last executing test programs: 4m44.988648516s ago: executing program 3 (id=1178): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom(0xffffffffffffffff, &(0x7f00000002c0)=""/246, 0xf6, 0x10040, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4800) 4m43.144539844s ago: executing program 3 (id=1182): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x800000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000000102}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x3, 0x12) r6 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r7, 0xffffffffffffffff, 0x0) 4m40.848908834s ago: executing program 3 (id=1190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 4m40.680052872s ago: executing program 3 (id=1191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050ae56ec80482b5"], 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)={0x30, r3, 0x201, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4884}, 0x48800) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x3) (async) fsmount(r4, 0x0, 0x3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0xf, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) syz_open_dev$sndpcmp(0x0, 0x1, 0x1) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4m37.297844577s ago: executing program 3 (id=1202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x42, 0x8, &(0x7f0000000340)="b800000500000000a4ace7144bb7cf48baa61b093cfeb7f58e64a9199fd379e985f1ba8d681f958261e9ea7b93746dff1036ee7e4b2f878e590a6ed256783f20ca06", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3204bb36}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() socket$inet6(0xa, 0x80001, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, &(0x7f0000005140)={&(0x7f0000000500)={0x50, 0x0, 0x7fffffff, {0x7, 0x2b, 0x6, 0x24030, 0x7, 0x9, 0x10001, 0x800, 0x0, 0x0, 0x40, 0x5b}}, 0x0, &(0x7f0000002780)={0x18, 0x0, 0x9, {0xffffffffffffffff}}, 0x0, &(0x7f0000002800)={0x18, 0xfffffffffffffffe, 0x0, {0x9}}, &(0x7f0000002840)={0x28, 0xfffffffffffffffe, 0x80000000, {{0x2, 0x3, 0x2, r2}}}, &(0x7f0000002880)={0x60, 0x0, 0xffffffffffffffff, {{0x1, 0xe, 0xba7, 0x7ff, 0x5, 0x5, 0x5, 0x42}}}, &(0x7f0000002900)={0x18, 0x0, 0xfffffffffffffffe, {0x1}}, &(0x7f0000002940)={0x13, 0x0, 0x3, {'$(['}}, &(0x7f0000002980)={0x20, 0x0, 0x100000000, {0x0, 0x8}}, &(0x7f0000002a80)={0x78, 0xfffffffffffffffe, 0x101, {0x80, 0x71b, 0x0, {0x6, 0xffff, 0x5, 0x3c58359e, 0x2, 0x4, 0x66, 0x4f0, 0x200, 0xc000, 0xb96, 0xee00, 0x0, 0xffffa947, 0x8}}}, &(0x7f0000004bc0)={0x90, 0x0, 0x8, {0x4, 0x3, 0xffffffff00000000, 0xfffffffffffffff7, 0x101, 0x9, {0x5, 0x2, 0x8d, 0x2, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1000, 0x9, 0x0, 0x0, 0x2, 0xf2}}}, &(0x7f0000004c80)={0xd0, 0x0, 0x3, [{0x4, 0x1154, 0x4, 0x2, 'GPL\x00'}, {0x5, 0x5, 0x6, 0xde, 'minix\x00'}, {0x5, 0x33b, 0x6, 0x9, 'minix\x00'}, {0x1, 0xff, 0x1, 0x1, '\x00'}, {0xfffffffffffffffa, 0x8321, 0x4, 0x3, '[\xab)#'}, {0x2, 0x8, 0x6, 0x200, 'minix\x00'}]}, &(0x7f0000004d80)={0xb0, 0x0, 0xa3, [{{0x2, 0x0, 0xc5, 0x6, 0x1, 0xe, {0x0, 0xeb, 0x100000001, 0x9, 0x80, 0x48, 0x7, 0xcc1e, 0x4, 0xa000, 0x9, 0x0, 0x0, 0x5, 0xd4}}, {0x5, 0x4, 0x6, 0x8, 'source'}}]}, &(0x7f0000004f00)={0xa0, 0x0, 0x80000000, {{0x6, 0x3, 0x1, 0x100, 0x3, 0x5, {0x4, 0x9, 0x0, 0x7, 0x3, 0x8, 0x6, 0x4, 0x1ff, 0x2000, 0x74ac, 0x0, 0xee00, 0x9a4, 0x9}}, {0x0, 0x16}}}, &(0x7f0000004fc0)={0x20, 0x0, 0x8, {0x1, 0x4, 0x3440fe03, 0x6}}, &(0x7f0000005000)={0x130, 0xffffffffffffffda, 0xff, {0x7, 0x7, 0x0, '\x00', {0x80, 0x6, 0x80000000, 0xd4d0, 0xffffffffffffffff, r5, 0xc000, '\x00', 0x7, 0x40, 0x3, 0x9, {0x400, 0x8}, {0x3, 0x10000}, {0xc3f, 0x1}, {0x92d, 0x3}, 0x1, 0x80000000, 0xf79d, 0x1}}}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r6 = fsopen(&(0x7f0000000080)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x4000000000000000, 0x0) socket$unix(0x1, 0x2, 0x0) 4m36.429012122s ago: executing program 3 (id=1206): r0 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x1) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x1, r2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x141201, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x369d) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) keyctl$unlink(0x9, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x7, 0x40}) 4m20.579123223s ago: executing program 32 (id=1206): r0 = fsopen(&(0x7f0000000040)='devtmpfs\x00', 0x1) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x1, r2, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x141201, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x369d) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) keyctl$unlink(0x9, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x7, 0x40}) 1m3.214511174s ago: executing program 4 (id=1896): syz_open_dev$video4linux(0x0, 0x83, 0x0) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x1, 0x2845}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x4, 0x1000001, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}]}, 0x20}}, 0x0) ioprio_get$uid(0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x24, 0x0, &(0x7f0000000100)) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x101001) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='cgroup2\x00', 0x208000, 0x0) ioctl$EVIOCGSND(r6, 0x8040451a, &(0x7f0000002080)=""/4115) 1m1.750548365s ago: executing program 4 (id=1900): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r5}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8021) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)=0xa7ff) 1m0.513923093s ago: executing program 4 (id=1904): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0xfffd, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3538, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) setrlimit(0xd, &(0x7f0000000040)={0x3, 0x800006}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffffff, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80, 0x23456}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) r6 = socket$igmp(0x2, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000540), 0x0, 0x2000, &(0x7f00000005c0)={0x77359400}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r8 = dup3(r7, r6, 0x80000) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = syz_clone3(&(0x7f0000000740)={0x2000, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x21}, &(0x7f0000000500)=""/240, 0xf0, &(0x7f0000000600)=""/201, &(0x7f0000000700)}, 0x58) r10 = socket$inet_icmp(0x2, 0x2, 0x1) getrlimit(0xf, 0x0) ioctl$sock_SIOCSPGRP(r10, 0x8902, &(0x7f0000000280)=r9) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYBLOB="060000000100dafd997f1743d357a5e93e1665adc5bd7bb45ba9100ee1e22888eb14c5177556108858d35d55574c0b2a515a564c2bdeca48661afb9bcd6b796952ead7922615aada4627f43f1aa6e584964ecb885ec9aed87b8d4afac94c511e10910056bdcd6c15436c530a9edbf2ae415413548c5ff71c8ea635c414cf1b4cb8009d3de40a5e6f79e78b2e7182ef1f752766807f3e45fe5fac49588a1e0c970814562e7c92fb20acd01aab4c69958ee39ca12b4db6962423a06f47881a503450d4e335ff38ded4168731c1b3facd9c8a2354b00290a0c135363be731d3efaaf62810be2152f8e08cde6f23fddb5e6142b67891b1c6"]) creat(&(0x7f00000003c0)='./file0\x00', 0x194) 59.217805506s ago: executing program 4 (id=1908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000030000000003"], 0x1c) 58.206451518s ago: executing program 4 (id=1911): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'mpc624\x00', [0xcf7, 0x4, 0x2, 0x4, 0x2, 0x400cc5, 0xf, 0x8, 0xacb8, 0x5, 0x6, 0xfffeffff, 0x0, 0x5, 0x6, 0x2, 0x0, 0x1a442, 0x1, 0x40000003, 0x99, 0x800, 0xfffffffe, 0x20001e58, 0x81, 0x2f, 0x3c, 0x8, 0x2, 0x9, 0xfffffff8]}) 58.066465235s ago: executing program 4 (id=1913): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="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", @ANYRES64=r0]) 42.830410288s ago: executing program 33 (id=1913): syz_init_net_socket$ax25(0x3, 0x3, 0xcf) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) socket(0x1d, 0x2, 0x6) socket$netlink(0x10, 0x3, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f00000020c0)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465", @ANYRES64=r0]) 18.749460295s ago: executing program 0 (id=2039): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@getlink={0x1f, 0x12, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3080, 0x808}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}}, 0x0) 17.998425839s ago: executing program 0 (id=2044): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1e512d00000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000c40)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001280)={0x2c, 0x0, &(0x7f0000001140)={0x0, 0xa, 0x1}, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200104000000dfe3f04cc1b22ba68eba243febfe3eba60fa6f73da007450a451ac9e59175d473202c82fa439753d637f94ea5b04ef6964f0d46f097e4e10be7d28c21251ed831280a5c48a34069a7015786128eaef58e34f8dfcb575fdff813ef0493ab867eab77268eec0180daefc698909e4eb82ba18442dd5a4b79208648a667c1d1902688f35f5110574c6d403b4c75785d363b53c4394c99a280f0e9e16763e44d6"], 0x0}) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x2400, @rand_addr=0x64010101}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000810b040a0101027f0000"], 0x40}, 0x0) 13.317622529s ago: executing program 0 (id=2057): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x24008004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 10.658532205s ago: executing program 0 (id=2062): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x288}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000240)) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffffae, 0x0, 0x0}, 0x58) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x25, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3, 0xffb, 0x0, 0xb49, 0xc, 0x8, 0x0, 0x3}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000004) madvise(&(0x7f000003e000/0x3000)=nil, 0x3000, 0x14) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000280)={0xdddd1000, 0x11f000}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_ivalue=0x6}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x5, 0x7a880bb668777da9}, 0x9c) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="000c0000000c00000002000000000000000000000400"/38], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1], 0x0, 0x5, 0xdd, &(0x7f0000000840)=""/221, 0x41000, 0x0, '\x00', 0x0, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x3, 0x10}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x8}, 0x94) epoll_create1(0x0) 9.021365969s ago: executing program 6 (id=2068): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) prlimit64(0x0, 0xd, 0x0, 0x0) (async) prlimit64(0x0, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00', @ANYRESOCT=r1], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) socket$nl_generic(0x10, 0x3, 0x10) socket(0x8000000010, 0x2, 