6b4ecf513279747eb432b7843f1dd745109bd32d29f3838e1b79a3efabfe61d12a0306a9ee293d"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5c}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000015c0)={0x20, 0x1, 0x3, "fa8f40"}, &(0x7f0000001600)={0x20, 0x3, 0x1, 0x10}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) syz_usb_ep_write(r0, 0x81, 0xf8, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d70") r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xa7, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0xbe, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x40, 0x5, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x410, 0x7, 0x8, 0x6}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x1d, 0x7, 0x4, 0xff, 0x9}, 0x2d, &(0x7f0000001680)={0x5, 0xf, 0x2d, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "94d38c77b0e5e86e6e06d455d0015dd7"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0xb, 0x7, 0xa4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x8, 0xb66}]}, 0x7, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xe4b1}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2804}}, {0x4a, 0x0}, {0xe6, &(0x7f00000017c0)=@string={0xe6, 0x3, "506ff64a638c0972556cfbeff5d155e0938023c7245e7a009e5c097bbfad3e069b27f7927a094c3ecf1a0b8e36152d572231fa371ac8e550067e5e0d51a1fc195caa99b97d9713073a56c89769c15bf36e4ff55bf988415b2160cb5905d75372998a1ff4f63db59de90dc3436457b888fc990f9b8370c09fb3851fe4ebeeae8fe2351450918ea6b235da8ea352f61f8fb9b65b16eaaec3e36294c8509617c5bac09636210f08e78853cb0d2adee247350e83b9b0a385e15232a864e7ed0751a5cb7f5f9b1a74112287e0c2bc5062380dcfcb616792458f9cb522e770fc5e13ba9269d3f6"}}]}) syz_usb_control_io$printer(r6, &(0x7f0000000780)={0x14, &(0x7f0000000b00)={0x20, 0x21, 0x2, {0x53, 0xa, "e3a3e271761045d2a4fd4a9ff1f28c3eb6bdcad05912661d4ef738e0196ac3b96ef1673b511790286c64c8fa936027a4e9c34e6178196cb17e04aa230da51a558c8ab54d81d03ae5dc2a77c2185c697246"}}, &(0x7f0000001340)=ANY=[@ANYBLOB="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"]}, &(0x7f0000000bc0)={0x34, &(0x7f0000000900)={0x0, 0x14, 0x4, "c6e21b53"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xe0}, &(0x7f0000000a40)={0x0, 0x8, 0xfffffffffffffe66, 0x7}, &(0x7f00000016c0)={0x20, 0x0, 0x69, {0x67, "f3c955f06f9c04ee24e39908f714ce6847f338e7afb3cf6e5ebb192291e98d3a875f878196321d27ccf5b5248000a55fa6fe0af1e68901cd594a9c105fc515ac4ecd4d61cd9d023af1450dceb01fb300920ef4ac3c167d4996cc3b23c8a3523771eadf554332c4"}}, &(0x7f0000000a80)={0x20, 0x1, 0x0, 0x5}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0x5}}) 12.096863883s ago: executing program 6 (id=4021): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x4000000000008, 0x9}, 0x0) timer_create(0xc, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000001600)=""/4103, 0x1007, 0x97) syz_emit_ethernet(0x76, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x4) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) write$P9_RREADDIR(r4, &(0x7f0000000580)={0x90, 0x29, 0x1, {0x7fff, [{{0x2, 0x3}, 0x4, 0x10, 0x7, './file1'}, {{0x0, 0x2, 0x7}, 0x814, 0x4, 0x10, './file0/../file1'}, {{0x40, 0x0, 0x2}, 0x80000000, 0x1, 0x7, './file0'}, {{0x3, 0x3, 0x1}, 0x1, 0x96, 0x7, './file1'}]}}, 0x90) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', &(0x7f0000000300), 0x2000) rmdir(&(0x7f0000000380)='./file0/../file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000180)=0x7) 11.907966607s ago: executing program 6 (id=4022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='signal_generate\x00', r7}, 0x10) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) 11.799339259s ago: executing program 3 (id=4023): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xa}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x4, 0x2}}}}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x9, 0x1, 0x0, r5, 0x0}]) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000040)=0x340, 0x4) 8.184794262s ago: executing program 6 (id=4024): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7f, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x0, 0xf9, 0x1, {0x22, 0x56b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x65, 0x0, 0x58}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0x2, 0x10}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xfd, 0x81, 0xc, 0x8, 0x5}, 0x112, &(0x7f0000000080)={0x5, 0xf, 0x112, 0x3, [@generic={0x63, 0x10, 0x1, "db4c58de9360cf441337b1acedd4a0658061c9710dbb201b3df661156714448ebaa7722add93b934710474aa1e7240d7710c9c35f92689d90837599c4e20bf612635b86485a366f08ba631726984f2b6b0860f9a8c36fef44b3b07c9c43ecd8b"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x1, 0x2, 0x77a}, @generic={0xa3, 0x10, 0xb, "8b09edb79d3c37c229a4d74c1cf3da0e7d00dc395c1a4ddf2bdae1eea42418ba798e22371886e85bad175e159b63b86debcb8bb77365a44fddd68d88a38da15b37cc185eb16c6da9353a9ca73c7ee9d22a94df2ba3b648281d5a762e37d025c0d8968218cc902dc2d18941b2b05af265c15e77d76f2ca0588b8fbbb8e92a7fad5b6ae16d00ceac407e2627d6ee569f30d847b0ccf0594b915a5a6d856de10b77"}]}, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0b}}, {0x20, &(0x7f0000000240)=@string={0x20, 0x3, "f02e109cd90029ea5319c356244d09b5252fde3d06eec3a2579007f059c0"}}, {0xb9, &(0x7f0000000280)=@string={0xb9, 0x3, "71193af2f0bef69c8de04750d8589c1fafc88fb594d02a5e4573eb23707551ab567fef3a9da931a199cf2275de173218be8c2b7995aae6f9f201f581d190eb1f09469c834b244ba694ff331a416f661bd3a17d33f795a089e22db877c8cbfe8d189eb12efeb470aaa8c01f8054011e35279f96974fbbc4ac7af1e4b4b9e7faaa6d670e22fe1e3c97405e58807ef8cc13bd048db59f4736495d583d0c35ebfdf64b9de52629972070694f7d4f09616a7c8250b51d536227"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, &(0x7f0000000400)={0x0, 0xc, 0xae, {0xae, 0x23, "2bb79b1fc297cceac0002f42e31eaf9c0f303773feece485d17f25f9b800e951e3f0eac06ba8a387f519b89ce12520ad062d2357495532106a4e300d09c8324359e8b485d04709b0ff09e26547cc49a9eb8c418332d3fa657a25cf9aa067f56fc367fae53b9e137c70862546a169dec794e90b7b34ca0d38f13e56f750446de46bae9fbbf7f2c1ee1601488a9842f011a2435451baec7bb8977fb56f6b1beccb3babeeb64823c9c4a951a146"}}, &(0x7f0000000500)={0x0, 0x3, 0xa6, @string={0xa6, 0x3, "1e543becac18f95572439765862365bcf6c1f3db4b4fe88fe96c7c9c98a48f79e56891b52f1dec0a108766926e3ef5a4b9e600f14afb629b6d5f25588b68baaf70bcd7a577a1ec710cc313cec2aef694ff9cedcbd59cb058fa4d30688c5af1d5f7f1040c1db3a3071519faef31ff7d7823295576e14e0b0020f0797b975fe8359a2d6e14f88bd59ae9efa5df902a77260d7bfca039bd08a0881921cb82ac530199d5972a"}}, &(0x7f00000005c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "ce1bdca5"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7fff, 0x3, 0x1, {0x22, 0x420}}}}, &(0x7f0000000880)={0x2c, &(0x7f0000000680)={0x20, 0x18, 0xeb, "2eea1eb25256ed9e13816cc48d1c6fbfec94c2376940f85772271f77cd83eb217098cdf0f577bb4edb0d893c5a01e350c361861b8cbb4a0faa3735ecb2a1f0e5051c31d0b3c68091ea961ed946c4baa9cd908c70300577dc59b50d7a7ad6e4e2779f5f203b37b60e9e5d89c7dfd4c0b857d0c6c33f0f797094420a4999b3b41bb3148bc4085efb01b52c2a6fd6865d209612b80f229067403d99aac04c1d5778d5ebb738964e29028e65caf59f3431695676587be549a17bfcb68d3609b13cab7beb7755505e1a4fd5cc39d8fb180eb0087ed227938d9713a7deb684e1181575e604a386b8beca56890db5"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x73}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000800)={0x20, 0x1, 0x20, "71e8ba29c35bbc9b525c70c679a19ecd0a277f39a810ed4cf3bde20dd6e866aa"}, &(0x7f0000000840)={0x20, 0x3, 0x1, 0x6}}) syz_usb_connect$cdc_ncm(0x3, 0x88, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0x0, 0x0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "3fd963cfa5"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xead, 0xc, 0xfe, 0xf3}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@mdlm={0x15, 0x24, 0x12, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x3, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xfe, 0xdb, 0x1}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x300, 0x1, 0x7f, 0x6, 0x10, 0x1}, 0x5, &(0x7f00000009c0)={0x5, 0xf, 0x5}, 0x2, [{0x86, &(0x7f0000000a00)=@string={0x86, 0x3, "eacf29ff4ed3172fae4b6eafb0eb11aa9ca754323d62135e2363ae02419e155d6b989baacca19dcbe37ad6493c66c99ed567eed1e440f3b340be13387594e1081e5d5aa51cec923c80282517b4193a3bc224080bc10335ce9be0d5ee963681edf2b2fddab0176aebc92624ccfa558572b75c05fef327ff2dd3f4723f1de9e32a9c9e0d65"}}, {0x2, &(0x7f0000000ac0)=@string={0x2}}]}) r1 = syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x250, 0x10, 0x5, 0x9, 0x10, 0x5}, 0x78, &(0x7f0000001580)={0x5, 0xf, 0x78, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "f522c9dd202bfc04b39c30653b2e9733"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xc1, 0x8, 0x3}, @generic={0x33, 0x10, 0x1, "1f223732da2109663455b34b68db0f643a1d4f874674fe9eb3ed5f0ab4fea554ea8e792c914285c49c7cdb3a7227fe78"}, @wireless={0xb, 0x10, 0x1, 0x4, 0xe1, 0xfa, 0xb2, 0x2, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0xff, 0x57, 0x8, 0x6}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0xd97, 0xf00, 0x7}]}, 0x8, [{0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000001700)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x408}}, {0xfb, &(0x7f0000001840)=@string={0xfb, 0x3, "7a38a301d7904078270e9d412c92a37f95661f5a1b949df532fe5a746eb2bea05c5658325c922cdef05fc2aac9b7bbf22d30f0bdcf1298a45276ba25da15eb7d3ccdd3275712b9532cd0906e3ec6f8592d55bb22c1ddbdfd8046f0b7ac124ff27e6df45d17fe2f16d6df7d4bd0c034603f5c32cbf81314f971e72f6d7598f2ef7842733d841b7f0e4f64f6f3dcd116ef61dd81892dbed444a87e8a0f7452d32498f324de9d1bc40d05bb412cd39647db61a99ef9234668a56f3f8177a61e23541f1183595192d36a445e14bfd08f406c251cfcd08abb0b56b9287125d09adb2f19536a3e0e1ac6b43d514c744e0d7be0fa7856fff7d28bf307"}}, {0x6b, &(0x7f0000001940)=@string={0x6b, 0x3, "b818a0a68c93f323703e936aa8849dcfcdf935ce7e51c8f1c2b854fccc15cef8e462cad51b99505e5430f27f016816c43201ef408bd1df60ac4c068b6058c0b00f597bf0dba2a5cd390d7241e4c26a248bf7d9e3f79940db16fe134dd1250d0bbf2e134c41b78c0c72"}}, {0x87, &(0x7f00000019c0)=@string={0x87, 0x3, "f2230db300e6a1edbafcd66c6579b27cd8436618475b2330ee3442a374aea22221bffa9db93a652f448ddf748f59689e9caeb8f7ace5ea71e7208a1c8f0b3f0fe5393ffd93316fa631797f7c8bd78f6e9cb28448e7801e51a52670983c1dbaee2fd366a447fa8f84b38dd1fb93b8ea33861f154cdc91db5b2766d0761c59d6448ea896c1fe"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xa2, &(0x7f0000001ac0)=@string={0xa2, 0x3, "2c2fc9db648f2d768fe7777d730818d7b2a9e2b3aacd3be99c1b9f4c876432c6bf623ece8aa0d9e816c3448993d89fbf44195ef455943051463668b7c087aca95f76438d8d81eb47c2c9b1cd8ac0be5d237cd7626c1bc52a9ec607bf8becf4a8b44857052f7ce5cf2980543e0db08efdb7b08a549433a65c4c2a01a50421c0268bb0c36a0a5819fd80e7dbc6cb27247b34933594483718f24386d9951a2ed37c"}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000001d80)={0x14, &(0x7f0000001c40)={0x20, 0x22, 0x16, {0x16, 0xd, "12c4a4194b1764b920e1806b8b308721c2dfe6ba"}}, &(0x7f0000001c80)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "215f89abc7059c0f77295e1b081afbaa78f4a6694b9662cc2eb4228cdbfdafe9ba81e900af70730a2a85028950bdf88ce6bdf580bff5d5fe02c42e268c7b7086e3ab9c230355ffcf63ea877064a42119fdb104fd70591f497848c0d23f6c0deaa6090dfcfab6db573d06e380e21a4ebdb9fc310e5cecdc957809f8aeb84e0e049b293470927781418cd4aeceadc1ec38a83bd9c55df69c13552aafccf7bba05bf424068ad7eabdb2b3ab952af95e2d33e1522c80e42c43ecb18424dabdc07c944bd6fff1"}}}, &(0x7f0000002000)={0x44, &(0x7f0000001dc0)={0x0, 0x13, 0x62, "581545d4b124c21b328e1f95b7c1abe5561a59b50f2fe82ba40c7549837accf5cf0e85faa394e95a1fc74a394ca75d948f228eadef81bf7b194be97ca07ea62b7bc7284876bd93bb5c14cf0329a5173a8334b54e84d6605f5f23c8bd557d2c759111"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001ec0)={0x20, 0x81, 0x1, "e4"}, &(0x7f0000001f00)={0x20, 0x82, 0x3, "45fc54"}, &(0x7f0000001f40)={0x20, 0x83, 0x2, "6b1a"}, &(0x7f0000001f80)={0x20, 0x84, 0x3, '\"kL'}, &(0x7f0000001fc0)={0x20, 0x85, 0x3, "97ca74"}}) syz_usb_connect(0x3, 0x718, &(0x7f0000002080)={{0x12, 0x1, 0x201, 0x90, 0xf, 0x87, 0x20, 0x12d1, 0x1406, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x706, 0x2, 0x9, 0xff, 0x0, 0x7, [{{0x9, 0x4, 0x60, 0x2, 0x5, 0x9d, 0xb3, 0x49, 0x6, [@uac_as={[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x1, 0xb8, "132d24581b"}, @as_header={0x7, 0x24, 0x1, 0x2c, 0x9, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xfd, 0x2, 0xb, 0x5, "ff", "ed96"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xd, 0x1, 0x0, 0x10}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x1, 0x4, 0x9, "", 'z'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x7, 0x3, "20d7"}]}, @uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8d, 0x1, 0x77, 0x5, "60ff34"}]}], [{{0x9, 0x5, 0x3, 0x10, 0x7ff, 0x2, 0x2, 0x40, [@generic={0xfd, 0x8, "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"}, @generic={0xab, 0x360610b60657e27b, "3270b71c9a796d65d317f84c592555e01184fb44981f7c010af167591049cea92047eaaa28756d9cf7cd81bb7b700fff3636dcb09dc059af180a64e20a07f45fcb7ab58ff4a9454611a2f4e57c6039857dc5428907b18a0cf87074451136c2f234c6d68be11562c14fd752d47794b24b7a441df7b12617ac7c74bb5f2a017afe092ffecb64372a5a667b3c5aed58bbdc659c7b781d21e1a64e4339baa1d457f6a6e47a414674a9df1d"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x4, 0x1, 0x59}}, {{0x9, 0x5, 0xd, 0x10, 0x218, 0x9, 0xc, 0x2}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x3, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x5}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x5, 0x1, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0xcc, 0x1c, 0xe, 0xa3, 0x1f, 0x2f, 0xbc, [@uac_as={[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x3c, "c63f7b70555d"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5a, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9e, 0x64, 0x1001}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x1, 0x0, 0x7}]}, @hid_hid={0x9, 0x21, 0xb, 0x1, 0x1, {0x22, 0x32}}], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7f}]}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x5c, 0x4, 0x4, [@generic={0x61, 0x21, "45cc5ff09fdc7b5435c5d675020feb2f29dcad498f805aa41778888234d8aff8d7d4b5994de598301405d966b87d92e2bd484f17c2e610c476ad3baaa7ca843553a2598287feb11d873a67e76754890ea05d51a9832163f7b14e0644c0da0c"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0xa6, 0x7f, 0x4}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x5, 0x7, 0x3, [@generic={0xc7, 0xf, "4a5b89d445c24dac29c394eeae6596dba8915a8cd0e786b2819d35b947904ffecb4d69abd94908892be7b0221c08b648e07c3304d4ba84ff5af51e17a07690791716135e4579d5dd0e1fb3fd7027dab60ddcb9659feec16a6bd1c66daff5afa03f04071067b8d146dfa39fa7ac30873db21e95abaf80c64df304299b6dc6cd9abbe5f764bcedbe44a61478a52bf986525c41bb527e3034fa81992d0f0c883b588004e4870bea2137ca4d559ec0807d026855f773011f7f51518d0512046e0c059aa7534af5"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x0, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0x5, 0x9, [@generic={0xa, 0xe, "46ac54619f637f83"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xd6, 0x2}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0xfa, 0x9, 0x8, [@generic={0x8d, 0x9, "02d83a85b830d5efd36683911593a1f94654282054daec72450896b16ec556aa456df51d58b06f769f5398c3b5f60a7f5971a529dd81a4de476773a747bf0aa0d6001f8a2506718155ee7bdf0cbbca7a57469351cd208c0a5e26c974c7387f9a3204acd723335920ec23d07cbbd492cea33d9e3a7bd1cd5924a5c54a6158f5d3ef56554428c68f14fd3497"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x4, 0x544}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0xe, 0xd3, 0xb, [@generic={0xc5, 0x9, "eea044c9cdb75851b186c8563cf0e0f469a2406e208d48ebb09264d3cfca08420265763ec0ed0d3cae9b6b9e494e9ac25e9d7a408098d5856663b2844a34669ee255be4bd2cb0b0cb951d63ee01af5a8ceec9e67e7bc940051e3e9c89bd7dce43f42c8512791cb2076bb8e6ab707ef5263111ea2e4c962fbd0108ea3c1e7fdb053247ac3de5b5b00797f441d11f8e66792f51f190ff42d23a171801dfc3238dcd650809d1e88f46f17a9e9a008159bc31081c3e4fa8775847ede1b797a89abe27868f6"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xd, 0x2, 0xff, [@generic={0xba, 0x9, "428b256d9578f6ee3fc1d44f34a8cef26f0668017d656878368e47850826301fdcdc9c6375bcb166dcc90e95f38ebe95dbbbebbaf8563cd7d8bb7baae5b7d0af5bd6ede17ad55867cc084c0488b448e8f4f958afc9a0f4d5dd51f2069d26ad4334de47ab07f83a1ec5b638280112ad722f8a904fb3baad8e6ae52bfa0e66b69dd43f8577e792c8db513784170a7304ca71963efbfd6fed50d57bd31f1e7926f1921c40941e2a2963ffd31e688e7ac6b796e0b8aa5533f078"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x7f, 0x8, 0x0, [@generic={0x86, 0x22, "068c433d6c2c9e61ff82fac0e1fd5329387297daa57340c84fbad3b7eb56aadb0f9926a03954b5aca63d6e1f8f0d38f7067ee6a411051aaf58c6b56419bfbb7ca8e1024c0c91a9823acfd6890d3e80f09f7bdb168774210563f289b9e6fec57cf3ccc734587578a707f742941a4a964c9b380ec561532f3e56cbdfd9c1bc16576dc89102"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x34, 0x6}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x80, 0x1, 0x9}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x6, 0x59, 0xf, [@generic={0x29, 0x9, "710ca067fcaff0a343e1be915177a4fc51f335a5edc00d6dcccc9e52e9a0fa28a81acd5df6272c"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x8, 0x4, 0x1}}]}}]}}]}}, &(0x7f0000002b80)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x201, 0x9, 0x7, 0x6, 0x20, 0x9}, 0x5, &(0x7f0000002800)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000002840)=@lang_id={0x4, 0x3, 0x4ff}}, {0xda, &(0x7f0000002880)=@string={0xda, 0x3, "8290658b169683711defa99e84bf39900ffc936acb66bc60142b6dc3ad0966a4c6a1494a0bb165a5c1af9c09afe1c78349fe7e6d2338de4fd676674bbfa21e29d96a5825af9fb4560b5fcffb4a8e1c9bd9043ab6730de346dabea487eb538624463a0a2af061d3765c539fe54a95c3b9cb4c457281441baa33e9e518f40dd51b776d1f3688f1982d44ebefcbc520203cab82318f10cf639ebca891cd1bcda7e192b0ba051fc2088a165e9715415e454915cf0f3713880c371bd572851f27406942b68030a3852aedaa48e6ddf9392c795f55d6ca83cb48b6"}}, {0x4, &(0x7f0000002980)=@lang_id={0x4, 0x3, 0xc1a}}, {0x6b, &(0x7f00000029c0)=@string={0x6b, 0x3, "5c7f7ec5a30df30e262a7ddbbb2e90612e4dddf9dd4ee3a26779e8ef9490421f147fb1576e239cd1638933da8dd4ff39478e62a3151b9f2979750ecd7811009c0e46e1ed31821a8e5f4d67ef656a439416123f09da1d69b6934c43fc111a9699b77ce99a327f14cd32"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x8}}, {0x9a, &(0x7f0000002a80)=@string={0x9a, 0x3, "a30fd1a93ca97053f745725028b0fc87b35019d89db7fdfaba6797586dac44d5f523468d53b9ada17543a33004d32fd051def37014697501e9049f4d7695891283a83370c5cf912e22cbda973c9aaa367a5da9c3bb8d6e676694ccda48ee7f4a8f4466947aea9cb5e97d71a54c37b77fe96729706ecb6dfe6033d7e2789e19ad6169db8bd0ec7f3b906bb0b30fe3b34e7a33bcafffbdebad"}}, {0x11, &(0x7f0000002b40)=@string={0x11, 0x3, "007bf3f61b2ea5ce8a8ad668aa56d3"}}]}) r2 = socket(0xb, 0xa, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x2c, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000002d40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x78, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x1, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x7df, 0x6, 0x6, 0xf8}}, [{{0x9, 0x5, 0x82, 0x2, 0x228, 0x2, 0xfd, 0xc8}}]}}}]}}]}}, &(0x7f0000002f00)={0xa, &(0x7f0000002d80)={0xa, 0x6, 0x201, 0xff, 0x1, 0x1, 0xff, 0x7}, 0x5, &(0x7f0000002dc0)={0x5, 0xf, 0x5}, 0x4, [{0x3e, &(0x7f0000002e00)=@string={0x3e, 0x3, "926bce852634add651ed33cbd71e5666bef419bc0bfe159bd02b6d1a351a2db8adcf78262478aeee67e2672c8a49c4ae59545316247d8072cfcf8685"}}, {0x1c, &(0x7f0000002e40)=@string={0x1c, 0x3, "5b4f3e7454214111b36f451f694bed56c441db752c1d39c5f554"}}, {0x33, &(0x7f0000002e80)=@string={0x33, 0x3, "02b83a7d92fe88c2a023ae9203dfc43dc781b3452ee7c97b2b36c9bbe935eaf1cbcbf13e3d7d432f832700c7bfe11bcf3b"}}, {0x4, &(0x7f0000002ec0)=@lang_id={0x4, 0x3, 0x440a}}]}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002f80), 0x200c01, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000003000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000003040)={0x48, 0x1, r5, 0x0, 0x4, 0xb42b}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x1, 0xd4, &(0x7f00000030c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0xf, 0x100, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x2}, @as_header={0x7, 0x24, 0x1, 0x4, 0xfe, 0x4}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x101, 0x4, "c70386e396246c"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x2, 0x4, 0x5, "b09a0c", "0e95da"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x8, 0xc6, "a22bee", "0a8029"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x5, 0x7f, {0x7, 0x25, 0x1, 0x82, 0xb, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0x6, "ed"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x5, 0x2, "", "df"}, @as_header={0x7, 0x24, 0x1, 0xff, 0x8, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0xc, "", 'X'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6f, 0x2, 0xf, {0x7, 0x25, 0x1, 0x2, 0x3, 0x1ff}}}}}}}]}}, &(0x7f00000033c0)={0xa, &(0x7f00000031c0)={0xa, 