last executing test programs: 3m2.615573763s ago: executing program 2 (id=481): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x121200, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b7000000000085100000020000008500000500"/48], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="200005000000000000000000000000000c000200"/32], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newtaction={0x50c, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0x4f8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x488, 0x2, 0x0, 0x0, {{0xb}, {0x45c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x4, 0xffff, 0x2, 0x101, 0x7, 0x6, 0x1, 0x8, 0x8, 0x3, 0x5, 0x4b, 0x7, 0x9, 0x3, 0x200, 0xff, 0x8, 0x8, 0x1, 0x9, 0x4, 0xa, 0xfff, 0xafa, 0x7, 0x5, 0x168, 0x5, 0x9b, 0x2, 0x9, 0xf8, 0x1, 0xa8fc, 0x1ff, 0x1, 0x6, 0xb7, 0x1, 0x6, 0xf8, 0x7, 0x2000, 0x6, 0x1, 0xe, 0x4, 0xa661, 0x1, 0xfffffffa, 0xd60d, 0x2199, 0x3, 0x3, 0x3, 0xa, 0x81, 0x5, 0xc8e7, 0x7, 0x80000000, 0xff9d667, 0x7f, 0x8000, 0x7fffffff, 0x2, 0x7, 0x9, 0x4, 0x7fff, 0xa, 0xfffffffd, 0xd1, 0x5a, 0xaba, 0x8, 0x1000, 0x10, 0x2, 0xe, 0x800, 0xc00, 0x8000, 0x5, 0x7, 0xf24f, 0x0, 0x5, 0x8, 0x9, 0x3, 0x6, 0x5, 0x8, 0x6, 0x8, 0x9, 0x100, 0x81, 0x4, 0x1000, 0x2, 0x80000001, 0x9, 0x8, 0x5, 0x8, 0xe8e, 0x1, 0x7, 0x4, 0xfff, 0xb, 0x8, 0x2, 0x7f, 0x9, 0xa, 0x48, 0x9, 0x9, 0x8001, 0x6, 0x7, 0x1, 0x3, 0xa68e, 0x10, 0x5, 0xa2, 0x40, 0x1, 0x6fb88d20, 0x4, 0xffffff23, 0x5, 0x1ff, 0x9, 0x1, 0xd, 0x8000, 0x4, 0x100, 0x3ff, 0x7, 0x9f43, 0xfff, 0x953c, 0x9, 0x6d9, 0xc3ce, 0x5, 0x9, 0x3, 0x1ff, 0x28c, 0x401, 0x0, 0x3ff, 0x1, 0xb, 0xfff, 0x0, 0x8001, 0x4268, 0x1, 0x2020, 0x2, 0x2, 0x0, 0x80, 0xfffffc01, 0xffff, 0x8, 0x5, 0x1, 0x1, 0xf6f, 0x18, 0xfffffff7, 0x5, 0x0, 0x8, 0x1, 0x200, 0xd, 0x6, 0x1, 0x4, 0x0, 0x401, 0xda, 0x8, 0xfffff801, 0x0, 0x80000001, 0x400, 0x7, 0xfffffffc, 0x8, 0x3, 0x2, 0xef, 0x80, 0x27a6, 0x0, 0xffffffff, 0xfffffff9, 0x1, 0x1, 0x5, 0xf8, 0x5, 0x4, 0x3, 0x2, 0x5, 0x10000, 0x84, 0xfffff8f2, 0x7, 0x7, 0x7, 0xd, 0x6, 0x3, 0x1ff, 0xfffffffa, 0xb98, 0xf, 0xffff000, 0x3, 0x7, 0x7, 0x4, 0x76e9, 0x2baf, 0x9, 0x3, 0xfffffffa, 0x10000, 0x1ff, 0x8, 0x78a, 0x80, 0x1, 0x1, 0xfffffff9, 0x0, 0xbf51, 0x30000, 0x5, 0x3, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x1, 0xf40, 0x0, 0x16a3, {0x0, 0x1, 0x2, 0x1, 0x8, 0x6}, {0x1, 0x2, 0x4, 0x6, 0x1, 0xd17}, 0xffff58ba, 0x6, 0x8001}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7cfd}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) getdents(0xffffffffffffffff, &(0x7f0000000000)=""/6, 0x7d) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@cpuid={0x2, 0x18, {0x1}}], 0x18}) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, r6, 0x0) 3m0.289890883s ago: executing program 2 (id=486): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSBRK(r0, 0x5427) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000500), 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000000000000000000000c90bde"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r6, 0x0, 0x0, 0x4890, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x6, 0x4}, 0x20) sendto$inet6(r4, &(0x7f0000000180)="31026f88a51b2fc127688b7ab910aa12651cfdfbcef09145e25c590ebf27682fa5a6af53e8079a73b23eed33c1ef0e", 0x2f, 0x240400d0, &(0x7f00000001c0)={0xa, 0x2, 0x4, @empty, 0x2}, 0x1c) 2m58.425387942s ago: executing program 2 (id=490): r0 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) 2m58.336583515s ago: executing program 2 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m58.015163361s ago: executing program 2 (id=494): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110c000000000085100000020000008500000005000000950000000000ff0f9500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2749baca85309be96d5a45bbb29ea06f9cbc7eea15bc1ee369d2707231280f0415df341ab76de90db5ff7ffffffd075b373f51be98db7efbbe8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c1f870adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eacb4389adbb47efb7b3f19046c7f1bd1bf56e58555d96137f95b3aacd74ed1c8a8676468cf2405e48723c6b1ff3698422f88ffed8617dd64330f4c38ba86e3b50da03f4b1e4808aa5c9e9546d7190747c6abc5beab28cec4"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x4004010) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0xfffffffb, 0x3, 0x3, 0x0, 0x84}) munlockall() sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3400000010000108000000000400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 2m56.692549393s ago: executing program 2 (id=498): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(0x0, 0x64842, 0x22) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x845}, 0x8004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000004000)={{0x3, 0x0, 0x80, {0x1000, 0x8080000, 0x3}}, "4928d0c4f99bc67e34ab21bbc43a9088d27f4525a83c417dcf936c285736e4f993fc2469f7d43c0b2fea3fa03d2491cd5dc63c157c0c7520f6def3eb27007176bff31a887154f5259e04a786ba9a4d12d3f988e26d6fe7a21c2dae82fdf6f85a8e11a6eef47bf7e1b5170f0b5ad1936013ea7172bf212fe6781b2227d2c824781e5984266a2455bd5945cd4c99de7a0596ac848ea52fa8ef70c9ea85d5bb47e999d4e2254f2f6efa26bbe857fd1b0fc23ce8e9f58b1cd2ca4688192c387c05f1a3f1655116e1daaf0bd20b2ace69dd254ba90479112e4a523b99980c47369615348d64a9dc6c99575928755976780f86fbd6348a6f5ac262533d7ba26880c665c9918923a31bd67202821827c37af813f5f6a6a67601ac04a56a1a4e2ad8e74c9e793724a1ae065382f80b86b300000000000000074408f8ec641b62a416d78f35dda4d997b8b4cc7e01c104d28bdbfa940efea8f4a1e1594dbf28dc18b7ab3d1dc1e3241651beefcea62dcd8ed784859eb1971666b1cda3fa41a8cc934fc5de5ca28e48c5d2aa8e43aca2a49cf4336296da909ee84d97ba2476ba4f59f8f952a3dfa1e76040f5607322aa8150d4519501c89ca37d4e429204e0d6a9a9807ab7e995b011f6e7de0c81e9774f5fded49c64172358864fc66c534a61929d1c96dbb1c51f9e2927ce670c55b724ee395bc9bd34415d0c3ececba01ba5d80fff355e9df7d9193d16d137bbcd9283f48f86033ad64d0dc35416a2bf3b717757117030e95c0f7ef0aa53de6361af7fc6092e5a260084963548a9495913e09eb50f58c48f9f6bedbfd5e6ba249a1618edf2a6f72acca5dfd9759e263ba688d73a7421242365d3f844bb1f15056e7bec16a93f7ebc63e78b6058cf8e823bce850272d11882c31b8feba3bdfc8e39e2e6f0241d22a598b70b543af2a16c3798c9a40e6af255b06302f3de7235beccfc75e9a60acc0eeae3ee5647e2128d21a4a778482fdfa7a8b6911f7430f7a913eb307a3de18da25a07703325cd5727a31049178357f2f6e83d8d7ddb0c20b22196fa7118212c873653c5cdd2173f31f6db8de03522f59ea05a918c7b38f5878972a3f31fc2724786ec65350fe018bfd4f9cbfffa8029f59f2764ef9d042175ca653fe13436bcd9eed521ac3afd8f78fc6ef7b55d1f63e78aaa6102cfa00371cf6c5716c496549bc32adb47813839f7a03c7f98b3756f88b3f049faafe8a0a853ce4c513288161ac90b4af9f0bfc48020bda6c4fdf6def8f488883a66ac51868dc2825112ec2d3cbfd0c3d3f39ba960a99b87fcc8b4520049724fc4090770a22e3c6b557f09ff00545957a3d438bff5e6a8152c95e3288ef10efa3f1536b0b8baee337ffdcecd903ebe1d43ec182a3952e07f803f1b3d2f31a2cd42deb31103ca47ad3e4be6edcd868726db149531966d70f0f26a2d832d081eb305c2328a61db782b6231cb24bd3a44d7e0ce0d3cd65d321c246dd7ab07f898e24c141c6201362459aad496e44119f8adb3b60a586bd65d035b7710e882f98cff487ba209e530205d311126dc9729e7689fd19a401e17a77c574c23334b75dc67f119b9f3068a23310e1fb7af46d6c1b39d1052a7db19cb255ec26271722a48fbf54dcf222630a084aff3571cde7c8abed1e3b00565672b7792aad77bcda8ac9098baadc04477c28879a2bfde1fa6284cc4622f42172b0576e076a42c64d44c9e12c3ea3d2e71d2bebf6c13a08c757d6e520fa4b8ec873ff2a550165191abcea9c100e9a6641b38d1a49d62c0d6e73df708357f20499c94ebbca83d3c9e30887a044d4a54fd93e25a96fd373c6e10f674fae7d5c0ab0683f174911172cc74cb644b10c6b650c18fad5a05fb79050f68cc081a6b430512803bdc01c68ccd7fa77689c0d6bc7902d1ce1b7da4971ed5bf59d160bbd300c0be01925407c47df1ba7431d8c621ca91bb9b9c19be6aba38da1276d23278c70055232b8e49ad4f6d3ab151a132c7714059ac5a957f3c60484bf536f2dc471e952755e1ce573fa689de8d8d71e722d5d1be423c28fe733ef783f412d1f4a56081f65b3cee1248910fef22fbac02d896e5784da8688dbff6701e468fd2886b5eec1797bcb54a0c9414feb8d5fe612a46ae0a9104927e5210626ea29d5da9495000a3359958f0630a493601000fa6224e8507e96ac6a83e90f8882c4f3c0d3f3aa6a90ef07a25c52d7c0a368a31988d7a9a3902ee430aa1b18b910e50633bff0931410eec75432baba8ddaaabbc2b6f0e4cc0be86c3eeeaf2c4394901d1a03c89c51c04ea1daf79eb20335d78c5ffc2c89a433e159c7ffcaedf0873c5c662531b2726923433aeec59fff7c1738ac6471bed675bf99d9dcf44b5246a7d0136ec479470d8fcc1783ff2596708abee688e3f7d5e27b206397c4e168f5f5b49e81a5e750ecbc4fa2f83b2047bf39e581e53c38d334e53def1620ad7190bdaffe93e6c13945ef5ae9bfe70c68b14d129891fd3d09b8504c69271259c3bdc0d4bfbbcf2075c4b1dedc013891cd758360f093295fb643052bd4e54fbe7600ef20c12dd969bef397a3cb00d65687a041ab13babeb5d462ee98415ba8cdf530494f04d7f35530e390aa01b4102e5ac4f361912e8a0e5e02bdc750ba2387d66c4ff8dc49bcfa9d0d573ef000c4489c170856fe297b183acf1c49623336a60b144d04539cb2614ab0af5665e0da908e504edcbd6ca1f234192d63a462e273601be4e410a6dbda4ae3e18739f6e9e6033c8019bd6f64619f42cacfc82364185ad6fcd29df2203715524497c97f518ea2f4dca1582c32dd54740448cfb85a7de93c4a0edc65904152f6615c51f4b0e656c99483a483533a20571a61344c3545262c43a4f4c427eb005d950f07e6eb76ec60aeaa1c81ff95591a86608e9a3c7aba44fedcde97d3024256d78a4d829c7a4221ec510afc63963c05ca7592f331f4c9171d157a452bc21d3b0b8835aa1be769c3d9cb2406249eaa0f5864d2bfa128ba3430e0290854dc71ee6dd14ae96aa1a3403e736b3ecedcd3cb4457f3e305d3558a311e681d1cbd97778e70afe979f1c967e282f9873b375cae06d01e58606ecaef9f0526095aff048c3a0ab425d9233d7a9349aa2d85fbb631ddf495b756d5775e32534cceba8bd47af6ac1c87946d5205df5142c689deb53687c73f37854859ea0074f6734e2476c712903b395630133cfe99a7e2690c9a47b01331e53361cbb5a40d0bc07f2e50a88f489e156e66743c11f843866a0f3bed19d4b200221bce9b9a943bf1be38789dffc45fa4bae9ec5af29edb727e943b884622640d6998e2f36f0ef99ce9909ff46606deba159bb886d7f1d526045c47e1ecea6436d2adb4ef474acbc73f7444ed047449c80f6f9ecb2361b146d1be8b757611ac5bbfb1395381d99715ed74b136a9eca94f9bd3c895d37013300071ee8b0838725409a85c9e5b4414180139955f5bce30c87bf835372f87d17fc6559c01d3790ac4ea21bf4482fa37d398ae36855e1756c8edfce09b9b36b6d9711bd6951a5d11fd5234eba254ac0ebf788c02de53fb6ba229f8a865cee4859d5f287f5aa899ca32233c334fcd18571746da9bed027feb55595bcc92a2769b0df0a633b2fd17121d76ed097918b3506fc94763bff152946a5a9004fae5a960a1920f8b7eff4c164455a130a5ef86435ec5b8c49292a766b032beb23118a68a1017bfa4b82ee3a053c56bb7fc2bccb5fd1114b9dcf0f4c15fadcf0e638953cccb6c889edb5d831e8632b9a49d97f1f98459141552ffc39438d5f1d315b49cc5faac298a7bbc4cefdb4454eae5bb4dc54ef22dacea133dd29e4b736c36598f5a48b6bb48edb43e8dd1f1362c66274880264c3833f9e32e5265669d61edb7ee28f6a07c698add520a6cac438721aa0343c38718835505ba468bff2b9cce254e2349f6c53a09be7243dc00e4e8476af4fde09c53a4b9556ccfa36550b6d6996735ed130d0c79d19627323ac0a9fef5ff355599c5113a6f1000000008f2e8ca6b89da3e7e7deb87209a19a2a47a057fec2caec608c69e0f2a757c8478de3f4f9778ac5b600084a5c49c9a120e64664e2010000008682400bd091eba4997d9f46f53200c4d01c3a1a2f4e37b6c6aa8f7c5558b03d5168e9fad37c9602f14a73c73746828849c5b7563c10dd1b8f54214ae39bf9b4c1de0828af6f566fcebc2d78073c99b3a0f89c48774b53bf052a371254699cd0b985d620e068d319ff14fc7e89f61d4c7bdba1b8f7a02269ff0f3c74f04167b61b3137786a1a64064e96a91bd33543575a39b8d881e50245bb9f812496634738c1495d7ef3abfc4462c07cf3c64b436286578225021b9c5149549c0d14ace8b59825a813861253f1b6c3535acc8b671605a3b977116f0eb566b5784c91af256414cd1d6e2c2b4125b0a48f9f5797bc735537f37d96c98a8b7c89b4796becf86f74d03048119f5f5ee9116dce93267bf722b654b22ca700bc3b2b08d44df1c67600cf326461d4f73706740525866e78a8f4405daa5e18d6aa0d5042d7fc24a20ed173f02ec1403bc93fa1de8aece417f4ff43cd432decc512ef9079f8d7d84ee4507008e95d722844a63ec074de0a3125bd6e5e070844946e62d9941c17ce885ea2abd8dafc85003f9a5b5809d49b03ff5dd6f505761e60b3b5a94a856fc3571e26fc6d9601659c3808213777c821cefcc79d8d465c13be5e0bc53505f52b0ec7a2248a674c5984737025d37f9d7fb3af4e46fbc9ba50d68c63d063879605fdf04c56fe5ddfd061c78248095b80301c7905b0b541aced3a90a92753de7d605df7beeb8dbf78cc1f96f9e52027d83d1cc83612eab3bc344c69fdd9706123ecc2cc0bc5a7ed9d935390eac7d1c171f0d8ad55b8423b05fbff3fd85d72c7f073ce0412d53304022660638d014aba62c2daa2171cd03af86360220fa38325fa80cb9e77404f9dd419905f8f8ed76e2ad79d1f018b8a37379429eeef35ba16cc8e48838da66831849e4685b9a18f94bca53ba4ce4fc5de65fea575cd8e2e6fe22152c20976f817c244e5e25525a16340338ce064f288819ebd6daf302cbe730844bffc13788aa243dd81086ec28482ac9ac3c10435cee085be65e41e5724220dec37bdda5c5729042f7f42e2161d66046ca0bfc869dec2632ea9eda9319d51261a1a29c0c3e34f411190da141e68eb96f235d3c0f3b4eedf2571c51026022d50333ded8b03c870c43fb85cab49b945621462719755ed7b72276f674721b0e367fdca5face6243b0553cace8cb2dced417bb5a65a324f734764e1d957c14a347d72174b7578ed54cbf27b44d5d5cb8a98622460f04e9dee33efeb0c2fcc3063f55a418444373dc4ea51c74a5a4954d6fcae9def05a829451488c35527a2e03073469120bcc24f09aba82c913adf7dbee8dbf82b11eec7681faca2570b9acbdf24b512971289aff6dfa6c5b1439e8f9707245b8e84721a357b1eda0708ae5ddfdbb56f5ec50492a4d68a358344d10cce6d935cfa15f88254979b30e5de1b1e3f9e7b35c18ec4317c4faa8abcac073d62862c104638886508d9a95de95f878e8ebe158fb4875487fa57a9e0c19c9c8ad390d8ca43ea7b4f1f6e221f89be72cc024fbe95938e105a9d30b4d35ca1d7cbd737457a2bbca4a50fc9c5cb97ee23acc10e6953f3c22369615efa211626c0bf23a5df95040e4283b5fbb88f0f9765bf935b59d4153800", "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"}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x897, 0x4) connect$pppoe(r2, 0x0, 0x3b) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102384, 0xfffffd9a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 2m51.054009606s ago: executing program 1 (id=514): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mkdir(&(0x7f0000000140)='./control\x00', 0x5) (fail_nth: 1) 2m50.664010586s ago: executing program 1 (id=516): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010}) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x1, 0x2, 0x2, 0x7, r1}) r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000180)={0x7, 0x2da}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000380)={0x10003, 0x1, 0x2000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x1, r6}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000300)={0x1, 0x3, 0xfffffffffffff50c, 0x6}) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) 2m49.464520447s ago: executing program 1 (id=518): pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r1 = syz_open_dev$video4linux(0x0, 0x5, 0x40c00) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) 2m48.253055429s ago: executing program 1 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40010) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a36d485c282cf3051a0bf200"/39], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000017580af8486fc3db5d5a16452c0000e8c1d66b267a33757d7a1e", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r9, 0x4, 0x13, &(0x7f0000000000), 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r9, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r10, 0x0, 0x0, 0x6}]) io_destroy(r9) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040), 0x4) getpeername(r4, 0x0, &(0x7f00000000c0)) socket(0x400000000010, 0x3, 0x0) r11 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x4, &(0x7f00000004c0)=ANY=[]) 2m44.512661926s ago: executing program 1 (id=532): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000000)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045519, &(0x7f0000000480)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000340)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x0, 0x9}) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r4 = dup(r3) fallocate(r4, 0x0, 0x6, 0x100000000073ff5) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_matches\x00') socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 2m43.276144717s ago: executing program 1 (id=534): pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r1 = syz_open_dev$video4linux(0x0, 0x5, 0x40c00) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) 2m39.139931628s ago: executing program 32 (id=498): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = open(0x0, 0x64842, 0x22) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = gettid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x98, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x845}, 0x8004) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000004000)={{0x3, 0x0, 0x80, {0x1000, 0x8080000, 0x3}}, "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", "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"}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x897, 0x4) connect$pppoe(r2, 0x0, 0x3b) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @broadcast, 'vxcan1\x00'}}, 0x1e) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102384, 0xfffffd9a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 2m28.212301317s ago: executing program 33 (id=534): pipe2$9p(&(0x7f0000000240), 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r1 = syz_open_dev$video4linux(0x0, 0x5, 0x40c00) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) 14.890757596s ago: executing program 3 (id=880): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) r0 = socket$netlink(0x10, 0x3, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x4000) close(0xffffffffffffffff) sendmmsg(r0, 0x0, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x262282, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)=0x9, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000440)={0x3, 0x1, &(0x7f0000000240)=""/41, &(0x7f0000000280)=""/239, &(0x7f0000000380)=""/192, 0x100000}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'vlan1\x00', @broadcast}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = fsopen(&(0x7f0000000540)='hostfs\x00', 0x0) fsetxattr$security_ima(r4, &(0x7f0000000240), 0x0, 0x0, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1200000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 13.609268209s ago: executing program 4 (id=883): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@private=0xa010100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x8, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0xffffffff}, {0x0, 0x0, 0x1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x0, 0x0, 0x0, 0xfffffffe, 0x4000000}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 12.412558856s ago: executing program 3 (id=886): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) close_range(r3, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x58595556, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) 11.491496969s ago: executing program 4 (id=888): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x468c, 0x10, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x163, 0x0) r7 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r7, 0xffff) close(0x3) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000001c0)={r7, 0x1, 0x0, 0x8000}) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x0, 0x0, 0x180000}, &(0x7f0000000340), &(0x7f0000000280)) 10.263278577s ago: executing program 4 (id=891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xen_mc_entry_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000791218000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5, 0x0, 0xa}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) 9.876555004s ago: executing program 5 (id=892): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x28c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r2, @ANYBLOB="20d100000000000014002b8008000100", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.583875658s ago: executing program 5 (id=895): socket$rds(0x15, 0x5, 0x0) syz_open_dev$admmidi(&(0x7f0000000280), 0x2, 0x0) unshare(0x40000000) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x11, 0x800000003, 0x0) memfd_create(&(0x7f0000000000)='%.%!