0x0) (async) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) 8.102990492s ago: executing program 6 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4080) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 7.990709552s ago: executing program 0 (id=2075): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000fc0), 0x800, 0x0) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000001000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7.158363384s ago: executing program 6 (id=2077): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x4040000) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0a00000004000000010000000400000080010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004baa26a0fa9c4b79a94abfa225ddfd70b0f48f4f83d8ff3d54e632304f2847a33ca6c5423493e1a936998818354df995d1b6a4e75717b066eaec8c4cbd5cefd3158f2cca98fd74a8ca8853633a56db9d219aa3eebb22f9528c295a8e8f48d9b2e10a9ebf8dc10920ff75f0dae5a340adcb82e294e5dae4"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000080) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000640)={0x81, 0x0, 'client0\x00', 0x0, "1e1dc136d6f4bdda", "a973ee4846d9504bc69a10238bcd150b0e95547bd679f139106e78e15913759d"}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000002000010000000000000000000a00204000000007000000000c001400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1400020000000000000000000000000012000000b60e65973eaf3a845fa24c09747a97297f940c950141e1516015250e5bf236c56758d09f583fb1a8e5a336a6534832474dc7a720ee40a0fba4f6cac13889a5ccd22a1c27b19807000000381d13708c4b017bec7fc82f9906a8dfbe8f4d69d3be277f858972492682c1b788db40049bbcec6e410bb93f67afd8a69008455d0d919df35c357d025278e08aa3f2748a212061e8f54478919b6397"], 0x3c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0xfffffffffffffddd) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) getrusage(0xffffffffffffffff, &(0x7f0000000680)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f0000000200)) r6 = socket$can_raw(0x1d, 0x3, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, &(0x7f00000012c0)) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r7, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) 6.794715918s ago: executing program 1 (id=2079): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x61) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.397992793s ago: executing program 1 (id=2082): bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x7c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e3aa4, [{{0x9, 0x2, 0xffffffffffffffae}}]}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x4, 0x44000) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x3) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000240)={0xe, 0x1, 0x1, "005a03f073e22f00000000002000fffe00009a0300000000000000000400", 0x20363159}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000001240)=@ready={0x0, 0x0, 0x8, "de384b3d", {0x1, 0xca1e, 0xc000, 0x9, 0x5}}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x8}, &(0x7f0000000300)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x66fa68b6}}, 0xfffffffb, 0x200, 0x2, 0x4, 0x5}, &(0x7f0000000400)=0x98) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 6.22783746s ago: executing program 5 (id=2084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x80}}, 0x0) dup2(r0, r0) 6.206095194s ago: executing program 0 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000140)={0x40, 0x14, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x8030, 0x8000, 0x400, 0x401, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x1c, 0x4e, 0x3, 0x7, [{@loopback, 0xfffffff7}, {@multicast2, 0xa5e8}, {@multicast1, 0x4}]}]}}}}}) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r5, 0x4}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000300)="cf4496c46bb5a375c3d296e73e2ce2c38fc0400b3efb1a6a53604d030a606773fbb8e6b79962c64f2bc869550bb3b52b58200db407e969df6613e92abcf53eba821838f4fbf2ae9241440d6af2d367a78c005ed373b7c14ea4354c02f22ab415f88c7d863b", 0x65}, {&(0x7f0000000200)="11bf10add5cfb965af12fd33708d6f0e26c3a98cd0a3265344bc7e081804c5ffb0cf1f6535c7cd7efb0e3d10db9dba", 0x2f}, {&(0x7f0000000580)="2a916156ef9896d69bd9c43676d8f15ac5446adf5516eb6f747916c2aba6eb613b1dbe9b6df00848f766534fb7261a3c77919f6d5b3d8a6cd7f51462785267a59b8c22103ad5c0434692f6e88efa857400748064caa0752836c91a2365161e5e4f6d95feaf8009218d26dc533fd2e2deaac40d6aaf8fa85e46fa21cfe5786c5ce172eddd4247f5df937ce3468e89971b5a200f00f53e2a9b71a44cb7df01de45fe9fa8309861edb950eaee16b8e528ef89cfa02c5e951d83e1f2b5235ea42699f35affad98f4f94c38ba266245d50d8a4258b710e6f2147c0e2d4797d7c3c0590b136eb176b5a8e130a1d772b61c8f6b2e109fe7fe", 0xf5}], 0x3, &(0x7f0000000680)=[{0x18, 0x0, 0x1000, "c799b60f"}, {0x50, 0x113, 0x7, "6146a59a91afcba6b0701cff7123d34e7dd848161d58a59cb159216778612e87969086f8bd493badbd182aa7dd657779fd5ef175dc062cdd5c81b97e8217"}, {0x50, 0x10f, 0x8, "e93fbab94c93ba622ced23b67acaca927bc502e14c78ac9f6015bbc65839dc93cc4dd447ba8664fe264227f24fc4a2af62d80cfd621ad2cf9efe03"}], 0xb8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) 5.826552209s ago: executing program 5 (id=2086): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "1a21ceb6ea753eeb", "3ca2bef57d8651718388e89e5320b007", "d4af5d67", "4ab7f0f05183f35b"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'veth0\x00', @multicast}) chdir(0x0) mkdir(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 5.166244258s ago: executing program 5 (id=2088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4080) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 4.83906052s ago: executing program 2 (id=2089): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.062586224s ago: executing program 5 (id=2090): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setresuid(0xee01, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) fsopen(&(0x7f00000000c0)='hpfs\x00', 0x1) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket(0x2c, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58}, 0x6) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x80040, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x5f, 0xa, 0x3, 0x3, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xc, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0xfffffffd, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x8000, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4000, 0x8000, 0x2, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0xffffffff, 0x8000, 0xffff, 0x2, 0x9, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x3, 0xff], [0x9b55, 0x4, 0xd, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x1, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x200, 0x3, 0xbac, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x7, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb2f, 0x3, 0x7, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x203, 0x6, 0x8ad, 0x5, 0x3, 0x101, 0xfffc, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x1, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 3.893764472s ago: executing program 2 (id=2091): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x5, 0x0, 0xe, 0x1}, 'syz1\x00', 0x34}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1, 0x2, 0x2) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x48001051, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x39, 0x1a, r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) 2.852793102s ago: executing program 6 (id=2092): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x62, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x5, 0x1, 0x27}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2000, 0x100, 0x2, 0x7}}, 0x44) socket$inet_mptcp(0x2, 0x1, 0x106) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x54}}, 0x20008001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_0\x00'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/time\x00') sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000800)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8420}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x84247a0087b0f9c2}, 0x4004000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000840)) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f00000028c0)=0x0) getresgid(&(0x7f0000002900)=0x0, &(0x7f0000002940), &(0x7f0000002980)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000029c0)={0xb8, 0x0, r8, [{{0x4, 0x2, 0x63, 0x7f, 0xc, 0x200, {0x5, 0x8, 0x6, 0xa2, 0x7ff, 0x1, 0xf, 0x2, 0x6, 0x1000, 0x100, r9, r10, 0x3, 0x6d}}, {0x4, 0x4, 0x9, 0x4, '/dev/kvm\x00'}}]}, 0xb8) bind$ax25(r0, &(0x7f0000002a80)={{0x3, @null, 0x4}, [@null, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000002b00)={0x6, 'vlan0\x00', {0x7}, 0xa}) syz_open_dev$tty1(0xc, 0x4, 0x3) r11 = io_uring_setup(0x661f, &(0x7f0000002b40)={0x0, 0x8cd5, 0x200, 0x1, 0xcb}) syz_io_uring_setup(0x5485, &(0x7f0000002bc0)={0x0, 0x29bc, 0x8000, 0x0, 0x39a, 0x0, r11}, &(0x7f0000002c40), &(0x7f0000002c80)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002d00), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000002e00)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d80)={0x28, r12, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x1f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) timer_create(0x7, &(0x7f0000003040)={0x0, 0x1a, 0x3, @thr={&(0x7f0000002e40)="8228fadeb10c9ea3c4b0037f38ed3a97d0e9ced6cf56d22ffa8a4473621a34b749c0c0cd6661b304ae984c3b610ef2ae81e337b59a1a96a35a7f50f8785a190ed3ecff5e26bf3955f9129eefb06468716279c5dd0cb79ee793e4f7d9a623391aea4089c80af3da500addd37f1cbee7ded8e823de2eea44d9755151eef6bcd27871a10c4f86c985119374c1d2e781176674db508d650d33feac68662e61675af341c84e548b2a57e389043e34bda7baa76ef9e2a7514054c023c4fe79490f94bfe93ccd88eaf2e4b5cc8ce5ad269cd25b333e77bb309a2072c5b0930bad0ea27e0b1e64797f221261fbf3162f9419d979", &(0x7f0000002f40)="0994281c196a27f2f549915994a90fb2602711407f57cde494598666b77865993fe64a8aff1b0e73165fa09274c21023cce84c0165b570a7c5f1184678a5d473ece74ed248a6c17e7b3816bd7495add845a51a75e5d592bd915808a0ab80826b4feecb3159855b9fd4e61e90d48b508cf1b39659ba1d261e5df954b76c5b48cc5f7c480cbd67c357b78146db9da9fd38d711d0ecaa7984efd1634e68576adec9cd0e99a65634c163657946310ef0b76c4373e62ddc72e254812e5e729341a083248cb09eb4883142cd62d5b9f5b74d61dbcd4510b427722d75ff42f82ae0"}}, &(0x7f0000003080)) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000003100), r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f00000031c0)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x24, r14, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000850) 2.848912821s ago: executing program 2 (id=2093): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4404c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000c00000/0x400000)=nil) r10 = syz_kvm_add_vcpu$x86(r9, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@wr_crn={0x46, 0x20, {0x4, 0x100000000000000d}}], 