0x6, 0x250, 0x3, 0x7f, 0x0, 0x20, 0x9}, 0xf, &(0x7f0000003200)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0xd, 0xf, 0x9}, @ptm_cap={0x3}]}, 0x4, [{0xb6, &(0x7f0000003240)=@string={0xb6, 0x3, "6c348f53c2dfd12461317a14f218b397c8095039a978a76211efc2ec6c742581ecc4ecb445da281fe4e64dbbb1b23b90bc9a84ce251ad626acd425438e5b3b76b23ca790c420b849b0de7a55916e11451ef691f192bd34273557fee1f6de8cad0b641793c7a38a3d6c281628e2d0ed060ba8423f5ec46653181d2e4a8a68b686814692cbcc12243eb5fa3cae4fe0799d1e72dfa7c84019a9e6483c0632b48e127d633d811c2b3ed963d0073b060bdc3619b94df0"}}, {0x4, &(0x7f0000003300)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000003340)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x1c01}}]}) socket$nl_generic(0x10, 0x3, 0x10) r6 = fcntl$dupfd(r2, 0x0, r4) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000003440)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000003480), 0x1c000, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000034c0)={0x48, 0x2, r5}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000003580), 0x80000000, 0x8a402) syz_usb_connect(0x1, 0x996, &(0x7f00000035c0)={{0x12, 0x1, 0x200, 0x50, 0x7f, 0xe1, 0x10, 0xd81, 0x1900, 0xabba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x984, 0x2, 0x0, 0xa, 0x40, 0x1, [{{0x9, 0x4, 0x6a, 0x4, 0x8, 0xc1, 0x7, 0xa2, 0xe, [@generic={0x88, 0xe, "e106b35b03b9b0c47ecdb62fa277493de408bf86cb3fbf210e7b04c7f97d8553937bbe4f7e551d16f6f9bc42fd28e75b4d33a2ee84dc614554ea34b7d7f58bb7eab541e183d1fb1c8ea6910f6fa9e7eda8f46b0f45de85e542999e5025bfaf0795f0d4d9483936757b80171e209d37e89ec20407cdbdc73d49154bee7a8e2b6e6a4c83bdde7f"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, '2\rJq'}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x80, 0xc, 0x3}, {0x6, 0x24, 0x1a, 0x839, 0x20}, [@acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0x41, 0x24, 0x13, 0x4, "7d8cdebdb70597fa14a28be8a44dfe5cd3c5fc0fe03396d0dbe12a19e56c9b882a94e1fe2a8d38707e3aaa612bbf4c12d5ef2c6b2a34ee8988caa333e5"}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0xd, 0x0, 0xe6}, @mdlm={0x15, 0x24, 0x12, 0x40}]}], [{{0x9, 0x5, 0x9, 0x0, 0x40, 0x2, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0x44, 0x10, [@generic={0xd3, 0xa, "2e5c55b70f637b996bab8f7fafb469ee99d21278e86664551b8d7cdbacee17dbcd1e8e90342a43622c65755f7b22a2e5a0e38a1b1886f9477355bfdfcef095c45f751252470931c18a3add60b3bf0898e1223e60a0b59e02dbd98536537bb8a20982e9f6ab25e409bbb5c896feecf62bbfa639c0237b6a7d275174b701f342368bb2c81cf9eb571d474c59358250dfc40640c6ad565f58d7e1e208270855306be4dba56fcdf5a7a9349a1137e385229881d8560540224cc729d07215138672f7d5f5185704d9c9263f7266dbe0a7bc8934"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x7, 0x3, 0xf8}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x3, 0x0, 0x80, [@generic={0xcb, 0x21, "b3419851adb3a1581bb2256f838eb128d0488df9008585f253751a9eb0f6e498945bd7a57f18bdf057d4e0abffe081659b7daf194b9344b86480a2db34cb078d2676ae2cf311f503d5ac25ead69f281708d109f6f1f10eb01b70eb4d4f8f9a060edd1aa4de24450af2b40e3a7a060fbdb96f3cc186f9f65be509794efb07e5c27457161a56bf1d19562c8dcc522bc1ee1f253248df89edb8df0d955f79d46a15460665bcdfcb96d6a0c446266c0eec3cb4bed6d0a4799b7c2400709aa4783a23a5cebfa6c0960471f9"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x13, 0x8, 0x5, [@generic={0x80, 0xa, "f0dfed72b11e835487903984922bb17bcd51ad71a0ea7ac1e4ba6a1f7764818364ca1cedb89a7cd6dcce93f9a79826f3aed32f2f0bfe23ffb8e384f611482ca99ed759b43573248f05c41a5ff28726011ee326ece65b3b14f2e53d34a3ac1efcfa63e2dd8512a78c7ca193555bd953c539fb2981b9705b470d9b2df61dd9"}, @generic={0x19, 0xf, "e74150aa7f522f31dd60a6f248d588c2bace6c4b1ac4d7"}]}}, {{0x9, 0x5, 0x3, 0x1a, 0x200, 0x9, 0x52, 0x3b, [@generic={0x6d, 0xe, "64dcda03edebc1c8aafeddde51cb2f7d526513c09b374f6a6f54bee7f56cde07f7a46395a453c5d7927a760daea9668c6290bb0cc936f2b2d36b4b7e58024e97199ea850c369047579b4a101572046ff1f200ab86e2ea2a13464a17e8b5062535a5c5cb8ec0b2d888bb04b"}, @generic={0x14, 0x10, "7da8116ebf42c679947d832f1c521024d557"}]}}, {{0x9, 0x5, 0xb, 0xa, 0x200, 0x1, 0xb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x8001}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x9}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xf9, 0xca, 0x56}}]}}, {{0x9, 0x4, 0xbe, 0xae, 0xe, 0xf6, 0x38, 0xa2, 0x7, [], [{{0x9, 0x5, 0x8d, 0x3, 0x40, 0x1, 0xd, 0x2, [@generic={0x31, 0xc, "fbd07e2702e0c06a9849f94177c702013d80cb0f79dbaab881b75e114cad73f08df9707df7c1880cc3564c06c7a258"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x5, 0xa, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xb, 0x1, 0x6, [@generic={0x64, 0x1, "155bcecedd7682c801615ea2fc86f258ebcf79b52a71be9a5e14ab09a2187991fb51ecd316d81d384fb59fb8adc4be562390c1776e211ca549e0692062694c0671e7242f2f41ec2e57532ae848e3c4066e69be082f4e306b56969b1fade2b0745ff6"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0xf5, 0x4, 0x9, [@generic={0x4f, 0x2, "5d8b74f036b87b974bced30ebed31d723fe2212737b274eeec5ea5d1bc8b0a306086527f2c5e08b5dd6313559ca9fc78195c4321a1e55debe43722aa923e106d366a5efd78edf3b77e59d7c516"}, @generic={0xa0, 0x28, "a9ecadf347216c711391e97bb0a0c95cd3ce3a7bca71748dbc09dc62ace81e555dcd95f88d15a60c1b9a2ef9761ea0e0873e7a1600a353a638580bf0846e98a0603c92784d872d68dce555ad488b02e34ac0da66eadf8061232473f401f417328b648ca7e3b4e0ec7c23c4f7490487a26312376af670815830fea12f65aaddf3aa9a895ce404453668393f5dfa692f3ce312279cb23846a3080b22d3119d"}]}}, {{0x9, 0x5, 0xb, 0x9, 0x10, 0x0, 0x1, 0x3, [@generic={0xcb, 0xe, "75bfde3fdf4013b307be94c692faecf207955f5e9955755bd6e8c6131f6dd2a92ef574ea21a9574487b30d0ab894783dc50a22883724a1f358657ad71e4136a635bee86f735012b48a297b73155486998d161ee77d49034ddfa4aaa6622023e2ff54b8fe7f03d6bfd24115320932758acf139da6ca04a8e46c00c81bdeffc5ccef52bcb75ab33160d25199f98b4a153f2bce34fcdbf5144f48215f31f418a623f5ed82e201d8f192d5bf8750a3c571da667c63da43ff785759d6697851bf4692fefc7ed731ba261274"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x4, 0x0, 0x6b, [@generic={0xb0, 0xa, "4713d38290b6bea9e437473ccd448ccd93004b0446d8018390b8c7eb372e0ea93d1108805493e209eeb0717520a3f0c3bef198082c8e79a4143bf587249f935e0961aa8dbfb9f4b71517a4264ceddabcb0f039f90fe6ddf65d7e6396db5e70c162043d74c5d387a6af5d87a295d05876287fea02021e9ff3958bf011e110c01e9ccff30b365856c8ec5499f8cd8bdddc8978daf1c6773f350b7e83b471078bf20ced5cc4d049432ee1009bae6dc8"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x9, 0xe, 0x2, [@generic={0xb, 0xd, "9d76b6d02867ff9cbf"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x400, 0x9, 0x9, 0x2, [@generic={0x89, 0x30, "5f7efae804ce4a55ab5b7558ab8860b6b61a8c9df199f011ab32c297a7dbf6ed6951795d851d71fd5e4dc7ecf1e2aa94fdb12179921d7f622c2405c3b1059dfb70c51c1f23fdb39c9c3721e27d5306e63aad6ef24e348fbd4a7ebddf499c5894fbc97e5204304ee36a4c9143dd2ce0af9a50a061a3b062041ba1949a6229eb18338e71f95bd2b3"}]}}, {{0x9, 0x5, 0x8f, 0x10, 0x3ff, 0x7, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x1b7, 0x10, 0xe5, 0x3}}, {{0x9, 0x5, 0xd, 0x4, 0x40, 0x8, 0x80, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x5}, @generic={0x93, 0x31, "5d46d7a94df62d6f0a098a07218c288d0857510b5cd9ad3fa23710360fd5ea1ee312f124537b3b16c50bd715fca936bf0576a3c4adedccf71f03972198c4b2f4c7ae908a1eb50cdb8daa4807e176b2f207d5b94374a037653f9c9fbfc70b5540ad11df1c3877df3ef9d1a6782d9e912776c41f99fbbf3b049427f2cf693f433ea19434861d8d218676e1d82dd6e6b2dfb1"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x8, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x2, 0x1, 0x3}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x8, 0x5, 0xf, [@generic={0x8a, 0xb, "1f0f32d180128c5c57fc074cfd0bfe8f62074a3444aea592fe8e73f1778aa167a0861091d7a1a7b6b84f06eb2b98c7ec2a6188107d0202d0853dd3bea002c57f4e23944523e7a123fab5b8e801ad2b1f49e62c87e42df3b742bacf8d92484477a793d115048956dfacc219e292a286fa7479478ee2a19c66b635be8795293a74f61ce32ba7130203"}]}}]}}]}}]}}, &(0x7f0000004080)={0xa, &(0x7f0000003f80)={0xa, 0x6, 0x250, 0x0, 0x7, 0xfe, 0x20, 0x52}, 0x7e, &(0x7f0000003fc0)={0x5, 0xf, 0x7e, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x2, 0x3, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x1, 0x9, 0x452a}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x81, 0x4, 0x6}, @generic={0x45, 0x10, 0x2, "1776baaf12acd647ffd7c1ea5d067aaca591a49f31cb3bf10761223f9ddeac89bcfc5d4cc717e678a7b8c91a2ca29a8f4f18e635e841098fee42b22bd0e6951b0034"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "5f8e7be9e4b2c4d917996ad0a0349b29"}]}, 0x1, [{0x4, &(0x7f0000004040)=@lang_id={0x4, 0x3, 0x3409}}]}) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000040c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x150a, 0x1203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x140, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x8001, 0x7f, 0x1, {0x22, 0x606}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf, 0x3, 0x4}}}}}]}}]}}, &(0x7f0000004200)={0xa, &(0x7f0000004100)={0xa, 0x6, 0x250, 0x7, 0xa, 0xc4, 0x8, 0x6}, 0x19, &(0x7f0000004140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "068cfa04cdc8b053b45b522efd8d4fcd"}]}, 0x1, [{0x64, &(0x7f0000004180)=@string={0x64, 0x3, "a4c11931c9a0818ebf176cde30469286f959da1aa735d46c3244b30afbc5f6382b33e0d8647386625e2e2f547b07513c606e553f8727e29c67fd408e3164ac9e76882204217a7858a43c63b8000a56b1c572cb0fc79e7f93d68feabab6ddbc6da3da"}}]}) syz_usb_connect$uac1(0x2, 0xb6, &(0x7f0000004240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x2, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x6b}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x5, 0x3, [0x7, 0x6, 0x3], 0x2}, @processing_unit={0xb, 0x24, 0x7, 0x5, 0x1, 0x6, "91bc5017"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x0, 0x3, 0x9, 0x4, 0xf, 0xa2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x7, 0x7, "914243", ':'}, @as_header={0x7, 0x24, 0x1, 0x71, 0x56, 0x3}, @as_header={0x7, 0x24, 0x1, 0x4, 0x7, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x81, 0x6, 0x8, {0x7, 0x25, 0x1, 0x82, 0xed, 0x1000}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0xff, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x8, 0x4, 0xf4, {0x7, 0x25, 0x1, 0x3, 0x79}}}}}}}]}}, &(0x7f0000004580)={0xa, &(0x7f0000004300)={0xa, 0x6, 0x110, 0x8, 0x2, 0x7, 0x40}, 0x4b, &(0x7f0000004340)={0x5, 0xf, 0x4b, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xb, "950878727f82cb5ce39ecb1b7ea79c71"}, @ss_container_id={0x14, 0x10, 0x4, 0xf8, "7450fb0d2bc722b6ea941a125a9ecfac"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "65af98008e4653db653a430b387f2775"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x50, 0x0, 0x1}]}, 0x5, [{0x24, &(0x7f00000043c0)=@string={0x24, 0x3, "8f6a3c208c2ae63556270cdb16c2f5b7ec03589ec1df5a81433fd776c8d480980645"}}, {0x8b, &(0x7f0000004400)=@string={0x8b, 0x3, "d4bdc74cbcb7706564d6edf93839c03ea4fd474596f6f4a21ade9a3c76c7d1aea9bbf7dd239c705009d8e43b8ffac896a8a0dca4428eef3b454fc64b87cfcdadcd9c8078bc1e75f5fa7d3017f90437339ebe849557211c0e05a3153946a898072ff119a7480380557fdd56a3b05856a44ff841fa5a50b5aa6afcad7afcb609f69933dc0b7e2f1a53b1"}}, {0x4, &(0x7f00000044c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000004500)=@lang_id={0x4}}, {0x4, &(0x7f0000004540)=@lang_id={0x4, 0x3, 0x810}}]}) getpriority(0x1, 0x0) 8.180428896s ago: executing program 2 (id=4025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='pids.events\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x101401) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x4, {[@lsrr={0x83, 0x3, 0x2}, @lsrr={0x83, 0x3, 0xd7}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010184}, {@private}, {@empty}, {@remote}, {@private}, {@local}, {@rand_addr=0x64010100}]}]}}}}}}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 8.165366385s ago: executing program 0 (id=4026): socket(0x11, 0x800000003, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1400907800000000d5a48689e1e345ed88cc11c8fb23927a8bd390600f2768a2ddda3f1c88de599c96facd957dbb05024c224feba2be222b54d93bcb84ee9470132a1400b5702c3526d32d94313c825a26b7b9aec0"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000740)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, r7, 0x1, 0x70bd2e, 0x10000000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3a}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7674f43b8038d6c868297732c07667d6ca10d4c2072e259e74ac8d4bd5da999736ee2336a601a74b4a454c94894ffe795919cafe395eb398bb025410911dba606d2bff3abf42fec2fdc8ab6d35523aceb24a2e3be5270432502a4b4b0710220d8173db08dc870a479ceaec6d5d510b7833e66bfb6129898cbdcab927adc29babb4e506ec2739bb8372f31fe9ead59c87a399988c9da816f863e0060f1e67111772e4159e26b3775bb87c87a56851cec06e7f0685e166c0d80e102052", 0xbc}, {&(0x7f0000000140)="cbc1c6b288", 0x5}], 0x2}}], 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00, 0x0, 0x24040015}, 0x0) 8.138016288s ago: executing program 5 (id=4027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000001000000080000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x1d, 0x3, 0x3) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) getpeername$packet(r1, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200000000000) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, 0x0, 0x0) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x480, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_netdev_private(r7, 0x89f0, &(0x7f0000000000)="f4543e5660579eca31839ede98ded8bf779c0201706d3452dff4505e09ad701f65fc12f1f44fdba0f05e09b28991fd5d6faa15c46be36fa718f7dfda1757d4f249d4df765bb07ce5b55d951fb0bce94513c231be7449eea2fb1a6abe01c745cb3e6ae3e0f97e2f07d17222dba72171ac499859213876f703bbda38c7aa314039dae3589d4aa1de8235f4c5a65021af6a0537e3015038c3cf1a091b916458b2261850971b8a154f8c973c5d4df095226e0e901bf195db75a471cd29bc30e8d8ef2f8cd5d0656a83b9721109d159902ce08bf9e5d805f0fa398eda47b43a678a199af66a0d6e99cdacd6da3780d8fe3ba8fd093d") r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000900), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r8, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r6, 0x4068aea3, &(0x7f0000000dc0)={0xd4, 0x0, 0x8000}) 8.036239034s ago: executing program 3 (id=4028): syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x40, 0x51, 0xc3, 0x10, 0x10, 0x5da, 0x94, 0xf6f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x3, 0xac, 0x2d, 0x90, 0x0, [], [{{0x9, 0x5, 0x7, 0x4, 0x210, 0x4, 0xf, 0x2a}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xb, 0xc, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x2, 0x4}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x40, 0x51, 0xc3, 0x10, 0x10, 0x5da, 0x94, 0xf6f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x3, 0xac, 0x2d, 0x90, 0x0, [], [{{0x9, 0x5, 0x7, 0x4, 0x210, 0x4, 0xf, 0x2a}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xb, 0xc, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x2, 0x4}}]}}]}}]}}, 0x0) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) syz_usb_connect$cdc_ecm(0x4, 0x123, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x111, 0x1, 0x1, 0xa, 0x90, 0xbc, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "35b2c2cd8ff5"}, {0x5, 0x24, 0x0, 0x6cfe}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x400, 0x8, 0xf1}, [@ncm={0x6, 0x24, 0x1a, 0xc8cd, 0x29}, @mdlm_detail={0xaa, 0x24, 0x13, 0x4, "8821d112aa9ebdaefb35d9972e2e26c77f31b7dcd38a009cf0328ae2a7bd964bd989779f010cf450fc0dd9a0abedc6ee303b128de43f9175ad0161c9306a7800bc5e2d0a15471d63408c273c93a661fbb13779875ffcc7ba2fcaeab4b3634b40db08ed342af3b043167c5d8e5220b80f7a4b8821de0e6cd0da4a79eb82a5af83f369b95a7e8785f57cc8f5f5a79969339eb34ce6f0ccc7e7bf28fbc0fa9f07754987b4a9766b"}, @country_functional={0xc, 0x24, 0x7, 0x5f, 0x100, [0x6, 0x7fff, 0xe]}, @acm={0x4}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x4, 0xc, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x80, 0x4, 0x81}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x8, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x5, 0x2, 0xf8}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x7f, 0x4, 0x2, 0x40, 0xb}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3009}}]}) 7.070265946s ago: executing program 0 (id=4029): socket(0x11, 0x800000003, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1400907800000000d5a48689e1e345ed88cc11c8fb23927a8bd390600f2768a2ddda3f1c88de599c96facd957dbb05024c224feba2be222b54d93bcb84ee9470132a1400b5702c3526d32d94313c825a26b7b9aec0"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000740)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7674f43b8038d6c868297732c07667d6ca10d4c2072e259e74ac8d4bd5da999736ee2336a601a74b4a454c94894ffe795919cafe395eb398bb025410911dba606d2bff3abf42fec2fdc8ab6d35523aceb24a2e3be5270432502a4b4b0710220d8173db08dc870a479ceaec6d5d510b7833e66bfb6129898cbdcab927adc29babb4e506ec2739bb8372f31fe9ead59c87a399988c9da816f863e0060f1e67111772e4159e26b3775bb87c87a56851cec06e7f0685e166c0d80e102052", 0xbc}, {&(0x7f0000000140)="cbc1c6b288", 0x5}], 0x2}}], 0x2, 0x0) 6.472169918s ago: executing program 2 (id=4030): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) open$dir(&(0x7f0000000480)='./bus\x00', 0x90800, 0x1f0) shmctl$IPC_RMID(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9c00000c3124a29feb331fd2001c89310000000081114bfad63dbd141d08f75c5d05b486c30f4d9be34c2a9cdf5e25d34d907c7f2d3d9621e46e1d2f124956b5efa6666d493b1d2621efcbe2fae47eefb3fc2debfd863a2d3c42d70000000000000000", @ANYRES32=0x0, @ANYBLOB="0000280808000900050000000800070004000000080007000200000030000e8004000200050001000400000005000100090000000500010001000000050001004000000005000100ff00000008000f00010000000600050004000000060006004e2300000a0002000180c2000002000008000d00040000000a000200bbbbbbbbbbbb0000"], 0x9c}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x20021, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8}, 0x4, 0x1, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00'], 0x5}) io_setup(0x202, &(0x7f0000000200)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x2000000000000221, &(0x7f00000006c0)=ANY=[@ANYBLOB="180009000000000000000000070000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x192dd695, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 5.799384632s ago: executing program 0 (id=4031): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 4.665729095s ago: executing program 0 (id=4032): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4008) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) 4.598817743s ago: executing program 5 (id=4033): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x40, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = signalfd(r3, &(0x7f0000000140)={[0x1007]}, 0x8) syz_io_uring_setup(0x38a9, 0x0, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r4}) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f00000002c0)={0xc, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) ioctl$IOMMU_VFIO_SET_IOMMU(r6, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r6, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) r8 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x0) 3.8438531s ago: executing program 2 (id=4034): socket$nl_generic(0x10, 0x3, 0x10) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000050a000/0x13000)=nil, 0x13000}, 0x1}) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0xe0}], 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x1, @mcast2}}, {{0xa, 0x0, 0x800, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x20000000}}}, 0x108) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xf4}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pause() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 3.054099291s ago: executing program 0 (id=4035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x329000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x40, 0x51, 0xc3, 0x10, 0x10, 0x5da, 0x94, 0xf6f7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd8, 0x0, 0x3, 0xac, 0x2d, 0x90, 0x0, [], [{{0x9, 0x5, 0x7, 0x4, 0x210, 0x4, 0xf, 0x2a}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xb, 0xc, 0x6}}, {{0x9, 0x5, 0x4, 0x2, 0x8, 0x9, 0x2, 0x4}}]}}]}}]}}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x19, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.033242661s ago: executing program 5 (id=4036): socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 2.944756848s ago: executing program 3 (id=4037): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getpid() ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000100)=@known='trusted.overlay.origin\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 2.941922806s ago: executing program 6 (id=4038): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@gettaction={0x14, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xa}, {0x0, 0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x10040000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self(r3, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x2, 