\x00', 0x5) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno\x00', 0x5) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r0, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) 9.134843164s ago: executing program 4 (id=896): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x2000030a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003580)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40010) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="a36d485c282cf3051a0bf200"/39], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYRESOCT=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000017580af8486fc3db5d5a16452c0000e8c1d66b267a33757d7a1e", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) io_getevents(0x0, 0x4, 0x13, &(0x7f0000000000), 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r9, 0x0, 0x0, 0x6}]) io_destroy(0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) getpeername(r4, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x4, &(0x7f00000004c0)=ANY=[]) 9.040088314s ago: executing program 5 (id=897): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa6, 0xd, 0x95, 0x20, 0x1199, 0x68a2, 0x154b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x13, 0x0, 0x0, 0xb3, 0xd9, 0xbe}}, {{0x9, 0x4, 0xbd, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xe4, &(0x7f0000000700)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x4, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x7}, [@selector_unit={0x9, 0x24, 0x5, 0x3, 0x32, "b4055b0c"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x1000, 0xd, "f4"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x5, 0x4, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x51b, 0x9, "664757a7d781d6c3"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x5, 0x6, "ce"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x4, 0x1, 0x2, "d0a114320341b0"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5, 0x40, 0x4d, {0x7, 0x25, 0x1, 0x81, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xb, 0xffff, 0x10, "41ee86a0c7"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3a, 0x7c, "8dfe44824edd73"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1d, 0x1, 0xfe, 0x22, "78e28d42a0c48d2878"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x2, 0x80, 0x5, {0x7, 0x25, 0x1, 0x82, 0xf7, 0xa0f}}}}}}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x201, 0x27, 0x4, 0x47, 0x10, 0x9}, 0x4e, &(0x7f0000000840)={0x5, 0xf, 0x4e, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x40, 0x6, 0x904, 0xf000, 0x857e, [0xff00ff, 0xc00f, 0x3f00, 0xffc0, 0xc000, 0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0xba, "23599618be0b1503d3675010cebe8826"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0xf, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8}]}, 0x2, [{0xbe, &(0x7f00000008c0)=@string={0xbe, 0x3, "d1d3ea3cb120a8d64af3a95abd52bb8b47a0bfd0189f484920f4a545f02a72e50b19ea345766b0702e7a05f1d928ab44080b5bc81e0e6ab88cd4f58cf08d7ad1630ec94cd5fbcb6169f82132560d1c0a484412ca2b737252060305db9fb7d495ea1bf501fce140aa700cb20e036242b47167c08a9ca96778e35ed63e80f52fc6e40217c06d44139b59d4496b8d62cb6c3922dd7ce5e9eefda7598f8f2539e119cb1ec6a12daef808a7163587b7b2bf47d3d81f17f18ff08de819adcc"}}, {0x72, &(0x7f0000000980)=@string={0x72, 0x3, "257f545ac3477441e9248b18cc0e5de52d92418fc64d934ca1bb4e776691411873146420acd034efa46461e7bf4d590f93bfb67bd3c0d58552b2e98abfecb066345aca0d2291827c306a585263cc2b2ce57e2b2b37c06f604ae926393c833db0565c321bcc702255bf551900bc20ed92"}}]}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000040)=""/48, &(0x7f0000000080)=0x30) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)) close(0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x8, 0x337, {{0x1b, 0x4, 0x3, 0x2, 0x6c, 0x68, 0x0, 0x8, 0x4, 0x0, @multicast2, @local, {[@cipso={0x86, 0x56, 0x1, [{0x2, 0xb, "b4f129d3dd8dcae682"}, {0x6, 0xa, "dfddccc4d9478b40"}, {0x5, 0xc, "77fb98a23fe8618985c4"}, {0x5, 0x12, "4d0868938fe4e37333308e93dbb8edc5"}, {0x4, 0x3, "e1"}, {0x0, 0xa, "4cab5fd3154dc789"}, {0x7, 0x10, "340ebfe9fbe5925bbd0974f43542"}]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000006c0)={&(0x7f0000000380), 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x78, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x78}}, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000c00)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001c00)={{r8, 0x9b, 0x8000000000000001, 0x7, 0x6, 0x7, 0x7fff, 0x8, 0xcb5, 0xcdf7, 0x2, 0x9, 0x7fffffffffffffff, 0x9, 0xf9}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) syz_usb_connect$cdc_ecm(0x6, 0x102, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf0, 0x1, 0x1, 0x39, 0x20, 0x7, [{{0x9, 0x4, 0x0, 0x50, 0x3, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "b581df0700"}, {0x5, 0x24, 0x0, 0xc000}, {0xd, 0x24, 0xf, 0x1, 0xe072ccdc, 0xff, 0xf7e0, 0x6}, [@dmm={0x7, 0x24, 0x14, 0xbd, 0x8}, @ncm={0x6, 0x24, 0x1a, 0x0, 0x10}, @mdlm_detail={0x93, 0x24, 0x13, 0x5, "4868821a54c6fa2dea9d52ed91f782c2f7ccb8a6e62d8a00cdff0c837f01f46feeae45cce548f174af35077a7bb4df4577b01309be8b0be727ca4ea7baa2f90840d1197a729c39dcf0e340466b6ef9460e9a1a09df99269a27a9923ffd02e663bf7dec3cdbacdd5bba439822836f2eb0bb4dedfbe9fabab20acbc290cdd44be7e6418fe81048342d372c289070a79b"}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x80, 0x0, 0x2f}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x8, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x75, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x0, 0x6}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x7, 0x1, 0x2, 0x50, 0x4}, 0x32, &(0x7f00000001c0)={0x5, 0xf, 0x32, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0xcf, 0x0, 0xe, [0x3f, 0xc018, 0xc0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x8, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x5, 0x8, 0x6, 0xe}]}, 0x4, [{0x102, &(0x7f0000000200)=@string={0x102, 0x3, "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"}}, {0x84, &(0x7f0000000a40)=@string={0x84, 0x3, "d48b525dfcab6e07283a89afc6d6297bccb2c0a17147a1457546243410884eecf10f5bb5f6f2494bf652a2d7c953ff086b5c1e768a864cb0416acbbced964403c990abb17f2eafd532b1aaf589396ad9824f2f28c9d0ce490cc892ecf02d973b81f8a34ca020533b34f54c68c57da5b2b1b786aca6a938c0f08ecdde27e0f3e7747f"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x407}}]}) 6.083080497s ago: executing program 3 (id=903): landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.364297533s ago: executing program 3 (id=904): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0x0, 0xe0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f00000002c0), {[{{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, [0xf6aeb56fa28e63ad, 0xffffffff, 0xffffff00, 0xff000000], [0xffffffff, 0xffffff00, 0x0, 0xffffffff], 'veth1_vlan\x00', 'hsr0\x00', {}, {0xff}, 0x5c, 0x3, 0x2, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x3, 0xbcd63e85e2b5594d}, {0xffffffffffffffff, 0x4, 0x1}, {0x4, 0x4}, 0x101, 0x8001}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xff000000], [0x0, 0xff000000, 0x0, 0xff], 'vcan0\x00', 'gre0\x00', {}, {}, 0x3b, 0x9, 0x5, 0x48}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e24, 0x4e24], [0x4e22, 0x4e24], 0x2}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r4, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000300)={0x335, @time={0x4, 0x2}, 0xfd, {0x69, 0x5}}) tkill(r3, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000480)={0x1, 0x3, 0x0, 'queue1\x00', 0x8}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x6}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = io_uring_setup(0x5f3e, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x3}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000008c0)=@getqdisc={0x44, 0x26, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0x4, 0x9}, {0xdf972ab90bfb2d5, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000180)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r8, 0x701}, 0x14}}, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 5.321276652s ago: executing program 6 (id=905): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c00, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f00004ad000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r9, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x5, 0x1000, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000080)={0x48, 0x8, r10, 0x8100, 0x81, 0xd90, &(0x7f0000000700)="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", 0x4}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0xb8, r11, 0x1, 0x70bd2b, 0x25dfdc00, {}, [{{@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x0, 0x3, 0x3}}, {0x0, 0xb, 0x9}, {0x0, 0x11, 0x2}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24040800}, 0x4040000) 5.226556613s ago: executing program 0 (id=906): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) r0 = socket$netlink(0x10, 0x3, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) listen(0xffffffffffffffff, 0x4000) close(0xffffffffffffffff) sendmmsg(r0, 0x0, 0x0, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x262282, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000004c0)=0x9, 0x4) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000440)={0x3, 0x1, &(0x7f0000000240)=""/41, &(0x7f0000000280)=""/239, &(0x7f0000000380)=""/192, 0x100000}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'vlan1\x00', @broadcast}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = fsopen(&(0x7f0000000540)='hostfs\x00', 0x0) fsetxattr$security_ima(r4, &(0x7f0000000240), 0x0, 0x0, 0x2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1200000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 4.34175698s ago: executing program 6 (id=907): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) prlimit64(r1, 0x4, &(0x7f0000000180)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x5}, 0x20) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2000000000000021, 0x2, 0xfd) sched_setparam(r1, &(0x7f0000000280)=0x80) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x114, 0x16, 0x1, 0x2000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000, 0xfffffffffffffffc}, {0x0, 0x4, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@lifetime_val={0x24, 0x9, {0x1, 0x9, 0x7fff, 0x8000}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) syz_open_dev$vim2m(&(0x7f0000000300), 0x1, 0x2) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x7ff}}, {@cachetag={'cachetag', 0x3d, '/proc/stat\x00'}}, {@cachetag={'cachetag', 0x3d, '9\x9e\x9f'}}, {@access_any}, {@cache_none}, {@nodevmap}, {@cache_none}]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000340)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007e006c0e821c95485a7b0000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.230307765s ago: executing program 0 (id=908): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0xfffffffd) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x2) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) rmdir(&(0x7f00000001c0)='./file1\x00') recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 4.098612691s ago: executing program 4 (id=909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf000000720a00ff000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) 3.420557818s ago: executing program 3 (id=910): mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x7, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000740)={0x0, 0x0, 0x1000}, &(0x7f0000000f80)={'enc=', 'oaep', ' hash=', {'sha1_mb\x00'}}, &(0x7f0000002200), &(0x7f0000002300)=""/4096) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.355467555s ago: executing program 5 (id=911): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000300)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) preadv2(r4, &(0x7f0000000880)=[{&(0x7f0000000100)=""/199, 0xc7}], 0x1, 0x7, 0x3, 0x1) 3.279831584s ago: executing program 6 (id=912): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4009, 0x2, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0xe763, r3}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="480002804436"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.960486076s ago: executing program 0 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000bf000000720a00ff000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="50010101"], 0x4) 2.788232767s ago: executing program 4 (id=914): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x4, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "5ceb827d", {0x1, 0x978, 0x5a, 0x9, 0x4}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000001f40)={0x38, r3, 0x211, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc, &(0x7f0000000f40)={[{0x8, 0x4e00, "155038aad51c1e2b"}]}) 2.706756957s ago: executing program 6 (id=915): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x468c, 0x10, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004cc0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x163, 0x0) memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) close(0x3) 1.86448029s ago: executing program 5 (id=916): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000380)='\x00'}, 0x30) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x20) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f00000002c0)=0x10, 0x800) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000a00000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r3, @ANYBLOB="20d100000000000014002b8008000100", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.842313157s ago: executing program 0 (id=917): io_uring_setup(0x2471, 0x0) io_uring_setup(0x2a5a, &(0x7f0000000600)={0x0, 0x52c4, 0x4000, 0xffffffff, 0x51}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_getscheduler(0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_secret(0x0) pwrite64(r3, &(0x7f0000000000)="db1033f8c89ad399bc10ed501da24e64794d6e8abdfb003284ee187f8946c39cc107407e2fb719fc4d1af5e249af71885b4945f5b133a6c9e74bf25f4207feca9079cd0dd20634b3487da5cc3a", 0x4d, 0x1caf) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 1.71359741s ago: executing program 6 (id=918): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0xfffffffd) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x2) writev(0xffffffffffffffff, &(0x7f0000001500), 0x0) connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file1\x00'}, 0x6e) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) rmdir(&(0x7f00000001c0)='./file1\x00') recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 767.937812ms ago: executing program 0 (id=919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x1c, 0x7, 0x6, 0x101, 0xfffffc00, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 765.844987ms ago: executing program 5 (id=920): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x8, &(0x7f0000000240)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) r4 = epoll_create1(0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14010000160000040000000200000000ac1e0101000000000000000000000000fe88000000000000000000000000000100000000200000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@access_user}, {@msize={'msize', 0x3d, 0x7ff}}, {@cachetag={'cachetag', 0x3d, '/proc/stat\x00'}}, {@cachetag={'cachetag', 0x3d, '9\x9e\x9f'}}, {@afid={'afid', 0x3d, 0x1}}, {@cache_none}, {@nodevmap}, {@cache_none}, {@posixacl}, {@cache_fscache}, {@cache_mmap}]}}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000340)=0x3) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000007e0000009500f2cb1a79bfa672dc76d142000000a1d609"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 650.499149ms ago: executing program 6 (id=921): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)={0x0, 0xc}, 0x0, 0x0}) syz_usb_control_io$uac1(r3, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x10, 0xb1, {0xb1, 0xc, "fc9daa3b4371fa48658f2393c4ac0bff4157df81567afd5a2bc8f49a72645802083d68779caed896cc25ac487a53403c2684660a95d8d56a3d51a9ddb427d85161a4fe8a9d82c2c4df6476f75d5169784c5a1e3bd3f2235a4085d1f47c5a6b15d9a230cbd46c848fcbbcbdc07d910c3fd9ef7d15f36feb67ce45891e600edb23381b93551c75a4a9b7d1431d3284b83c019114e62feb5a269434c67644ae78393e00a8cf95a0bf09bb4eb45ca99e6d"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x40, 0x17, 0xfa, "3b089f3ddab31140012dc3dbf6925854ca71c4c4ab0634d3d993958305da59b3c46d29e405148cea5c9655ea684c4cc81a0f2551b4c19c49c6c586059f6ac7d1540f0b0c0ddbd38f8138f004b2e01c7109404c2d236671b5a52612db60487c0673ee357709b162ceec9edf30cb2c051803a3a596cf432a802a2f98d78ec9b2c420f518a8332aa0a2ea82573128eb1a8085c084b7a8b61c578b0cd711949ed7bd9662580633c73403eae871afa2c7e6f0b9c3bae4c84cf9ae340efa807a7c5db3259289ffe1316750eaaf422f5b5db463172a2bb101d384f559da97c4fcf4314eb98f8f919276e52e40e1c50a31ef5bf2e035a282de3746922eae"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0xf3}, &(0x7f0000000440)={0x20, 0x81, 0x3, "6c44d5"}, &(0x7f0000000500)={0x20, 0x82, 0x2, "22fd"}, &(0x7f0000000540)={0x20, 0x83, 0x3, "9bb251"}, &(0x7f0000000580)={0x20, 0x84, 0x3, "571351"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "b8c3a2"}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x1, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x2000}, 0x4) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 140.388634ms ago: executing program 3 (id=922): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f00000001c0)=0x3) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 0s ago: executing program 0 (id=923): r0 = socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0xfcbe}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) r5 = accept4(r0, &(0x7f00000000c0)=@xdp, &(0x7f00000012c0)=0x80, 0x81800) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/79, 0x4f}, {&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000280)=""/135, 0x87}, {&(0x7f0000000340)=""/53, 0x35}], 0x4, &(0x7f00000003c0)=""/223, 0xdf}, 0x3ff}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000680)=""/199, 0xc7}], 0x3}, 0x8000}, {{&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/120, 0x78}, {&(0x7f00000009c0)=""/116, 0x74}, {&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000b40)=""/57, 0x39}, {&(0x7f0000000b80)=""/19, 0x13}], 0x6, &(0x7f0000000c40)=""/220, 0xe2}, 0x8001}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000d40)=""/23, 0x17}, {&(0x7f0000000d80)=""/207, 0xcf}, {&(0x7f0000000e80)=""/85, 0x55}, {&(0x7f0000000f00)=""/10, 0xa}, {&(0x7f0000000f40)=""/63, 0x3f}, {&(0x7f0000000f80)=""/98, 0xffffffffffffff0f}, {&(0x7f0000001000)=""/172, 0xac}], 0x7, &(0x7f0000001140)=""/175, 0xaf}, 0xffc}, {{&(0x7f0000001200)=@nl, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)=""/167, 0xa7}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/90, 0x5a}, {&(0x7f0000001400)=""/14, 0xe}], 0x4, &(0x7f0000001480)=""/180, 0xb4}, 0x3}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001540)=""/186, 0xba}, {&(0x7f0000001600)=""/91, 0x5b}, {&(0x7f0000001680)=""/241, 0xf1}, {&(0x7f0000001780)=""/31, 0x1f}, {&(0x7f00000017c0)=""/172, 0xac}, {&(0x7f0000001880)=""/10, 0xa}], 0x6, &(0x7f0000001940)=""/189, 0xbd}, 0xc}], 0x6, 0x42, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001280), 0x20000, 0x0) write(r0, &(0x7f0000000040)="08000000018000", 0x7) kernel console output (not intermixed with test programs): config failed, can't get hub status (err -71) [ 211.276055][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 211.282420][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 211.322224][ T10] usb 3-1: USB disconnect, device number 14 [ 212.313484][ T5900] gp8psk_fe: Frontend attached [ 212.589941][ T5900] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 212.598025][ T5900] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 213.023147][ T30] audit: type=1400 audit(1748966957.292:607): avc: denied { create } for pid=7254 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.055317][ T5900] gp8psk: usb in 138 operation failed. [ 213.142669][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 213.883284][ T5900] gp8psk: found Genpix USB device pID = 203 (hex) [ 213.981903][ T5900] usb 5-1: USB disconnect, device number 17 [ 214.087728][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 214.240461][ T30] audit: type=1400 audit(1748966958.512:608): avc: denied { connect } for pid=7254 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 214.526863][ T5870] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 214.721237][ T5870] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 214.891459][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.925663][ T5870] usb 2-1: config 0 descriptor?? [ 215.689497][ T5870] ath6kl: Failed to submit usb control message: -71 [ 215.696472][ T5870] ath6kl: unable to send the bmi data to the device: -71 [ 215.703610][ T5870] ath6kl: Unable to send get target info: -71 [ 215.710335][ T5870] ath6kl: Failed to init ath6kl core: -71 [ 215.720132][ T5870] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 215.732926][ T5870] usb 2-1: USB disconnect, device number 14 [ 219.172056][ T30] audit: type=1400 audit(1748966963.052:609): avc: denied { bind } for pid=7305 comm="syz.4.