0x20}) ioctl$KVM_RUN(r10, 0xae80, 0x0) openat$cgroup_procs(r6, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x20, 0xfffffffc], [0x8002, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x8000], [0x6, 0x0, 0x40, 0x6, 0x0, 0x1]], '\x00', [{0xffffffff, 0xffffffff}, {}, {0x0, 0x4000}, {0x0, 0x1, 0x0, 0x1}, {0x10000, 0x6}, {0xfffffffd}, {0x1}, {0x200000}, {}, {0x7}, {}, {0x4}]}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@multicast2, @loopback, 0x1, 0x1, [@broadcast]}, 0x14) 2.736589292s ago: executing program 1 (id=2094): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.094658059s ago: executing program 6 (id=2095): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x124, r3, 0xd71bc4d4995d78d6, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa06}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x81}}}}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x40840}, 0x810) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x23c, r3, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x72, 0x3, "a4d7aae22cfa9edd61d52e03e3542900ba809bbcee6adf0851b7c2d938cf2aa087cfb63cc808e8cddad0caacbf612ef532b6400833f42f4584891d2022ed1573a99984644ffcbfa8bb5a74fb3d1a3a12d16f92439a24a901eb1087c7d2291802bf96973098e2a5049466b58167be"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ID={0x34, 0x3, "9d947f2e3195f71b57903aa7857a4f17882ec788353bd2cee758a0d785aa0a5c2daf409e5fb1ecf0be04980e47ffd606"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "dec50091785d99f07efd50edd82afedeedb1ff6425a69814412d9d1a"}}, @TIPC_NLA_NODE_ID={0xa9, 0x3, "39f772fc27b8740df56a3d035691861e96d35f0d579cede3c59e39132d8be1029d0ab518f36eced60d28469dc967215c863eaec9e61ef0f3564d34fa9b9a5598e42fa2cf4d56464c925637ab91e9f90660dd552b789f00fcaf665f67743df36bb442a84810bad1ae4d6c16ae56a4212be71b9d5cee189c243eb8125200222f8d203abf676465ad458be3cfa4c48083985e0f8adf783f988781de9e1f14c25fb025c8e19c59"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x76}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfbd4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc7e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2c1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10e5}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000000) shmctl$SHM_LOCK(0x0, 0xb) pipe(&(0x7f0000000580)={0xffffffffffffffff}) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r5}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_ID={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x44) r8 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r8, &(0x7f0000ffc000/0x1000)=nil, 0x4000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r6, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00'}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000d00)="96c7adcef723b9eb9dccd9e73ca5036e5aa4586eae8b840ea548f053b6d52f6fc4d3d97daed77c16095c2c32afc0e2657949b74cef6638bbce8e32dfb2aebccbda8001e5ec72467d12291479af76c6a673cf608bcffe87231f6e507653071314805e6502f394d20fe24f7bf463c3a212e85616a353372c8125e4cd1a4bcd57c43f0877bb38d47570bed93e2fba1924e32df5256073a29170e4cd7a12766acb96b70f4989f12d3c21b8251108f4c9491f286efb92b649de337df40f51bcc2ca53978b02bfea8291b09c913c3b18969ca357fb5d2dccd67965c08cb28bac42489071e009f6fee12e9fdcf43c0d8642ef806417600ee90088418f9c044859c88e5b56f2d32fb0d01fec4bbdbfc1e20b95d6dae9312269fa2a132c25176f476a8369c92123d18b68135bfa89868e89ebaaab398b37126f60017d402ee46eb9b35346b47f0df851120e3ca1ab26c01d84dd1a32c1ec87f445ffe6c823b4442f16b7be3106c7400a23b74731a9c0ee3a692c943eb472ad604c1a765101c205733cb78a0e626519636ce2cc4542f99fd17e39d270fea93b1e97fc09010b2f277e221ca42f23f6a099c60b95f08ff2238b2d742120f3ae2b49f1105784c3c157bb1d103edb57f3383bf66e498cdbeefffb359b306ad575eb7a28aac3274ed033d76961d663374756822a580d2776947ff3f6c4744655f00c24892dc1eae9067010ef4aab0aaac5ad7dfda93619e8bd5f931511d404ccb207efd3afe93a03fe0b419fef70fa37afa9b1800638f5afa565cd3205fd990b1e682656220dc655b5946792eccebceffae44e598e221a39378b4904421e6356ea55d9e5869add233bb97089d874e2e090e4abae309cb3a10af1ea328411628a7575cb8f315c8f21fc77c36ad9f16717312184dc6323d27d3471c656a131d4c5ae54809c27b05a7822ac4d8e4a145372e395ae65140f331685df9e45c990738fafc59e20ea2b034106452a9e41f48085f5a1c01b01f2a7ffb7241a5e2ff895f2fa47706777942d5af639cc53fadb39e190aebfef98689c657d8b4dfc4d8fcc8898bbf9149b3ddaa1880beabe8d7c8490dee23a60aae6e6fcf1fb39590f731a053d7cf75b30272a283a79225d69a860078c9c8a80834b7b763e17a2de42476b57657b802be5c7c5a83b52a716c377dda3021d4955f6ff0202623bd6561350e51dfde3e5d69a1ebe1e829054d860991137869b25f8d2d2579de41ec5055fb25d1303f9ded5c15dc2ca11525c6e9c4d32865b00dedfeb2be615b086636e16127c9f29a181865aa351b6eced251a9c55b1e1be00678ed8c95c813840312ba87dd63ffad8daad4cdc32e85ab4f55504fa963bd0b9e955671cd4c32f41af56337fa8f33356eeda9252f46a052a60d2e83d5bfa0b5eb35333bdd727f9c7b805256bdae21daf46bbf99a74cc8cfbae69a07cb2c228318205a98bcdcdc414395fe0ad6f33bb28d34ab82ea9a753ac194a98eaca0d3e797266a5bd02192735aebe8ed37ed5f206c43444ab994baa168103b4a57eb3aee8a6d9380d3d5a282e486c8a09ccceaf27a67716e1e80973722a20021dfbaacb7ae18e0cb3067b7e15a666ac6566c33e766fd4e20cd556a826bdb57559ea0cbdb479e40db60d6830de84626b365851ef825700edb1809ba917194f3cd301778477fa10a974dd884235f26839ffac9c3697e5ee29b5ec973aa8c9099f8b5d6624a5860b4aff7e3dd945e7796667840cb09c491ab2f63ed13bf2ab88479b97da14b83251fd64d028dccc800104bc030a4f8cfada048e35fad34755021a79ddbd77cb145bcb2db0faac2a4177f9130c6187c7516d30acccd312eeb27b53603365d47c44d43d602e60cc6e0a48432ddcc454afe0eafbd318f952f388a899c7b50e84b1f65d9ce11016d6f713cf92802e166fa8fc411613afc56512ecd6e80f9aabb0ea88505dfcddd904adcc39931d233927c3d612b637dc41f4a1730f0f0c6cf260c8f6f21f5d83146e4a04fffce1b150883de05fabd25f48bad8f448d949d95b6e39d74dffefb4e3d67f6e2ca022f0ff5b694d942e67936019970e53014a3733375b90b8c08152d1b6ffae28bcfc9e605f027b47680cca908f36b383c699ede00c8e7b3446980bee589e61c19ac43bc07b963e8cf54f1bbc1601e71c57b59ec10ab61bd3a3600f6e3a0472fd7ff0b9d89651796038fd150baea17f4571904edd1b701cb8890470fb14c145e6fbfc5366bbc257d62731ca338a2c40f3869f28e823080213a8d2fa11c00bf9ae1473a9d2bdca6df0f711ad9d128461b34b45435647f1ada5cce3e073d99e71cc83584255d48434407e07a431861df865245d2b61b299297ccfb9500477a35f01e38de25ef925fd3b9eb8a82e2bf04eb9a47a955f382f17196ce82c877603447f52a618888215b0ee2ee8f8275501a0714a9ccdbb7a3cf85a4835e31175bffdbab8680e76a9a63072c496d7fbf773b42482a7095c15d9e789fe7574fa6e14981eb91febdd63638f68e5c734b50671ee9e949b3cbf3776a6e701d2d75ef2096a201c0452d559f0a444898ff84a16030e1289dd56dd7e1d5dc360b63bef50961be6adf69cff79648bceafc8d5aceec0498d8192d6681eee14553af75aa6000a2e45b089a977741ee207a2ddccce58150e1328f231219ed225381da80b5ac854fb5bc758a7ca1d995edd5299b7f2628c19c52db7bd17d2185972a0ac67709f91663b92002280119284244fe7b2a3f7004cf9c9989b6610ef829a1caece7f263ebfe13ad290040734702d2c1bae929a63d92c8fec52c9730a650eeb0cc1fcd5223a338e6dd5f47f514faf922476d8b2e9cf0cc6255a6e3fa0994fcf48aa4646fc72b10533f7929af538925c5ebd2fd2635c7168927b5a163bb18e579aab0b34749e8ec0859b9729850bd44f9432f1f5015c6b6a53388a31e9a865c5db61af4ac52cca0f273db6e0f964c5d02a46ca250319e2809ad6a98ef499d267bbb62d4a5082e451bd5252fe5d7b09a456b471a8e72786fa4e4bb42d90f18668b14c07d3cb138e04e1cac87317335d3632b3bafb479a6dec1635c23b3a52e8e1c395ccb4a87314c1801d79da29ee80a46be0f29de084ecdbbbe9468814a62cf74af972aff1af606c736b59307de07aabca4ce00488f10b267d29d8f5b5da3d110c8f88310c305d85d142264ea74be3158f3d481acd875e91bacf888ea8cd1e68e228ed7b12eab299a88354933cdb38087877d53694b6172b9a932fc2b10fa47b88e5343216e3af18811bfe6fc729e0764fc1000cd4e5e82b8d4115d421e0530932a6a8b0f2bb15d478cae131615c6dfb9dd75822ffe9af711984528fc782633b4524b5dfbd22d3026b773a0d1d5c7e9a9b70bd9f39ee167f8e7c8ac8a4457cdc7cb4a77a1208438b4d24a5a5d2d47a1660fb620be1dd9c6b5abf48e5d0db931471210350162e47648915ae27c70901b0b76f848cfe35f5a797e83c67ee7f2978fe12e0fdcb25357685325e646b1b480ac4185288bd05d7529e940a2c56b6fd22b724143400e4b963cd48477154922cd7c8fff2154ad15d1442e8153ea71aec907d00ddd981081a5fb33ae01b12cd1c061a8620edc80bb44b350e944415d6f8e7d6f89e14f575f1eabc9f9b6332de3bc02a1b7f970b43729c6a4a8e08d4d614ec384c9622470874560081c06623d07278800b599180ff823a2fe70981cbb12cb6a6e31d5594b0eee268ac1e48c75adec1f874f7193b2f8b667dc68e75bfabb41845a7a5313dc8ae9c1b26a50fd47895110f6da9a8d77e7397c3d7558f4e3799567710462738abedc4a9109f414a95acbe5b3c47076af8afe23b32a4a3c09971bc67e5bad40ee287b2f9eae79ae3f7237f2c6fbbc824512084c23a5fee56f183fa56cceb1e9c4b09b91c66072260b4ec30d572205cce6dd0cf99908482c33c74f06c94b49a885f92de31bcc23f2c27be57706f9dbd5e6de4d549f9c3f4c23fc566008d35129c287827b78f3f11249082c233b7fc2605019c6f139494503d70f0484fb34c8bc868c843de90983654b8eca42a816763aaa6992f25880f6834423955a16d876b7c33992abe837a455d03b9a42d7b1ab10cacdb8976976ecf586cd567a72da60efceb470c827b35559e9f2204da46b47a1726f33bdd30fac7f02782c7b7b81e9c63ec52ec61a408b6ebbb33362dd0324511e71d0648fc9f67c4aed0f1e3111b052a3dfa1b5a7540c1003f330c2d2484f4c22562152f83b38bdf5fd49f34d4eaced168dc6da867df31c3d108e4f6b9d7cdfb38b76478654cd7fdf4c95e52d9c2368b16d15ae548b74b8bc5ed2b5ff121b3d07e062ac76e23b1be56a0bd6a516c69e293e46907a75e2e0f0a4a8a7f5216f318747b16bcc1bc96c821b239e748ecfc0abe646ab85b06e9e36a48b84842c8975d257c0b2cf3ce4051404969a4085be86cc4064d6906a42236514954dbc25b4f76317ece3952c7901c55ea909dcc8f", 0xc6a}], 0x1) 1.97469142s ago: executing program 2 (id=2096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x58, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x80}}, 0x0) dup2(r0, r0) 1.683484762s ago: executing program 2 (id=2097): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r0, 0x80044df9, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002840)='uid_map\x00') preadv(r1, &(0x7f0000002d00)=[{&(0x7f00000029c0)=""/238, 0xee}], 0x1, 0xfff, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/36, 0x24}, {0x0, 0x24}, {&(0x7f0000000380)=""/75, 0x4b}], 0x3}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6f, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e24, 0x4e20, 0x4d, 0x0, @opaque="c5236745cdddcb99c622aa007a068c22eb2bbf130c1bbfa0848917aebba404b0a2fbd0babe95f3d6e379732c7bea4e94f4a220ca2b6bf0937b98b69a33c79a3d70c952259e"}}}}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x2000000000000005, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000, {0x2, 0xd08, 0x3, 0x4, 0x0, 0xfffffffffffffffe, 0x47, 0x0, 0x126, 0x6000, 0x10000, r5, 0x0, 0x902, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x400040, 0x80, 0x2, 0xfffffffb, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r6, 0x933, 0x7) socket$packet(0x11, 0x2, 0x300) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/kernel/crash_elfcorehdr_size', 