0x4}, {0x4, 0x2}}}}, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000100)={0x0, 0x2}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000040)=0x340, 0x4) 1.719479994s ago: executing program 5 (id=4039): socket(0x11, 0x800000003, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1400907800000000d5a48689e1e345ed88cc11c8fb23927a8bd390600f2768a2ddda3f1c88de599c96facd957dbb05024c224feba2be222b54d93bcb84ee9470132a1400b5702c3526d32d94313c825a26b7b9aec0"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000740)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7674f43b8038d6c868297732c07667d6ca10d4c2072e259e74ac8d4bd5da999736ee2336a601a74b4a454c94894ffe795919cafe395eb398bb025410911dba606d2bff3abf42fec2fdc8ab6d35523aceb24a2e3be5270432502a4b4b0710220d8173db08dc870a479ceaec6d5d510b7833e66bfb6129898cbdcab927adc29babb4e506ec2739bb8372f31fe9ead59c87a399988c9da816f863e0060f1e67111772e4159e26b3775bb87c87a56851cec06e7f0685e166c0d80e102052", 0xbc}, {&(0x7f0000000140)="cbc1c6b288", 0x5}], 0x2}}], 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, 0x0, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xb4}, 0x1, 0x7a00, 0x0, 0x24040015}, 0x0) 881.891826ms ago: executing program 6 (id=4040): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x101401) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r0 = socket(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr=0x4, {[@lsrr={0x83, 0x3, 0x2}, @lsrr={0x83, 0x3, 0xd7}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010184}, {@private}, {@empty}, {@remote}, {@private}, {@local}, {@rand_addr=0x64010100}]}]}}}}}}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 880.210311ms ago: executing program 2 (id=4041): socket(0x11, 0x800000003, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c200000050a245d5cde0080045000014000000000002907800000000ffffffff1400907800000000d5a48689e1e345ed88cc11c8fb23927a8bd390600f2768a2ddda3f1c88de599c96facd957dbb05024c224feba2be222b54d93bcb84ee9470132a1400b5702c3526d32d94313c825a26b7b9aec0"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r5, 0xc208ae62, &(0x7f0000000740)) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0x70bd2e, 0x10000000, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x3a}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x1, 0xfffa, 0x4, 0x4, 0x3, 0xb0, 0x5}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xe) sendmmsg$inet(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)="7674f43b8038d6c868297732c07667d6ca10d4c2072e259e74ac8d4bd5da999736ee2336a601a74b4a454c94894ffe795919cafe395eb398bb025410911dba606d2bff3abf42fec2fdc8ab6d35523aceb24a2e3be5270432502a4b4b0710220d8173db08dc870a479ceaec6d5d510b7833e66bfb6129898cbdcab927adc29babb4e506ec2739bb8372f31fe9ead59c87a399988c9da816f863e0060f1e67111772e4159e26b3775bb87c87a56851cec06e7f0685e166c0d80e102052", 0xbc}, {&(0x7f0000000140)="cbc1c6b288", 0x5}], 0x2}}], 0x2, 0x0) 327.994146ms ago: executing program 3 (id=4042): clock_settime(0x100000000000000, &(0x7f0000000000)={0x75900dc5, 0xa3}) 0s ago: executing program 3 (id=4043): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @empty, @val, {@ipv4}}, 0x0) kernel console output (not intermixed with test programs): 5][ T30] audit: type=1400 audit(1749481424.770:4043): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4282 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1588.501665][ T24] uclogic 0003:28BD:0094.006D: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 1588.534904][ T30] audit: type=1400 audit(1749481424.830:4044): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4282 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1588.739531][ T115] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1589.081331][ T24] usb 7-1: USB disconnect, device number 42 [ 1589.164286][ T115] usb 4-1: Using ep0 maxpacket: 16 [ 1589.181767][ T115] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1589.201697][ T115] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1589.213701][ T115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.349896][ T115] usb 4-1: config 0 descriptor?? [ 1589.396044][ T115] pxrc 4-1:0.0: Could not find endpoint [ 1589.429188][ T115] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1590.382816][ T115] usb 4-1: USB disconnect, device number 105 [ 1590.403161][T20300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 1590.507794][T20301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3463'. [ 1591.928946][ T5931] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1592.772941][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1592.981044][ T5931] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1592.991367][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.012048][ T5931] usb 6-1: config 0 descriptor?? [ 1593.354141][T20326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=20326 comm=syz.3.3471 [ 1593.738480][ T5931] keytouch 0003:0926:3333.006E: fixing up Keytouch IEC report descriptor [ 1593.770101][ T5931] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.006E/input/input109 [ 1593.785963][ T5901] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1593.869403][ T5931] keytouch 0003:0926:3333.006E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1593.946632][ T5901] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 1594.048407][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.099510][ T5901] usb 7-1: config 0 descriptor?? [ 1594.129532][ T5901] gspca_main: mars-2.14.0 probing 093a:050f [ 1594.137036][T20328] lo speed is unknown, defaulting to 1000 [ 1594.174844][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1594.376374][ T5945] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1594.637278][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1594.988548][T20344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1595.085558][T20345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.097356][T20345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.328521][ T5945] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1595.363934][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.443269][ T5945] usb 4-1: config 0 descriptor?? [ 1595.820450][ T5957] usb 6-1: USB disconnect, device number 69 [ 1595.921026][ T5945] keytouch 0003:0926:3333.006F: fixing up Keytouch IEC report descriptor [ 1595.943964][ T5945] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.006F/input/input110 [ 1596.475335][T20353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1596.766236][ T115] usb 7-1: USB disconnect, device number 43 [ 1596.781183][ T30] audit: type=1400 audit(1749481433.070:4045): avc: denied { getopt } for pid=20327 comm="syz.2.3473" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1597.098802][T20353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.380269][ T5945] keytouch 0003:0926:3333.006F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1597.403116][ T5841] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 1597.612002][T20363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3479'. [ 1598.194524][T20353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.218974][T20353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.294727][ T5945] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1598.468708][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 1598.575553][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1598.739584][ T5945] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1598.799936][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3482'. [ 1598.856448][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.880082][ T5945] usb 6-1: config 0 descriptor?? [ 1599.209533][T20382] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1599.387946][ T5945] hid-multitouch 0003:1FD2:6007.0070: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1599.397335][T20382] qnx6: wrong signature (magic) in superblock #1. [ 1599.407662][T20382] qnx6: unable to read the first superblock [ 1600.532916][T20393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.704201][T20393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.792107][T20387] batadv_slave_1: entered promiscuous mode [ 1600.798262][T20387] batadv_slave_1: entered allmulticast mode [ 1600.940406][ T5901] usb 4-1: USB disconnect, device number 106 [ 1602.545768][ T5957] usb 6-1: USB disconnect, device number 70 [ 1602.694754][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1604.187863][T20423] lo speed is unknown, defaulting to 1000 [ 1604.578084][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3492'. [ 1604.700131][ T5901] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1604.848782][T20433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3494'. [ 1604.934813][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 1605.206853][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.244669][ T5901] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1605.274151][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.950726][ T5901] usb 3-1: config 0 descriptor?? [ 1607.231849][T20445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.262539][ T5901] hid-multitouch 0003:1FD2:6007.0071: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1607.280976][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.289969][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.314479][T20445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1607.423855][ T5901] usb 3-1: USB disconnect, device number 101 [ 1607.616069][T20448] fido_id[20448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1608.251419][T20457] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1608.273522][T20457] qnx6: wrong signature (magic) in superblock #1. [ 1608.280169][T20457] qnx6: unable to read the first superblock [ 1609.494869][ T5945] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1609.816365][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1610.004721][ T5945] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1610.046830][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1610.075726][ T5945] usb 6-1: config 0 descriptor?? [ 1610.085021][T20475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1611.727624][ T5945] keytouch 0003:0926:3333.0072: fixing up Keytouch IEC report descriptor [ 1611.933999][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1611.974854][ T5945] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0072/input/input111 [ 1612.605069][ T5957] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1612.932570][ T5957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1612.966428][T20496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.043138][ T5957] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1613.083659][T20496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.124961][ T5945] keytouch 0003:0926:3333.0072: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1613.180584][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.193744][T20502] afs: Unknown parameter '' [ 1613.590294][ T5957] usb 4-1: config 0 descriptor?? [ 1614.279462][ T5901] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1614.614950][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 1614.623146][ T5957] keytouch 0003:0926:3333.0073: fixing up Keytouch IEC report descriptor [ 1614.679278][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1614.730890][ T5901] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1614.740470][ T5957] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0073/input/input112 [ 1614.755561][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.773227][ T5901] usb 3-1: config 0 descriptor?? [ 1614.818812][T20510] lo speed is unknown, defaulting to 1000 [ 1614.827591][ T24] usb 6-1: USB disconnect, device number 71 [ 1614.847996][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.860915][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.865827][ T5957] keytouch 0003:0926:3333.0073: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1614.892157][ T5841] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 1614.998560][ T30] audit: type=1400 audit(1749481451.350:4046): avc: denied { read write } for pid=20511 comm="syz.5.3515" name="sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1615.006095][T20512] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1615.070761][ T30] audit: type=1400 audit(1749481451.350:4047): avc: denied { open } for pid=20511 comm="syz.5.3515" path="/dev/sg0" dev="devtmpfs" ino=777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1615.394877][T20517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.415019][T20517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1615.681204][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 1615.691256][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1615.713569][T20513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1615.728170][ T5901] usb 3-1: USB disconnect, device number 102 [ 1615.735596][T20513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1616.719954][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3518'. [ 1618.319717][T20547] can: request_module (can-proto-3) failed. [ 1618.665712][ T24] usb 4-1: USB disconnect, device number 107 [ 1619.119192][ T30] audit: type=1400 audit(1749481455.360:4048): avc: denied { read } for pid=20558 comm="syz.5.3525" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1619.599562][ T30] audit: type=1400 audit(1749481455.950:4049): avc: denied { read } for pid=20558 comm="syz.5.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1619.877640][T20570] afs: Unknown parameter '' [ 1620.384813][ T5945] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1620.549794][T20570] kvm: kvm [20567]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1621.414951][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 1621.470679][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.169404][ T5945] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1622.197569][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.205594][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3532'. [ 1622.260103][ T5945] usb 4-1: config 0 descriptor?? [ 1622.750471][T20602] can: request_module (can-proto-3) failed. [ 1622.969280][ T5873] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1623.020235][T20606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.267262][T20606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1623.314709][ T5873] usb 3-1: device descriptor read/64, error -71 [ 1623.334283][ T5945] usbhid 4-1:0.0: can't add hid device: -71 [ 1623.341365][ T5945] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1623.378425][ T5945] usb 4-1: USB disconnect, device number 108 [ 1623.451599][T20611] lo speed is unknown, defaulting to 1000 [ 1623.555605][ T5873] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1623.714700][ T30] audit: type=1400 audit(1749481460.030:4050): avc: denied { create } for pid=20615 comm="syz.6.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1623.745277][ T30] audit: type=1400 audit(1749481460.030:4051): avc: denied { getopt } for pid=20615 comm="syz.6.3541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1623.777913][ T5873] usb 3-1: device descriptor read/64, error -71 [ 1623.981902][ T5873] usb usb3-port1: attempt power cycle [ 1624.270635][T20625] can: request_module (can-proto-3) failed. [ 1624.394808][ T5901] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1624.407574][ T5873] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1624.429846][ T5931] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1624.657276][ T5873] usb 3-1: device descriptor read/8, error -71 [ 1624.700282][ T5901] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1624.724763][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.743637][ T5901] usb 6-1: Product: syz [ 1624.748024][ T5931] usb 7-1: Using ep0 maxpacket: 32 [ 1624.754097][ T5901] usb 6-1: Manufacturer: syz [ 1624.765447][ T5901] usb 6-1: SerialNumber: syz [ 1624.775326][ T5931] usb 7-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1624.805026][ T5901] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1624.842279][ T5931] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1624.852741][ T5931] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 1624.871380][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.882148][ T5931] usb 7-1: Product: ⻰鰐Ùᥓ囃䴤딉⼥㷞ꋃ遗쁙 [ 1624.896207][ T5931] usb 7-1: Manufacturer: ఋ [ 1624.900895][ T5957] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1624.904888][ T5873] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1624.923250][ T5931] usb 7-1: SerialNumber: ᥱ뻰鳶假壘ᾜ좯떏킔帪獅⏫異ꭑ罖㫯ꦝꄱ쾙產៞ᠲ貾礫ꪕ罹Dz臵郑Ύ䘉莜⑋ꙋﾔᨳ潁᭦ꇓ㍽闷覠ⷢ瞸쯈跾鸘⺱듾ꩰ삨耟Ŕ㔞鼧鞖뭏계들꫺杭∎Ỿ霼幀聘Ꮜҽ떍䞟䤶塝ఽ鵋⛥霩瀠佩佽愉籪傂ᶵ打 [ 1624.995882][ T5873] usb 3-1: device descriptor read/8, error -71 [ 1625.151573][ T5873] usb usb3-port1: unable to enumerate USB device [ 1625.408202][ T5944] usb 6-1: USB disconnect, device number 72 [ 1625.428293][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.460216][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.470631][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.480809][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.538873][ T30] audit: type=1400 audit(1749481461.880:4052): avc: denied { create } for pid=20621 comm="syz.6.3543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1625.940552][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.001711][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.064292][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.117569][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.178986][T20623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1626.200457][T20623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1626.248970][ T5957] usb 6-1: Service connection timeout for: 256 [ 1626.262423][T20643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1626.275272][ T5931] usb 7-1: USB disconnect, device number 44 [ 1626.284697][ T5957] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1626.293057][ T5957] ath9k_htc: Failed to initialize the device [ 1626.406014][ T5944] usb 6-1: ath9k_htc: USB layer deinitialized [ 1627.276392][ T30] audit: type=1400 audit(1749481463.560:4053): avc: denied { ioctl } for pid=20656 comm="syz.2.3553" path="socket:[68931]" dev="sockfs" ino=68931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1627.782497][ T30] audit: type=1400 audit(1749481463.570:4054): avc: denied { read } for pid=20652 comm="syz.0.