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 219.191245][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.237187][ T30] audit: type=1400 audit(1748966963.052:610): avc: denied { name_bind } for pid=7305 comm="syz.4.365" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 219.257926][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.392900][ T30] audit: type=1400 audit(1748966963.052:611): avc: denied { node_bind } for pid=7305 comm="syz.4.365" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 220.168840][ T5906] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.332230][ T7328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.369'. [ 220.649869][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 220.871680][ T5906] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 220.890185][ T5906] usb 4-1: config 0 has no interface number 0 [ 220.907471][ T5906] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.919192][ T5906] usb 4-1: config 0 interface 85 has no altsetting 0 [ 220.934384][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 221.097393][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.105626][ T5906] usb 4-1: Product: syz [ 221.110024][ T5906] usb 4-1: Manufacturer: syz [ 221.114618][ T5906] usb 4-1: SerialNumber: syz [ 221.122129][ T5906] usb 4-1: config 0 descriptor?? [ 221.878924][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.372'. [ 222.207295][ T7341] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.375'. [ 222.990083][ T5906] appletouch 4-1:0.85: Geyser mode initialized. [ 223.206247][ T5906] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12 [ 223.546927][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.377'. [ 225.670893][ T5900] usb 4-1: USB disconnect, device number 12 [ 225.875090][ T30] audit: type=1400 audit(1748966969.962:612): avc: denied { connect } for pid=7359 comm="syz.4.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 226.380279][ T30] audit: type=1400 audit(1748966970.172:613): avc: denied { ioctl } for pid=7359 comm="syz.4.381" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.411386][ T5900] appletouch 4-1:0.85: input: appletouch disconnected [ 226.650060][ T7368] netlink: 164 bytes leftover after parsing attributes in process `syz.1.380'. [ 226.957778][ T30] audit: type=1400 audit(1748966970.832:614): avc: denied { create } for pid=7357 comm="syz.1.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 227.288039][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 227.356592][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 227.988004][ T7383] 9pnet_fd: Insufficient options for proto=fd [ 228.960994][ T7393] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 229.469643][ T7393] netlink: 'syz.3.390': attribute type 4 has an invalid length. [ 229.482101][ T7393] netlink: 192 bytes leftover after parsing attributes in process `syz.3.390'. [ 230.243534][ T30] audit: type=1400 audit(1748966974.472:615): avc: denied { write } for pid=7395 comm="syz.0.391" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 230.426704][ T30] audit: type=1400 audit(1748966974.682:616): avc: denied { write } for pid=7403 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 230.955954][ T7419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.396'. [ 232.469939][ T5900] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 232.740213][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 232.809058][ T5900] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 232.868770][ T5900] usb 4-1: config 0 has no interface number 0 [ 232.958959][ T5900] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.970105][ T5900] usb 4-1: config 0 interface 85 has no altsetting 0 [ 233.632406][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 233.659857][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.671531][ T5900] usb 4-1: Product: syz [ 233.676787][ T5900] usb 4-1: Manufacturer: syz [ 233.684638][ T5900] usb 4-1: SerialNumber: syz [ 233.692950][ T30] audit: type=1400 audit(1748966977.962:617): avc: denied { mount } for pid=7444 comm="syz.1.403" name="/" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 233.820093][ T30] audit: type=1400 audit(1748966978.062:618): avc: denied { mounton } for pid=7444 comm="syz.1.403" path="/83/file0" dev="configfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 233.843493][ T5900] usb 4-1: config 0 descriptor?? [ 233.903114][ T30] audit: type=1400 audit(1748966978.062:619): avc: denied { create } for pid=7444 comm="syz.1.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 234.681183][ T974] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.693070][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.709216][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.890880][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 234.898091][ T974] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.935640][ T974] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.963543][ T974] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 234.992961][ T974] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 235.091996][ T5900] appletouch 4-1:0.85: Geyser mode initialized. [ 235.093887][ T974] usb 2-1: Product: syz [ 235.100524][ T5900] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input13 [ 235.102890][ T974] usb 2-1: Manufacturer: syz [ 235.221874][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.408'. [ 236.594384][ T974] hub 2-1:4.0: USB hub found [ 237.690264][ T5900] usb 4-1: USB disconnect, device number 13 [ 237.884473][ T5900] appletouch 4-1:0.85: input: appletouch disconnected [ 237.897112][ T974] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 238.234540][ T30] audit: type=1400 audit(1748966982.172:620): avc: denied { unmount } for pid=5816 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 238.826694][ T7487] hub 8-0:1.0: USB hub found [ 238.839905][ T7487] hub 8-0:1.0: 1 port detected [ 239.341528][ T974] usb 2-1: USB disconnect, device number 15 [ 240.582791][ T7506] FAULT_INJECTION: forcing a failure. [ 240.582791][ T7506] name failslab, interval 1, probability 0, space 0, times 0 [ 240.595547][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.0.418 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 240.595570][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.595581][ T7506] Call Trace: [ 240.595587][ T7506] [ 240.595594][ T7506] dump_stack_lvl+0x16c/0x1f0 [ 240.595625][ T7506] should_fail_ex+0x512/0x640 [ 240.595644][ T7506] ? fs_reclaim_acquire+0xae/0x150 [ 240.595665][ T7506] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 240.595685][ T7506] should_failslab+0xc2/0x120 [ 240.595711][ T7506] __kmalloc_noprof+0xd2/0x510 [ 240.595742][ T7506] tomoyo_realpath_from_path+0xc2/0x6e0 [ 240.595769][ T7506] tomoyo_check_open_permission+0x2ab/0x3c0 [ 240.595796][ T7506] ? rcu_is_watching+0x12/0xc0 [ 240.595819][ T7506] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 240.595846][ T7506] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.595899][ T7506] ? do_raw_spin_lock+0x12c/0x2b0 [ 240.595927][ T7506] tomoyo_file_open+0x6b/0x90 [ 240.595950][ T7506] security_file_open+0x84/0x1e0 [ 240.595972][ T7506] do_dentry_open+0x596/0x1c10 [ 240.596005][ T7506] vfs_open+0x82/0x3f0 [ 240.596026][ T7506] path_openat+0x1de4/0x2cb0 [ 240.596061][ T7506] ? __pfx_path_openat+0x10/0x10 [ 240.596087][ T7506] ? __lock_acquire+0xb8a/0x1c90 [ 240.596116][ T7506] do_filp_open+0x20b/0x470 [ 240.596142][ T7506] ? __pfx_do_filp_open+0x10/0x10 [ 240.596187][ T7506] ? alloc_fd+0x471/0x7d0 [ 240.596219][ T7506] do_sys_openat2+0x11b/0x1d0 [ 240.596236][ T7506] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.596256][ T7506] ? __pfx___schedule+0x10/0x10 [ 240.596284][ T7506] ? __fget_files+0x20e/0x3c0 [ 240.596314][ T7506] __x64_sys_openat+0x174/0x210 [ 240.596333][ T7506] ? __pfx___x64_sys_openat+0x10/0x10 [ 240.596350][ T7506] ? ksys_write+0x1ac/0x250 [ 240.596383][ T7506] do_syscall_64+0xcd/0x4c0 [ 240.596401][ T7506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.596419][ T7506] RIP: 0033:0x7f5b3218e969 [ 240.596433][ T7506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.596450][ T7506] RSP: 002b:00007f5b33021038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.596467][ T7506] RAX: ffffffffffffffda RBX: 00007f5b323b6160 RCX: 00007f5b3218e969 [ 240.596479][ T7506] RDX: 0000000000008002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 240.596489][ T7506] RBP: 00007f5b33021090 R08: 0000000000000000 R09: 0000000000000000 [ 240.596499][ T7506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.596509][ T7506] R13: 0000000000000001 R14: 00007f5b323b6160 R15: 00007fffd93550c8 [ 240.596533][ T7506] [ 240.596554][ T7506] ERROR: Out of memory at tomoyo_realpath_from_path. [ 241.059040][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 244.698680][ T7530] FAULT_INJECTION: forcing a failure. [ 244.698680][ T7530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.779812][ T7530] CPU: 1 UID: 0 PID: 7530 Comm: syz.4.424 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 244.779838][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.779848][ T7530] Call Trace: [ 244.779854][ T7530] [ 244.779861][ T7530] dump_stack_lvl+0x16c/0x1f0 [ 244.779892][ T7530] should_fail_ex+0x512/0x640 [ 244.779915][ T7530] _copy_from_user+0x2e/0xd0 [ 244.779936][ T7530] copy_msghdr_from_user+0x98/0x160 [ 244.779963][ T7530] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 244.780002][ T7530] ___sys_sendmsg+0xfe/0x1d0 [ 244.780029][ T7530] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.780053][ T7530] ? __lock_acquire+0x622/0x1c90 [ 244.780111][ T7530] __sys_sendmsg+0x16d/0x220 [ 244.780137][ T7530] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.780189][ T7530] do_syscall_64+0xcd/0x4c0 [ 244.780208][ T7530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.780225][ T7530] RIP: 0033:0x7fee0518e969 [ 244.780239][ T7530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.780255][ T7530] RSP: 002b:00007fee05ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.780272][ T7530] RAX: ffffffffffffffda RBX: 00007fee053b5fa0 RCX: 00007fee0518e969 [ 244.780283][ T7530] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 244.780293][ T7530] RBP: 00007fee05ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.780303][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.780313][ T7530] R13: 0000000000000000 R14: 00007fee053b5fa0 R15: 00007ffff943e818 [ 244.780339][ T7530] [ 245.310696][ T5900] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 245.624571][ T7539] hub 8-0:1.0: USB hub found [ 245.630567][ T7539] hub 8-0:1.0: 1 port detected [ 246.169951][ T30] audit: type=1400 audit(1748966990.102:621): avc: denied { read } for pid=7534 comm="syz.4.427" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 246.422892][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 246.470714][ T5900] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 246.669831][ T5900] usb 4-1: config 0 has no interface number 0 [ 246.675946][ T5900] usb 4-1: config 0 interface 5 has no altsetting 0 [ 247.174080][ T30] audit: type=1400 audit(1748966991.022:622): avc: denied { listen } for pid=7542 comm="syz.4.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 247.239307][ T5900] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice= 5.28 [ 247.263866][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.288244][ T5900] usb 4-1: Product: syz [ 247.362786][ T5900] usb 4-1: Manufacturer: syz [ 247.367505][ T5900] usb 4-1: SerialNumber: syz [ 247.409559][ T5900] usb 4-1: config 0 descriptor?? [ 247.432756][ T5870] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 247.983244][ T7556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.034207][ T30] audit: type=1400 audit(1748966992.232:623): avc: denied { read } for pid=7551 comm="syz.4.431" path="socket:[18185]" dev="sockfs" ino=18185 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 248.332221][ T5870] usb 3-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 248.634791][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.679852][ T5900] sierra 4-1:0.5: Sierra USB modem converter detected [ 248.761151][ T5900] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 248.800292][ T5900] usb 4-1: USB disconnect, device number 14 [ 248.892874][ T5900] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 248.946270][ T30] audit: type=1400 audit(1748966993.152:624): avc: denied { validate_trans } for pid=7560 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 248.966529][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.983065][ T7559] block nbd1: shutting down sockets [ 249.106906][ T7563] nbd1: detected capacity change from 0 to 4294967296 [ 249.665146][ T30] audit: type=1400 audit(1748966993.372:625): avc: denied { create } for pid=7560 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 249.688752][ T5870] pegasus 3-1:254.0: probe with driver pegasus failed with error -32 [ 249.782887][ T7567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.435'. [ 249.890333][ T5900] sierra 4-1:0.5: device disconnected [ 250.007104][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.3.436'. [ 250.186021][ T5870] usb 3-1: USB disconnect, device number 15 [ 250.710146][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 253.378865][ T7606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.597992][ T7611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.744771][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.755033][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 254.765796][ T10] usb 1-1: can't read configurations, error -71 [ 254.867413][ T30] audit: type=1400 audit(1748966999.132:626): avc: denied { write } for pid=7613 comm="syz.4.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 254.888329][ T7615] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.924048][ T7615] qnx6: unable to set blocksize [ 255.608151][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617633][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.768198][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.448'. [ 257.641422][ T7647] netlink: 'syz.3.456': attribute type 1 has an invalid length. [ 258.088215][ T30] audit: type=1400 audit(1748967002.342:627): avc: denied { write } for pid=7639 comm="syz.2.457" path="socket:[18380]" dev="sockfs" ino=18380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.346575][ T30] audit: type=1400 audit(1748967002.402:628): avc: denied { create } for pid=7639 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 258.369611][ T30] audit: type=1400 audit(1748967002.402:629): avc: denied { write } for pid=7639 comm="syz.2.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 259.493830][ T7659] nbd0: detected capacity change from 0 to 4294967296 [ 259.527378][ T7656] block nbd0: shutting down sockets [ 259.533667][ T5932] blk_print_req_error: 24 callbacks suppressed [ 259.533680][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 259.678556][ T5932] buffer_io_error: 23 callbacks suppressed [ 259.678570][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.179936][ T55] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.189647][ T55] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.211350][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.221712][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.229906][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.239280][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.247364][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.257725][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.289551][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.302961][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.312334][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.326703][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.336797][ T7671] 9pnet_fd: Insufficient options for proto=fd [ 260.344995][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.410007][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.417869][ T5932] ldm_validate_partition_table(): Disk read failed. [ 260.424996][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.466678][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.512743][ T5932] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 260.524901][ T5932] Buffer I/O error on dev nbd0, logical block 0, async page read [ 260.918990][ T7676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.466'. [ 261.160416][ T5932] Dev nbd0: unable to read RDB block 0 [ 261.166759][ T5932] nbd0: unable to read partition table [ 261.286976][ T5932] ldm_validate_partition_table(): Disk read failed. [ 261.346905][ T5932] Dev nbd0: unable to read RDB block 0 [ 261.357980][ T30] audit: type=1400 audit(1748967005.622:630): avc: denied { create } for pid=7679 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 261.377903][ T5932] nbd0: unable to read partition table [ 261.670926][ T30] audit: type=1400 audit(1748967005.652:631): avc: denied { ioctl } for pid=7679 comm="syz.0.467" path="socket:[18814]" dev="sockfs" ino=18814 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 262.525042][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.467'. [ 262.634340][ T7685] vlan2: entered promiscuous mode [ 262.639444][ T7685] bridge0: entered promiscuous mode [ 262.644947][ T7685] vlan2: entered allmulticast mode [ 262.650660][ T7685] bridge0: entered allmulticast mode [ 264.281766][ T30] audit: type=1400 audit(1748967008.532:632): avc: denied { ioctl } for pid=7687 comm="syz.1.469" path="socket:[18836]" dev="sockfs" ino=18836 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 264.341685][ T7701] nbd0: detected capacity change from 0 to 4294967296 [ 264.369451][ T7702] block nbd0: shutting down sockets [ 264.374468][ T5833] ldm_validate_partition_table(): Disk read failed. [ 264.459981][ T5833] Dev nbd0: unable to read RDB block 0 [ 264.780407][ T5833] blk_print_req_error: 36 callbacks suppressed [ 264.780446][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.811999][ T5833] buffer_io_error: 35 callbacks suppressed [ 264.813039][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.826912][ T7710] 9pnet_fd: Insufficient options for proto=fd [ 264.839152][ T5833] I/O error, dev nbd0, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.848671][ T5833] Buffer I/O error on dev