0x300, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000cf47d16331aef6ee13ff7f266e13da7be839b35e9ae1a333f2d8fd8e1983903166f4d8f3d5e043b8eb3a4dd0a04b39df97c82009b793cd734558a268aac6cea0ca6aa40899810bc164d8ad6b2ce23bf4b88d9b72991218c6c68e9a992582d217f639c8ad76405b511163edb9ca95e8123830003ab82fc86a517ac2aff77866914ebb9aca4a6e530d80f19ee31eeb1e5b8139b72264f8fceb54ee9980e771c5f11155b69e12e65e6a3699d1b80648dd949081f1a612b7b5950f41554c9b832f7cf9efa4987bd88887917199318d28808204e7638ca5932c066d2a662e600ac0a8f27b86c066f2bceabd1b3af66c12fefa311c5afe0821a14432925187a05476e0a972e85f26a24832c357d70d354ade966e6963234e4956658ac9ece3780485fcb3decb69a029ffbeda1c7b27bb020f4137624286d8a2d22221028b3efd3433e7fd3ba291446947a274a748f45bb347fa49e295cfa305f5dd46b662afde61cfee33ea823d23f46a662146886c6e3c30e660d765f46dcc14914b3e342e44436410fedeb6594f37ac94cd336dea463e0541daadbe70b5b925741db16240afc85f391539569ac14e5dccb9ca5790c33f8a6cdd7abc1cb762972634968ecb9f1dff8b6b6cd6f5f56db31c24ac5b2b1bed2efea1f4e67f686a8abfa41f297a165b9fcb4800230ed07af34727fe6c2cc6daf796cc38e8f03ee4fb786a92fabfbded442086d657dec598edb21ba428d4bb28ac974c38218bcf08ad3b4f6698ae05855769dbe5693eac83a223b76a5f452195795d3d485e5c0a18caf2315c3a21acb4bb661082b1c4fccfff8f0c52c353dedd3b9e575b800cfec557e43527228abf820e16411b45c77e99f308dcc5dcd1c3b8ddb828e6481c1fc6275c3e1ed4a1f0fe6d97db39cb3ad5b08400cc990ed5797e23fcd81ee76eed1caaf2ec709c18b014dfcfac7eb658f1c07a894dca1d8e23ebbc18c7b0acefacd915235a54637d13965681a6a527325d13b4a88a21505860873038bc6ca68e25bed80496e65b53a4817e7dba3cbe31eebb770ab04202486634b7210500238707cd664735c07e539e8ccb09ec82d7fad69c4f31113b4a01089a81d4a1787d69957a2dfcf371f0c357eba5a587f0d09d64588f3fade99726d786085b513e720fd1d889104e1d98bf4fe23d6bd8c408c44fc702880e6c53a733aaafec836a80b9e69d1432225dda63a755bde5103fbba7af46f81b3b0c3457d49e187c7fa53e9410d4ff7dd1c9a954d549b49197f350e8451e850279ba4690a4ff3fa4f91ebfa4dda7d2a60257d70c09ad6520387baf2cd734bf1f993565f7ccf80f29b1414e595de79ec03faf7afbeff3daf0034aeecfe41640366ae3c1d1b9437cb7580b9a94fe71a5ffe7be4f959cc5972e1672c5f5c5d252a63804d1a292aac2582b78ac73ea143095bc1283b210c66ecc5b5b9be4d6649920118d51429328f8a983a89f8f5d6ec383c89f07e91e0726ed40776d72d7499652a84f9d0bb086e9479a6d703907ee17345ed763ae817751515c744d428ac51fb10eba495f9a477809a4c1b447a94a3f6d1a092b109478ca36c3da494552d34f30d74a32958c53ec091e32ca8aaf5c814881d4bb3add2b07f362e9e4ea17b3f8b6e7310fcbea4ea6f2d9f5505b011011b75eb4dbf2455f665027abe2bb73dd37dff9c6aab6e9454bbd7bb887aef12f19f446bcbf257ada0e5144f708ccf350f07b861b813eb4cdab02d74b660d960c737f553f84b2d027da58f02345704583717199f693c913bfc2704cfde1b31270c43f17d51c82b672796fd6e1d09e34659d7e5fd9a1a69dcdde367c074b47beeb88f374740a64d9e9a99f4fabdbfca311174da518f868704e3fe259e6069330b04d2d3804a3428d2e04a483599f5ff47ff8c877601fcae33999575180fb540ff00c55728d0ee8eb6550658c7cbc8be4f87b50a9650a33aa164c6bae4044dfc080cf43a1c80e8a8132f973faefcf2ee23f9c2f3119fa93c0e5875832d4f8b6c2a1c347d480f15ead27ba7fb6e2ba9f2204982023b15b0f9df44ce9bba765c9598810593dd32a520ba72a5bfc375f36f4ea4a55017b1494c392568ef6828c18a1f2cec1442f705687695e42f62734ac2c1b0fed399ccf29b20fccd476afc72217182a73c970029c7679dffaebfc2ab9e8d18f5e757ccde87ac69b2bb0243b2e86d225dd2edad4919977bde1806bd6305eff22f2d63646c3a856a002aaea40d96e4811fe0cf5ad942e087c55551fdccc65835686320aa635ec50872f1c30cd8a732515b4dbfa132f905205f4b2ec64d1b9a9101ee2c3d0a110e40fd40d2c0b19f9a77b43f0b14e283ad1038de31cb21c2857d278933fd4bf106a7a93e16b28d71dfa73fa0695c77c0b1236e4cc7f17837be252d1011edf8ba626315e416b2963e96172b3294ec1f087672b0fc404edb79ca9b8e7a46f69b7a6f8b0488ec6c10f937632cc29bdb6f2c0ca86b978db6ca3cb9aa9b5f253fb5ba52e5b3738468236bd3ed26da1158e14881860f37f586b3b004ff7233a7427ece1c1365bb273aa1ce801c6d61b35a247c38917df23b9f12f7e764dabf9af18885e447a952de7796c3dd27e77325be816eb82ae9026ef5a855ddfb9aaf4a0bfc153f079c95337d2ee3c2ac36e5b4e8c5da765bf5d11edcf01ef11a3748d7ca0b1fd6f8882fbfd3423bd429c8592ec28a98bba845e7fe829ae2b11f5215ce819bf777ab45d73e9afe3cc76840b7d368161ee140efdec81ca1d5716c2ea5b255fabb5a4698864c8d427738837c45f1006cbf1f68bbedbfdf70e5b65b21b1934826c06d4d3da4f08e3ad376cec5aafb2f9eae9a06cab375ef5a44f30a563e5245077d84823b88d71912f458fe17d36e4b2a88260ad121af2e5a43a555ef61ffd242c09d5011b9be422c4c310a834f664c732930c1d329212aa9f063356c85130c965d919180e62afd193224d3792db6a069ff2bc8770bd6294a6884cbfb71301859a26b7572440ee12719e8753831bf73d353a33ea64c57df0bac0cc8938ea28370724439170824d1b55d415eed14f620d3a28bb5009edd12e9322df3573bbd9b0d0ff2cbd2e48c0c297f63c100116097c48c8f4cf0a7c4fb5156723fcb615236b6db175442b2db90c3e426cca9de56f55effdbb981c75c99a8dd084a619882fb216b000cb99eae616f0b5d7a8a2cc675cbd3e0a61b6f602250b040ae57f998471095563334e165f35139ec22aabf8ada15b890e2cf038a4f40d129760e39b166f58cfb4bfee7d4455ce06ad098745e0edac9434e4c61f889cbe6d7cf74da35f1b6d2b4455abf954223d1638ff808508228a3060d390e9ce539d2dcb032ae5d6c5abcd4df4bfb63f9851e45bb961cca2150eb386abd67dab2a12c096aa8df742e41ff7718f9dd77099d9bc87a2a46d8d6ffb903b23b429747c9acb21c0e88067eb6c7fa2507ef0673e6b65a15767cfa4ef9b52adbce41ea3461f77b0e705a2d5cbcf3841bd22414f3ef2402a915705a18113d370d35619fdbbfb4fe6e1581a8520525e863d931aaaed58d06d093905b0d83dd1345f4b8213954102abf8048be627d437f267d4a0a6e6f181891562b61be55f1e646120cfe17d8d2961ad86d1575856fff39791b90ccc6895495cc0f3a1e2604f5b729aec7452b133b9c822bbc74df480670f34cf0335d42b5ad6a7009c49050d97ef8c09eff8716dbb9ce5a5d67ffad2541860017bfe982c0e48390f987f470c7b600fb29be4d3a74251d85ef1cf1fe3b5a146bb9f6fee2369cba1f2be75782b14a422b0820fa00c1250f4d437f24914a94a8564fa079fe803b39c528707dd2906120d53020000b725596b68553f1653aad2fdd23114e4a7ca3402fcdf0b060323a683a03109ffbec9627c803da8a55665e156a335528f113eb730bb28c0480daf8f2b65483d0f3805e1c512b680d8698e63a80b45aa8c7e12ad0f0e072eefc806fde42455bc4d157e402a86218896d5638f8fdadb1fbffaf4fe92f526475612980f0c5a539a9cec3c63e4efa5b893611af45c8003650888dc5b958a18848cffe11e0636f40e3ade10da702b71a69e6941e506ec3f0297349867949246310909ff445005f68910308df1e44f7ef04efbcb6ade53086aeb80b0ca96b94c9e6353c77bc1ce575edd6a1ab76e000d2ca0bc80c09d76d2bf25d90c93d5fcf6c123a9e83a3354b798356aeb2e99721732d52b1ec6c84d79d6f1237186260e7e63f29cfe8050a8fd44d57b52582b45e1fe027792c07ef33a0ac686606dd009ef3839e179190aca20d01db1d2263898a6953feb5d2e8093a4b4a2b18f6cb06a0251d3862672814b5165213c65174fe5dad7673186293e336348fc77a6d545cc07355c07a8b9a98c95d76fa5dc4c19181578a6dc4f2b29b647ab6a09f6756994c8e389c7c165766f154468b380e1e67cb2edbc7f67b6bfad1de690c3f472908b11d1c502ca61b5e869cd2cf8e11e39eceb9d31fca090fd5dd15e1f5a8c4de58531df3fa96d655653a5b99ea449d3865e07401ecb63fb4ac4042c893841c2b70b4a133937ac0dca8d6f442de175f138ab7cf19477c2483caf524fc443b3243d31f15f3f518b2d7964314d7d34754ae417dd9d46a83e443cef18eb673f46f34aeaba592a171bb4710002da17d9d6554208fc384de22bff7e05d2bfb821656e78bfa084be46fe6b0f04a06c6bc80afbd406a918a57d582345b260360cec7168142ef0e0da8ad70ac9703d6206c6da23558374ad8bc1e8fe5cdede25e8ad5d0d0741d85e86566b7b9172f457e36feabb881f14a04d182b6971bb1aa1c37a608ff0eeaba1b6c37c4bdb15696afb0e031ef8b214a7a72892593c910829c820f773135f3441afc90cadeb50f76d4a5bbd713c8b3dc441599dcae659b9ad417affde5d9ee3933f00ea69323fd33e0b9a12b1ee29b2e97c7b1db3fa0a900678c6490a847fdd85fa93bb134e3239638052359774bc22405a0abb698081ce1dce2dfe0c0430b641f00d230013944df65581f6b5f458165b16aad8b92b44bf28b3236cac5239c91fe2351c5f53359d072aa34ffee18ff275afdc0dc7b889da928fdd4e300a52699cb5a4fea8cc42f636b15e449daef52df3586d4b55fd047b04e96734aa2c45bcad8f05dbf3c97daefcd6bad396a6aed71849e484eb0e3526970973db9b268b71e726748aacb5c2203cde2992af74cac612d33cecba7f3e5d66e2a2e449eb00e770af4fe13be6d16877cfa46c108c29d8db1efff5356433fc627741d12605056ec78c02bf143afc9e2161c15ce65a0f8c9f13a6b7a9164f256301ff0ca23dfffb77ec46ddd29b63d7bcfe5a"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff15}, 0x0) ioctl$PPPIOCSMAXCID(r6, 0x40047451, 0x0) 1.619423494s ago: executing program 1 (id=2098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "1a21ceb6ea753eeb", "3ca2bef57d8651718388e89e5320b007", "d4af5d67", "4ab7f0f05183f35b"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'veth0\x00', @multicast}) chdir(0x0) mkdir(0x0, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000004"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}}, 0x0) 1.187256149s ago: executing program 5 (id=2099): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) ptrace$ARCH_MAP_VDSO_X32(0x1e, r6, 0x7, 0x2001) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x66017, 0x3, 0x0, 0x0, 0x9835}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000aa6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) open_by_handle_at(r8, &(0x7f0000000000)=@xfs={0x1c, 0x81, {0x0, 0x8, 0x88, 0x4c1}}, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r9, 0x0, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 954.543198ms ago: executing program 1 (id=2100): socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0x5, 0x0, 0xe, 0x1}, 'syz1\x00', 0x34}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) pwritev(0xffffffffffffffff, &(0x7f0000001500)=[{0x0}], 0x1, 0x2, 0x2) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x48001051, r5, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x39, 0x1a, r6, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) socket$inet6(0x10, 0x3, 0x0) syz_emit_ethernet(0xfc, &(0x7f0000000000)=ANY=[], 0x0) 288.416185ms ago: executing program 2 (id=2101): r0 = syz_open_procfs(0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=ANY=[]) write$UHID_CREATE(r0, &(0x7f0000002240)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/182, 0xb6, 0x8, 0x7fffffff, 0x795, 0x101, 0xd9bb}}, 0x120) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x5}) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x3) getpeername$inet6(r1, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xbde, &(0x7f0000000540)={0x0, 0xec25, 0x400, 0x41, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002740)='/proc/mdstat\x00', 0x0, 0x0) 229.198096ms ago: executing program 6 (id=2102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x4}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05072bbd709fa2582a64dc5bf56ab809c3fbf19dcd0966bebb078179e000000180000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r5 = syz_open_pts(r4, 0x101) r6 = dup3(r5, r4, 0x0) r7 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x11c, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0) r10 = syz_io_uring_setup(0x4b81, &(0x7f0000001240)={0x0, 0x12db, 0x2, 0x1, 0x268, 0x0, r7}, &(0x7f00000012c0), &(0x7f0000001400)) io_uring_setup(0x3818, &(0x7f0000001440)={0x0, 0xd37b, 0x10101, 0x1, 0x3aa, 0x0, r10}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r12}, 0x10) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r13, r14, 0x0, 