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1628.104668][ T5873] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1628.174701][ T30] audit: type=1400 audit(1749481464.520:4055): avc: denied { write } for pid=20677 comm="syz.5.3558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1628.285360][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1628.296618][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1628.311011][ T5873] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1628.324546][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.347814][ T5873] usb 4-1: config 0 descriptor?? [ 1628.422412][T20687] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3561'. [ 1628.524684][ T5931] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1628.676077][ T5931] usb 3-1: device descriptor read/64, error -71 [ 1629.303371][T20670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.326332][T20670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1629.397764][ T5873] usbhid 4-1:0.0: can't add hid device: -71 [ 1629.411351][ T5873] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1629.454806][ T5931] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1629.456684][ T5873] usb 4-1: USB disconnect, device number 109 [ 1629.935349][ T5931] usb 3-1: device descriptor read/64, error -71 [ 1630.074680][T20715] trusted_key: encrypted_key: insufficient parameters specified [ 1630.134912][T20715] sch_tbf: peakrate 6 is lower than or equals to rate 65537 ! [ 1630.526488][ T5931] usb usb3-port1: attempt power cycle [ 1630.877127][T20709] bond2: entered promiscuous mode [ 1630.882764][T20709] bond2: entered allmulticast mode [ 1630.890722][T20709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1631.034084][T20709] tmpfs: Bad value for 'mpol' [ 1631.094688][ T5931] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1631.125296][ T5931] usb 3-1: device descriptor read/8, error -71 [ 1631.522695][T20725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3571'. [ 1631.544682][ T5931] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1631.784752][ T5931] usb 3-1: device not accepting address 110, error -71 [ 1631.809984][ T5931] usb usb3-port1: unable to enumerate USB device [ 1632.111152][ T30] audit: type=1400 audit(1749481468.310:4056): avc: denied { create } for pid=20727 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1632.153130][ T30] audit: type=1400 audit(1749481468.330:4057): avc: denied { listen } for pid=20727 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1632.236929][ T115] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1632.534664][ T115] usb 4-1: device descriptor read/64, error -71 [ 1632.856307][ T115] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1633.424684][ T115] usb 4-1: device descriptor read/64, error -71 [ 1633.523735][ T30] audit: type=1400 audit(1749481469.860:4058): avc: denied { ioctl } for pid=20741 comm="syz.6.3576" path="/dev/radio0" dev="devtmpfs" ino=958 ioctlcmd=0x5648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1633.551292][T20755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3579'. [ 1633.561226][T20755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3579'. [ 1633.593911][ T115] usb usb4-port1: attempt power cycle [ 1633.670688][ T30] audit: type=1400 audit(1749481470.020:4059): avc: denied { getopt } for pid=20762 comm="syz.6.3583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1634.064676][ T115] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1634.139091][ T115] usb 4-1: device descriptor read/8, error -71 [ 1634.524876][ T115] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1634.566590][T20763] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1634.871996][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3586'. [ 1634.962364][ T115] usb 4-1: device not accepting address 113, error -71 [ 1635.165424][ T115] usb usb4-port1: unable to enumerate USB device [ 1635.327973][ T30] audit: type=1400 audit(1749481471.680:4060): avc: denied { ioctl } for pid=20778 comm="syz.6.3588" path="socket:[69200]" dev="sockfs" ino=69200 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1635.572903][ T30] audit: type=1400 audit(1749481471.790:4061): avc: denied { create } for pid=20778 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1635.882895][ T30] audit: type=1400 audit(1749481471.800:4062): avc: denied { bind } for pid=20778 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1636.160727][ T30] audit: type=1400 audit(1749481471.880:4063): avc: denied { listen } for pid=20778 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1636.345620][ T30] audit: type=1400 audit(1749481471.880:4064): avc: denied { connect } for pid=20778 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1636.399244][ T30] audit: type=1400 audit(1749481471.890:4065): avc: denied { accept } for pid=20778 comm="syz.6.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1636.960216][T20797] afs: Unknown parameter '' [ 1636.966867][T20788] Failed to get privilege flags for destination (handle=0x2:0xd) [ 1637.310282][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3595'. [ 1637.319820][T20804] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3595'. [ 1637.336201][T20805] kvm: kvm [20794]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1640.360547][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3598'. [ 1641.643449][T20826] can: request_module (can-proto-3) failed. [ 1642.556328][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.556328][T20834] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1642.569541][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.569541][T20834] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1642.582494][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1642.592131][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.592131][T20834] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1642.605511][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1642.616948][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.616948][T20834] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1642.631086][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.631086][T20834] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1642.775114][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1642.811069][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.811069][T20834] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1642.827061][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1642.844096][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.844096][T20834] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1642.861037][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.861037][T20834] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1642.876040][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1642.888320][T20834] syz.0.3604: attempt to access beyond end of device [ 1642.888320][T20834] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1642.903071][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1643.527606][T20834] syz.0.3604: attempt to access beyond end of device [ 1643.527606][T20834] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1643.543186][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1643.553490][T20834] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1643.563207][T20834] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1643.683950][T20838] NILFS (loop0): device size too small [ 1644.520246][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1644.520263][ T30] audit: type=1400 audit(1749481480.870:4067): avc: denied { read append } for pid=20849 comm="syz.3.3611" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1644.591451][ T30] audit: type=1400 audit(1749481480.870:4068): avc: denied { open } for pid=20849 comm="syz.3.3611" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1644.726991][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'. [ 1644.796476][T20859] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1644.806604][T20859] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3609'. [ 1645.374923][T20848] lo speed is unknown, defaulting to 1000 [ 1645.420856][ T30] audit: type=1400 audit(1749481481.540:4069): avc: denied { append } for pid=20849 comm="syz.3.3611" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1645.910254][T20869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3613'. [ 1647.062564][T20861] lo speed is unknown, defaulting to 1000 [ 1647.559901][T20879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3617'. [ 1647.742865][T20883] can: request_module (can-proto-3) failed. [ 1649.141541][T20898] geneve2: entered promiscuous mode [ 1649.147032][T20898] geneve2: entered allmulticast mode [ 1650.482737][ T30] audit: type=1400 audit(1749481486.770:4070): avc: denied { execute_no_trans } for pid=20903 comm="syz.6.3622" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=432 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1652.786030][T20924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1654.454467][T20934] geneve2: entered promiscuous mode [ 1654.460281][T20934] geneve2: entered allmulticast mode [ 1654.883466][T20942] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1654.913901][T20942] qnx6: wrong signature (magic) in superblock #1. [ 1654.920660][T20942] qnx6: unable to read the first superblock [ 1655.368785][T20939] lo speed is unknown, defaulting to 1000 [ 1655.554716][ T5841] Bluetooth: hci4: link tx timeout [ 1655.560020][ T5841] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1656.505427][T20941] netlink: 'syz.2.3631': attribute type 2 has an invalid length. [ 1657.914764][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 1658.806988][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1659.720807][T20982] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3637'. [ 1660.162146][T20995] veth0_vlan: left promiscuous mode [ 1660.177950][T20995] veth0_vlan: entered promiscuous mode [ 1660.700836][T20996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3641'. [ 1660.711912][T20996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3641'. [ 1661.519592][T21008] lo speed is unknown, defaulting to 1000 [ 1664.330755][T21031] fuse: Bad value for 'fd' [ 1666.354742][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3652'. [ 1666.525017][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3655'. [ 1668.151838][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3657'. [ 1668.279237][T21061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3656'. [ 1668.364373][T21063] lo speed is unknown, defaulting to 1000 [ 1668.773129][T21074] netlink: 'syz.2.3658': attribute type 2 has an invalid length. [ 1668.806182][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.818925][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.334780][ T115] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1670.350185][T21084] FAULT_INJECTION: forcing a failure. [ 1670.350185][T21084] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.374701][T21084] CPU: 1 UID: 0 PID: 21084 Comm: syz.6.3662 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1670.374732][T21084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1670.374744][T21084] Call Trace: [ 1670.374751][T21084] [ 1670.374760][T21084] dump_stack_lvl+0x16c/0x1f0 [ 1670.374795][T21084] should_fail_ex+0x512/0x640 [ 1670.374820][T21084] ? __kmalloc_noprof+0xbf/0x510 [ 1670.374847][T21084] ? _iommufd_object_alloc+0x23/0x1a0 [ 1670.374871][T21084] should_failslab+0xc2/0x120 [ 1670.374898][T21084] __kmalloc_noprof+0xd2/0x510 [ 1670.374925][T21084] ? find_held_lock+0x2b/0x80 [ 1670.374950][T21084] _iommufd_object_alloc+0x23/0x1a0 [ 1670.374975][T21084] iommufd_test+0x1176/0x6140 [ 1670.375006][T21084] ? __pfx_iommufd_test+0x10/0x10 [ 1670.375032][T21084] ? find_held_lock+0x2b/0x80 [ 1670.375054][T21084] ? __might_fault+0xe3/0x190 [ 1670.375078][T21084] ? __might_fault+0xe3/0x190 [ 1670.375099][T21084] ? __might_fault+0x13b/0x190 [ 1670.375134][T21084] iommufd_fops_ioctl+0x33f/0x4e0 [ 1670.375162][T21084] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1670.375190][T21084] ? hook_file_ioctl_common+0x145/0x410 [ 1670.375217][T21084] ? selinux_file_ioctl+0x180/0x270 [ 1670.375242][T21084] ? selinux_file_ioctl+0xb4/0x270 [ 1670.375269][T21084] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1670.375296][T21084] __x64_sys_ioctl+0x18e/0x210 [ 1670.375321][T21084] do_syscall_64+0xcd/0x4c0 [ 1670.375351][T21084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.375372][T21084] RIP: 0033:0x7f94bbd8e929 [ 1670.375390][T21084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1670.375408][T21084] RSP: 002b:00007f94bcc3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1670.375434][T21084] RAX: ffffffffffffffda RBX: 00007f94bbfb5fa0 RCX: 00007f94bbd8e929 [ 1670.375447][T21084] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 1670.375460][T21084] RBP: 00007f94bcc3a090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.375494][T21084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.375506][T21084] R13: 0000000000000000 R14: 00007f94bbfb5fa0 R15: 00007ffee96d22e8 [ 1670.375533][T21084] [ 1671.288401][ T115] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1671.300519][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.323463][ T115] usb 4-1: Product: syz [ 1671.332653][ T115] usb 4-1: Manufacturer: syz [ 1671.347939][ T115] usb 4-1: SerialNumber: syz [ 1671.422224][ T115] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1671.458649][ T5944] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1672.844035][T21106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 1672.909340][ T115] usb 4-1: USB disconnect, device number 114 [ 1672.961765][T21098] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1672.970919][T21098] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3664'. [ 1673.279923][ T5944] usb 4-1: Service connection timeout for: 256 [ 1673.326797][ T5944] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1673.352244][ T5944] ath9k_htc: Failed to initialize the device [ 1673.359440][ T115] usb 4-1: ath9k_htc: USB layer deinitialized [ 1673.391694][ T5873] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1673.468344][T21114] lo speed is unknown, defaulting to 1000 [ 1673.710576][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1673.729988][ T5873] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1673.754903][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.790511][T21118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1673.844120][ T5873] usb 7-1: config 0 descriptor?? [ 1674.679330][ T5873] keytouch 0003:0926:3333.0074: fixing up Keytouch IEC report descriptor [ 1674.704512][ T5873] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0074/input/input114 [ 1674.866164][T21117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1674.882051][T21125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1674.899736][T21125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1674.910665][ T5841] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 1675.018744][ T5873] keytouch 0003:0926:3333.0074: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1675.110967][T21131] fuse: Bad value for 'fd' [ 1675.214720][ T115] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1675.436915][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.451809][ T115] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1675.469858][ T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.482665][ T115] usb 6-1: config 0 descriptor?? [ 1675.655999][T21110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1675.713656][T21110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1675.917057][ T115] keytouch 0003:0926:3333.0075: fixing up Keytouch IEC report descriptor [ 1675.964855][ T115] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0075/input/input115 [ 1676.132439][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1676.152417][ T115] keytouch 0003:0926:3333.0075: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1676.331630][ T30] audit: type=1400 audit(1749481512.680:4071): avc: denied { mount } for pid=21137 comm="syz.2.3675" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1676.487575][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1676.510965][ T30] audit: type=1400 audit(1749481512.860:4072): avc: denied { unmount } for pid=18646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1676.689738][T21149] lo speed is unknown, defaulting to 1000 [ 1676.823561][T21127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.005912][T21127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.907872][T16451] usb 7-1: USB disconnect, device number 45 [ 1678.099443][T21161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1678.108994][T21161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3679'. [ 1680.979172][ T5931] usb 6-1: USB disconnect, device number 73 [ 1681.355397][T21179] FAULT_INJECTION: forcing a failure. [ 1681.355397][T21179] name failslab, interval 1, probability 0, space 0, times 0 [ 1681.457837][T21179] CPU: 0 UID: 0 PID: 21179 Comm: syz.5.3684 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1681.457866][T21179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1681.457878][T21179] Call Trace: [ 1681.457885][T21179] [ 1681.457894][T21179] dump_stack_lvl+0x16c/0x1f0 [ 1681.457927][T21179] should_fail_ex+0x512/0x640 [ 1681.457952][T21179] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1681.457979][T21179] should_failslab+0xc2/0x120 [ 1681.458006][T21179] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1681.458028][T21179] ? __pfx___might_resched+0x10/0x10 [ 1681.458051][T21179] ? vhost_task_create+0xe5/0x2e0 [ 1681.458070][T21179] ? rcu_is_watching+0x12/0xc0 [ 1681.458092][T21179] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1681.458120][T21179] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1681.458152][T21179] vhost_task_create+0xe5/0x2e0 [ 1681.458171][T21179] ? __pfx_vhost_task_create+0x10/0x10 [ 1681.458200][T21179] ? __pfx_vhost_task_fn+0x10/0x10 [ 1681.458234][T21179] kvm_mmu_post_init_vm+0x1b7/0x370 [ 1681.458261][T21179] kvm_arch_vcpu_ioctl_run+0x66/0x18c0 [ 1681.458285][T21179] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1681.458314][T21179] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1681.458341][T21179] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1681.458377][T21179] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 1681.458408][T21179] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1681.458444][T21179] ? hook_file_ioctl_common+0x145/0x410 [ 1681.458472][T21179] ? selinux_file_ioctl+0x180/0x270 [ 1681.458497][T21179] ? selinux_file_ioctl+0xb4/0x270 [ 1681.458524][T21179] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1681.458549][T21179] __x64_sys_ioctl+0x18e/0x210 [ 1681.458573][T21179] do_syscall_64+0xcd/0x4c0 [ 1681.458604][T21179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.458624][T21179] RIP: 0033:0x7f74bc58e929 [ 1681.458640][T21179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.458660][T21179] RSP: 002b:00007f74bd422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1681.458678][T21179] RAX: ffffffffffffffda RBX: 00007f74bc7b5fa0 RCX: 00007f74bc58e929 [ 1681.458692][T21179] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1681.458704][T21179] RBP: 00007f74bd422090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.458717][T21179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.458729][T21179] R13: 0000000000000000 R14: 00007f74bc7b5fa0 R15: 00007ffda0d961b8 [ 1681.458757][T21179] [ 1681.854706][ T5945] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1682.018146][ T5945] usb 3-1: device descriptor read/64, error -71 [ 1682.474734][ T5945] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1682.634654][ T5945] usb 3-1: device descriptor read/64, error -71 [ 1683.571307][ T5945] usb usb3-port1: attempt power cycle [ 1683.998840][ T5945] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1684.134809][ T5945] usb 3-1: device descriptor read/8, error -71 [ 1685.334722][T11009] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1685.516229][T11009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.660960][T11009] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1685.720059][T11009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.805343][T11009] usb 4-1: config 0 descriptor?? [ 1689.086433][T11009] usb 4-1: can't set config #0, error -71 [ 1689.109512][T11009] usb 4-1: USB disconnect, device number 115 [ 1689.169611][ T30] audit: type=1400 audit(1749481525.520:4073): avc: denied { setopt } for pid=21232 comm="syz.6.