nbd0, logical block 3, async page read [ 264.856837][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.868326][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.873135][ T7712] veth0_vlan: left promiscuous mode [ 264.880111][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.885844][ T7712] veth0_vlan: entered promiscuous mode [ 264.897317][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 264.984117][ T5833] nbd0: unable to read partition table [ 265.082896][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.146434][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.179351][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.239803][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.466466][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.560296][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.578307][ T7723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 265.618167][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.660495][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.670045][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 265.678541][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.717281][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.735015][ T5833] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 265.744299][ T5833] Buffer I/O error on dev nbd0, logical block 0, async page read [ 265.752574][ T5833] ldm_validate_partition_table(): Disk read failed. [ 265.759650][ T5833] Dev nbd0: unable to read RDB block 0 [ 265.766044][ T5833] nbd0: unable to read partition table [ 266.361157][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 266.461517][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.895754][ T10] usb 4-1: Product: syz [ 266.919409][ T10] usb 4-1: Manufacturer: syz [ 266.933131][ T10] usb 4-1: SerialNumber: syz [ 266.936932][ T7735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.080837][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 267.105520][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 267.787381][ T974] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 269.020373][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 269.032557][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.042771][ T974] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.090701][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.100037][ T9] usb 4-1: Service connection timeout for: 256 [ 269.106364][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 269.125535][ T974] usb 2-1: config 0 descriptor?? [ 269.213336][ T7755] 9pnet_fd: Insufficient options for proto=fd [ 269.302463][ T5824] usb 4-1: USB disconnect, device number 15 [ 269.801846][ T9] ath9k_htc: Failed to initialize the device [ 269.909062][ T5824] usb 4-1: ath9k_htc: USB layer deinitialized [ 269.919574][ T974] usbhid 2-1:0.0: can't add hid device: -71 [ 269.949350][ T974] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 269.967858][ T974] usb 2-1: USB disconnect, device number 16 [ 270.152963][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 270.197862][ T7767] netlink: 32 bytes leftover after parsing attributes in process `syz.0.491'. [ 270.618093][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 270.633361][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 270.641877][ T10] usb 5-1: config 0 has no interface number 0 [ 270.648182][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.659489][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 270.668461][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 270.877527][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.975294][ T10] usb 5-1: Product: syz [ 271.016507][ T10] usb 5-1: Manufacturer: syz [ 271.059247][ T10] usb 5-1: SerialNumber: syz [ 271.144871][ T10] usb 5-1: config 0 descriptor?? [ 271.369559][ T7782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.494'. [ 271.893965][ T7760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.929885][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 271.949921][ T7760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.122765][ T24] usb 1-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b [ 272.587431][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.828785][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 272.843472][ T24] pegasus 1-1:254.0: probe with driver pegasus failed with error -71 [ 272.857418][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14 [ 272.921613][ T24] usb 1-1: USB disconnect, device number 15 [ 273.000205][ T7797] nbd1: detected capacity change from 0 to 4294967296 [ 273.014393][ T7798] block nbd1: shutting down sockets [ 273.050036][ T5900] usb 5-1: USB disconnect, device number 18 [ 273.050168][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 273.124385][ T55] blk_print_req_error: 12 callbacks suppressed [ 273.124395][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.139700][ T55] buffer_io_error: 11 callbacks suppressed [ 273.139707][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.153430][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.372704][ T5900] appletouch 5-1:0.85: input: appletouch disconnected [ 273.398859][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.516804][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.526927][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.534828][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.543876][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.555752][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.567699][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.587729][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.624141][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.652190][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.668740][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.689309][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.748398][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 273.792472][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.868530][ T5833] ldm_validate_partition_table(): Disk read failed. [ 273.899725][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.904273][ T7810] smc: net device bond0 applied user defined pnetid SYZ2 [ 273.911593][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.926081][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.935302][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.958816][ T5833] Dev nbd1: unable to read RDB block 0 [ 273.996360][ T5833] nbd1: unable to read partition table [ 274.026138][ T5833] ldm_validate_partition_table(): Disk read failed. [ 274.102771][ T5900] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 274.104643][ T5833] Dev nbd1: unable to read RDB block 0 [ 274.316134][ T5833] nbd1: unable to read partition table [ 274.439813][ T115] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 274.485473][ T5900] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 274.496064][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.536584][ T5900] usb 1-1: Product: syz [ 274.552322][ T5900] usb 1-1: Manufacturer: syz [ 274.556929][ T5900] usb 1-1: SerialNumber: syz [ 275.438166][ T5900] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 275.482988][ T115] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 275.623155][ T48] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 275.661577][ T115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 275.769250][ T115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 275.883028][ T115] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.084118][ T115] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.896300][ T974] usb 1-1: USB disconnect, device number 16 [ 276.904291][ T115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.918119][ T115] usb 5-1: config 0 descriptor?? [ 276.940101][ T115] usb 5-1: can't set config #0, error -71 [ 276.955835][ T115] usb 5-1: USB disconnect, device number 19 [ 277.152796][ T48] usb 1-1: Service connection timeout for: 256 [ 277.188330][ T48] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 277.234741][ T48] ath9k_htc: Failed to initialize the device [ 277.251090][ T974] usb 1-1: ath9k_htc: USB layer deinitialized [ 277.409931][ T7838] FAULT_INJECTION: forcing a failure. [ 277.409931][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 277.431885][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.1.514 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 277.431909][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.431919][ T7838] Call Trace: [ 277.431925][ T7838] [ 277.431931][ T7838] dump_stack_lvl+0x16c/0x1f0 [ 277.431963][ T7838] should_fail_ex+0x512/0x640 [ 277.431981][ T7838] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 277.432007][ T7838] should_failslab+0xc2/0x120 [ 277.432033][ T7838] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 277.432054][ T7838] ? fput+0x70/0xf0 [ 277.432070][ T7838] ? getname_flags.part.0+0x4c/0x550 [ 277.432092][ T7838] getname_flags.part.0+0x4c/0x550 [ 277.432114][ T7838] __x64_sys_mkdir+0xd8/0x140 [ 277.432143][ T7838] do_syscall_64+0xcd/0x4c0 [ 277.432161][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.432178][ T7838] RIP: 0033:0x7fb3c738e969 [ 277.432192][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.432208][ T7838] RSP: 002b:00007fb3c51f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 277.432225][ T7838] RAX: ffffffffffffffda RBX: 00007fb3c75b5fa0 RCX: 00007fb3c738e969 [ 277.432235][ T7838] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000140 [ 277.432244][ T7838] RBP: 00007fb3c51f6090 R08: 0000000000000000 R09: 0000000000000000 [ 277.432253][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.432263][ T7838] R13: 0000000000000000 R14: 00007fb3c75b5fa0 R15: 00007fff1fcd94b8 [ 277.432285][ T7838] [ 277.588984][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.011001][ T7852] block nbd0: shutting down sockets [ 279.190241][ T7854] nbd1: detected capacity change from 0 to 4294967296 [ 279.308778][ T30] audit: type=1326 audit(1748967023.572:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f318e969 code=0x7fc00000 [ 279.336124][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'. [ 279.415486][ T30] audit: type=1326 audit(1748967023.682:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f11f318e969 code=0x7fc00000 [ 279.466555][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 279.756294][ T5825] block nbd1: Receive control failed (result -104) [ 279.765674][ T7854] block nbd1: shutting down sockets [ 279.777924][ C0] blk_print_req_error: 24 callbacks suppressed [ 279.777939][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.793157][ C0] buffer_io_error: 23 callbacks suppressed [ 279.793164][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.807691][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.819949][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.838914][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.848592][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.858578][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.867714][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.885645][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.896649][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.908120][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.917315][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.926637][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.936220][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.944067][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'. [ 279.953330][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.963482][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 279.971448][ T5833] ldm_validate_partition_table(): Disk read failed. [ 279.982645][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 279.992926][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.004040][ T5833] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 280.013494][ T5833] Buffer I/O error on dev nbd1, logical block 0, async page read [ 280.034705][ T5833] Dev nbd1: unable to read RDB block 0 [ 280.047013][ T5833] nbd1: unable to read partition table [ 280.076730][ T30] audit: type=1326 audit(1748967024.322:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7855 comm="syz.3.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f318e969 code=0x7fc00000 [ 280.111360][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 280.137511][ T5833] ldm_validate_partition_table(): Disk read failed. [ 280.177261][ T5833] Dev nbd1: unable to read RDB block 0 [ 280.196154][ T5833] nbd1: unable to read partition table [ 280.301039][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.826138][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 282.060724][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.081171][ T10] usb 5-1: config 0 descriptor?? [ 282.212204][ T48] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 282.561463][ T974] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 282.601322][ T48] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 282.611055][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.752557][ T48] usb 2-1: config 0 descriptor?? [ 282.820043][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 282.852239][ T974] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 282.861336][ T974] usb 1-1: config 0 has no interface number 0 [ 282.867634][ T974] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 282.883812][ T10] lg-g15 0003:046D:C222.0001: collection stack underflow [ 282.891746][ T10] lg-g15 0003:046D:C222.0001: item 0 4 0 12 parsing failed [ 282.899325][ T10] lg-g15 0003:046D:C222.0001: probe with driver lg-g15 failed with error -22 [ 282.910345][ T974] usb 1-1: config 0 interface 85 has no altsetting 0 [ 282.921927][ T974] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 282.939828][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.954038][ T974] usb 1-1: Product: syz [ 282.962001][ T974] usb 1-1: Manufacturer: syz [ 282.966654][ T974] usb 1-1: SerialNumber: syz [ 282.977779][ T974] usb 1-1: config 0 descriptor?? [ 283.064802][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.079149][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.109200][ T10] usb 5-1: USB disconnect, device number 20 [ 283.191788][ T48] ath6kl: Failed to submit usb control message: -71 [ 283.200266][ T48] ath6kl: unable to send the bmi data to the device: -71 [ 283.207475][ T48] ath6kl: Unable to send get target info: -71 [ 283.222143][ T48] ath6kl: Failed to init ath6kl core: -71 [ 283.237289][ T48] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 283.264745][ T48] usb 2-1: USB disconnect, device number 17 [ 283.419352][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.428167][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.656684][ T974] appletouch 1-1:0.85: Geyser mode initialized. [ 283.722766][ T974] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input15 [ 283.952557][ T974] usb 1-1: USB disconnect, device number 17 [ 284.599172][ T7904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.531'. [ 284.646537][ T974] appletouch 1-1:0.85: input: appletouch disconnected [ 285.799383][ T7913] nbd1: detected capacity change from 0 to 4294967296 [ 286.309064][ T5825] block nbd1: Receive control failed (result -104) [ 286.399336][ T7915] ip6t_srh: unknown srh invflags 7863 [ 286.484423][ T7924] loop2: detected capacity change from 0 to 7 [ 286.500452][ T7924] Dev loop2: unable to read RDB block 7 [ 286.506182][ T7924] loop2: AHDI p1 p2 [ 286.510369][ T7924] loop2: partition table partially beyond EOD, truncated [ 286.518532][ T7924] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 286.753671][ T7924] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 286.760296][ T7924] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 286.768257][ T7924] vhci_hcd vhci_hcd.0: Device attached [ 289.115302][ T7925] vhci_hcd: connection closed [ 289.142095][ T12] vhci_hcd: stop threads [ 289.182302][ T12] vhci_hcd: release socket [ 289.192532][ T12] vhci_hcd: disconnect device [ 289.249907][ T48] usb 40-1: enqueue for inactive port 0 [ 289.357973][ T5932] udevd[5932]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 289.757041][ T48] usb usb40-port1: attempt power cycle [ 290.297575][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.310563][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.320029][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.335715][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.349515][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.453476][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.464861][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.475453][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.539635][ T7948] veth0_vlan: left promiscuous mode [ 290.549314][ T7948] veth0_vlan: entered promiscuous mode [ 290.764583][ T48] usb usb40-port1: unable to enumerate USB device [ 290.771884][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.910778][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.937998][ T30] audit: type=1400 audit(1748967035.192:636): avc: denied { mounton } for pid=7943 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 291.066407][ T7953] hub 8-0:1.0: USB hub found [ 291.071851][ T7953] hub 8-0:1.0: 1 port detected [ 291.791918][ T7959] nbd3: detected capacity change from 0 to 4294967296 [ 291.847936][ T7960] block nbd3: shutting down sockets [ 291.876483][ T7943] chnl_net:caif_netlink_parms(): no params data found [ 292.143722][ T7966] hub 8-0:1.0: USB hub found [ 292.149082][ T7966] hub 8-0:1.0: 1 port detected [ 292.842412][ T30] audit: type=1400 audit(1748967037.112:637): avc: denied { read write } for pid=7968 comm="syz.0.547" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 292.866484][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.879869][ T30] audit: type=1400 audit(1748967037.112:638): avc: denied { open } for pid=7968 comm="syz.0.547" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 292.907482][ T7943] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.920067][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.927218][ T7943] bridge_slave_0: entered allmulticast mode [ 292.933792][ T50] Bluetooth: hci5: command tx timeout [ 292.940567][ T7943] bridge_slave_0: entered promiscuous mode [ 292.951003][ T7943] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.958141][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.965342][ T7943] bridge_slave_1: entered allmulticast mode [ 292.971976][ T7943] bridge_slave_1: entered promiscuous mode [ 293.145350][ T7974] netlink: 5280 bytes leftover after parsing attributes in process `syz.3.548'. [ 294.383050][ T7943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.414470][ T30] audit: type=1400 audit(1748967038.682:639): avc: denied { connect } for pid=7976 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.423932][ T7943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.460513][ T30] audit: type=1400 audit(1748967038.682:640): avc: denied { write } for pid=7976 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 294.479796][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.639216][ T7943] team0: Port device team_slave_0 added [ 294.655340][ T7943] team0: Port device team_slave_1 added [ 295.010670][ T50] Bluetooth: hci5: command tx timeout [ 295.696945][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.709807][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.735685][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.758454][ T7943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.770100][ T7943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.777032][ T7943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.802871][ C0] vkms_vblank_simulate: vblank timer overrun [ 295.812482][ T7943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.929379][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.552'. [ 295.953486][ T7943] hsr_slave_0: entered promiscuous mode [ 295.961411][ T7943] hsr_slave_1: entered promiscuous mode [ 295.967515][ T7943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.975868][ T7943] Cannot create hsr debugfs directory [ 296.884555][ T7943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.435508][ T50] Bluetooth: hci5: command tx timeout [ 297.556452][ T7943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.594083][ T7943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.886141][ T7943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.970214][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.559'. [ 298.233895][ T7943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.279062][ T7943] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.933659][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.940762][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.265987][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.273081][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.534170][ T50] Bluetooth: hci5: command tx timeout [ 299.668915][ T8028] netlink: 32 bytes leftover after parsing attributes in process `syz.3.563'. [ 299.751139][ T30] audit: type=1400 audit(1748967044.012:641): avc: denied { read write } for pid=8033 comm="syz.4.564" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 299.820384][ T8034] FAULT_INJECTION: forcing a failure. [ 299.820384][ T8034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.860044][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.4.564 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 299.860067][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.860077][ T8034] Call Trace: [ 299.860083][ T8034] [ 299.860089][ T8034] dump_stack_lvl+0x16c/0x1f0 [ 299.860120][ T8034] should_fail_ex+0x512/0x640 [ 299.860143][ T8034] _copy_to_user+0x32/0xd0 [ 299.860166][ T8034] simple_read_from_buffer+0xcb/0x170 [ 299.860191][ T8034] proc_fail_nth_read+0x197/0x270 [ 299.860216][ T8034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.860241][ T8034] ? rw_verify_area+0xcf/0x680 [ 299.860261][ T8034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 299.860282][ T8034] vfs_read+0x1e4/0xc60 [ 299.860304][ T8034] ? __pfx___mutex_lock+0x10/0x10 [ 299.860315][ T8034] ? __pfx_vfs_read+0x10/0x10 [ 299.860332][ T8034] ? __fget_files+0x20e/0x3c0 [ 299.860351][ T8034] ksys_read+0x12a/0x250 [ 299.860365][ T8034] ? __pfx_ksys_read+0x10/0x10 [ 299.860383][ T8034] do_syscall_64+0xcd/0x4c0 [ 299.860394][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.860404][ T8034] RIP: 0033:0x7fee0518d37c [ 299.860413][ T8034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 299.860423][ T8034] RSP: 002b:00007fee05ff7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 299.860433][ T8034] RAX: ffffffffffffffda RBX: 00007fee053b5fa0 RCX: 00007fee0518d37c [ 299.860440][ T8034] RDX: 000000000000000f RSI: 00007fee05ff70a0 RDI: 0000000000000004 [ 299.860446][ T8034] RBP: 00007fee05ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.860452][ T8034] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 299.860457][ T8034] R13: 0000000000000000 R14: 00007fee053b5fa0 R15: 00007ffff943e818 [ 299.860470][ T8034] [ 299.863495][ T30] audit: type=1400 audit(1748967044.012:642): avc: denied { open } for pid=8033 comm="syz.4.564" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 300.164960][ T30] audit: type=1400 audit(1748967044.012:643): avc: denied { ioctl } for pid=8033 comm="syz.4.564" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 300.212560][ T7943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.275264][ T30] audit: type=1400 audit(1748967044.432:644): avc: denied { bind } for pid=8036 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 300.487500][ T8047] cgroup: none used incorrectly [ 300.524304][ T8047] netlink: 164 bytes leftover after parsing attributes in process `syz.0.566'. [ 300.970868][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 301.100480][ T8048] mmap: syz.4.568 (8048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 301.127368][ T30] audit: type=1400 audit(1748967045.362:645): avc: denied { map } for pid=8043 comm="syz.4.568" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 301.132928][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 301.171838][ T30] audit: type=1400 audit(1748967045.362:646): avc: denied { write execute } for pid=8043 comm="syz.4.568" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 301.259367][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.285259][ T10] usb 4-1: Product: syz [ 301.291293][ T10] usb 4-1: Manufacturer: syz [ 301.299686][ T10] usb 4-1: SerialNumber: syz [ 301.312365][ T10] usb 4-1: config 0 descriptor?? [ 301.388320][ T5825] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.396583][ T5825] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.420801][ T7943] veth0_vlan: entered promiscuous mode [ 301.426470][ T5825] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.435859][ T5825] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.444471][ T5825] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.461529][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.484725][ T7943] veth1_vlan: entered promiscuous mode [ 301.522500][ T10] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 301.572423][ T7943] veth0_macvtap: entered promiscuous mode [ 301.586733][ T7943] veth1_macvtap: entered promiscuous mode [ 301.625191][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.627645][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 301.645943][ T7943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.654046][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.665876][ T24] usb 1-1: Product: syz [ 301.689603][ T24] usb 1-1: Manufacturer: syz [ 301.721772][ T24] usb 1-1: SerialNumber: syz [ 301.753558][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 301.768087][ T48] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 301.849681][ T7943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.874843][ T7943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.886286][ T7943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.897590][ T7943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.923081][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 301.931116][ T10] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 302.100805][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.130839][ T24] usb 4-1: USB disconnect, device number 16 [ 302.152434][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.168676][ T8055] bridge_slave_0: entered allmulticast mode [ 302.189485][ T8055] bridge_slave_0: entered promiscuous mode [ 302.214486][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.226530][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.234691][ T8055] bridge_slave_1: entered allmulticast mode [ 302.245139][ T8055] bridge_slave_1: entered promiscuous mode [ 302.311259][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.326613][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.347415][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.358875][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.425697][ T8055] team0: Port device team_slave_0 added [ 302.433008][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.445833][ T8055] team0: Port device team_slave_1 added [ 302.448814][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.475201][ T24] usb 1-1: USB disconnect, device number 18 [ 302.516457][ T30] audit: type=1400 audit(1748967046.782:647): avc: denied { mounton } for pid=7943 comm="syz-executor" path="/root/syzkaller.dM9jLg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 302.543852][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.575676][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.604387][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.618952][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.628480][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.654734][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.755829][ T8055] hsr_slave_0: entered promiscuous mode [ 302.796927][ T8055] hsr_slave_1: entered promiscuous mode [ 302.836158][ T8055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.863073][ T8055] Cannot create hsr debugfs directory [ 303.055716][ T48] usb 1-1: Service connection timeout for: 256 [ 303.099529][ T48] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 303.492237][ T5825] Bluetooth: hci6: command tx timeout [ 303.712858][ T48] ath9k_htc: Failed to initialize the device [ 303.723401][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 303.962797][ T8082] netlink: 108 bytes leftover after parsing attributes in process `syz.0.572'. [ 304.836388][ T8055] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 304.937869][ T8055] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 305.570600][ T5825] Bluetooth: hci6: command tx timeout [ 305.592012][ T8055] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 305.604228][ T8055] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 306.720678][ T8108] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.578'. [ 307.424134][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.446724][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.459268][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.466377][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.485918][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.492991][ T6540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.669929][ T5825] Bluetooth: hci6: command tx timeout [ 307.968927][ T8055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.022397][ T8055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.800472][ T50] Bluetooth: hci6: command tx timeout [ 309.836338][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.013852][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 310.241306][ T30] audit: type=1400 audit(1748967054.482:648): avc: denied { getopt } for pid=8130 comm="syz.5.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 310.559876][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 311.136673][ T8055] veth0_vlan: entered promiscuous mode [ 311.181212][ T8055] veth1_vlan: entered promiscuous mode [ 311.206513][ T8055] veth0_macvtap: entered promiscuous mode [ 311.293070][ T8055] veth1_macvtap: entered promiscuous mode [ 311.323996][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.346223][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.404614][ T8055] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.508673][ T8055] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.519606][ T8055] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.535933][ T8055] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.692443][ T30] audit: type=1400 audit(1748967055.962:649): avc: denied { unmount } for pid=7943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 312.100286][ T6540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.108345][ T6540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.990174][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.998018][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.975172][ T5978] block nbd1: Possible stuck request ffff888026b95780: control (read@0,4096B). Runtime 30 seconds [ 316.322394][ T8185] netlink: 164 bytes leftover after parsing attributes in process `syz.4.596'. [ 316.450110][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 316.655187][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.806703][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.828964][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'. [ 318.688589][ T8212] veth0_vlan: entered allmulticast mode [ 318.872742][ T8214] veth0_vlan: left promiscuous mode [ 318.882192][ T8214] veth0_vlan: entered promiscuous mode [ 320.086961][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.4.607'. [ 320.918205][ T8232] netlink: 68 bytes leftover after parsing attributes in process `syz.4.609'. [ 325.402260][ T30] audit: type=1400 audit(1748967069.672:650): avc: denied { ioctl } for pid=8273 comm="syz.4.622" path="socket:[24107]" dev="sockfs" ino=24107 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 325.427574][ T8274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.622'. [ 326.502758][ T8284] FAULT_INJECTION: forcing a failure. [ 326.502758][ T8284] name failslab, interval 1, probability 0, space 0, times 0 [ 326.556263][ T8284] CPU: 0 UID: 0 PID: 8284 Comm: syz.5.624 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 326.556291][ T8284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.556302][ T8284] Call Trace: [ 326.556308][ T8284] [ 326.556314][ T8284] dump_stack_lvl+0x16c/0x1f0 [ 326.556347][ T8284] should_fail_ex+0x512/0x640 [ 326.556366][ T8284] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 326.556395][ T8284] should_failslab+0xc2/0x120 [ 326.556422][ T8284] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 326.556447][ T8284] ? __alloc_skb+0x2b2/0x380 [ 326.556484][ T8284] __alloc_skb+0x2b2/0x380 [ 326.556509][ T8284] ? __pfx___alloc_skb+0x10/0x10 [ 326.556539][ T8284] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 326.556566][ T8284] netlink_alloc_large_skb+0x69/0x130 [ 326.556588][ T8284] netlink_sendmsg+0x6a1/0xdd0 [ 326.556613][ T8284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.556646][ T8284] ____sys_sendmsg+0xa95/0xc70 [ 326.556668][ T8284] ? copy_msghdr_from_user+0x10a/0x160 [ 326.556695][ T8284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.556727][ T8284] ___sys_sendmsg+0x134/0x1d0 [ 326.556756][ T8284] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.556780][ T8284] ? __lock_acquire+0x622/0x1c90 [ 326.556839][ T8284] __sys_sendmsg+0x16d/0x220 [ 326.556866][ T8284] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.556918][ T8284] do_syscall_64+0xcd/0x4c0 [ 326.556937][ T8284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.556955][ T8284] RIP: 0033:0x7fc092b8e969 [ 326.556969][ T8284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.556986][ T8284] RSP: 002b:00007fc093a9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.557004][ T8284] RAX: ffffffffffffffda RBX: 00007fc092db5fa0 RCX: 00007fc092b8e969 [ 326.557017][ T8284] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 326.557027][ T8284] RBP: 00007fc093a9c090 R08: 0000000000000000 R09: 0000000000000000 [ 326.557037][ T8284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.557048][ T8284] R13: 0000000000000000 R14: 00007fc092db5fa0 R15: 00007ffc7d1169e8 [ 326.557073][ T8284] [ 327.536953][ T8292] FAULT_INJECTION: forcing a failure. [ 327.536953][ T8292] name failslab, interval 1, probability 0, space 0, times 0 [ 327.629902][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.6.627 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 327.629925][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.629934][ T8292] Call Trace: [ 327.629940][ T8292] [ 327.629945][ T8292] dump_stack_lvl+0x16c/0x1f0 [ 327.629974][ T8292] should_fail_ex+0x512/0x640 [ 327.629991][ T8292] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 327.630014][ T8292] should_failslab+0xc2/0x120 [ 327.630038][ T8292] __kmalloc_cache_noprof+0x6a/0x3e0 [ 327.630057][ T8292] ? rtnl_newlink+0x11b/0x2000 [ 327.630076][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.630090][ T8292] rtnl_newlink+0x11b/0x2000 [ 327.630112][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.630125][ T8292] ? find_held_lock+0x2b/0x80 [ 327.630146][ T8292] ? avc_has_perm_noaudit+0x117/0x3b0 [ 327.630171][ T8292] ? avc_has_perm_noaudit+0x149/0x3b0 [ 327.630196][ T8292] ? cred_has_capability.isra.0+0x193/0x2f0 [ 327.630218][ T8292] ? __lock_acquire+0x622/0x1c90 [ 327.630253][ T8292] ? find_held_lock+0x2b/0x80 [ 327.630270][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.630285][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.630298][ T8292] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 327.630315][ T8292] ? __pfx_rtnl_newlink+0x10/0x10 [ 327.630332][ T8292] rtnetlink_rcv_msg+0x95e/0xe90 [ 327.630351][ T8292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.630375][ T8292] ? ref_tracker_free+0x37c/0x830 [ 327.630397][ T8292] netlink_rcv_skb+0x158/0x420 [ 327.630418][ T8292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 327.630436][ T8292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.630464][ T8292] ? netlink_deliver_tap+0x1ae/0xd30 [ 327.630488][ T8292] netlink_unicast+0x53a/0x7f0 [ 327.630512][ T8292] ? __pfx_netlink_unicast+0x10/0x10 [ 327.630539][ T8292] netlink_sendmsg+0x8d1/0xdd0 [ 327.630563][ T8292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.630593][ T8292] ____sys_sendmsg+0xa95/0xc70 [ 327.630614][ T8292] ? copy_msghdr_from_user+0x10a/0x160 [ 327.630640][ T8292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.630673][ T8292] ___sys_sendmsg+0x134/0x1d0 [ 327.630707][ T8292] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.630731][ T8292] ? __lock_acquire+0x622/0x1c90 [ 327.630795][ T8292] __sys_sendmsg+0x16d/0x220 [ 327.630823][ T8292] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.630870][ T8292] do_syscall_64+0xcd/0x4c0 [ 327.630890][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.630907][ T8292] RIP: 0033:0x7f306858e969 [ 327.630921][ T8292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.630938][ T8292] RSP: 002b:00007f3069444038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.630955][ T8292] RAX: ffffffffffffffda RBX: 00007f30687b5fa0 RCX: 00007f306858e969 [ 327.630966][ T8292] RDX: 0000000004004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 327.630977][ T8292] RBP: 00007f3069444090 R08: 0000000000000000 R09: 0000000000000000 [ 327.630986][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.630996][ T8292] R13: 0000000000000000 R14: 00007f30687b5fa0 R15: 00007ffeb287b5a8 [ 327.631023][ T8292] [ 327.647470][ T8293] veth0_vlan: entered allmulticast mode [ 328.090388][ T8297] veth0_vlan: left promiscuous mode [ 328.110621][ T8297] veth0_vlan: entered promiscuous mode [ 329.028000][ T30] audit: type=1400 audit(1748967073.292:651): avc: denied { ioctl } for pid=8305 comm="syz.4.633" path="socket:[22306]" dev="sockfs" ino=22306 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 329.609792][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 329.782880][ T8326] nbd5: detected capacity change from 0 to 4294967296 [ 329.900531][ T8324] block nbd5: shutting down sockets [ 330.159779][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 330.175498][ T8331] netlink: 'syz.5.638': attribute type 16 has an invalid length. [ 330.184488][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.193680][ T8331] netlink: 'syz.5.638': attribute type 17 has an invalid length. [ 330.285964][ T8332] dummy0: entered promiscuous mode [ 330.304518][ T8332] macsec1: entered allmulticast mode [ 330.332939][ T8332] dummy0: entered allmulticast mode [ 330.373463][ T8332] dummy0: left allmulticast mode [ 330.385309][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.426065][ T8332] dummy0: left promiscuous mode [ 330.454468][ T24] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 330.607891][ T8335] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.639'. [ 331.559892][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.691879][ T8340] veth0_vlan: left promiscuous mode [ 331.702458][ T8340] veth0_vlan: entered promiscuous mode [ 331.922294][ T24] usb 4-1: config 0 descriptor?? [ 332.061725][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 332.127382][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 332.197694][ T24] usb 4-1: USB disconnect, device number 17 [ 332.361487][ T8347] veth0_vlan: left promiscuous mode [ 332.374643][ T8347] veth0_vlan: entered promiscuous mode [ 333.519841][ T8354] veth0_vlan: left promiscuous mode [ 333.531506][ T8354] veth0_vlan: entered promiscuous mode [ 336.939820][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 337.096884][ T115] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 337.110525][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 337.130357][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.160343][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.189838][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 337.198893][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.276784][ T10] usb 4-1: config 0 descriptor?? [ 337.788393][ T115] usb 6-1: Using ep0 maxpacket: 16 [ 337.818983][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 337.839204][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.857713][ T115] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.878317][ T115] usb 6-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 337.887672][ T115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.945522][ T115] usb 6-1: config 0 descriptor?? [ 337.971515][ T9] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 337.980630][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.990186][ T9] usb 1-1: config 0 descriptor?? [ 338.111388][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 338.433376][ T9] gp8psk: usb in 128 operation failed. [ 338.441681][ T9] gp8psk: usb in 137 operation failed. [ 338.449302][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 338.469465][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 338.480502][ T9] usb 1-1: media controller created [ 338.520828][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.707483][ T9] gp8psk_fe: Frontend attached [ 338.831759][ T8403] hub 8-0:1.0: USB hub found [ 338.836843][ T8403] hub 8-0:1.0: 1 port detected [ 339.360655][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 339.428195][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 339.640373][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 339.646376][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.840852][ T10] usb 4-1: USB disconnect, device number 18 [ 341.107436][ T115] usbhid 6-1:0.0: can't add hid device: -71 [ 341.161238][ T9] gp8psk: usb in 138 operation failed. [ 341.166695][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 341.222118][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 341.231568][ T115] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 341.273418][ T9] usb 1-1: USB disconnect, device number 19 [ 341.302000][ T115] usb 6-1: USB disconnect, device number 2 [ 342.095125][ T8427] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 342.097118][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 342.141187][ T115] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 342.162156][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.661'. [ 342.620240][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 343.309075][ T115] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 343.429702][ T9] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 343.450423][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.459504][ T9] usb 7-1: Product: syz [ 343.464010][ T9] usb 7-1: Manufacturer: syz [ 343.991665][ T9] usb 7-1: SerialNumber: syz [ 344.002406][ T115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.007424][ T9] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 344.027679][ T5873] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 344.285333][ T115] usb 6-1: Product: syz [ 344.988196][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 345.045953][ T115] usb 6-1: Manufacturer: syz [ 345.069828][ T115] usb 6-1: SerialNumber: syz [ 345.118974][ T115] usb 6-1: can't set config #1, error -71 [ 345.172397][ T115] usb 6-1: USB disconnect, device number 3 [ 345.278795][ T8452] netlink: 68 bytes leftover after parsing attributes in process `syz.5.670'. [ 345.287759][ T48] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 345.329892][ T5873] usb 7-1: Service connection timeout for: 256 [ 345.358578][ T5873] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 346.198650][ T96] block nbd1: Possible stuck request ffff888026b95780: control (read@0,4096B). Runtime 60 seconds [ 347.830383][ T5873] ath9k_htc: Failed to initialize the device [ 347.891119][ T115] usb 7-1: USB disconnect, device number 2 [ 347.930734][ T115] usb 7-1: ath9k_htc: USB layer deinitialized [ 348.078767][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 348.272807][ T48] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 348.334582][ T48] usb 5-1: can't read configurations, error -71 [ 349.016250][ T115] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 350.745149][ T115] usb 6-1: Using ep0 maxpacket: 32 [ 350.769089][ T115] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 350.810599][ T115] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 999 [ 350.957705][ T8494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.978086][ T115] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 350.984223][ T8494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.005636][ T115] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 351.014727][ T115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.048716][ T115] usb 6-1: Product: syz [ 351.079978][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 351.087565][ T5873] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 351.151546][ T115] usb 6-1: Manufacturer: syz [ 351.157513][ T115] usb 6-1: SerialNumber: syz [ 351.229788][ T9] usb 4-1: device descriptor read/64, error -71 [ 351.254772][ T8503] netlink: 68 bytes leftover after parsing attributes in process `syz.6.683'. [ 351.272170][ T5873] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 351.289106][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.318961][ T5873] usb 5-1: config 0 descriptor?? [ 351.503834][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 351.806102][ T9] usb 4-1: device descriptor read/64, error -71 [ 352.449188][ T115] cdc_ncm 6-1:1.0: bind() failure [ 352.453691][ T5873] ath6kl: Failed to submit usb control message: -110 [ 352.465406][ T5873] ath6kl: unable to send the bmi data to the device: -110 [ 352.471126][ T115] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 352.474435][ T5873] ath6kl: Unable to send get target info: -110 [ 352.499350][ T5873] ath6kl: Failed to init ath6kl core: -110 [ 352.509588][ T5873] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 352.530119][ T9] usb usb4-port1: attempt power cycle [ 352.685585][ T115] cdc_ncm 6-1:1.1: bind() failure [ 352.699953][ T8513] nbd5: detected capacity change from 0 to 4294967296 [ 352.707752][ T8515] block nbd5: shutting down sockets [ 352.989908][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 353.027840][ T9] usb 4-1: device descriptor read/8, error -71 [ 353.398212][ T115] usb 6-1: USB disconnect, device number 4 [ 353.669838][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 354.276608][ T115] usb 5-1: USB disconnect, device number 23 [ 354.296408][ T9] usb 4-1: device descriptor read/8, error -71 [ 354.460142][ T9] usb usb4-port1: unable to enumerate USB device [ 355.617054][ T30] audit: type=1400 audit(1748967099.262:652): avc: denied { write } for pid=8524 comm="syz.4.689" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 355.683444][ T30] audit: type=1400 audit(1748967099.262:653): avc: denied { open } for pid=8524 comm="syz.4.689" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 356.102883][ T8544] netlink: 28 bytes leftover after parsing attributes in process `syz.6.692'. [ 357.328303][ T30] audit: type=1400 audit(1748967101.592:654): avc: denied { setopt } for pid=8526 comm="syz.3.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.614249][ T30] audit: type=1400 audit(1748967101.882:655): avc: denied { ioctl } for pid=8526 comm="syz.3.690" path="socket:[25629]" dev="sockfs" ino=25629 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 357.708032][ T8561] FAULT_INJECTION: forcing a failure. [ 357.708032][ T8561] name failslab, interval 1, probability 0, space 0, times 0 [ 357.720719][ T8561] CPU: 1 UID: 0 PID: 8561 Comm: syz.5.697 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 357.720741][ T8561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.720752][ T8561] Call Trace: [ 357.720758][ T8561] [ 357.720764][ T8561] dump_stack_lvl+0x16c/0x1f0 [ 357.720795][ T8561] should_fail_ex+0x512/0x640 [ 357.720813][ T8561] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 357.720840][ T8561] should_failslab+0xc2/0x120 [ 357.720866][ T8561] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 357.720890][ T8561] ? alloc_empty_file+0x55/0x1e0 [ 357.720913][ T8561] alloc_empty_file+0x55/0x1e0 [ 357.720932][ T8561] dentry_open+0x46/0xd0 [ 357.720950][ T8561] drm_mode_create_lease_ioctl+0x16b9/0x1fb0 [ 357.720981][ T8561] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 357.721020][ T8561] ? drm_is_current_master+0x2c/0x40 [ 357.721047][ T8561] ? do_raw_spin_unlock+0x172/0x230 [ 357.721071][ T8561] drm_ioctl_kernel+0x1f1/0x3e0 [ 357.721088][ T8561] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 357.721111][ T8561] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 357.721138][ T8561] drm_ioctl+0x5c9/0xc30 [ 357.721161][ T8561] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 357.721183][ T8561] ? __pfx_drm_ioctl+0x10/0x10 [ 357.721198][ T8561] ? rcu_is_watching+0x12/0xc0 [ 357.721231][ T8561] ? selinux_file_ioctl+0x180/0x270 [ 357.721251][ T8561] ? selinux_file_ioctl+0xb4/0x270 [ 357.721271][ T8561] ? __pfx_drm_ioctl+0x10/0x10 [ 357.721291][ T8561] __x64_sys_ioctl+0x18b/0x210 [ 357.721314][ T8561] do_syscall_64+0xcd/0x4c0 [ 357.721332][ T8561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.721349][ T8561] RIP: 0033:0x7fc092b8e969 [ 357.721363][ T8561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.721379][ T8561] RSP: 002b:00007fc093a5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 357.721396][ T8561] RAX: ffffffffffffffda RBX: 00007fc092db6160 RCX: 00007fc092b8e969 [ 357.721407][ T8561] RDX: 0000200000000040 RSI: 00000000c01864c6 RDI: 0000000000000005 [ 357.721418][ T8561] RBP: 00007fc093a5a090 R08: 0000000000000000 R09: 0000000000000000 [ 357.721429][ T8561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.721444][ T8561] R13: 0000000000000000 R14: 00007fc092db6160 R15: 00007ffc7d1169e8 [ 357.721468][ T8561] [ 358.579888][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 358.660054][ T30] audit: type=1400 audit(1748967102.922:656): avc: denied { read } for pid=8549 comm="syz.6.696" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 358.697931][ T30] audit: type=1400 audit(1748967102.922:657): avc: denied { open } for pid=8549 comm="syz.6.696" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 358.743543][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 358.755079][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.772747][ T9] usb 5-1: config 0 descriptor?? [ 359.392968][ T30] audit: type=1400 audit(1748967103.652:658): avc: denied { ioctl } for pid=8549 comm="syz.6.696" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 359.771154][ T30] audit: type=1400 audit(1748967104.032:659): avc: denied { connect } for pid=8580 comm="syz.6.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 359.811312][ T9] ath6kl: Failed to submit usb control message: -110 [ 359.874797][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 359.898469][ T9] ath6kl: Unable to send get target info: -110 [ 359.923627][ T9] ath6kl: Failed to init ath6kl core: -110 [ 359.930645][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 360.560548][ T8595] hub 8-0:1.0: USB hub found [ 360.566222][ T8595] hub 8-0:1.0: 1 port detected [ 361.314653][ T8596] netlink: 32 bytes leftover after parsing attributes in process `syz.6.707'. [ 361.434412][ T5873] usb 5-1: USB disconnect, device number 24 [ 361.579798][ T5900] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 362.009871][ T5900] usb 1-1: device descriptor read/64, error -71 [ 362.029901][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 362.741444][ T24] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 362.756501][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.777065][ T5873] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 362.790182][ T5900] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 362.802904][ T24] usb 4-1: config 0 descriptor?? [ 363.200162][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 363.636369][ T5873] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 363.642411][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 363.651167][ T5873] usb 7-1: config 0 has no interface number 0 [ 363.662914][ T5873] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.689758][ T5873] usb 7-1: config 0 interface 85 has no altsetting 0 [ 363.720817][ T5873] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 363.748118][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.759838][ T5873] usb 7-1: Product: syz [ 363.759877][ T5900] usb 1-1: device descriptor read/64, error -71 [ 363.763985][ T5873] usb 7-1: Manufacturer: syz [ 363.764001][ T5873] usb 7-1: SerialNumber: syz [ 363.765877][ T5873] usb 7-1: config 0 descriptor?? [ 363.840601][ T24] gp8psk: usb in 128 operation failed. [ 363.847345][ T24] gp8psk: usb in 137 operation failed. [ 363.881209][ T5900] usb usb1-port1: attempt power cycle [ 364.884638][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 364.919909][ T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 364.929151][ T24] usb 4-1: media controller created [ 365.121182][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.250681][ T5900] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 365.279141][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.288211][ T5900] usb 1-1: device descriptor read/8, error -71 [ 365.290013][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.380412][ T24] gp8psk_fe: Frontend attached [ 365.380434][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 365.380565][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 365.589892][ T5900] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 365.612165][ T5900] usb 1-1: device descriptor read/8, error -71 [ 365.724303][ T5900] usb usb1-port1: unable to enumerate USB device [ 366.256871][ T5873] appletouch 7-1:0.85: Geyser mode initialized. [ 366.257965][ T5873] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input16 [ 366.362628][ T24] gp8psk: usb in 138 operation failed. [ 366.368160][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 366.383432][ T5873] usb 7-1: USB disconnect, device number 3 [ 366.389266][ C0] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 366.485312][ T24] gp8psk: found Genpix USB device pID = 203 (hex) [ 366.522735][ T24] usb 4-1: USB disconnect, device number 23 [ 366.689496][ T5873] appletouch 7-1:0.85: input: appletouch disconnected [ 366.897621][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 366.929934][ T30] audit: type=1400 audit(1748967111.182:660): avc: denied { bind } for pid=8637 comm="syz.3.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 367.030101][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 367.247914][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 367.296583][ T10] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 367.320909][ T10] usb 5-1: config 0 has no interface number 0 [ 367.346565][ T10] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 367.478264][ T8663] netlink: 32 bytes leftover after parsing attributes in process `syz.6.723'. [ 367.629797][ T10] usb 5-1: config 0 interface 85 has no altsetting 0 [ 367.679859][ T5873] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 367.727751][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 367.758424][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.798708][ T10] usb 5-1: Product: syz [ 367.892485][ T10] usb 5-1: Manufacturer: syz [ 367.897098][ T10] usb 5-1: SerialNumber: syz [ 367.911185][ T5873] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 367.924089][ T10] usb 5-1: config 0 descriptor?? [ 367.937745][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.273319][ T5873] usb 6-1: config 0 descriptor?? [ 368.754996][ T8642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.901055][ T8642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.528220][ T5873] ath6kl: Failed to submit usb control message: -110 [ 369.543550][ T5873] ath6kl: unable to send the bmi data to the device: -110 [ 369.550744][ T5873] ath6kl: Unable to send get target info: -110 [ 369.568414][ T5873] ath6kl: Failed to init ath6kl core: -110 [ 369.576948][ T5873] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 369.868553][ T10] appletouch 5-1:0.85: Geyser mode initialized. [ 370.904147][ T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input17 [ 370.926711][ T10] usb 5-1: USB disconnect, device number 25 [ 370.932748][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 370.960030][ T5900] usb 6-1: USB disconnect, device number 5 [ 371.048801][ T10] appletouch 5-1:0.85: input: appletouch disconnected [ 371.203602][ T8702] netlink: 32 bytes leftover after parsing attributes in process `syz.0.730'. [ 375.240783][ T8721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.292949][ T8729] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 375.610052][ T30] audit: type=1400 audit(1748967119.822:661): avc: denied { remount } for pid=8723 comm="syz.6.737" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 375.869870][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 376.039817][ T10] usb 7-1: device descriptor read/64, error -71 [ 376.359850][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 376.599953][ T10] usb 7-1: device descriptor read/64, error -71 [ 376.802615][ T96] block nbd1: Possible stuck request ffff888026b95780: control (read@0,4096B). Runtime 90 seconds [ 376.856630][ T10] usb usb7-port1: attempt power cycle [ 377.345865][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 377.445933][ T974] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 377.459483][ T10] usb 7-1: device descriptor read/8, error -71 [ 377.530153][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 377.614225][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 377.634497][ T974] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 377.642936][ T974] usb 4-1: config 0 has no interface number 0 [ 377.650126][ T974] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.700319][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 377.739850][ T974] usb 4-1: config 0 interface 85 has no altsetting 0 [ 377.755884][ T974] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 377.766688][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.775466][ T10] usb 7-1: device descriptor read/8, error -71 [ 