0x20000023896) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xa, {"08c39ee52f329f1698b1c4865f8b540a5eee9f496a0809c3d20325867b6edda88489ab4c09fe0a7f1e8640aa8e344f412df0d69475a5d6570e21f31fac7dfb4aa7ade0e851582d5c1abdd809580cb34c9e48576b1c73ed76023256fca058ada3db47d86cc75b33cf762b67fe61f152618c49a40858f68794a4fc484ab73ccd254ba3d147f5feddaf91dacc238c0a8096f79597ca1e6da781fcf37a0141a335c6a7577d2d53c6e552a7be208381bb31d1d3e0e92ea651655217535734b286d3f19780a4c720075a36a734151f8c00e651cb3a6bbe30e3f6aee48750436da6471e965e81f38134674fcb697108fb7345010bb8fa15fba9b33355d7858327171ab9c68f6c21b2ffbff4eb061dab80bc77a4a7769e7ff73bcd98790e09415bfc5978cf5af45c3ec9ef9c1a39f766c59d59590281038dbcb765580ba2b3f141d5bbfc40910a0894cd1f22d2a8b6d4e4778debef99438b54d44b4b7568de2777431a5b2f3e8d1a45a60a468f5e33e8ef534f803dfb6798c270f52edf031ecd996bb78c4e92961c63c079676d77412ebc6074e5f235417785e7a14b14ce7626b015071c154cc2bf8f4499b93293e9997c23df4c7a1498cf12414fb31eb873728e4f613b540d22e7ca718f18da5b82ed24995e4309c3af4a2e1097465bf09728082d09e71ea365522035eb9772b8e072f8454777ee304dacd59d3eb9f933f151fa14f8c38eadbeba04810a2dea7a66824f09235c13a45f07870210d0d310ce3ae6284577bd4e65f32700f6723727926cb52e4f27776a1dab0f6668327ab5cf1893879a635261f2e0d9923ccecbf5b80f10a8275c1515f47930d614e787f14c105d3a4f8faf8e7f738cf4eae4fc39ef3db3cb87794ace87f7239b69dc4ab4e5ae57cdfbd309e847d99600ef14b51faead01e8ade57d24270bc13a1787896096eeacb8ab1c93d31d93cfb244bb09ecfecf336362a5656db7df327cbb9aeb898f8af229c7bb9452805f2b4510c5df86b6d564e01f000000167ade5205331523a6392af2bea9e6db0ba5480cbf1b202714233289c4017cb66e83c0c8b6e88bedb922162d0ceecf6c5da173bbefe6781ab7720d2be6cca378db650c69d4228141ae190922fbbaddb86c7f0fe138b704e8305b3bcc7910b2280d96d71dafdbfa876b0013fc4de586f85d9ee077b6349becbdca8bd989a51c4c76ed8a8cc691a65078e0272a62edec8236a779f0cbffeda49dcdccd4def7064e0d77ae5a8c64f3057b4a3a0d4457d33f2bc6c112378315411baa4bb126fe540d750491fc58fbb66911ef82bce5ed76872dbcd8e05dea2f3f347a653aa39ab5d75e71671bfeb924e71476134dbf91e3f287fd853cc34bf81e717edd41aa04b6fbeb43cf2074f0c8fe5350401b6cff801c147a3b58b972aa5652629a9fd8b1df2852708ce958d4e9974ec4383aa5da4e3f75fdc85981e97b75863546f67a8703673b6fe2c26f0e9eeb8c45c26f673adac55fa5d69b82ae7d032fd3b26866047e8c029b90a62794a89c11398944b398b4177b2dcc5a743c16d4a5333b1e30af678d3db8df849c1753db067a6f94bab00c0dd3c7e94a8675924c89bda98ac09e10bcdf83f5114b9b466c413477a5cdc48c857230798934bcc1f0eb3a2d2944b139e459af32e515785f46ed4e97cdcb23c7e4dc7c4f91b5b5ca5228344aeb6652fffaf31325c7429bc70a5f6beaaa98ef190dffdeccc94bd814b3edfdd48243bf34291076ab5438ee00e924a827d5b453df42d24144fe1a45bb6c84fcbb2143d0a561c1e867c1279bdf0a47061ea77a84f36c720aff785f0db10eda84c767b5f3874f9455c0f026735ded32f0403ef7dbcf97d2233d59c670114ddf89314ba74fc248bcbdbf43c24e46304e229b3cf583aa410f4dfd119152495da8737518ee2a05a8ca1f004be3c551408f2e4013e444b63bf2bb26ddeae505642dffcc989ee241c48741181b506e22fdc4530319522780c74bf786852dc66ebbb51f8ecbb1e35de09ef7afe589bb8a31c5d63477db5d5e7174694ea04cfa98057d39127a4e5eedb4897a491c6693acd0a036abf846f3b6f3006e5e5fd586f29a4a8a31abbccf732e4f1b88187a72d669c16302657e9cbbeb9322662e111edc7771526400b6123d0f8207bcaa38bee07043e36e223d418ac948d65e7acfe72cc3fdcf03a3e43ecfec8ae489ddba09126709c5c7968829e3504de8a5010c9372de09476a7b96b04d7aed2486d8f89f21f075321abe350024abe00a81f87df3dc372fc3206496776c26b6958243070bda4cace3e358da5d39a3945765c2ba4b002b06efd416af66f3343f218ed84550ea83f02f9a5c3fc677ea60987aa25f0406d6154081cfdc074814a2465accdfa102858f5a52c9eae293c56ddcaf8f6926d3dd0ccb51a30c960d6b7e473038ebd3702b5106f6bc040efdfd7169fd3f2dc42ff23de26a239e13b74278729fd7e843b38a35c55fd50181ac13a9cbbbfd8feb36afaeb1993349c0ac5a0c44ffd92919dfe272b0f8ed7df7198cd299715f021109a58dced4753d3c7ddd6e9ea01596f18b2fe7000000004ccfca57aed5b5cebdff65de480a56bd53f4c7f83ddef00d7c9686311d1fce76f320bb3222a11db30ba6ed31535d8fda61e694478ca9935d72719b8d6b9be88ae3df30b60ee251b919b4d1734b994c62accdf855488b351738331b462eccf27efdc5577d7a5548579dc90d227a42ac010f33a720dc3cf0a63454f8b07c775287495761a058ec1e28e6aaf8057241f4ef8b5de56e279355bb66630c4ddf35e7c2cfff26a4241b1df0379d2a1e9f959e46d3843f89844ead50aff44640fcbc4a1edb033afff7cc9e57c4f8d31900764233e11fa4c28e547788c1b00de4268df692ba3415a9ad90fa712f9618f5ecff57da32809380eeff040cd3b23f508614c72b303cec3bcd732708303b166193366a062b9cea536f28478c387e626744c6a611a8e7162d274efccc84eee8eb31d3310c86752777dd5b5ffe234e895c54909f19a4aabcf3c15b90c02170409e314fd90e766ec4ba93c8ec6321237a980ad3c32fb2fab69e57541ea7f5427a85c2c57d40f9ebe9de5572f46a4713fb28e0af42d0adef3e29195aa41a3ba318181512eebfadffede4e35ff7f975928edc5d4d9f2d931fb44b30e1df55e66c52e1648e9cdaf71221b57c6a6b087428ccc57ade5b1531341cba2be452b426c434c70fd8c493337d4995cbd76ea1dd545226e3eb59d5f94ffb5352f87a4a66cd7c5e88322404fd397c46e198646a9c819d0eb1f10e54d8a3ea912f1cb134ff1095aa7325287f6ea9af8c13b67d6abcbb70dbc06838ecb33e45b60f6cb832c3e72d1401770f66bd02f35a2d007815ab676099e31f5102000000c0e83d5e7107c8dc5830c9cddb9781185b94d7f2814c5058ba3ac54c268741c5728f4997a9628602c2a36090162379f3f37c47619b3e7c7397a5913b7060b51e0c7f7226ff1135444f866f89a4b74136cbd3acb7178bd63183b3fd9cd19fdeb6fcc6341910ad4605da76a9af4bfb8b75fcd666f8188902b380ae560d9aa04f8f9b0ac5c109d1824a470726e06a49d955f8f71c8a86081e75b13f62600deb941da181eaff544cd559c467d8dae432debd22e7a7b3e1ad731a5b9470f5f60423dda061ff899c07c79f3da34f38e1d8182d6ee0c36c602945509167be440382a8a8a759b20e41638fd57152029b190b5701d30a86f579e2d0cc53a2f809ca9bd3aba1eb2772a7acc35c4d983afa83a9baea35c0ed4931234719636cf8f5fe1884bde6cebbdf23bd62b1ebf0a5cb78c27295349bd7d5cf28c4ee4689497238fd3aa71a417914e6892667a56bd69dc2e5882cfb67df71494e9a9199e025892e4e7435f727636cd988cc7563d28db5133f649849c5b3973a3428de10ad39d96146b22acc50f50eee5a038876452b960686892de40efe30081ccdaa2bf64af78d5988026e529b36c62a21378ac42d220d0dd878010178e374e6dbb2b61206066d04e729ed03c6fd9a4e00547fe9304aec0925d85a0acd07fdc5d48c1a1cff656916f5d25952327792255e0d606a32517781cc3d737ec753eb95b5b5b95dabd8946907ab54cc85d05b475e2e5486c6fc070417198d3a50910e2949d20d3fa68fd327934cff5171224942b8f18d88947763a7c710d09c4b269bdf2d3e715329917fb70728a4a0530999b755ba8fc04deabf4bc4bcffc4d62d491538c65078122bf2c263ae0020af67cfc9cf19e5b929e086af281fb43d5504d728935c5cfac136eb81703d50fddb39a5a713b2914c6acd9b2d07819cf7bba495ac5734fe423e611d309b80eeafcf9053d51b0ab3c29d5ca5eb8861ffc1ebc4d53f361b8991baecb52860c15202f979e34054fcde869d018103ccd6d914a70f1840fc6aaf426beec975ddb980b19b0f4cc2ca393c0b9e6ebe5e7d1c9fc1ef7a1c91378f0b73262993fb80667ecf62bac3c47cbd002ae1b87b8dc3ec99d5c987765d778868eb55022cc3bed14b8f934a584bcc98fa0b4f6e6982ab8d8a2bb49f9074ef429dd7b8db332a96ccec6983a97be7c8634c02e7937ffc8d613b83aa375886bf40a87ec062090382f874bf2c8e5fbb58ac18a46c4d9e85af3ca21bdacb7755f49776b0eb3972ff682c84beb07d74cbe2764e378253e72128991b73d2730704a5448280e8a0fd8cc87d4cddcffbfe5525ae3d2304877a3988e33c8e12bf77793e753f25840e9af2ce56bdb999fc62623a2298b4244534f662eb398a2577c72f6cfd5174697dcee151d4f3a7293b11de3889c43744da4165aca4e4a1e926d37ae4d7471584a06f3641f2037a74a58c2397a594f29d142d59f91bb57e24e1a3f30f68c626033cc34895c1b16d62e3a375c3e09f5dbd9338cd3a500643143cd404b57019c648c3ec31d696233fe16efc3c4c84aca0830ca8b9fbf1144b98d82f41e4cf67631c74cdcf8d9c8b8556b876ff1592683ccac0b47a26cb3a2cb1b917f433bb54e0b53deae9ac4b1cd0594c1fa0e6744e7ed88fdac60901e3da989f3b0d7c12b140cc576fa1b0e8e705321d37c303691aafc9fed9c3dc419078d0925ead56455ea5f3cd57941e410c1c14c2e8972d7cca44fcaca1f64fc817f4a41b6d9fb237fed159cb09e788ae560726537f49cb64b9f60915d402e0931355c55ad792cde758548b1af54b196e414046d4af3579a6c30ceac3d68bbfd2adef309c064e759a9f0dd69d682a3880b8ff27b69abffaa45ee7e65d8f1f6e40c188f6249fdf72220b4c87243217ba0292b9e9b67ebeda4fb83406216a4d765812bafeff34cc57f7d2cd1608282079c076055b9cabffe5fa491b970291bc2672540ccc15ed877d7dbe3ef683724c715ace770905e48c2dc6a44e1fc095773676d070eac00ee3834b07590cba7093f56b678313870471c81599d34c53fc03ec6c913d8ba3f604ace8da12d2025cbb5000bc062f4db65a6feacaf3915206d1c15ce7e78c17dc2ea32cb57d6fab0a22d487c77118e75016006f812541ec8180a321287a2d57248d4ee4a19706a19d802c70e250c3b0fc400a0b5cdc06537d2f55fd5300be4eeeaab8cc481a84b6a5e17d8c47ec92fe40710d4ec3530a94ca16710ade2ec7562398106e0ddbb6c8af6412166afd99d45d29a3a967e58decd0d6fc5bebb98d639b5606efd358a43d635d50f0ccb8472197da604994e7fb700243d5f7e45700", 0x1000}}, 0xffffff5c) r15 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r15, &(0x7f0000000000)=[{}, {0x0, 0x8000, 0x1000}], 0x2, 0x0) semop(r15, &(0x7f00000003c0)=[{0x0, 0x7fff, 0x1000}], 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 186.153512ms ago: executing program 5 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xa, 0x8}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x2, 0x1, {{0x3e, 0x4, 0x1, 0x1c, 0xf8, 0x66, 0x0, 0x4, 0x6, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x13, 0x45, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast2]}, @generic={0x83, 0x4, "13ef"}, @cipso={0x86, 0x81, 0x0, [{0x0, 0x3, 'I'}, {0x5, 0x11, "e07791c04eee5714572f45d977db04"}, {0x6, 0x9, "5203662dff5cf8"}, {0x7, 0xd, "a7d3ef044bddf22601eb06"}, {0x1, 0x11, "9059505d047efa62084064c233440d"}, {0x2, 0x7, "a9bc66ef78"}, {0x7, 0x10, "3c3a958fbecd3e4ff3aa1fd04880"}, {0x2, 0xb, "26c70db7ecfb9d5fc3"}, {0x7, 0xf, "1c535b3d41fca15abca8e27b49"}, {0x2, 0xf, "8bf5504460c746c0233688b709"}]}, @lsrr={0x83, 0x23, 0x3d, [@local, @local, @remote, @remote, @empty, @local, @private=0xa010100, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x30, [@local]}, @timestamp_addr={0x44, 0x1c, 0xb6, 0x1, 0xd, [{@local, 0x800}, {@local, 0x1}, {@empty, 0x1}]}]}}}}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x10, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f00000005c0)=[{0x3, 0x1, 0xd, 0xb}, {0x3, 0x3, 0x9, 0x1}, {0x1, 0x3, 0xc, 0xa}, {0x1, 0x1, 0xe, 0x6}, {0x0, 0x1, 0x3, 0x3}, {0x5, 0x3, 0xc, 0xa}, {0x4, 0x4, 0x2, 0x8}, {0x5, 0x3, 0x4, 0x1}, {0x3, 0x4, 0x0, 0x6}], 0x10, 0xffffffff}, 0x94) syz_clone(0x280011, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2104): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0xb}}}, 0x24}}, 0x800) (fail_nth: 6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r2, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xfff2, 0xc}, {0xa, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) ptrace$ARCH_MAP_VDSO_X32(0x1e, r10, 0x1, 0x2001) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) syz_usb_ep_write(r6, 0x81, 0x0, 0x0) kernel console output (not intermixed with test programs): : syz [ 618.932374][ T5877] usb 1-1: Manufacturer: syz [ 618.937007][ T5877] usb 1-1: SerialNumber: syz [ 618.948599][T12200] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 618.959209][ T5962] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 619.115827][ T5962] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.124937][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.133191][ T5962] usb 6-1: Product: syz [ 619.137534][ T5962] usb 6-1: Manufacturer: syz [ 619.573034][ T5962] usb 6-1: SerialNumber: syz [ 619.590998][ T5877] usb 1-1: USB disconnect, device number 64 [ 619.827863][ T5962] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 620.629432][ T5962] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 620.646125][ T5962] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 620.672057][ T5962] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 620.696160][ T5962] usb 6-1: USB disconnect, device number 21 [ 620.865741][T12225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1685'. [ 620.941302][T12227] netlink: 'syz.1.1684': attribute type 13 has an invalid length. [ 620.991276][T12227] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1684'. [ 622.180817][ T5877] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 622.370481][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 622.394012][ T5877] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 622.417703][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.741617][ T5877] usb 1-1: config 0 descriptor?? [ 622.791164][ T5877] usb 1-1: selecting invalid altsetting 3 [ 622.797034][ T5877] comedi comedi5: could not set alternate setting 3 in high speed [ 622.804124][T12245] bridge1: entered allmulticast mode [ 622.818733][ T5877] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 623.390888][ T5933] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 623.693044][ T5877] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 623.716558][ T5877] usb 1-1: USB disconnect, device number 65 [ 623.876485][ T30] audit: type=1400 audit(1759779995.459:676): avc: denied { create } for pid=12252 comm="syz.2.