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1693.973411][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'. [ 1694.641964][T21276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1694.652104][T21276] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1695.144000][T21273] fuse: Bad value for 'fd' [ 1699.009253][ T30] audit: type=1400 audit(1749481535.350:4074): avc: denied { write } for pid=21306 comm="syz.2.3717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1700.669668][ T5841] Bluetooth: hci2: unexpected event for opcode 0x0c03 [ 1700.759062][ T30] audit: type=1400 audit(1749481537.110:4075): avc: denied { read write } for pid=21326 comm="syz.5.3721" name="rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1700.793175][T21324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1700.854653][ T30] audit: type=1400 audit(1749481537.110:4076): avc: denied { open } for pid=21326 comm="syz.5.3721" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1700.902483][T21324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1701.883787][T21334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3722'. [ 1702.378125][T21343] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1702.390813][T21343] qnx6: wrong signature (magic) in superblock #1. [ 1702.397435][T21343] qnx6: unable to read the first superblock [ 1702.851056][T21347] FAULT_INJECTION: forcing a failure. [ 1702.851056][T21347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.873794][T21347] CPU: 1 UID: 0 PID: 21347 Comm: syz.5.3728 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1702.873823][T21347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1702.873836][T21347] Call Trace: [ 1702.873843][T21347] [ 1702.873852][T21347] dump_stack_lvl+0x16c/0x1f0 [ 1702.873886][T21347] should_fail_ex+0x512/0x640 [ 1702.873917][T21347] _copy_from_user+0x2e/0xd0 [ 1702.873953][T21347] restore_sigcontext+0xcb/0x6a0 [ 1702.873977][T21347] ? __pfx_restore_sigcontext+0x10/0x10 [ 1702.874021][T21347] ? __pfx_restore_altstack+0x10/0x10 [ 1702.874051][T21347] ? _raw_spin_unlock_irq+0x23/0x50 [ 1702.874076][T21347] ? lockdep_hardirqs_on+0x7c/0x110 [ 1702.874107][T21347] __do_sys_rt_sigreturn+0x1bb/0x230 [ 1702.874130][T21347] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1702.874161][T21347] do_syscall_64+0xcd/0x4c0 [ 1702.874192][T21347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.874212][T21347] RIP: 0033:0x7f74bc52ab19 [ 1702.874229][T21347] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1702.874248][T21347] RSP: 002b:00007f74bd421340 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 1702.874267][T21347] RAX: ffffffffffffffda RBX: 00007f74bc7b5fa0 RCX: 00007f74bc52ab19 [ 1702.874280][T21347] RDX: 00007f74bd421340 RSI: 00007f74bd421470 RDI: 0000000000000021 [ 1702.874293][T21347] RBP: 00007f74bd422090 R08: 0000000000000007 R09: 0000000000000009 [ 1702.874305][T21347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1702.874317][T21347] R13: 0000000000000000 R14: 00007f74bc7b5fa0 R15: 00007ffda0d961b8 [ 1702.874345][T21347] [ 1703.131024][T21354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1705.468446][ T30] audit: type=1400 audit(1749481541.820:4077): avc: denied { mount } for pid=21366 comm="syz.5.3734" name="/" dev="ramfs" ino=71855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1705.632424][ T5945] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1706.392708][ T5945] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1706.457899][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.483223][ T5944] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1706.503294][ T5945] usb 4-1: Product: syz [ 1706.526772][ T5945] usb 4-1: Manufacturer: syz [ 1706.531415][ T5945] usb 4-1: SerialNumber: syz [ 1706.561277][ T30] audit: type=1400 audit(1749481542.910:4078): avc: denied { mount } for pid=21380 comm="syz.6.3737" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1706.593568][ T30] audit: type=1400 audit(1749481542.910:4079): avc: denied { mount } for pid=21380 comm="syz.6.3737" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1706.605786][ T5945] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1706.652799][T16451] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1706.654937][ T30] audit: type=1400 audit(1749481542.940:4080): avc: denied { unmount } for pid=13250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1706.664883][ T5944] usb 6-1: Using ep0 maxpacket: 16 [ 1706.694307][T21383] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1706.727675][ T115] IPVS: starting estimator thread 0... [ 1706.777271][ T5944] usb 6-1: config index 0 descriptor too short (expected 32786, got 18) [ 1706.786486][ T5944] usb 6-1: config 9 has too many interfaces: 110, using maximum allowed: 32 [ 1706.914166][ T30] audit: type=1400 audit(1749481542.990:4081): avc: denied { unmount } for pid=13250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1706.914351][T21387] IPVS: using max 39 ests per chain, 93600 per kthread [ 1706.935920][ T30] audit: type=1400 audit(1749481543.070:4082): avc: denied { read } for pid=21385 comm="syz.6.3740" name="vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1706.965963][ T5944] usb 6-1: config 9 has an invalid descriptor of length 114, skipping remainder of the config [ 1706.977207][ T5944] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 110 [ 1707.066557][T21390] NILFS (nullb0): couldn't find nilfs on the device [ 1707.297347][ T30] audit: type=1400 audit(1749481543.070:4083): avc: denied { open } for pid=21385 comm="syz.6.3740" path="/dev/vhost-vsock" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1707.323026][ T30] audit: type=1400 audit(1749481543.080:4084): avc: denied { sqpoll } for pid=21381 comm="syz.2.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1707.342412][ T30] audit: type=1400 audit(1749481543.160:4085): avc: denied { bind } for pid=21381 comm="syz.2.3739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1707.389184][ T5944] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1707.401976][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1707.411306][ T5944] usb 6-1: Product: syz [ 1707.415958][ T5944] usb 6-1: Manufacturer: syz [ 1707.442847][ T5944] usb 6-1: SerialNumber: syz [ 1707.493668][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1708.014827][T11009] usb 4-1: USB disconnect, device number 116 [ 1708.084303][ T5944] usb 6-1: can't set config #9, error -71 [ 1708.144728][ T5944] usb 6-1: USB disconnect, device number 74 [ 1708.374344][T21398] afs: Unknown parameter '' [ 1708.394882][T16451] usb 4-1: Service connection timeout for: 256 [ 1708.427302][T16451] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1709.376938][T16451] ath9k_htc: Failed to initialize the device [ 1709.384423][T11009] usb 4-1: ath9k_htc: USB layer deinitialized [ 1709.819571][T21398] kvm: kvm [21395]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1712.381940][T21426] fuse: Bad value for 'fd' [ 1712.529011][T21427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3751'. [ 1714.724661][T16451] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1715.458170][T16451] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1715.493466][T16451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.504384][T16451] usb 7-1: Product: syz [ 1715.512228][T16451] usb 7-1: Manufacturer: syz [ 1715.520464][T16451] usb 7-1: SerialNumber: syz [ 1715.553559][T16451] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1715.580078][ T5944] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1715.831647][T21460] afs: Unknown parameter '' [ 1716.052089][ T24] usb 7-1: USB disconnect, device number 46 [ 1716.748282][T21460] kvm: kvm [21459]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1717.166374][ T5944] usb 7-1: Service connection timeout for: 256 [ 1717.172595][ T5944] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1717.958161][ T5944] ath9k_htc: Failed to initialize the device [ 1717.989758][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 1718.261109][ T30] audit: type=1326 audit(1749481554.560:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21472 comm="syz.2.3764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27f578e929 code=0x0 [ 1718.299597][T21477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3763'. [ 1718.371455][ T30] audit: type=1400 audit(1749481554.690:4087): avc: denied { write } for pid=21472 comm="syz.2.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1718.463935][ T5931] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1718.553418][T21490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3765'. [ 1718.591153][T21490] geneve2: entered promiscuous mode [ 1718.596484][T21490] geneve2: entered allmulticast mode [ 1718.908270][ T30] audit: type=1400 audit(1749481554.690:4088): avc: denied { nlmsg_write } for pid=21472 comm="syz.2.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1718.937433][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.951599][ T5931] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1718.961769][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.042159][ T5931] usb 6-1: config 0 descriptor?? [ 1719.625328][ T5931] keytouch 0003:0926:3333.0076: fixing up Keytouch IEC report descriptor [ 1719.831097][T21470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1719.843405][T21470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1719.846608][ T5931] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0076/input/input116 [ 1719.855717][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1719.877923][T21506] fuse: Bad value for 'fd' [ 1720.098363][ T5931] keytouch 0003:0926:3333.0076: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 1720.169414][T21510] afs: Unknown parameter '' [ 1720.236742][T21510] kvm: kvm [21509]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1720.254911][ T5944] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1720.448013][ T5944] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1720.482767][T21513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1720.491156][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.501075][T21513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1720.514109][ T5944] usb 3-1: config 0 descriptor?? [ 1720.522811][ T5944] cp210x 3-1:0.0: cp210x converter detected [ 1720.746282][ T30] audit: type=1400 audit(1749481557.090:4089): avc: denied { write } for pid=21507 comm="syz.2.3771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1720.780250][ T30] audit: type=1400 audit(1749481557.120:4090): avc: denied { name_connect } for pid=21507 comm="syz.2.3771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1720.835555][T21517] loop4: detected capacity change from 0 to 7 [ 1720.858223][T21517] Dev loop4: unable to read RDB block 7 [ 1720.858267][T21517] loop4: unable to read partition table [ 1720.858452][T21517] loop4: partition table beyond EOD, truncated [ 1720.858512][T21517] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1722.282649][T21522] cgroup: No subsys list or none specified [ 1723.229129][ T5944] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1723.338248][ T5944] cp210x 3-1:0.0: querying part number failed [ 1723.382425][ T5944] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1723.420968][ T24] usb 6-1: USB disconnect, device number 75 [ 1723.421823][ T5944] usb 3-1: USB disconnect, device number 115 [ 1723.571167][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1723.595157][ T5944] cp210x 3-1:0.0: device disconnected [ 1724.436368][T21539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3778'. [ 1724.442358][T21539] geneve2: entered promiscuous mode [ 1724.442381][T21539] geneve2: entered allmulticast mode [ 1725.894923][T21557] trusted_key: encrypted_key: insufficient parameters specified [ 1726.500947][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3782'. [ 1726.845390][ T30] audit: type=1400 audit(1749481563.160:4091): avc: denied { create } for pid=21554 comm="syz.5.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1727.007804][T21559] fuse: Bad value for 'fd' [ 1727.176836][ T5841] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 1729.890630][T21590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=21590 comm=syz.0.3788 [ 1730.158060][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.170782][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.554863][ T30] audit: type=1400 audit(1749481566.770:4092): avc: denied { ioctl } for pid=21593 comm="syz.3.3792" path="socket:[72486]" dev="sockfs" ino=72486 ioctlcmd=0x3d08 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1731.303952][T21589] fuse: root generation should be zero [ 1731.501748][ T30] audit: type=1400 audit(1749481567.690:4093): avc: denied { write } for pid=21594 comm="syz.6.3791" name="ipv6_route" dev="proc" ino=4026533138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1732.741962][T21620] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3797'. [ 1732.824841][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1732.996585][T21617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3795'. [ 1733.134658][ T24] usb 4-1: device descriptor read/64, error -71 [ 1733.374678][ T24] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1733.379135][T16451] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1733.449622][T21625] lo speed is unknown, defaulting to 1000 [ 1733.545011][ T24] usb 4-1: device descriptor read/64, error -71 [ 1733.613494][T16451] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1733.637892][T16451] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1733.663292][T16451] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1733.679989][T16451] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.690823][T16451] usb 7-1: Product: syz [ 1733.690870][ T24] usb usb4-port1: attempt power cycle [ 1733.924711][T16451] usb 7-1: Manufacturer: syz [ 1733.929353][T16451] usb 7-1: SerialNumber: syz [ 1734.143429][T16451] cdc_mbim 7-1:1.0: skipping garbage [ 1734.198978][ T24] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1734.244765][ T24] usb 4-1: device descriptor read/8, error -71 [ 1734.343312][T21623] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1734.484675][ T24] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1734.528264][ T24] usb 4-1: device descriptor read/8, error -71 [ 1734.905821][T21625] RDS: rds_bind could not find a transport for ::ffff:172.20.20.36, load rds_tcp or rds_rdma? [ 1735.298768][ T24] usb usb4-port1: unable to enumerate USB device [ 1735.332430][T21623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.399702][T21623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.457168][ T30] audit: type=1400 audit(1749481571.810:4094): avc: denied { write } for pid=21622 comm="syz.6.3798" name="001" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1735.511834][ T30] audit: type=1400 audit(1749481571.840:4095): avc: denied { watch watch_reads } for pid=21622 comm="syz.6.3798" path="/431/file0" dev="tmpfs" ino=2287 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1735.901935][T21623] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1735.917253][T16451] cdc_mbim 7-1:1.0: setting rx_max = 16384 [ 1736.508800][T16451] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 1736.551460][T16451] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 1736.653055][T16451] wwan wwan0: port wwan0mbim0 attached [ 1736.694276][T16451] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.6-1, CDC MBIM, 32:75:bc:4b:82:e5 [ 1736.793436][T16451] usb 7-1: USB disconnect, device number 47 [ 1736.841249][T16451] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.6-1, CDC MBIM [ 1736.854708][ T24] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1736.862425][ T5931] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1736.894693][T11009] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1736.958165][T16451] wwan wwan0: port wwan0mbim0 disconnected [ 1737.113864][ T30] audit: type=1400 audit(1749481573.460:4096): avc: denied { read } for pid=5488 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1737.114879][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 1737.151629][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.196273][T11009] usb 3-1: Using ep0 maxpacket: 8 [ 1737.234507][ T24] usb 6-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1737.272923][T11009] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1737.340773][ T5931] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1737.352497][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1737.359598][T11009] usb 3-1: config 179 has no interface number 0 [ 1737.408168][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.469404][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 1737.487958][T11009] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1737.573584][ T5931] usb 4-1: config 0 descriptor?? [ 1737.586493][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.596900][T11009] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1737.620112][ T24] usb 6-1: Product: ⻰鰐Ùᥓ囃䴤딉⼥㷞ꋃ遗쁙 [ 1737.632928][T11009] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1737.644963][ T24] usb 6-1: Manufacturer: ఋ [ 1737.649684][ T24] usb 6-1: SerialNumber: ᥱ뻰鳶假壘ᾜ좯떏킔帪獅⏫異ꭑ罖㫯ꦝꄱ쾙產៞ᠲ貾礫ꪕ罹Dz臵郑Ύ䘉莜⑋ꙋﾔᨳ潁᭦ꇓ㍽闷覠ⷢ瞸쯈跾鸘⺱듾ꩰ삨耟Ŕ㔞鼧鞖뭏계들꫺杭∎Ỿ霼幀聘Ꮜҽ떍䞟䤶塝ఽ鵋⛥霩瀠佩佽愉籪傂ᶵ打 [ 1737.677956][T11009] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1737.689944][T11009] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1737.706939][T11009] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1737.717720][T11009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.745028][T21648] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1737.979253][ T5957] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input117 [ 1738.487175][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.545935][ T5931] keytouch 0003:0926:3333.0077: fixing up Keytouch IEC report descriptor [ 1738.568074][T21669] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1738.576373][T21669] FAULT_INJECTION: forcing a failure. [ 1738.576373][T21669] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.589190][T21669] CPU: 1 UID: 0 PID: 21669 Comm: syz.2.3805 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1738.589216][T21669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1738.589229][T21669] Call Trace: [ 1738.589236][T21669] [ 1738.589244][T21669] dump_stack_lvl+0x16c/0x1f0 [ 1738.589281][T21669] should_fail_ex+0x512/0x640 [ 1738.589307][T21669] ? fs_reclaim_acquire+0xae/0x150 [ 1738.589330][T21669] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1738.589357][T21669] should_failslab+0xc2/0x120 [ 1738.589385][T21669] __kmalloc_noprof+0xd2/0x510 [ 1738.589418][T21669] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1738.589448][T21669] ? tomoyo_profile+0x47/0x60 [ 1738.589480][T21669] tomoyo_path_number_perm+0x245/0x580 [ 1738.589502][T21669] ? tomoyo_path_number_perm+0x237/0x580 [ 1738.589529][T21669] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1738.589554][T21669] ? find_held_lock+0x2b/0x80 [ 1738.589607][T21669] ? find_held_lock+0x2b/0x80 [ 1738.589642][T21669] ? hook_file_ioctl_common+0x145/0x410 [ 1738.589670][T21669] ? __fget_files+0x20e/0x3c0 [ 1738.589701][T21669] security_file_ioctl+0x9b/0x240 [ 1738.589730][T21669] __x64_sys_ioctl+0xb7/0x210 [ 1738.589755][T21669] do_syscall_64+0xcd/0x4c0 [ 1738.589786][T21669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.589807][T21669] RIP: 0033:0x7f27f578e929 [ 1738.589824][T21669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.589843][T21669] RSP: 002b:00007f27f6669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.589862][T21669] RAX: ffffffffffffffda RBX: 00007f27f59b6080 RCX: 00007f27f578e929 [ 1738.589882][T21669] RDX: 00002000000001c0 RSI: 0000000040304580 RDI: 0000000000000004 [ 1738.589895][T21669] RBP: 00007f27f6669090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.589908][T21669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.589921][T21669] R13: 0000000000000000 R14: 00007f27f59b6080 R15: 00007fffbbda8138 [ 1738.589950][T21669] [ 1738.590023][T21669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1738.744676][ T30] audit: type=1400 audit(1749481574.710:4097): avc: denied { create } for pid=21647 comm="syz.2.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1738.966284][T21672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1738.975575][T21672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1738.984945][ T5931] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0077/input/input118 [ 1739.026312][ T30] audit: type=1400 audit(1749481575.330:4098): avc: denied { create } for pid=21647 comm="syz.2.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1739.067447][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.098161][T21673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.170163][T21675] afs: Unknown parameter '' [ 1739.179664][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.180132][T21673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.220279][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.275155][ T5931] keytouch 0003:0926:3333.0077: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1739.296358][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.395641][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.421212][T21675] kvm: kvm [21674]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1739.497160][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.521901][ T5931] usb 4-1: USB disconnect, device number 121 [ 1739.675259][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.702863][T21646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.729252][T21646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.815098][ T24] usb 6-1: USB disconnect, device number 76 [ 1740.463146][ T24] usb 3-1: USB disconnect, device number 116 [ 1740.469309][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1740.469365][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1740.517809][ T24] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1740.812586][T21688] lo speed is unknown, defaulting to 1000 [ 1740.844655][ T115] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1741.027180][ T115] usb 4-1: Using ep0 maxpacket: 16 [ 1741.046037][ T115] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1741.062574][T16451] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1741.124133][ T115] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1741.167695][ T115] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1741.244842][T16451] usb 6-1: device descriptor read/64, error -71 [ 1741.292529][ T115] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1741.382465][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.475890][ T115] usb 4-1: Product: syz [ 1741.511986][ T115] usb 4-1: Manufacturer: syz [ 1741.535603][T16451] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1741.582634][ T115] usb 4-1: SerialNumber: syz [ 1741.766113][T16451] usb 6-1: device descriptor read/64, error -71 [ 1741.973835][T16451] usb usb6-port1: attempt power cycle [ 1742.046823][ T115] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1742.082154][ T115] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1742.118708][ T30] audit: type=1400 audit(1749481578.460:4099): avc: denied { create } for pid=21696 comm="syz.0.