377.781238][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.784767][ T974] usb 4-1: Product: syz [ 377.833002][ T974] usb 4-1: Manufacturer: syz [ 377.835537][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.859133][ T974] usb 4-1: SerialNumber: syz [ 377.894269][ T24] usb 1-1: Product: syz [ 377.909945][ T24] usb 1-1: Manufacturer: syz [ 377.915682][ T24] usb 1-1: SerialNumber: syz [ 377.922734][ T974] usb 4-1: config 0 descriptor?? [ 377.930328][ T10] usb usb7-port1: unable to enumerate USB device [ 377.982545][ T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 378.007587][ T5900] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 378.053905][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.060372][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.330106][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 378.404463][ T8749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.457226][ T8749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.502192][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 378.502220][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.502240][ T9] usb 5-1: Product: syz [ 378.502277][ T9] usb 5-1: Manufacturer: syz [ 378.502292][ T9] usb 5-1: SerialNumber: syz [ 378.554034][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 378.606235][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 378.775714][ T974] appletouch 4-1:0.85: Geyser mode initialized. [ 378.778755][ T974] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input18 [ 378.791710][ T24] usb 1-1: USB disconnect, device number 24 [ 379.304142][ T48] usb 5-1: USB disconnect, device number 26 [ 379.798242][ T5900] usb 1-1: Service connection timeout for: 256 [ 379.823883][ T5900] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 379.899407][ T5900] ath9k_htc: Failed to initialize the device [ 379.912862][ T10] usb 4-1: USB disconnect, device number 24 [ 379.941114][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 379.960425][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 380.055314][ T9] usb 5-1: Service connection timeout for: 256 [ 380.077594][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 380.113558][ T9] ath9k_htc: Failed to initialize the device [ 380.442837][ T48] usb 5-1: ath9k_htc: USB layer deinitialized [ 381.832420][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.520628][ T5900] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 383.275287][ T5900] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 383.289885][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.328463][ T8799] vcan0: tx address claim with dlc 0 [ 383.336989][ T5900] usb 4-1: config 0 descriptor?? [ 383.786483][ T5900] ath6kl: Failed to submit usb control message: -71 [ 384.043321][ T5870] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 384.064593][ T5900] ath6kl: unable to send the bmi data to the device: -71 [ 384.112296][ T5900] ath6kl: Unable to send get target info: -71 [ 384.151852][ T5900] ath6kl: Failed to init ath6kl core: -71 [ 384.319930][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 384.330748][ T5900] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 384.339060][ T5870] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 384.347446][ T5870] usb 1-1: config 0 has no interface number 0 [ 384.366385][ T5870] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.405015][ T5900] usb 4-1: USB disconnect, device number 25 [ 384.476432][ T5870] usb 1-1: config 0 interface 85 has no altsetting 0 [ 384.501458][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 384.519870][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.552389][ T5870] usb 1-1: Product: syz [ 384.584023][ T5870] usb 1-1: Manufacturer: syz [ 384.592950][ T5870] usb 1-1: SerialNumber: syz [ 384.621777][ T5870] usb 1-1: config 0 descriptor?? [ 384.901023][ T115] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 385.089974][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.099814][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.296442][ T115] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 385.348430][ T115] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.408262][ T5870] appletouch 1-1:0.85: Geyser mode initialized. [ 385.417258][ T5870] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input19 [ 385.488711][ T115] usb 6-1: Product: syz [ 385.505448][ T115] usb 6-1: Manufacturer: syz [ 385.554028][ T115] usb 6-1: SerialNumber: syz [ 385.690770][ T115] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 385.703333][ T5870] usb 1-1: USB disconnect, device number 25 [ 386.378005][ T5900] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 386.395418][ T5870] appletouch 1-1:0.85: input: appletouch disconnected [ 387.269772][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 387.680023][ T8837] nbd4: detected capacity change from 0 to 4294967296 [ 387.688390][ T8841] block nbd4: shutting down sockets [ 387.737508][ C0] blk_print_req_error: 24 callbacks suppressed [ 387.737518][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.752748][ C0] buffer_io_error: 23 callbacks suppressed [ 387.752756][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 387.810727][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.850073][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 387.883813][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.899813][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 387.907738][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.933299][ T5870] usb 6-1: USB disconnect, device number 6 [ 387.940158][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.017841][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 388.029879][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 388.086503][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.105770][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 388.130892][ T9] usb 1-1: Product: syz [ 388.135073][ T9] usb 1-1: Manufacturer: syz [ 388.234712][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 388.850004][ T5900] usb 6-1: Service connection timeout for: 256 [ 389.257530][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 389.282188][ T5900] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 389.337847][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.356948][ T9] usb 1-1: SerialNumber: syz [ 389.363575][ T9] usb 1-1: config 0 descriptor?? [ 389.370987][ T9] imon_raw 1-1:0.0: IR endpoint missing [ 389.389973][ T5900] ath9k_htc: Failed to initialize the device [ 389.413785][ T5870] usb 6-1: ath9k_htc: USB layer deinitialized [ 389.420888][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 389.469085][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.559795][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 389.584839][ T8843] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 389.607133][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 389.729084][ T30] audit: type=1400 audit(1748967133.952:662): avc: denied { append } for pid=8859 comm="syz.6.768" name="media2" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 389.949135][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 389.969332][ T6110] ldm_validate_partition_table(): Disk read failed. [ 389.979937][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.092549][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.108341][ T6110] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 390.117744][ T6110] Buffer I/O error on dev nbd4, logical block 0, async page read [ 390.128106][ T6110] Dev nbd4: unable to read RDB block 0 [ 390.134105][ T6110] nbd4: unable to read partition table [ 390.681679][ T5870] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 390.723317][ T5900] usb 1-1: USB disconnect, device number 26 [ 390.733149][ T6110] ldm_validate_partition_table(): Disk read failed. [ 390.793690][ T6110] Dev nbd4: unable to read RDB block 0 [ 390.889794][ T5870] usb 6-1: Using ep0 maxpacket: 32 [ 390.910872][ T5870] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 390.918940][ T5870] usb 6-1: config 0 has no interface number 0 [ 390.940270][ T6110] nbd4: unable to read partition table [ 390.983908][ T5870] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 391.017507][ T5870] usb 6-1: config 0 interface 85 has no altsetting 0 [ 391.062202][ T5870] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 391.087778][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.096060][ T5870] usb 6-1: Product: syz [ 391.106077][ T5870] usb 6-1: Manufacturer: syz [ 391.126642][ T5870] usb 6-1: SerialNumber: syz [ 391.277022][ T5870] usb 6-1: config 0 descriptor?? [ 391.318934][ T8879] netlink: 108 bytes leftover after parsing attributes in process `syz.6.773'. [ 391.589984][ T5900] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 391.805570][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'. [ 391.849954][ T30] audit: type=1400 audit(1748967136.112:663): avc: denied { accept } for pid=8882 comm="syz.4.775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 391.908650][ T30] audit: type=1400 audit(1748967136.172:664): avc: denied { read } for pid=8882 comm="syz.4.775" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 391.967765][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.974182][ T5900] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.994054][ T8886] block device autoloading is deprecated and will be removed. [ 392.017658][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.030195][ T30] audit: type=1400 audit(1748967136.172:665): avc: denied { open } for pid=8882 comm="syz.4.775" path="/151/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 392.055440][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.063691][ T5900] usb 1-1: Product: syz [ 392.067910][ T5900] usb 1-1: Manufacturer: syz [ 392.075741][ T5900] usb 1-1: SerialNumber: syz [ 392.100373][ T5900] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 392.118501][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 393.304032][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 393.306111][ T5870] appletouch 6-1:0.85: Geyser mode initialized. [ 393.352089][ T5870] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input20 [ 393.460640][ T24] ath9k_htc: Failed to initialize the device [ 393.505171][ T24] usb 1-1: ath9k_htc: USB layer deinitialized [ 393.547476][ T5870] usb 6-1: USB disconnect, device number 7 [ 393.581123][ T5825] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 393.583801][ T5870] appletouch 6-1:0.85: input: appletouch disconnected [ 393.680557][ T115] usb 1-1: USB disconnect, device number 27 [ 394.420301][ T8904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.780'. [ 397.159971][ T30] audit: type=1400 audit(1748967141.322:666): avc: denied { append } for pid=8911 comm="syz.5.782" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 397.579820][ T5873] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 397.686633][ T30] audit: type=1400 audit(1748967141.552:667): avc: denied { listen } for pid=8911 comm="syz.5.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 397.814119][ T5873] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.859949][ T5873] usb 6-1: config 0 interface 0 has no altsetting 0 [ 398.056133][ T8931] netlink: 108 bytes leftover after parsing attributes in process `syz.4.786'. [ 398.210031][ T5870] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 398.246450][ T5873] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 398.453379][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.495982][ T5873] usb 6-1: Product: syz [ 398.501454][ T5873] usb 6-1: Manufacturer: syz [ 398.506564][ T5873] usb 6-1: SerialNumber: syz [ 398.539775][ T115] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 398.571035][ T5873] usb 6-1: config 0 descriptor?? [ 398.587639][ T5873] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 398.595966][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 398.609619][ T5870] usb 7-1: config 121 has an invalid descriptor of length 26, skipping remainder of the config [ 398.621463][ T5870] usb 7-1: config 121 has 0 interfaces, different from the descriptor's value: 1 [ 398.642464][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.661098][ T5873] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 398.671280][ T5870] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 398.681948][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 398.691091][ T5873] usb 6-1: media controller created [ 398.700848][ T5870] usb 7-1: Product: syz [ 398.776871][ T115] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 398.922411][ T5870] usb 7-1: Manufacturer: syz [ 398.969462][ T5870] usb 7-1: SerialNumber: syz [ 399.319932][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 399.527416][ T115] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.544407][ T115] usb 1-1: config 0 descriptor?? [ 400.060186][ T8940] nbd3: detected capacity change from 0 to 4294967296 [ 400.095700][ T5870] usb 7-1: USB disconnect, device number 8 [ 400.101679][ T8938] block nbd3: shutting down sockets [ 400.213374][ T96] blk_print_req_error: 24 callbacks suppressed [ 400.213388][ T96] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.229175][ T96] buffer_io_error: 23 callbacks suppressed [ 400.229184][ T96] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.243300][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.266527][ T5873] DVB: Unable to find symbol tda10046_attach() [ 400.272509][ T115] ath6kl: Failed to submit usb control message: -71 [ 400.277120][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.287314][ T5873] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 400.296480][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.304049][ T115] ath6kl: unable to send the bmi data to the device: -71 [ 400.305855][ T5873] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 400.325667][ T5873] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 400.337416][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.343436][ T5873] usb 6-1: USB disconnect, device number 8 [ 400.378566][ T115] ath6kl: Unable to send get target info: -71 [ 400.535220][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.553553][ T115] ath6kl: Failed to init ath6kl core: -71 [ 400.575389][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.576187][ T115] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 400.594466][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.634377][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.696971][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.699500][ T115] usb 1-1: USB disconnect, device number 28 [ 400.756301][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.764972][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.778320][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.787547][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.798518][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.823860][ T5873] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 400.842452][ T5975] ldm_validate_partition_table(): Disk read failed. [ 400.849104][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.897604][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.948376][ T5975] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 400.971585][ T5975] Buffer I/O error on dev nbd3, logical block 0, async page read [ 400.982600][ T5975] Dev nbd3: unable to read RDB block 0 [ 400.988716][ T5975] nbd3: unable to read partition table [ 401.001496][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 401.031872][ T5873] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 401.078418][ T5873] usb 6-1: config 0 has no interface number 0 [ 401.115382][ T5975] ldm_validate_partition_table(): Disk read failed. [ 401.147141][ T5873] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 401.184939][ T5975] Dev nbd3: unable to read RDB block 0 [ 401.199812][ T5824] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 401.207410][ T5873] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.403702][ T5975] nbd3: unable to read partition table [ 401.412540][ T30] audit: type=1400 audit(1748967145.492:668): avc: denied { create } for pid=8953 comm="syz.0.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 401.440982][ T5873] usb 6-1: Product: syz [ 401.898724][ T5873] usb 6-1: Manufacturer: syz [ 401.940202][ T5873] usb 6-1: SerialNumber: syz [ 402.050163][ T5873] usb 6-1: config 0 descriptor?? [ 402.074655][ T5873] smsc95xx v2.0.0 [ 402.079998][ T5824] usb 7-1: Using ep0 maxpacket: 32 [ 402.127205][ T5824] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 402.255576][ T5824] usb 7-1: config 0 has no interface number 0 [ 402.833050][ T5824] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 402.873185][ T5824] usb 7-1: config 0 interface 85 has no altsetting 0 [ 402.898390][ T5824] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 402.929040][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.030909][ T5824] usb 7-1: Product: syz [ 403.047695][ T5824] usb 7-1: Manufacturer: syz [ 403.063175][ T5824] usb 7-1: SerialNumber: syz [ 403.110245][ T5824] usb 7-1: config 0 descriptor?? [ 403.826360][ T5873] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 404.032975][ T5873] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 404.049434][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.073767][ T5873] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 404.082340][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.802666][ T5873] usb 6-1: USB disconnect, device number 9 [ 404.900947][ T8986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 405.406723][ T5824] appletouch 7-1:0.85: Geyser mode initialized. [ 405.408413][ T5824] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input21 [ 405.848342][ T5824] usb 7-1: USB disconnect, device number 9 [ 405.980130][ T8993] netlink: 68 bytes leftover after parsing attributes in process `syz.4.802'. [ 406.269186][ T5824] appletouch 7-1:0.85: input: appletouch disconnected [ 406.311506][ T30] audit: type=1400 audit(1748967150.582:669): avc: denied { write } for pid=8995 comm="syz.0.805" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 406.361890][ T9002] random: crng reseeded on system resumption [ 406.812816][ T30] audit: type=1400 audit(1748967150.612:670): avc: denied { open } for pid=8995 comm="syz.0.805" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 406.868689][ T96] block nbd1: Possible stuck request ffff888026b95780: control (read@0,4096B). Runtime 120 seconds [ 407.005499][ T9007] random: crng reseeded on system resumption [ 408.043501][ T9005] [U]  [ 408.452952][ T30] audit: type=1400 audit(1748967152.702:671): avc: denied { getopt } for pid=9029 comm="syz.3.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 408.932388][ T9036] veth0_vlan: entered allmulticast mode [ 409.809981][ T9036] veth0_vlan: left promiscuous mode [ 409.829882][ T9036] veth0_vlan: entered promiscuous mode [ 409.950414][ T30] audit: type=1400 audit(1748967154.222:672): avc: denied { getopt } for pid=9047 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 410.029661][ T9048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.818'. [ 410.039339][ T9048] trusted_key: encrypted_key: insufficient parameters specified [ 410.165006][ T30] audit: type=1400 audit(1748967154.292:673): avc: denied { ioctl } for pid=9047 comm="syz.3.818" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 410.401433][ T9053] netlink: 'syz.4.819': attribute type 39 has an invalid length. [ 411.543032][ T30] audit: type=1400 audit(1748967154.302:674): avc: denied { ioctl } for pid=9047 comm="syz.3.818" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 411.603691][ T30] audit: type=1400 audit(1748967154.312:675): avc: denied { bind } for pid=9047 comm="syz.3.