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 623.906873][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.913681][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.929596][ T5933] usb 6-1: config index 0 descriptor too short (expected 19492, got 36) [ 623.960653][ T5933] usb 6-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 623.981160][ T30] audit: type=1400 audit(1759779995.549:677): avc: denied { sys_admin } for pid=12252 comm="syz.2.1693" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 624.010921][ T5933] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 36 [ 624.037964][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.063844][T12256] kvm_intel: kvm [12252]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x65b7 [ 624.085431][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.100625][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.116238][T12256] kvm: kvm [12252]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3b7 [ 624.127043][T12256] kvm: kvm [12252]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14a2 [ 624.136827][ T5933] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 624.159141][T12256] kvm: kvm [12252]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xac3c [ 624.168576][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.180292][ T5933] usb 6-1: config 0 descriptor?? [ 624.189520][T12256] kvm: kvm [12252]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7b28 [ 624.198633][T12256] kvm: kvm [12252]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfe14 [ 624.939224][ T5810] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 625.056191][ T5933] lg-g15 0003:046D:C225.001C: unknown main item tag 0x0 [ 625.084881][ T5933] lg-g15 0003:046D:C225.001C: unknown main item tag 0x0 [ 625.103864][ T5933] lg-g15 0003:046D:C225.001C: unknown main item tag 0x0 [ 625.130773][ T5810] usb 1-1: Using ep0 maxpacket: 16 [ 625.140782][ T5933] lg-g15 0003:046D:C225.001C: unknown main item tag 0x0 [ 625.157909][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 625.180875][ T5933] lg-g15 0003:046D:C225.001C: unknown main item tag 0x0 [ 625.200752][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.229125][ T5933] lg-g15 0003:046D:C225.001C: hidraw0: USB HID v1.01 Device [HID 046d:c225] on usb-dummy_hcd.5-1/input0 [ 625.243850][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 625.282945][ T24] usb 6-1: USB disconnect, device number 22 [ 625.290676][ T5810] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 625.340804][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.373535][T12280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1700'. [ 625.401590][ T5810] usb 1-1: config 0 descriptor?? [ 625.830099][ T5810] aquacomputer_d5next 0003:0C70:F011.001D: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.0-1/input0 [ 627.100896][ T5810] usb 1-1: reset high-speed USB device number 66 using dummy_hcd [ 627.480776][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 627.721945][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.785839][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.830779][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 627.941057][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.986566][ T24] usb 6-1: config 0 descriptor?? [ 628.468079][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 628.486383][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 628.618531][ T24] usb 6-1: USB disconnect, device number 23 [ 628.631420][ T9] usb 1-1: USB disconnect, device number 66 [ 630.496990][ T30] audit: type=1400 audit(1759780002.089:678): avc: denied { setopt } for pid=12332 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 631.215866][T12343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1717'. [ 631.640323][T12348] fuse: Unknown parameter 'ÿ0x0000000000000007' [ 632.226904][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1721'. [ 632.253045][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.262056][ T30] audit: type=1400 audit(2000000000.920:679): avc: denied { mounton } for pid=12367 comm="syz.0.1722" path="/file0" dev="ramfs" ino=35010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 632.285242][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1721'. [ 632.296137][T12368] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 632.307143][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.326094][ T5830] Bluetooth: hci5: unexpected event for opcode 0x0404 [ 632.337862][T12368] overlayfs: failed to set xattr on upper [ 632.359520][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.368420][T12368] overlayfs: ...falling back to redirect_dir=nofollow. [ 632.378598][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.379278][T12371] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 632.387705][T12368] overlayfs: ...falling back to index=off. [ 632.410574][T12368] overlayfs: ...falling back to uuid=null. [ 635.826714][T12403] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 637.002614][T12436] netlink: 'syz.2.1736': attribute type 4 has an invalid length. [ 637.019513][T12436] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1736'. [ 637.610749][ T5810] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 637.620789][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 637.651026][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 637.689838][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1739'. [ 637.699409][T12445] bridge_slave_0: left allmulticast mode [ 637.707809][T12445] bridge_slave_0: left promiscuous mode [ 637.718276][T12445] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.810870][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 637.819540][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.830460][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 637.842274][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.852681][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 637.863223][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.926463][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 637.961876][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.971278][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.979260][ T24] usb 5-1: Manufacturer: syz [ 637.984535][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 637.990613][ T5830] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 637.997732][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 638.005041][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.015503][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 638.021797][ T24] usb 5-1: config 0 descriptor?? [ 638.079532][ T5810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.091261][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 638.126091][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 638.163262][ T5810] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 638.183280][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.236677][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.252931][ T5810] usb 6-1: Product: syz [ 638.261423][ T5810] usb 6-1: Manufacturer: syz [ 638.267018][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 638.281957][ T5810] usb 6-1: SerialNumber: syz [ 638.287156][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 638.307896][ T5810] usb 6-1: config 0 descriptor?? [ 638.319843][ T9] usb 1-1: Manufacturer: syz [ 638.339292][ T9] usb 1-1: config 0 descriptor?? [ 638.360862][ T24] rc_core: IR keymap rc-hauppauge not found [ 638.371912][ T24] Registered IR keymap rc-empty [ 638.380393][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.392105][ T5810] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 638.409907][ T5810] gspca_stv06xx: st6422 sensor detected [ 638.460873][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.591466][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 638.630356][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 638.671336][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.693798][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.720826][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.750753][ T9] rc_core: IR keymap rc-hauppauge not found [ 638.756880][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.781038][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.807787][ T9] Registered IR keymap rc-empty [ 638.820881][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.840811][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.860959][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.875179][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 638.880785][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.900838][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 638.927533][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 638.936901][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 638.949305][ T24] usb 5-1: USB disconnect, device number 47 [ 638.970766][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.087098][ T9] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 639.124449][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input32 [ 639.171456][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.210862][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.243939][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.281059][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.313759][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.341140][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.378890][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.461062][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.530809][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.588690][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 