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1742.145978][T21697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'. [ 1742.175893][ T30] audit: type=1400 audit(1749481578.500:4100): avc: denied { ioctl } for pid=21696 comm="syz.0.3817" path="socket:[73840]" dev="sockfs" ino=73840 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1742.212331][ T115] usb 4-1: USB disconnect, device number 122 [ 1742.316021][T21649] udevd[21649]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1742.404674][T16451] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1742.414779][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1742.425808][T16451] usb 6-1: device descriptor read/8, error -71 [ 1742.664911][T16451] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1742.720589][T16451] usb 6-1: device descriptor read/8, error -71 [ 1742.858616][T16451] usb usb6-port1: unable to enumerate USB device [ 1742.964044][T21688] RDS: rds_bind could not find a transport for ::ffff:172.20.20.36, load rds_tcp or rds_rdma? [ 1743.054942][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1743.072111][ T24] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1743.092748][ T24] usb 7-1: config 0 has no interface number 0 [ 1743.102477][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 1743.134889][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.142921][ T24] usb 7-1: Product: syz [ 1743.194765][ T24] usb 7-1: Manufacturer: syz [ 1743.199406][ T24] usb 7-1: SerialNumber: syz [ 1743.296001][ T24] usb 7-1: config 0 descriptor?? [ 1743.328850][ T30] audit: type=1400 audit(1749481579.580:4101): avc: denied { write } for pid=21706 comm="syz.3.3820" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1743.419634][ T30] audit: type=1400 audit(1749481579.580:4102): avc: denied { open } for pid=21706 comm="syz.3.3820" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1743.519234][T21710] afs: Unknown parameter '' [ 1743.604831][T21710] kvm: kvm [21709]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1744.054875][ T24] radio-si470x 7-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 1744.063611][ T24] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 1745.287288][ T24] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 1745.903319][T21714] lo speed is unknown, defaulting to 1000 [ 1746.519979][T21730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1747.325822][T21738] trusted_key: encrypted_key: insufficient parameters specified [ 1748.978402][T21735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1749.224350][T21752] afs: Unknown parameter '' [ 1749.336329][T21752] kvm: kvm [21751]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 1749.442873][T21758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1751.284720][ T24] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1751.454898][ T24] usb 6-1: device descriptor read/64, error -71 [ 1751.506278][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3838'. [ 1751.906383][T16451] usb 7-1: USB disconnect, device number 48 [ 1752.040562][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1752.304646][ T24] usb 6-1: device descriptor read/64, error -71 [ 1752.430056][ T24] usb usb6-port1: attempt power cycle [ 1752.842031][T21783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3842'. [ 1753.214702][ T24] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1753.273745][ T24] usb 6-1: device descriptor read/8, error -71 [ 1753.970723][ T24] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1754.051022][ T24] usb 6-1: device descriptor read/8, error -71 [ 1754.217945][ T24] usb usb6-port1: unable to enumerate USB device [ 1754.450634][T21801] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1754.461326][T21801] qnx6: wrong signature (magic) in superblock #1. [ 1754.467754][T21801] qnx6: unable to read the first superblock [ 1754.554692][ T24] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1754.840655][ T24] usb 6-1: config index 0 descriptor too short (expected 46, got 36) [ 1754.870166][ T24] usb 6-1: config 0 interface 0 altsetting 130 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1755.565061][ T24] usb 6-1: config 0 interface 0 altsetting 130 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1755.575071][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1755.581969][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1755.591050][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.613484][ T24] usb 6-1: config 0 descriptor?? [ 1755.634541][ T24] usbhid 6-1:0.0: can't add hid device: -22 [ 1757.692445][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1757.727712][ T24] usb 6-1: USB disconnect, device number 85 [ 1758.134951][ T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1758.492498][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1758.503666][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1758.526592][ T24] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1759.086232][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.106804][T21825] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3849'. [ 1759.117107][ T24] usb 6-1: config 0 descriptor?? [ 1759.951331][ T24] hid-multitouch 0003:1FD2:6007.0078: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1760.403423][T21842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1761.251699][ T5944] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1761.304078][T21814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1761.490464][ T5944] usb 7-1: device descriptor read/64, error -71 [ 1761.518499][ T115] usb 6-1: USB disconnect, device number 86 [ 1762.134905][ T5944] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1762.379326][T21863] trusted_key: encrypted_key: insufficient parameters specified [ 1762.784158][ T5944] usb 7-1: device descriptor read/64, error -71 [ 1762.902708][ T5944] usb usb7-port1: attempt power cycle [ 1765.103381][T21888] lo speed is unknown, defaulting to 1000 [ 1765.624954][T21563] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1765.844765][T21563] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.895412][T21563] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1765.914853][T21563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.937468][T21563] usb 3-1: config 0 descriptor?? [ 1767.359024][T21563] keytouch 0003:0926:3333.0079: fixing up Keytouch IEC report descriptor [ 1767.494809][ T5957] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1767.754901][ T5957] usb 7-1: Using ep0 maxpacket: 16 [ 1767.969247][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.424337][T21914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.474486][ T5957] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1768.515273][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.523961][T21914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.548124][T21563] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0079/input/input119 [ 1768.561445][ T5957] usb 7-1: config 0 descriptor?? [ 1768.640498][ T5841] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1768.774027][T21563] keytouch 0003:0926:3333.0079: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1768.775014][ T115] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1768.984759][ T115] usb 6-1: Using ep0 maxpacket: 16 [ 1769.094968][T21931] trusted_key: encrypted_key: insufficient parameters specified [ 1769.484884][ T5957] hid-multitouch 0003:1FD2:6007.007A: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 1769.646711][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1769.667212][T21935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1769.736813][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.853014][ T115] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1770.087711][ T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.098017][T21563] usb 7-1: USB disconnect, device number 52 [ 1771.362674][ T115] usb 6-1: config 0 descriptor?? [ 1771.503638][T21938] fido_id[21938]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1771.586131][ T115] usbhid 6-1:0.0: can't add hid device: -71 [ 1771.595539][ T30] audit: type=1400 audit(1749481607.950:4103): avc: denied { setopt } for pid=21945 comm="syz.3.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1771.638282][ T115] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1771.839705][ T115] usb 6-1: USB disconnect, device number 87 [ 1772.397936][T16451] usb 3-1: USB disconnect, device number 117 [ 1772.652516][T21948] lo speed is unknown, defaulting to 1000 [ 1772.793139][ T30] audit: type=1326 audit(1749481609.140:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21958 comm="syz.0.3884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19ae58e929 code=0x0 [ 1773.536173][ T30] audit: type=1400 audit(1749481609.890:4105): avc: denied { name_bind } for pid=21967 comm="syz.5.3886" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1773.559345][T21968] FAULT_INJECTION: forcing a failure. [ 1773.559345][T21968] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.603662][T21968] CPU: 1 UID: 0 PID: 21968 Comm: syz.5.3886 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1773.603691][T21968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1773.603703][T21968] Call Trace: [ 1773.603710][T21968] [ 1773.603716][T21968] dump_stack_lvl+0x16c/0x1f0 [ 1773.603750][T21968] should_fail_ex+0x512/0x640 [ 1773.603775][T21968] ? fs_reclaim_acquire+0xae/0x150 [ 1773.603800][T21968] ? tomoyo_supervisor+0x45b/0x13b0 [ 1773.603826][T21968] should_failslab+0xc2/0x120 [ 1773.603851][T21968] __kmalloc_noprof+0xd2/0x510 [ 1773.603873][T21968] ? tomoyo_profile+0x47/0x60 [ 1773.603897][T21968] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 1773.603923][T21968] tomoyo_supervisor+0x45b/0x13b0 [ 1773.603955][T21968] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1773.603983][T21968] ? __pfx_vsnprintf+0x10/0x10 [ 1773.604016][T21968] ? snprintf+0xc7/0x100 [ 1773.604038][T21968] ? __pfx_snprintf+0x10/0x10 [ 1773.604063][T21968] ? look_up_lock_class+0x59/0x150 [ 1773.604089][T21968] ? register_lock_class+0x41/0x4c0 [ 1773.604125][T21968] tomoyo_audit_inet_log+0x285/0x3a0 [ 1773.604151][T21968] ? __pfx_tomoyo_audit_inet_log+0x10/0x10 [ 1773.604175][T21968] ? mptcp_release_cb+0x7a3/0xad0 [ 1773.604210][T21968] ? tomoyo_check_acl+0x1f7/0x410 [ 1773.604228][T21968] ? __pfx_tomoyo_check_inet_acl+0x10/0x10 [ 1773.604256][T21968] tomoyo_check_inet_address+0x5a3/0x6c0 [ 1773.604285][T21968] ? __pfx_tomoyo_check_inet_address+0x10/0x10 [ 1773.604309][T21968] ? __local_bh_enable_ip+0xa4/0x120 [ 1773.604349][T21968] tomoyo_socket_listen_permission+0x2b8/0x370 [ 1773.604377][T21968] ? __pfx_tomoyo_socket_listen_permission+0x10/0x10 [ 1773.604428][T21968] ? __fget_files+0x20e/0x3c0 [ 1773.604455][T21968] security_socket_listen+0x1e3/0x210 [ 1773.604478][T21968] __sys_listen_socket+0xba/0x160 [ 1773.604509][T21968] __sys_listen+0xa7/0x130 [ 1773.604531][T21968] __x64_sys_listen+0x53/0x80 [ 1773.604554][T21968] do_syscall_64+0xcd/0x4c0 [ 1773.604582][T21968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.604602][T21968] RIP: 0033:0x7f74bc58e929 [ 1773.604618][T21968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1773.604637][T21968] RSP: 002b:00007f74bd422038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1773.604656][T21968] RAX: ffffffffffffffda RBX: 00007f74bc7b5fa0 RCX: 00007f74bc58e929 [ 1773.604670][T21968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1773.604682][T21968] RBP: 00007f74bd422090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.604694][T21968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.604705][T21968] R13: 0000000000000000 R14: 00007f74bc7b5fa0 R15: 00007ffda0d961b8 [ 1773.604732][T21968] [ 1773.881559][ T115] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1774.059378][ T115] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1774.072522][ T115] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1774.142727][ T115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.132004][ T115] usb 4-1: config 0 descriptor?? [ 1775.875282][ T115] keytouch 0003:0926:3333.007B: fixing up Keytouch IEC report descriptor [ 1775.915229][ T115] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.007B/input/input120 [ 1776.154752][T21990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1776.187222][ T115] keytouch 0003:0926:3333.007B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1776.215328][T21990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.273906][T21991] trusted_key: encrypted_key: insufficient parameters specified [ 1776.544773][ T30] audit: type=1400 audit(1749481612.820:4106): avc: denied { read write } for pid=21992 comm="syz.2.3893" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1776.988859][ T30] audit: type=1400 audit(1749481612.820:4107): avc: denied { open } for pid=21992 comm="syz.2.3893" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1777.554770][T21563] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1777.665646][T21965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.796554][T21965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1777.859953][T21563] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1777.958055][T21563] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1778.059183][T21563] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1778.085509][T22005] netlink: 'syz.6.3896': attribute type 10 has an invalid length. [ 1778.114967][T21563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.117949][T22005] batman_adv: batadv0: Adding interface: wlan0 [ 1778.158453][T22005] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1778.248537][T22005] batman_adv: batadv0: Interface activated: wlan0 [ 1778.809268][T21563] usb 3-1: usb_control_msg returned -32 [ 1778.813725][T22003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1778.824718][T21563] usbtmc 3-1:16.0: can't read capabilities [ 1778.840555][T22003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.968585][T22003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1779.027176][T22003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1779.097816][T21563] usb 3-1: USB disconnect, device number 118 [ 1779.162162][ T24] usb 4-1: USB disconnect, device number 123 [ 1779.666084][T22020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.816481][T22023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.147118][T22029] can: request_module (can-proto-3) failed. [ 1781.155982][T22018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1781.619747][T22033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=22033 comm=syz.5.3899 [ 1783.042127][ T30] audit: type=1400 audit(1749481619.390:4108): avc: denied { bind } for pid=22035 comm="syz.2.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1783.354779][ T30] audit: type=1400 audit(1749481619.420:4109): avc: denied { listen } for pid=22035 comm="syz.2.3905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1783.470305][T22047] lo speed is unknown, defaulting to 1000 [ 1784.426924][ T5873] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1784.823151][T16451] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1785.125020][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 1785.186224][ T5873] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1785.196446][T16451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1785.211773][ T5873] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1785.221561][T16451] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1785.231449][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.239681][T16451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.260719][ T5873] usb 4-1: config 0 descriptor?? [ 1785.271418][T16451] usb 3-1: config 0 descriptor?? [ 1785.278010][ T30] audit: type=1400 audit(1749481621.630:4110): avc: denied { ioctl } for pid=22075 comm="syz.5.3914" path="socket:[74825]" dev="sockfs" ino=74825 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1785.710650][ T5873] hid-multitouch 0003:1FD2:6007.007C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1785.746289][T16451] keytouch 0003:0926:3333.007D: fixing up Keytouch IEC report descriptor [ 1785.764817][T21563] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1785.794054][T16451] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.007D/input/input121 [ 1786.168262][T22089] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3917'. [ 1786.911519][ T30] audit: type=1400 audit(1749481622.490:4111): avc: denied { create } for pid=22085 comm="syz.6.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1786.944697][T21563] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1786.959078][T22063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1786.976847][T21563] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1786.986788][T16451] keytouch 0003:0926:3333.007D: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1787.000999][T22063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1787.010256][ T30] audit: type=1400 audit(1749481622.490:4112): avc: denied { write } for pid=22085 comm="syz.6.3917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1787.104121][T22050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.116142][T22050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1787.155036][T21563] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1787.161830][ T5841] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 1787.168808][ T30] audit: type=1400 audit(1749481622.510:4113): avc: denied { ioctl } for pid=22085 comm="syz.6.3917" path="socket:[75852]" dev="sockfs" ino=75852 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1787.195475][T21563] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 1787.212239][T21563] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.214946][ T5873] usb 4-1: USB disconnect, device number 124 [ 1787.221588][ T30] audit: type=1400 audit(1749481622.620:4114): avc: denied { mount } for pid=22085 comm="syz.6.3917" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1787.255498][T21563] usb 6-1: config 0 descriptor?? [ 1787.421953][ T30] audit: type=1400 audit(1749481622.620:4115): avc: denied { read } for pid=22085 comm="syz.6.3917" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1787.751580][ T30] audit: type=1400 audit(1749481622.630:4116): avc: denied { open } for pid=22085 comm="syz.6.3917" path="/455/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1787.957737][T21563] samsung 0003:0419:0001.007E: unknown main item tag 0x0 [ 1788.135666][T22063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1788.161920][T22063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1788.195961][ T30] audit: type=1400 audit(1749481623.480:4117): avc: denied { unmount } for pid=13250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1788.224972][T21563] samsung 0003:0419:0001.007E: unknown main item tag 0x0 [ 1788.232067][T21563] samsung 0003:0419:0001.007E: unknown main item tag 0x0 [ 1788.286257][T21563] samsung 0003:0419:0001.007E: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0 [ 1788.315773][ T30] audit: type=1400 audit(1749481623.830:4118): avc: denied { mount } for pid=22094 comm="syz.6.3918" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1788.381581][ T30] audit: type=1400 audit(1749481624.730:4119): avc: denied { unmount } for pid=13250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1788.424048][ T5873] usb 6-1: USB disconnect, device number 88 [ 1788.428939][T22109] afs: Unknown parameter '' [ 1788.727280][T22112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1788.802716][T22107] fido_id[22107]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1789.390566][T21563] usb 3-1: USB disconnect, device number 119 [ 1790.345779][ T24] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1790.678273][T22141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1790.914712][ T24] usb 4-1: device descriptor read/64, error -71 [ 1791.441435][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1791.598400][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.615012][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.654705][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1791.773609][T22150] lo speed is unknown, defaulting to 1000 [ 1791.814700][ T24] usb 4-1: device descriptor read/64, error -71 [ 1791.881530][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3931'. [ 1791.926789][ T24] usb usb4-port1: attempt power cycle [ 1792.134994][ T5957] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1792.333533][ T24] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1792.373139][ T5957] usb 7-1: Using ep0 maxpacket: 16 [ 1792.860601][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.879175][ T24] usb 4-1: device descriptor read/8, error -71 [ 1792.886249][ T5957] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1792.895897][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.922943][ T5957] usb 7-1: config 0 descriptor?? [ 1793.615403][T22173] can: request_module (can-proto-3) failed. [ 1793.640276][T22180] afs: Unknown parameter '' [ 1794.458276][T22188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1794.499073][T22188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1794.885901][ T5957] hid-multitouch 0003:1FD2:6007.007F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 1795.686117][ T5957] usb 7-1: USB disconnect, device number 53 [ 1795.799730][ T30] audit: type=1400 audit(1749481632.140:4120): avc: denied { append } for pid=22196 comm="syz.3.3938" name="v4l-subdev1" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1795.927502][T22192] fido_id[22192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1796.834705][ T5841] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1797.106303][T22208] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3941'. [ 1798.131741][ T30] audit: type=1400 audit(1749481634.480:4121): avc: denied { execute } for pid=22217 comm="syz.0.3944" path="/proc/tty/drivers" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 1798.213927][ T30] audit: type=1400 audit(1749481634.560:4122): avc: denied { getopt } for pid=22217 comm="syz.0.