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.653819][ T9065] random: crng reseeded on system resumption [ 411.722908][ T30] audit: type=1400 audit(1748967155.962:676): avc: denied { ioctl } for pid=9059 comm="syz.3.822" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 411.747575][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.936999][ T9069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.824'. [ 412.315027][ T9059] [U]  [ 413.609592][ T9083] random: crng reseeded on system resumption [ 414.429863][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.0.833'. [ 415.268336][ T9111] netlink: 5280 bytes leftover after parsing attributes in process `syz.5.834'. [ 415.745029][ T9088] [U]  [ 416.218019][ T8848] Bluetooth: hci5: command 0x0406 tx timeout [ 417.426442][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.839'. [ 418.621475][ T9140] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 418.631265][ T9140] SELinux: failed to load policy [ 418.726019][ T9146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.845'. [ 419.149566][ T30] audit: type=1400 audit(1748967162.892:677): avc: denied { load_policy } for pid=9139 comm="syz.3.844" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 420.446673][ T9157] hub 8-0:1.0: USB hub found [ 420.452276][ T9157] hub 8-0:1.0: 1 port detected [ 421.219683][ T9163] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.849'. [ 423.498093][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 425.370082][ T9204] team_slave_0: entered allmulticast mode [ 425.755721][ T9212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.159929][ T974] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 426.289780][ T8848] Bluetooth: hci6: command 0x0406 tx timeout [ 426.872832][ T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.886214][ T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.479337][ T974] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 427.505310][ T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 427.778455][ T974] usb 5-1: SerialNumber: syz [ 427.793502][ T9225] netlink: 68 bytes leftover after parsing attributes in process `syz.0.864'. [ 428.122524][ T9204] team_slave_0: left allmulticast mode [ 428.145810][ T974] usb 5-1: 0:2 : does not exist [ 428.154597][ T974] usb 5-1: unit 5 not found! [ 428.219826][ T974] usb 5-1: USB disconnect, device number 27 [ 428.232808][ T5873] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 428.286236][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.936923][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.955413][ T5873] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.133595][ T5873] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 430.157860][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 430.199177][ T5873] usb 4-1: SerialNumber: syz [ 430.626499][ T5873] usb 4-1: 0:2 : does not exist [ 430.647369][ T5873] usb 4-1: USB disconnect, device number 26 [ 430.746174][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.895651][ T5873] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 432.394860][ T5873] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 433.364442][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.375166][ T5873] usb 6-1: config 0 descriptor?? [ 433.415276][ T9272] netlink: 68 bytes leftover after parsing attributes in process `syz.4.878'. [ 434.077850][ T5873] usb 6-1: can't set config #0, error -71 [ 434.191808][ T9284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.882'. [ 434.573490][ T5873] usb 6-1: USB disconnect, device number 10 [ 437.006209][ T96] block nbd1: Possible stuck request ffff888026b95780: control (read@0,4096B). Runtime 150 seconds [ 438.515333][ T9318] random: crng reseeded on system resumption [ 438.990851][ T30] audit: type=1400 audit(1748967183.252:678): avc: denied { name_bind } for pid=9335 comm="syz.5.895" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 439.272770][ T9317] [U]  [ 439.495045][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.501419][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.870731][ T5824] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 441.310459][ T9359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.489855][ T5824] usb 6-1: Using ep0 maxpacket: 32 [ 441.532818][ T5824] usb 6-1: config 0 has an invalid interface number: 19 but max is 1 [ 441.847273][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 441.859072][ T5824] usb 6-1: config 0 has an invalid interface number: 189 but max is 1 [ 441.930760][ T5824] usb 6-1: config 0 has no interface number 0 [ 441.942215][ T5824] usb 6-1: config 0 has no interface number 1 [ 441.953807][ T5824] usb 6-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=15.4b [ 441.969961][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.980004][ T5824] usb 6-1: Product: syz [ 442.024204][ T5824] usb 6-1: Manufacturer: syz [ 442.039468][ T5824] usb 6-1: SerialNumber: syz [ 442.154387][ T5824] usb 6-1: config 0 descriptor?? [ 442.184682][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 442.239162][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.280910][ T10] usb 5-1: config 0 descriptor?? [ 442.462416][ T9372] netlink: 32 bytes leftover after parsing attributes in process `syz.0.902'. [ 443.062908][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.111440][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.129848][ T9380] x_tables: duplicate underflow at hook 2 [ 443.194220][ T10] ath6kl: Failed to submit usb control message: -71 [ 443.205160][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 443.205309][ T9347] IPVS: length: 48 != 24 [ 443.213257][ T30] audit: type=1400 audit(1748967187.472:679): avc: denied { getopt } for pid=9341 comm="syz.5.897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 443.244015][ T10] ath6kl: Unable to send get target info: -71 [ 443.421663][ T10] ath6kl: Failed to init ath6kl core: -71 [ 443.436624][ T10] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 443.483855][ T9384] netlink: 164 bytes leftover after parsing attributes in process `syz.6.905'. [ 443.964157][ T10] usb 5-1: USB disconnect, device number 28 [ 444.091943][ T974] usb 6-1: USB disconnect, device number 11 [ 444.109896][ T30] audit: type=1400 audit(1748967188.342:680): avc: denied { append } for pid=9375 comm="syz.3.904" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 444.388207][ T9393] netlink: 28 bytes leftover after parsing attributes in process `syz.6.907'. [ 444.947438][ T9398] random: crng reseeded on system resumption [ 445.067179][ T9395] [U]  [ 445.412414][ T9411] netlink: 68 bytes leftover after parsing attributes in process `syz.6.912'. [ 445.732364][ T9415] random: crng reseeded on system resumption [ 445.799872][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 445.917227][ T9414] [U]  [ 446.342771][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 446.423106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.481628][ T10] usb 5-1: Product: syz [ 446.494153][ T10] usb 5-1: Manufacturer: syz [ 446.539516][ T10] usb 5-1: SerialNumber: syz [ 446.608841][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 446.625064][ T5870] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 446.683122][ T9425] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 446.704198][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 447.421374][ T9427] veth0_vlan: left promiscuous mode [ 447.440785][ T9427] veth0_vlan: entered promiscuous mode [ 448.207287][ T974] usb 5-1: USB disconnect, device number 29 [ 448.803430][ T31] INFO: task syz.1.534:7913 blocked for more than 143 seconds. [ 448.839875][ T5870] usb 5-1: Service connection timeout for: 256 [ 448.846898][ T5870] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 448.859789][ T48] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 448.873649][ T31] Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 [ 448.881654][ T5870] ath9k_htc: Failed to initialize the device [ 448.887938][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 448.896702][ T31] task:syz.1.534 state:D stack:28632 pid:7913 tgid:7910 ppid:5816 task_flags:0x400140 flags:0x00004004 [ 448.907651][ T974] usb 5-1: ath9k_htc: USB layer deinitialized [ 449.080442][ T31] Call Trace: [ 449.083857][ T31] [ 449.086835][ T31] __schedule+0x116a/0x5de0 [ 449.097226][ T31] ? __lock_acquire+0x622/0x1c90 [ 449.110071][ T48] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.560859][ T31] ? __pfx___schedule+0x10/0x10 [ 449.572744][ T31] ? find_held_lock+0x2b/0x80 [ 449.587599][ T48] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.588808][ T31] ? schedule+0x2d7/0x3a0 [ 449.601301][ T31] schedule+0xe7/0x3a0 [ 449.605405][ T48] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.605423][ T31] schedule_preempt_disabled+0x13/0x30 [ 449.622908][ T48] usb 7-1: Product: syz [ 449.624132][ T31] __mutex_lock+0x6c7/0xb90 [ 449.627131][ T48] usb 7-1: Manufacturer: syz [ 449.636249][ T48] usb 7-1: SerialNumber: syz [ 449.639554][ T31] ? bdev_release+0x15a/0x6d0 [ 449.653004][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 449.666788][ T31] ? find_held_lock+0x2b/0x80 [ 449.675153][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 449.682370][ T31] ? bdev_release+0x15a/0x6d0 [ 449.687729][ T31] bdev_release+0x15a/0x6d0 [ 449.695295][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 449.700892][ T31] blkdev_release+0x15/0x20 [ 449.705752][ T31] __fput+0x402/0xb70 [ 449.713530][ T31] task_work_run+0x14d/0x240 [ 449.718255][ T31] ? __pfx_task_work_run+0x10/0x10 [ 449.727522][ T31] ? selinux_file_ioctl+0xb4/0x270 [ 449.738722][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 449.747710][ T31] do_syscall_64+0x3f6/0x4c0 [ 449.755225][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.761534][ T31] RIP: 0033:0x7fb3c738e969 [ 449.766490][ T31] RSP: 002b:00007fb3c51d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.778426][ T31] RAX: 0000000000000000 RBX: 00007fb3c75b6080 RCX: 00007fb3c738e969 [ 449.804426][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000008 [ 449.827667][ T31] RBP: 00007fb3c7410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 449.854317][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.863994][ T31] R13: 0000000000000001 R14: 00007fb3c75b6080 R15: 00007fff1fcd94b8 [ 449.873395][ T31] [ 449.876834][ T31] [ 449.876834][ T31] Showing all locks held in the system: [ 449.886596][ T31] 1 lock held by khungtaskd/31: [ 449.914557][ T31] #0: ffffffff8e5c4e40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 449.935985][ T31] 6 locks held by kworker/1:1/48: [ 449.941091][ T31] #0: ffff8881432a7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.955452][ T31] #1: ffffc90000b97d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.966778][ T31] #2: ffff888029dc8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 449.984132][ T31] #3: ffff888023aea198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 450.003351][ T31] #4: ffff88802834c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 450.036848][ T31] #5: ffff888029742a68 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_interface+0x299/0xed0 [ 450.078523][ T31] 3 locks held by kworker/u8:9/3004: [ 450.084972][ T31] #0: ffff8880321b3148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 450.100428][ T31] #1: ffffc9000b4a7d10 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 450.115458][ T31] #2: ffffffff90347d68 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 450.132022][ T31] 5 locks held by kworker/u8:11/3044: [ 450.137741][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 450.153375][ T31] #1: ffffc9000b9a7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 450.164229][ T31] #2: ffffffff90331d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 450.177054][ T31] #3: ffffffff90347d68 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 450.187199][ T31] #4: ffffffff8e5d03f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 450.199572][ T31] 1 lock held by klogd/5182: [ 450.205489][ T31] #0: ffff8880b843bc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 450.220292][ T31] 2 locks held by getty/5585: [ 450.225088][ T31] #0: ffff888032e4f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 450.240538][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 450.252736][ T31] 1 lock held by udevd/5833: [ 450.257434][ T31] #0: ffff888026826358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 450.267775][ T31] 4 locks held by udevd/5932: [ 450.272619][ T31] #0: ffff888073d2b9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 450.281664][ T31] #1: ffff888078d5dc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 450.291507][ T31] #2: ffff88807eaa31e8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 450.301167][ T31] #3: ffff888023aea198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 450.310776][ T31] 2 locks held by kworker/u8:13/6540: [ 450.316259][ T31] #0: ffff8880b843bc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 450.326584][ T31] #1: ffff8880b8524088 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x201/0x8e0 [ 450.338154][ T31] 1 lock held by syz.1.534/7913: [ 450.343353][ T31] #0: ffff888026826358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 450.354766][ T31] [ 450.369767][ T31] ============================================= [ 450.369767][ T31] [ 450.378258][ T31] NMI backtrace for cpu 1 [ 450.378270][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 450.378291][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.378300][ T31] Call Trace: [ 450.378306][ T31] [ 450.378316][ T31] dump_stack_lvl+0x116/0x1f0 [ 450.378345][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 450.378365][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 450.378391][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.378413][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 450.378437][ T31] watchdog+0xf70/0x12c0 [ 450.378461][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.378479][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.378506][ T31] ? __kthread_parkme+0x19e/0x250 [ 450.378532][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.378551][ T31] kthread+0x3c5/0x780 [ 450.378567][ T31] ? __pfx_kthread+0x10/0x10 [ 450.378584][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.378606][ T31] ? __pfx_kthread+0x10/0x10 [ 450.378623][ T31] ret_from_fork+0x5d4/0x6f0 [ 450.378646][ T31] ? __pfx_kthread+0x10/0x10 [ 450.378667][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.378696][ T31] [ 450.378720][ T31] Sending NMI from CPU 1 to CPUs 0: [ 450.481964][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.483593][ C0] NMI backtrace for cpu 0 [ 450.483603][ C0] CPU: 0 UID: 0 PID: 9437 Comm: syz.6.921 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 450.483619][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.483627][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 450.483644][ C0] Code: 7d 62 fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 38 40 c9 fc eb a2 e8 c1 40 [ 450.483658][ C0] RSP: 0018:ffffc900223a78f8 EFLAGS: 00000002 [ 450.483669][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 450.483678][ C0] RDX: 00000000000003fd RSI: ffffffff85599a00 RDI: ffffffff9b077320 [ 450.483687][ C0] RBP: ffffffff9b0772e0 R08: 0000000000000001 R09: 000000000000001f [ 450.483695][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 450.483703][ C0] R13: 0000000000000020 R14: fffffbfff360eeb6 R15: dffffc0000000000 [ 450.483712][ C0] FS: 00007f30694446c0(0000) GS:ffff888124765000(0000) knlGS:0000000000000000 [ 450.483726][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 450.483734][ C0] CR2: 00007f30688e1000 CR3: 0000000051868000 CR4: 00000000003526f0 [ 450.483743][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 450.483751][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 450.483759][ C0] Call Trace: [ 450.483763][ C0] [ 450.483769][ C0] wait_for_lsr+0x13a/0x210 [ 450.483787][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 450.483799][ C0] serial8250_console_write+0xf83/0x1890 [ 450.483821][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 450.483840][ C0] ? lock_acquire+0x179/0x350 [ 450.483865][ C0] console_flush_all+0x801/0xc60 [ 450.483884][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 450.483900][ C0] ? __lock_acquire+0x622/0x1c90 [ 450.483921][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 450.483940][ C0] console_unlock+0xd8/0x210 [ 450.483954][ C0] ? __pfx_console_unlock+0x10/0x10 [ 450.483979][ C0] vprintk_emit+0x418/0x6d0 [ 450.483995][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 450.484010][ C0] ? rcu_is_watching+0x12/0xc0 [ 450.484026][ C0] ? usb_gadget_register_driver_owner+0x158/0x330 [ 450.484046][ C0] _printk+0xc7/0x100 [ 450.484057][ C0] ? __pfx__printk+0x10/0x10 [ 450.484070][ C0] ? driver_create_file+0x51/0x70 [ 450.484091][ C0] usb_gadget_register_driver_owner+0x1fb/0x330 [ 450.484108][ C0] raw_ioctl+0x17d0/0x2c30 [ 450.484127][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 450.484142][ C0] ? selinux_file_ioctl+0x180/0x270 [ 450.484157][ C0] ? selinux_file_ioctl+0xb4/0x270 [ 450.484171][ C0] ? __pfx_raw_ioctl+0x10/0x10 [ 450.484187][ C0] __x64_sys_ioctl+0x18b/0x210 [ 450.484204][ C0] do_syscall_64+0xcd/0x4c0 [ 450.484218][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.484231][ C0] RIP: 0033:0x7f306858e56b [ 450.484241][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 450.484253][ C0] RSP: 002b:00007f3069441f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.484265][ C0] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f306858e56b [ 450.484273][ C0] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 450.484281][ C0] RBP: 00007f3069442fe0 R08: 0000000000000000 R09: 00362e6364755f79 [ 450.484289][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.484297][ C0] R13: 00007f3069441fb0 R14: 0000200000000080 R15: 00007f30688e0b88 [ 450.484311][ C0] [ 450.487880][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 450.487892][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) [ 450.487914][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 450.487923][ T31] Call Trace: [ 450.487929][ T31] [ 450.487935][ T31] dump_stack_lvl+0x3d/0x1f0 [ 450.487961][ T31] panic+0x71c/0x800 [ 450.487986][ T31] ? __pfx_panic+0x10/0x10 [ 450.913178][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 450.918542][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 450.924509][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 450.929869][ T31] ? watchdog+0xdda/0x12c0 [ 450.934276][ T31] ? watchdog+0xdcd/0x12c0 [ 450.938677][ T31] watchdog+0xdeb/0x12c0 [ 450.942905][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.947562][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.952749][ T31] ? __kthread_parkme+0x19e/0x250 [ 450.957759][ T31] ? __pfx_watchdog+0x10/0x10 [ 450.962419][ T31] kthread+0x3c5/0x780 [ 450.966468][ T31] ? __pfx_kthread+0x10/0x10 [ 450.971040][ T31] ? rcu_is_watching+0x12/0xc0 [ 450.975788][ T31] ? __pfx_kthread+0x10/0x10 [ 450.980358][ T31] ret_from_fork+0x5d4/0x6f0 [ 450.984937][ T31] ? __pfx_kthread+0x10/0x10 [ 450.989522][ T31] ret_from_fork_asm+0x1a/0x30 [ 450.994276][ T31] [ 450.997463][ T31] Kernel Offset: disabled [ 451.001764][ T31] Rebooting in 86400 seconds..