639.763120][ T9] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 639.790094][ T9] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 640.314452][ T9] usb 1-1: USB disconnect, device number 67 [ 640.333973][ T5810] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 640.346603][ T5810] usb 6-1: USB disconnect, device number 24 [ 641.745362][T12496] misc userio: Invalid payload size [ 642.303596][ T30] audit: type=1400 audit(2000000010.970:680): avc: denied { read } for pid=12502 comm="syz.5.1754" path="socket:[35301]" dev="sockfs" ino=35301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 643.587779][T12518] loop3: detected capacity change from 0 to 7 [ 643.623641][T12518] Dev loop3: unable to read RDB block 7 [ 643.638549][T12518] loop3: unable to read partition table [ 643.664052][T12518] loop3: partition table beyond EOD, truncated [ 643.693879][T12518] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 643.853271][ T5898] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 643.872159][T12524] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1758'. [ 644.050814][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 644.058005][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 644.079789][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.116226][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 644.129985][ T5898] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 644.139510][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.159581][ T5898] usb 2-1: config 0 descriptor?? [ 644.230744][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 644.384887][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 644.392645][ T9] usb 5-1: can't read configurations, error -61 [ 644.520844][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 644.716633][ T5898] aquacomputer_d5next 0003:0C70:F011.001E: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 645.027456][ T5810] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 645.481198][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 645.488822][ T9] usb 5-1: can't read configurations, error -61 [ 645.501465][ T9] usb usb5-port1: attempt power cycle [ 645.591912][ T5810] usb 6-1: Using ep0 maxpacket: 16 [ 645.598752][ T5810] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 645.623173][ T5810] usb 6-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 645.633825][ T5810] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.650171][ T5810] usb 6-1: Product: syz [ 645.660855][ T5810] usb 6-1: Manufacturer: syz [ 645.681631][ T5810] usb 6-1: SerialNumber: syz [ 645.687405][T12550] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 645.720196][ T5810] usb 6-1: config 0 descriptor?? [ 645.731489][T12550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1765'. [ 645.756231][ T5810] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 645.766157][ T5810] gspca_stv06xx: st6422 sensor detected [ 646.010818][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 646.292537][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 646.300264][ T5898] usb 2-1: reset high-speed USB device number 59 using dummy_hcd [ 646.310201][ T9] usb 5-1: can't read configurations, error -61 [ 646.462094][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 646.506147][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 646.615053][ T9] usb 5-1: can't read configurations, error -61 [ 646.657630][ T9] usb usb5-port1: unable to enumerate USB device [ 646.699808][T12565] tmpfs: Bad value for 'nr_inodes' [ 646.711054][T12559] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 647.421109][T12559] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 647.453355][T12559] usb 3-1: config 0 has no interface number 0 [ 647.467696][T12559] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 647.476858][T12559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.485058][T12559] usb 3-1: Product: syz [ 647.499464][T12559] usb 3-1: Manufacturer: syz [ 647.504461][T12559] usb 3-1: SerialNumber: syz [ 647.520063][T12559] usb 3-1: config 0 descriptor?? [ 647.632480][ T5933] usb 2-1: USB disconnect, device number 59 [ 647.667042][ T5810] STV06xx 6-1:0.0: probe with driver STV06xx failed with error -71 [ 647.924730][ T5810] usb 6-1: USB disconnect, device number 25 [ 648.157681][ T30] audit: type=1400 audit(2000000016.820:681): avc: denied { read } for pid=12587 comm="syz.4.1778" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 648.227710][ T30] audit: type=1400 audit(2000000016.820:682): avc: denied { open } for pid=12587 comm="syz.4.1778" path="/350/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 648.268305][ T30] audit: type=1400 audit(2000000016.870:683): avc: denied { ioctl } for pid=12587 comm="syz.4.1778" path="/350/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 648.610795][ T5962] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 648.623828][T12559] usb 3-1: non-Atmel transceiver xxxx0000 [ 648.780855][ T5962] usb 5-1: Using ep0 maxpacket: 16 [ 648.787548][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 648.799994][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.810443][ T5962] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 648.823611][ T5962] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 648.833364][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.844260][ T5962] usb 5-1: config 0 descriptor?? [ 649.388377][ T5962] aquacomputer_d5next 0003:0C70:F011.001F: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.4-1/input0 [ 650.081234][T12559] usb 3-1: Firmware version (0.0) predates our first public release. [ 650.271711][T12559] usb 3-1: Please update to version 0.2 or newer [ 650.278660][T12559] usb 3-1: atusb_probe: initialization failed, error = -19 [ 650.553735][ T5962] usb 3-1: USB disconnect, device number 57 [ 650.801096][ T24] usb 5-1: reset high-speed USB device number 52 using dummy_hcd [ 650.814572][T12622] FAT-fs (nbd1): unable to read boot sector [ 651.081763][T12559] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 651.240760][T12559] usb 2-1: Using ep0 maxpacket: 8 [ 651.253006][T12559] usb 2-1: unable to get BOS descriptor or descriptor too short [ 651.272342][T12559] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 651.285226][T12559] usb 2-1: config 0 has no interface number 0 [ 651.299884][T12559] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 651.327458][T12559] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 651.353420][T12559] usb 2-1: config 0 interface 88 has no altsetting 0 [ 651.376845][T12559] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 651.395189][T12559] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 651.413777][T12559] usb 2-1: Product: syz [ 651.424184][T12559] usb 2-1: SerialNumber: syz [ 651.438280][T12559] usb 2-1: config 0 descriptor?? [ 651.528516][T12629] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1787'. [ 651.688020][T12559] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input33 [ 651.787890][T12559] usb 2-1: USB disconnect, device number 60 [ 651.861207][ T5877] usb 5-1: USB disconnect, device number 52 [ 652.070761][ T5877] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 652.186391][T12634] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1788'. [ 652.250966][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 652.258724][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 652.280667][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.295750][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 652.307601][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 652.334562][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.349018][ T5877] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 652.356673][ T5877] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 652.367719][ T5877] usb 5-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.384607][ T5877] usb 5-1: string descriptor 0 read error: -22 [ 652.394808][ T5877] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 652.404621][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.442344][ T5877] adutux 5-1:168.0: interrupt endpoints not found [ 652.788344][T12654] ptrace attach of "./syz-executor exec"[5822] was attempted by "./syz-executor exec"[12654] [ 653.086237][ T5962] usb 5-1: USB disconnect, device number 53 [ 653.290907][ T5877] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 653.472513][T12677] FAULT_INJECTION: forcing a failure. [ 653.472513][T12677] name failslab, interval 1, probability 0, space 0, times 0 [ 653.487262][T12677] CPU: 0 UID: 0 PID: 12677 Comm: syz.5.1801 Not tainted syzkaller #0 PREEMPT(full) [ 653.487288][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 653.487300][T12677] Call Trace: [ 653.487308][T12677] [ 653.487312][T12677] dump_stack_lvl+0x16c/0x1f0 [ 653.487328][T12677] should_fail_ex+0x512/0x640 [ 653.487340][T12677] ? __kmalloc_cache_noprof+0x5f/0x780 [ 653.487358][T12677] should_failslab+0xc2/0x120 [ 653.487373][T12677] __kmalloc_cache_noprof+0x72/0x780 [ 653.487389][T12677] ? mac802154_llsec_key_add+0x657/0xd50 [ 653.487403][T12677] ? mac802154_llsec_key_add+0x657/0xd50 [ 653.487413][T12677] mac802154_llsec_key_add+0x657/0xd50 [ 653.487427][T12677] ? __pfx_mac802154_llsec_key_add+0x10/0x10 [ 653.487442][T12677] ieee802154_add_llsec_key+0x5a/0x80 [ 653.487456][T12677] nl802154_add_llsec_key+0x454/0x5e0 [ 653.487471][T12677] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 653.487494][T12677] ? nl802154_pre_doit+0xf3/0xd30 [ 653.487513][T12677] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 653.487531][T12677] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 653.487553][T12677] genl_family_rcv_msg_doit+0x209/0x2f0 [ 653.487570][T12677] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 653.487592][T12677] ? bpf_lsm_capable+0x9/0x10 [ 653.487605][T12677] ? security_capable+0x7e/0x260 [ 653.487625][T12677] genl_rcv_msg+0x55c/0x800 [ 653.487643][T12677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.487659][T12677] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 653.487673][T12677] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 653.487687][T12677] ? __pfx_nl802154_post_doit+0x10/0x10 [ 653.487702][T12677] ? __lock_acquire+0x62e/0x1ce0 [ 653.487717][T12677] netlink_rcv_skb+0x158/0x420 [ 653.487732][T12677] ? __pfx_genl_rcv_msg+0x10/0x10 [ 653.487748][T12677] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 653.487769][T12677] ? netlink_deliver_tap+0x1ae/0xd30 [ 653.487781][T12677] ? __rcu_read_unlock+0x2bc/0x550 [ 653.487797][T12677] genl_rcv+0x28/0x40 [ 