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1798.296167][T16451] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1798.308203][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3942'. [ 1798.390695][ T30] audit: type=1400 audit(1749481634.640:4123): avc: denied { ioctl } for pid=22217 comm="syz.0.3944" path="/dev/sg0" dev="devtmpfs" ino=777 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1798.443235][ T30] audit: type=1400 audit(1749481634.640:4124): avc: denied { name_bind } for pid=22217 comm="syz.0.3944" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1798.599989][T16451] usb 4-1: Using ep0 maxpacket: 16 [ 1798.615690][ T30] audit: type=1400 audit(1749481634.720:4125): avc: denied { getopt } for pid=22221 comm="syz.5.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1798.638731][T16451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1798.651926][T16451] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1798.686678][T16451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.197180][T16451] usb 4-1: config 0 descriptor?? [ 1799.530209][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3948'. [ 1799.567638][T22235] lo speed is unknown, defaulting to 1000 [ 1799.935195][T16451] hid-multitouch 0003:1FD2:6007.0080: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 1800.038331][T22248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1800.095061][T22248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1801.153669][T16451] usb 4-1: USB disconnect, device number 3 [ 1801.553414][T22258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3951'. [ 1801.562583][T22258] bridge_slave_1: left allmulticast mode [ 1801.568374][T22258] bridge_slave_1: left promiscuous mode [ 1801.574196][T22258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.714047][T22258] bridge_slave_0: left allmulticast mode [ 1801.720067][T22258] bridge_slave_0: left promiscuous mode [ 1801.726692][T22258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1803.152260][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.218807][T22272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.323111][ T30] audit: type=1400 audit(1749481639.510:4126): avc: denied { read } for pid=5178 comm="acpid" name="event7" dev="devtmpfs" ino=4464 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1803.351664][ T5841] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1803.364770][ T30] audit: type=1400 audit(1749481639.510:4127): avc: denied { open } for pid=5178 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=4464 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1803.394223][ T30] audit: type=1400 audit(1749481639.510:4128): avc: denied { ioctl } for pid=5178 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=4464 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1803.397250][T22271] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20001 [ 1805.094155][ T30] audit: type=1400 audit(1749481641.430:4129): avc: denied { ioctl } for pid=22280 comm="syz.5.3958" path="socket:[75496]" dev="sockfs" ino=75496 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1805.154147][T22283] netlink: 'syz.3.3957': attribute type 27 has an invalid length. [ 1807.554852][ T115] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1808.402386][ T30] audit: type=1400 audit(1749481644.750:4130): avc: denied { read write } for pid=22303 comm="syz.6.3965" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1808.492545][ T30] audit: type=1400 audit(1749481644.750:4131): avc: denied { open } for pid=22303 comm="syz.6.3965" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1808.564670][ T115] usb 4-1: Using ep0 maxpacket: 16 [ 1808.606597][ T115] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1808.643040][T22311] FAULT_INJECTION: forcing a failure. [ 1808.643040][T22311] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.646256][ T115] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.655811][T22311] CPU: 1 UID: 0 PID: 22311 Comm: syz.0.3964 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1808.655838][T22311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1808.655849][T22311] Call Trace: [ 1808.655855][T22311] [ 1808.655862][T22311] dump_stack_lvl+0x16c/0x1f0 [ 1808.655893][T22311] should_fail_ex+0x512/0x640 [ 1808.655925][T22311] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1808.655950][T22311] should_failslab+0xc2/0x120 [ 1808.655977][T22311] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1808.655997][T22311] ? btrfs_get_tree+0x893/0x1b70 [ 1808.656019][T22311] ? btrfs_get_tree+0x8e3/0x1b70 [ 1808.656044][T22311] btrfs_get_tree+0x8e3/0x1b70 [ 1808.656068][T22311] ? irqentry_exit+0x3b/0x90 [ 1808.656095][T22311] ? __pfx_btrfs_get_tree+0x10/0x10 [ 1808.656124][T22311] ? __pfx_btrfs_get_tree+0x10/0x10 [ 1808.656144][T22311] ? vfs_cmd_create+0x75/0x2a0 [ 1808.656161][T22311] ? vfs_get_tree+0x45/0x340 [ 1808.656184][T22311] vfs_get_tree+0x8b/0x340 [ 1808.656204][T22311] vfs_cmd_create+0xd7/0x2a0 [ 1808.656224][T22311] __do_sys_fsconfig+0x7b8/0xbe0 [ 1808.656245][T22311] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1808.656272][T22311] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 1808.656301][T22311] do_syscall_64+0xcd/0x4c0 [ 1808.656331][T22311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.656350][T22311] RIP: 0033:0x7f19ae58e929 [ 1808.656366][T22311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1808.656385][T22311] RSP: 002b:00007f19af360038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1808.656403][T22311] RAX: ffffffffffffffda RBX: 00007f19ae7b6080 RCX: 00007f19ae58e929 [ 1808.656416][T22311] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000a [ 1808.656428][T22311] RBP: 00007f19af360090 R08: 0000000000000000 R09: 0000000000000000 [ 1808.656439][T22311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1808.656451][T22311] R13: 0000000000000000 R14: 00007f19ae7b6080 R15: 00007ffe375615c8 [ 1808.656479][T22311] [ 1809.614722][ T5841] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1809.644877][ T30] audit: type=1400 audit(1749481644.750:4132): avc: denied { ioctl } for pid=22303 comm="syz.6.3965" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1809.706927][ T30] audit: type=1400 audit(1749481644.750:4133): avc: denied { set_context_mgr } for pid=22303 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1809.709888][ T115] usb 4-1: config 0 descriptor?? [ 1809.835317][ T115] usb 4-1: can't set config #0, error -71 [ 1809.871734][ T115] usb 4-1: USB disconnect, device number 4 [ 1810.104291][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.146954][T22325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1810.417421][T22331] FAULT_INJECTION: forcing a failure. [ 1810.417421][T22331] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.430187][T22331] CPU: 0 UID: 0 PID: 22331 Comm: syz.2.3969 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1810.430212][T22331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1810.430224][T22331] Call Trace: [ 1810.430231][T22331] [ 1810.430239][T22331] dump_stack_lvl+0x16c/0x1f0 [ 1810.430272][T22331] should_fail_ex+0x512/0x640 [ 1810.430297][T22331] ? __kmalloc_noprof+0xbf/0x510 [ 1810.430324][T22331] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1810.430350][T22331] should_failslab+0xc2/0x120 [ 1810.430378][T22331] __kmalloc_noprof+0xd2/0x510 [ 1810.430400][T22331] ? __rcu_read_unlock+0x2b4/0x580 [ 1810.430431][T22331] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1810.430455][T22331] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1810.430487][T22331] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1810.430514][T22331] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1810.430548][T22331] ? bpf_lsm_capable+0x9/0x10 [ 1810.430568][T22331] ? security_capable+0x7e/0x260 [ 1810.430592][T22331] ? ns_capable+0xd7/0x110 [ 1810.430616][T22331] genl_rcv_msg+0x55c/0x800 [ 1810.430644][T22331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1810.430668][T22331] ? __pfx_batadv_pre_doit+0x10/0x10 [ 1810.430689][T22331] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 1810.430712][T22331] ? __pfx_batadv_post_doit+0x10/0x10 [ 1810.430746][T22331] netlink_rcv_skb+0x155/0x420 [ 1810.430768][T22331] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1810.430794][T22331] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1810.430836][T22331] genl_rcv+0x28/0x40 [ 1810.430862][T22331] netlink_unicast+0x53d/0x7f0 [ 1810.430888][T22331] ? __pfx_netlink_unicast+0x10/0x10 [ 1810.430919][T22331] netlink_sendmsg+0x8d1/0xdd0 [ 1810.430946][T22331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1810.430973][T22331] ? ____sys_sendmsg+0x871/0xc70 [ 1810.431000][T22331] ____sys_sendmsg+0xa98/0xc70 [ 1810.431023][T22331] ? copy_msghdr_from_user+0x10a/0x160 [ 1810.431050][T22331] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1810.431087][T22331] ___sys_sendmsg+0x134/0x1d0 [ 1810.431117][T22331] ? __pfx____sys_sendmsg+0x10/0x10 [ 1810.431142][T22331] ? __lock_acquire+0x622/0x1c90 [ 1810.431208][T22331] __sys_sendmsg+0x16d/0x220 [ 1810.431237][T22331] ? __pfx___sys_sendmsg+0x10/0x10 [ 1810.431286][T22331] do_syscall_64+0xcd/0x4c0 [ 1810.431317][T22331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1810.431338][T22331] RIP: 0033:0x7f27f578e929 [ 1810.431355][T22331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1810.431373][T22331] RSP: 002b:00007f27f6669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1810.431392][T22331] RAX: ffffffffffffffda RBX: 00007f27f59b6080 RCX: 00007f27f578e929 [ 1810.431406][T22331] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1810.431419][T22331] RBP: 00007f27f6669090 R08: 0000000000000000 R09: 0000000000000000 [ 1810.431431][T22331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1810.431442][T22331] R13: 0000000000000000 R14: 00007f27f59b6080 R15: 00007fffbbda8138 [ 1810.431471][T22331] [ 1811.824590][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3971'. [ 1812.821017][T22341] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3972'. [ 1813.279387][T22347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1814.297460][ T30] audit: type=1400 audit(1749481650.570:4134): avc: denied { execute } for pid=22351 comm="syz.3.3975" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=75754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1814.464872][ T115] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 1814.481206][ T30] audit: type=1400 audit(1749481650.830:4135): avc: denied { watch watch_reads } for pid=22358 comm="syz.0.3978" path="/224" dev="tmpfs" ino=1178 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1814.948728][T22373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3978'. [ 1814.986670][ T115] usb 4-1: config 0 has an invalid interface number: 138 but max is 0 [ 1815.140762][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3979'. [ 1815.526437][ T115] usb 4-1: config 0 has no interface number 0 [ 1815.532604][ T115] usb 4-1: config 0 interface 138 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1815.580801][ T115] usb 4-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.df [ 1815.594974][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.610079][ T115] usb 4-1: Product: syz [ 1815.614382][ T115] usb 4-1: Manufacturer: syz [ 1815.628798][T22360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3978'. [ 1815.634013][ T115] usb 4-1: SerialNumber: syz [ 1815.670516][ T115] usb 4-1: config 0 descriptor?? [ 1815.680121][T22356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1815.710858][ T115] ums-datafab 4-1:0.138: USB Mass Storage device detected [ 1815.736889][ T115] scsi host1: usb-storage 4-1:0.138 [ 1816.218046][ T115] usb 4-1: USB disconnect, device number 5 [ 1817.445158][ T5841] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1817.722862][T15866] scsi 1:0:0:0: Direct-Access Datafab/ Datafab-based Re ;4=? PQ: 0 ANSI: 0 CCS [ 1817.937348][T15866] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 1817.951135][ T9336] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 1818.005286][ T9336] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 1818.084871][ T9336] sd 1:0:0:0: [sdb] Sense not available. [ 1818.092442][ T9336] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1818.730368][ T9336] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1818.774709][T22407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1819.031121][ T9336] sd 1:0:0:0: [sdb] Write Protect is off [ 1819.038524][ T9336] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1819.045158][ T9336] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1819.068931][T22400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1819.075577][T22400] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1819.103167][T22413] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 1819.109812][T22413] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1819.117397][T22405] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 1819.124007][T22405] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1819.133001][T22413] vhci_hcd vhci_hcd.0: Device attached [ 1819.339103][T22400] vhci_hcd vhci_hcd.0: Device attached [ 1819.569105][T22405] vhci_hcd vhci_hcd.0: Device attached [ 1819.592526][ T9336] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1819.610426][T22400] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 1819.617088][T22400] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1819.656181][T22400] vhci_hcd vhci_hcd.0: Device attached [ 1819.707008][ T24] usb 37-4: new high-speed USB device number 2 using vhci_hcd [ 1819.856802][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3989'. [ 1820.134711][T22400] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 1820.141349][T22400] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1820.188116][T22400] vhci_hcd vhci_hcd.0: Device attached [ 1820.535670][T22400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1820.552265][T22400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1820.565215][T22400] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1820.721156][T22435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1821.433043][T22402] vhci_hcd: connection closed [ 1821.434289][T22409] vhci_hcd: connection closed [ 1821.439695][T22414] vhci_hcd: connection reset by peer [ 1821.444938][T22421] vhci_hcd: connection closed [ 1821.449693][T22428] vhci_hcd: connection closed [ 1821.463933][ T1328] vhci_hcd: stop threads [ 1821.485804][ T1328] vhci_hcd: release socket [ 1821.496184][ T1328] vhci_hcd: disconnect device [ 1821.524884][ T1328] vhci_hcd: stop threads [ 1821.529167][ T1328] vhci_hcd: release socket [ 1821.544893][ T1328] vhci_hcd: disconnect device [ 1821.564689][ T1328] vhci_hcd: stop threads [ 1821.568965][ T1328] vhci_hcd: release socket [ 1821.614765][ T1328] vhci_hcd: disconnect device [ 1821.666276][ T1328] vhci_hcd: stop threads [ 1821.706352][ T1328] vhci_hcd: release socket [ 1821.711398][ T1328] vhci_hcd: disconnect device [ 1821.764702][ T1328] vhci_hcd: stop threads [ 1821.784360][ T1328] vhci_hcd: release socket [ 1821.784687][ T5841] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1821.834092][ T1328] vhci_hcd: disconnect device [ 1821.868011][T22440] udevd[22440]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1822.045584][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3994'. [ 1822.782094][ T30] audit: type=1400 audit(1749481658.560:4136): avc: denied { read } for pid=22447 comm="syz.3.3996" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1823.866640][ T30] audit: type=1400 audit(1749481658.560:4137): avc: denied { open } for pid=22447 comm="syz.3.3996" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1824.194926][ T30] audit: type=1400 audit(1749481658.570:4138): avc: denied { ioctl } for pid=22447 comm="syz.3.3996" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1824.615087][ T115] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1825.606871][T22467] can: request_module (can-proto-3) failed. [ 1825.637005][T22287] udevd[22287]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 1825.738736][ T24] vhci_hcd: vhci_device speed not set [ 1826.208514][ T115] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1826.324651][ T115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.343933][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1826.353015][T22490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4004'. [ 1826.528527][ T115] usb 4-1: Product: syz [ 1826.621385][ T115] usb 4-1: Manufacturer: syz [ 1826.640983][ T115] usb 4-1: SerialNumber: syz [ 1827.018278][T22480] can: request_module (can-proto-3) failed. [ 1827.036355][ T30] audit: type=1400 audit(1749481663.210:4139): avc: denied { accept } for pid=22487 comm="syz.6.4003" lport=50691 faddr=100.1.1.1 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1827.394694][T21563] usb usb38-port1: attempt power cycle [ 1827.420160][ T115] usb 4-1: can't set config #1, error -71 [ 1827.427299][ T115] usb 4-1: USB disconnect, device number 6 [ 1828.370783][T22509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4006'. [ 1828.783211][T21563] usb usb38-port1: unable to enumerate USB device [ 1829.068781][T22522] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1829.134267][T22508] can: request_module (can-proto-3) failed. [ 1830.153531][T22527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4010'. [ 1830.506001][ T115] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1830.610812][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1830.636047][ T30] audit: type=1400 audit(1749481666.980:4140): avc: denied { lock } for pid=22540 comm="syz.0.4015" path="socket:[76469]" dev="sockfs" ino=76469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1831.021188][ T115] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1831.061061][ T115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1831.092614][ T115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1831.292501][ T115] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1832.774496][ T115] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1832.788067][ T115] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1832.797239][ T115] usb 3-1: Manufacturer: syz [ 1832.804387][ T115] usb 3-1: config 0 descriptor?? [ 1832.913001][ T30] audit: type=1400 audit(1749481669.240:4141): avc: denied { unlink } for pid=22559 comm="syz.6.4021" name="#6f" dev="tmpfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1833.017821][ T30] audit: type=1400 audit(1749481669.250:4142): avc: denied { create } for pid=22559 comm="syz.6.4021" name="#71" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1833.245600][ T30] audit: type=1400 audit(1749481669.250:4143): avc: denied { link } for pid=22559 comm="syz.6.4021" name="#71" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1833.442389][ T30] audit: type=1400 audit(1749481669.250:4144): avc: denied { rename } for pid=22559 comm="syz.6.4021" name="#72" dev="tmpfs" ino=2538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1836.724849][ T115] rc_core: IR keymap rc-hauppauge not found [ 1836.730787][ T115] Registered IR keymap rc-empty [ 1836.778168][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1836.835755][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1836.871561][ T115] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1836.903266][ T115] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input123 [ 1837.553995][T22581] can: request_module (can-proto-3) failed. [ 1837.594693][T21563] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1837.804781][T21563] usb 7-1: Using ep0 maxpacket: 32 [ 1837.840775][T21563] usb 7-1: config 1 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1837.853961][T21563] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1837.873982][T21563] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40 [ 1837.884718][T21563] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.892813][T21563] usb 7-1: Product: ⻰鰐Ùᥓ囃䴤딉⼥㷞ꋃ遗쁙 [ 1837.894728][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1837.900699][T21563] usb 7-1: Manufacturer: ఋ [ 1837.913144][T21563] usb 7-1: SerialNumber: ᥱ뻰鳶假壘ᾜ좯떏킔帪獅⏫異ꭑ罖㫯ꦝꄱ쾙產៞ᠲ貾礫ꪕ罹Dz臵郑Ύ䘉莜⑋ꙋﾔᨳ潁᭦ꇓ㍽闷覠ⷢ瞸쯈跾鸘⺱듾ꩰ삨耟Ŕ㔞鼧鞖뭏계들꫺杭∎Ỿ霼幀聘Ꮜҽ떍䞟䤶塝ఽ鵋⛥霩瀠佩佽愉籪傂ᶵ打 [ 1838.036741][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.074733][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.095115][T22590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4025'. [ 1838.103735][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.105409][T22592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.124718][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.155121][T22592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.173856][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.208236][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.265038][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.294649][ T5944] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1838.416854][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1838.565033][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1838.598881][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.968331][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.984728][ T115] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1839.017953][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.053867][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.116164][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.131106][ T115] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1839.133907][T22604] overlayfs: missing 'lowerdir' [ 1839.153680][ T115] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1839.163205][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.192610][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1839.218233][ T115] usb 3-1: USB disconnect, device number 120 [ 1839.234720][ T5944] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1839.328671][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1839.854832][ T5944] usb 4-1: device descriptor read/64, error -71 [ 1840.086894][ T5944] usb usb4-port1: attempt power cycle [ 1840.286335][T22577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.294885][ T30] audit: type=1400 audit(1749481676.540:4145): avc: denied { create } for pid=22603 comm="syz.2.4030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1840.357518][T22607] nvme_fabrics: missing parameter 'transport=%s' [ 1840.359417][T22577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.381954][T22607] nvme_fabrics: missing parameter 'nqn=%s' [ 1840.654675][ T5944] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1841.041900][T21563] usb 7-1: USB disconnect, device number 54 [ 1841.919191][ T5944] usb 4-1: device descriptor read/8, error -71 [ 1842.013634][T22631] netlink: 5364 bytes leftover after parsing attributes in process `syz.5.4036'. [ 1843.371956][ T5841] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1843.446909][T22638] FAULT_INJECTION: forcing a failure. [ 1843.446909][T22638] name failslab, interval 1, probability 0, space 0, times 0 [ 1843.584780][T22638] CPU: 1 UID: 0 PID: 22638 Comm: syz.3.4037 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1843.584808][T22638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1843.584819][T22638] Call Trace: [ 1843.584826][T22638] [ 1843.584834][T22638] dump_stack_lvl+0x16c/0x1f0 [ 1843.584869][T22638] should_fail_ex+0x512/0x640 [ 1843.584894][T22638] ? fs_reclaim_acquire+0xae/0x150 [ 1843.584917][T22638] ? tomoyo_encode2+0x100/0x3e0 [ 1843.584941][T22638] should_failslab+0xc2/0x120 [ 1843.584966][T22638] __kmalloc_noprof+0xd2/0x510 [ 1843.584987][T22638] tomoyo_encode2+0x100/0x3e0 [ 1843.585004][T22638] tomoyo_encode+0x29/0x50 [ 1843.585019][T22638] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1843.585037][T22638] ? tomoyo_profile+0x47/0x60 [ 1843.585056][T22638] tomoyo_path_number_perm+0x245/0x580 [ 1843.585069][T22638] ? tomoyo_path_number_perm+0x237/0x580 [ 1843.585082][T22638] ? __schedule+0x4/0x5de0 [ 1843.585097][T22638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1843.585112][T22638] ? find_held_lock+0x2b/0x80 [ 1843.585138][T22638] ? hook_file_ioctl_common+0x36/0x410 [ 1843.585150][T22638] ? hook_file_ioctl_common+0x66/0x410 [ 1843.585161][T22638] ? hook_file_ioctl_common+0x145/0x410 [ 1843.585175][T22638] ? __fget_files+0x20e/0x3c0 [ 1843.585193][T22638] security_file_ioctl+0x9b/0x240 [ 1843.585209][T22638] __x64_sys_ioctl+0xb7/0x210 [ 1843.585223][T22638] do_syscall_64+0xcd/0x4c0 [ 1843.585242][T22638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.585254][T22638] RIP: 0033:0x7fec1b18e929 [ 1843.585264][T22638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.585275][T22638] RSP: 002b:00007fec1c05e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1843.585286][T22638] RAX: ffffffffffffffda RBX: 00007fec1b3b5fa0 RCX: 00007fec1b18e929 [ 1843.585294][T22638] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1843.585300][T22638] RBP: 00007fec1c05e090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.585307][T22638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1843.585314][T22638] R13: 0000000000000000 R14: 00007fec1b3b5fa0 R15: 00007ffe0d786f08 [ 1843.585329][T22638] [ 1843.585453][T22638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1949.634570][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1949.641570][ C1] rcu: 0-...!: (4 ticks this GP) idle=0dcc/1/0x4000000000000000 softirq=131906/131907 fqs=2 [ 1949.653481][ C1] rcu: (detected by 1, t=10506 jiffies, g=110217, q=234 ncpus=2) [ 1949.661310][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1949.661345][ C0] NMI backtrace for cpu 0 [ 1949.661360][ C0] CPU: 0 UID: 0 PID: 22650 Comm: syz.2.4041 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1949.661382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1949.661392][ C0] RIP: 0010:__lock_acquire+0x622/0x1c90 [ 1949.661421][ C0] Code: 30 8b 4c 24 38 4c 8b 64 24 40 44 8b 15 c7 df 0f 0f 45 85 d2 75 23 85 db 0f 85 66 04 00 00 4c 89 ef 89 4c 24 08 e8 9e ac ff ff <8b> 4c 24 08 48 83 78 40 00 0f 84 a1 0a 00 00 0f b7 44 24 10 8b 74 [ 1949.661437][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000003 [ 1949.661452][ C0] RAX: ffffffff95d3aed8 RBX: 0000000000000002 RCX: 00000000fffffffe [ 1949.661464][ C0] RDX: 0000000000000000 RSI: ffff88806a9b2f80 RDI: ffff88806a9b2f80 [ 1949.661475][ C0] RBP: ffff88806a9b2440 R08: 0000000000000000 R09: 0000000000000001 [ 1949.661486][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806a9b2f30 [ 1949.661497][ C0] R13: ffff88806a9b2f80 R14: 0000000000000002 R15: 0000000000000001 [ 1949.661509][ C0] FS: 00007f27f668a6c0(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 1949.661530][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1949.661542][ C0] CR2: 00007fec1b37fd38 CR3: 000000004cc3d000 CR4: 00000000003526f0 [ 1949.661553][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1949.661563][ C0] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1949.661574][ C0] Call Trace: [ 1949.661582][ C0] [ 1949.661593][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1949.661614][ C0] lock_acquire+0x179/0x350 [ 1949.661637][ C0] ? advance_sched+0x688/0xc80 [ 1949.661659][ C0] ? advance_sched+0x62b/0xc80 [ 1949.661682][ C0] advance_sched+0x699/0xc80 [ 1949.661702][ C0] ? advance_sched+0x688/0xc80 [ 1949.661725][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1949.661744][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1949.661763][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 1949.661786][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1949.661803][ C0] ? read_tsc+0x9/0x20 [ 1949.661825][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1949.661849][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 1949.661875][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1949.661899][ C0] [ 1949.661905][ C0] [ 1949.661912][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1949.661931][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 1949.661955][ C0] Code: 90 90 90 90 f3 0f 1e fa 8b 05 66 5b 28 05 85 c0 74 20 8b 05 60 8c 28 05 85 c0 74 16 65 48 8b 05 28 0e 4d 08 8b 80 ec 0a 00 00 <85> c0 0f 94 c0 0f b6 c0 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 [ 1949.661970][ C0] RSP: 0018:ffffc9000c656d78 EFLAGS: 00000202 [ 1949.661983][ C0] RAX: 0000000000000000 RBX: ffffc9000c657540 RCX: ffffc9000c658001 [ 1949.661995][ C0] RDX: ffffc9000c657548 RSI: ffffc9000c657518 RDI: ffffc9000c656e00 [ 1949.662007][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1949.662017][ C0] R10: 0000000000000000 R11: 0000000000011fdd R12: ffffc9000c656e40 [ 1949.662028][ C0] R13: ffffc9000c656df0 R14: ffffc9000c657540 R15: ffffc9000c656e24 [ 1949.662048][ C0] unwind_next_frame+0x3de/0x20a0 [ 1949.662072][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 1949.662099][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1949.662121][ C0] arch_stack_walk+0x94/0x100 [ 1949.662139][ C0] ? shmem_alloc_folio+0x135/0x160 [ 1949.662158][ C0] stack_trace_save+0x8e/0xc0 [ 1949.662178][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1949.662200][ C0] ? __lock_acquire+0x622/0x1c90 [ 1949.662223][ C0] save_stack+0x160/0x1f0 [ 1949.662243][ C0] ? __pfx_save_stack+0x10/0x10 [ 1949.662262][ C0] ? post_alloc_hook+0x1c0/0x230 [ 1949.662280][ C0] ? get_page_from_freelist+0x1321/0x3890 [ 1949.662299][ C0] ? __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1949.662320][ C0] ? alloc_pages_mpol+0x1fb/0x550 [ 1949.662341][ C0] ? folio_alloc_mpol_noprof+0x36/0x2f0 [ 1949.662369][ C0] ? __lock_acquire+0x622/0x1c90 [ 1949.662394][ C0] __set_page_owner+0x91/0x550 [ 1949.662415][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 1949.662436][ C0] ? bad_range+0x261/0x4c0 [ 1949.662451][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1949.662476][ C0] post_alloc_hook+0x1c0/0x230 [ 1949.662496][ C0] get_page_from_freelist+0x1321/0x3890 [ 1949.662527][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 1949.662544][ C0] ? rcu_is_watching+0x12/0xc0 [ 1949.662565][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1949.662587][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1949.662615][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1949.662636][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1949.662653][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1949.662671][ C0] ? find_held_lock+0x2b/0x80 [ 1949.662694][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 1949.662716][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1949.662736][ C0] ? policy_nodemask+0xea/0x4e0 [ 1949.662759][ C0] alloc_pages_mpol+0x1fb/0x550 [ 1949.662782][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1949.662808][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1949.662833][ C0] shmem_alloc_folio+0x135/0x160 [ 1949.662851][ C0] shmem_alloc_and_add_folio+0x499/0xc20 [ 1949.662874][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1949.662895][ C0] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1949.662918][ C0] shmem_get_folio_gfp+0x67f/0x1600 [ 1949.662941][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1949.662962][ C0] ? filemap_map_pages+0xf6f/0x1680 [ 1949.662984][ C0] shmem_fault+0x1fe/0xa30 [ 1949.663004][ C0] ? __pfx_shmem_fault+0x10/0x10 [ 1949.663025][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1949.663050][ C0] __do_fault+0x10a/0x490 [ 1949.663072][ C0] __handle_mm_fault+0x3c2a/0x5490 [ 1949.663095][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 1949.663114][ C0] ? __pte_offset_map_lock+0x174/0x310 [ 1949.663137][ C0] ? find_held_lock+0x2b/0x80 [ 1949.663155][ C0] ? find_held_lock+0x2b/0x80 [ 1949.663177][ C0] ? follow_page_pte+0x3af/0x14c0 [ 1949.663205][ C0] handle_mm_fault+0x589/0xd10 [ 1949.663226][ C0] __get_user_pages+0x589/0x3b80 [ 1949.663254][ C0] ? __pfx_mt_find+0x10/0x10 [ 1949.663271][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 1949.663299][ C0] populate_vma_page_range+0x278/0x3a0 [ 1949.663318][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1949.663335][ C0] ? __pfx_find_vma_intersection+0x10/0x10 [ 1949.663359][ C0] ? do_mmap+0x69c/0x1210 [ 1949.663376][ C0] __mm_populate+0x1d8/0x380 [ 1949.663393][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1949.663411][ C0] ? up_write+0x1b2/0x520 [ 1949.663428][ C0] vm_mmap_pgoff+0x362/0x450 [ 1949.663452][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1949.663477][ C0] ? __x64_sys_futex+0x1e0/0x4c0 [ 1949.663499][ C0] ? __x64_sys_futex+0x1e9/0x4c0 [ 1949.663529][ C0] ksys_mmap_pgoff+0x7d/0x5c0 [ 1949.663552][ C0] ? __task_pid_nr_ns+0x17c/0x500 [ 1949.663577][ C0] __x64_sys_mmap+0x125/0x190 [ 1949.663601][ C0] do_syscall_64+0xcd/0x4c0 [ 1949.663626][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.663643][ C0] RIP: 0033:0x7f27f578e929 [ 1949.663658][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1949.663674][ C0] RSP: 002b:00007f27f668a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1949.663689][ C0] RAX: ffffffffffffffda RBX: 00007f27f59b5fa0 RCX: 00007f27f578e929 [ 1949.663701][ C0] RDX: b635773f06ebbee2 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1949.663712][ C0] RBP: 00007f27f5810b39 R08: ffffffffffffffff R09: 0000000000000000 [ 1949.663724][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1949.663735][ C0] R13: 0000000000000000 R14: 00007f27f59b5fa0 R15: 00007fffbbda8138 [ 1949.663753][ C0] [ 1949.664336][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g110217 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1950.422640][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1950.432604][ C1] rcu: RCU grace-period kthread stack dump: [ 1950.438486][ C1] task:rcu_preempt state:R running task stack:27368 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1950.451989][ C1] Call Trace: [ 1950.455261][ C1] [ 1950.458195][ C1] __schedule+0x116a/0x5de0 [ 1950.462715][ C1] ? __lock_acquire+0x622/0x1c90 [ 1950.467665][ C1] ? __pfx___schedule+0x10/0x10 [ 1950.472522][ C1] ? find_held_lock+0x2b/0x80 [ 1950.477200][ C1] ? schedule+0x2d7/0x3a0 [ 1950.481535][ C1] schedule+0xe7/0x3a0 [ 1950.485606][ C1] schedule_timeout+0x123/0x290 [ 1950.490455][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1950.495833][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1950.501128][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1950.506942][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1950.512413][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1950.517195][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1950.522492][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1950.527696][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1950.532638][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1950.537506][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1950.543318][ C1] rcu_gp_kthread+0x270/0x380 [ 1950.547999][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1950.553200][ C1] ? rcu_is_watching+0x12/0xc0 [ 1950.557965][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1950.563167][ C1] ? __kthread_parkme+0x19e/0x250 [ 1950.568197][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1950.573412][ C1] kthread+0x3c5/0x780 [ 1950.577483][ C1] ? __pfx_kthread+0x10/0x10 [ 1950.582071][ C1] ? rcu_is_watching+0x12/0xc0 [ 1950.586836][ C1] ? __pfx_kthread+0x10/0x10 [ 1950.591431][ C1] ret_from_fork+0x5d4/0x6f0 [ 1950.596462][ C1] ? __pfx_kthread+0x10/0x10 [ 1950.601052][ C1] ret_from_fork_asm+0x1a/0x30 [ 1950.605830][ C1] [ 1950.608844][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1950.615169][ C1] CPU: 1 UID: 0 PID: 1328 Comm: kworker/u8:7 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) [ 1950.625578][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1950.635629][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1950.642135][ C1] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 1950.648810][ C1] Code: e8 1a 17 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 b7 1b 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 1950.668426][ C1] RSP: 0018:ffffc90004a6f8a0 EFLAGS: 00000293 [ 1950.674509][ C1] RAX: 0000000000000000 RBX: ffff8880b8443ba0 RCX: ffffffff81b0011d [ 1950.682487][ C1] RDX: ffff888029120000 RSI: ffffffff81b000f9 RDI: 0000000000000005 [ 1950.690473][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 1950.698444][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 1950.706413][ C1] R13: 0000000000000003 R14: ffffed1017088775 R15: ffff8880b853cf40 [ 1950.714383][ C1] FS: 0000000000000000(0000) GS:ffff888124854000(0000) knlGS:0000000000000000 [ 1950.723310][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1950.729909][ C1] CR2: 00005649fd0bb008 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1950.737877][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1950.745840][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1950.753806][ C1] Call Trace: [ 1950.757082][ C1] [ 1950.760009][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1950.765044][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1950.771383][ C1] ? __pfx___text_poke+0x10/0x10 [ 1950.776317][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1950.781338][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 1950.786457][ C1] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 1950.792960][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 1950.798697][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1950.803744][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1950.809999][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1950.816250][ C1] ? find_held_lock+0x2b/0x80 [ 1950.820941][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1950.826926][ C1] jump_label_update+0x376/0x550 [ 1950.831870][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 1950.837762][ C1] static_key_enable+0x1a/0x20 [ 1950.842526][ C1] toggle_allocation_gate+0xfa/0x280 [ 1950.847816][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1950.853719][ C1] ? rcu_is_watching+0x12/0xc0 [ 1950.858489][ C1] process_one_work+0x9cf/0x1b70 [ 1950.863434][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1950.868815][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1950.874195][ C1] ? assign_work+0x1a0/0x250 [ 1950.878798][ C1] worker_thread+0x6c8/0xf10 [ 1950.883403][ C1] ? __kthread_parkme+0x19e/0x250 [ 1950.888432][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1950.893543][ C1] kthread+0x3c5/0x780 [ 1950.897617][ C1] ? __pfx_kthread+0x10/0x10 [ 1950.902207][ C1] ? rcu_is_watching+0x12/0xc0 [ 1950.906970][ C1] ? __pfx_kthread+0x10/0x10 [ 1950.911556][ C1] ret_from_fork+0x5d4/0x6f0 [ 1950.916150][ C1] ? __pfx_kthread+0x10/0x10 [ 1950.920738][ C1] ret_from_fork_asm+0x1a/0x30 [ 1950.925528][ C1]