653.487811][T12677] netlink_unicast+0x5a7/0x870 [ 653.487827][T12677] ? __pfx_netlink_unicast+0x10/0x10 [ 653.487847][T12677] netlink_sendmsg+0x8c8/0xdd0 [ 653.487864][T12677] ? __pfx_netlink_sendmsg+0x10/0x10 [ 653.487884][T12677] ____sys_sendmsg+0xa98/0xc70 [ 653.487901][T12677] ? copy_msghdr_from_user+0x10a/0x160 [ 653.487914][T12677] ? __pfx_____sys_sendmsg+0x10/0x10 [ 653.487937][T12677] ___sys_sendmsg+0x134/0x1d0 [ 653.487951][T12677] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.487983][T12677] __sys_sendmsg+0x16d/0x220 [ 653.487996][T12677] ? __pfx___sys_sendmsg+0x10/0x10 [ 653.488018][T12677] do_syscall_64+0xcd/0x4e0 [ 653.488030][T12677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.488041][T12677] RIP: 0033:0x7f424298eec9 [ 653.488051][T12677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.488062][T12677] RSP: 002b:00007f4243904038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.488073][T12677] RAX: ffffffffffffffda RBX: 00007f4242be5fa0 RCX: 00007f424298eec9 [ 653.488080][T12677] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 653.488086][T12677] RBP: 00007f4243904090 R08: 0000000000000000 R09: 0000000000000000 [ 653.488092][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.488098][T12677] R13: 00007f4242be6038 R14: 00007f4242be5fa0 R15: 00007ffdfae07ba8 [ 653.488113][T12677] [ 653.819501][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.891682][T12678] input: syz1 as /devices/virtual/input/input34 [ 654.268375][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 654.289987][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 654.307441][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.321618][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 654.335926][ T5877] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 654.345442][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.364900][ T5877] usb 3-1: config 0 descriptor?? [ 654.376516][T12684] bond0: entered promiscuous mode [ 654.386129][T12684] bond_slave_0: entered promiscuous mode [ 654.392632][T12684] bond_slave_1: entered promiscuous mode [ 654.399509][T12684] bond0: entered allmulticast mode [ 654.417427][T12684] bond_slave_0: entered allmulticast mode [ 654.425924][T12684] bond_slave_1: entered allmulticast mode [ 654.551642][T12559] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 654.780743][T12559] usb 6-1: Using ep0 maxpacket: 32 [ 654.788828][ T5877] aquacomputer_d5next 0003:0C70:F011.0020: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0 [ 654.822043][T12559] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 654.832335][T12559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.842055][T12559] usb 6-1: config 0 descriptor?? [ 655.695786][T12559] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 655.703800][T12559] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 655.735755][T12559] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 655.806198][T12559] usb 6-1: media controller created [ 655.886609][T12559] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 655.933393][T12559] az6027: usb out operation failed. (-71) [ 655.954257][T12559] az6027: usb out operation failed. (-71) [ 655.974105][T12559] stb0899_attach: Driver disabled by Kconfig [ 655.995874][T12559] az6027: no front-end attached [ 655.995874][T12559] [ 656.021981][T12559] az6027: usb out operation failed. (-71) [ 656.041488][T12559] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 656.065075][T12559] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 656.105139][T12559] dvb-usb: schedule remote query interval to 400 msecs. [ 656.128028][T12559] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 656.186132][T12559] usb 6-1: USB disconnect, device number 26 [ 656.250766][ T5877] usb 3-1: reset high-speed USB device number 58 using dummy_hcd [ 656.410543][T12706] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1806'. [ 656.507470][T12559] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 657.561806][ T5962] usb 3-1: USB disconnect, device number 58 [ 658.772834][ T5962] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 659.003757][ T30] audit: type=1400 audit(2000000027.560:684): avc: denied { mount } for pid=12731 comm="syz.4.1815" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 659.107753][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 659.120971][ T30] audit: type=1400 audit(2000000027.740:685): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 659.128165][ T5962] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 659.174625][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.187882][T12743] loop4: detected capacity change from 0 to 2560 [ 659.196175][ T5962] usb 3-1: config 0 descriptor?? [ 659.202371][T12743] buffer_io_error: 5 callbacks suppressed [ 659.202386][T12743] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.219849][T12743] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.228981][T12743] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.239845][T12743] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.250113][T12743] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.255963][T12748] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[12748] [ 659.258504][T12743] Buffer I/O error on dev loop4, logical block 0, async page read [ 659.287723][T12743] loop4: unable to read partition table [ 659.289544][T12747] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 659.308155][T12743] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 659.308461][T12747] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 659.326286][T12747] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 659.335516][T12747] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 659.433200][ T5962] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 659.476823][ T5962] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.510298][ T5962] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 659.518268][ T5962] usb 3-1: media controller created [ 659.740958][ T5877] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 659.763312][ T5962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.890874][ T5877] usb 5-1: device descriptor read/64, error -71 [ 660.128365][ T5962] az6027: usb out operation failed. (-71) [ 660.151396][ T5962] az6027: usb out operation failed. (-71) [ 660.170753][T12559] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 660.180888][ T5877] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 660.190515][ T5962] stb0899_attach: Driver disabled by Kconfig [ 660.220920][ T5962] az6027: no front-end attached [ 660.220920][ T5962] [ 660.231733][ T5962] az6027: usb out operation failed. (-71) [ 660.237473][ T5962] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 660.259198][ T5962] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 660.291295][ T5962] dvb-usb: schedule remote query interval to 400 msecs. [ 660.298253][ T5962] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 660.319887][ T5962] usb 3-1: USB disconnect, device number 59 [ 660.414064][ T5877] usb 5-1: device descriptor read/64, error -71 [ 660.425410][T12559] usb 6-1: Using ep0 maxpacket: 16 [ 660.432675][T12559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 660.444301][T12559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.455242][T12559] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 660.472139][T12559] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 660.482571][T12559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.501754][T12559] usb 6-1: config 0 descriptor?? [ 661.009346][T12559] aquacomputer_d5next 0003:0C70:F011.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.5-1/input0 [ 662.438952][ T5877] usb usb5-port1: attempt power cycle [ 662.484944][ T5962] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 662.490904][T12559] usb 6-1: reset high-speed USB device number 27 using dummy_hcd [ 664.228566][ T5933] usb 6-1: USB disconnect, device number 27 [ 665.007144][T12792] [U] $( [ 665.388114][T12559] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 665.456802][ T5877] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 665.664338][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 665.704950][T12559] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 665.785906][ T5877] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 665.823741][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.825781][T12559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.905621][ T5877] usb 5-1: config 0 descriptor?? [ 665.997090][T12559] usb 1-1: config 0 descriptor?? [ 666.143435][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 666.234997][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 666.262466][ T5877] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 666.289902][ T5877] usb 5-1: media controller created [ 666.298424][T12559] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 666.319275][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 666.389356][ T5877] az6027: usb out operation failed. (-71) [ 666.397430][ T5877] az6027: usb out operation failed. (-71) [ 666.403563][ T5877] stb0899_attach: Driver disabled by Kconfig [ 666.409548][ T5877] az6027: no front-end attached [ 666.409548][ T5877] [ 666.418694][ T5877] az6027: usb out operation failed. (-71) [ 666.425196][ T5877] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 666.434495][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 666.450115][ T5877] dvb-usb: schedule remote query interval to 400 msecs. [ 666.457780][T12823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 666.467632][ T5877] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 666.491001][ T5933] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 666.498107][ T5877] usb 5-1: USB disconnect, device number 57 [ 666.528210][T12822] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 666.556722][T12559] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 666.576365][T12559] [drm] Initialized udl on minor 2 [ 666.587674][ T5877] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 666.670736][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 666.684009][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 666.695662][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.706519][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 666.724945][ T5933] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 666.734365][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.744976][ T5933] usb 2-1: config 0 descriptor?? [ 666.907569][T12559] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 666.926972][T12559] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 666.950213][ T5898] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 666.966284][T12559] usb 1-1: USB disconnect, device number 68 [ 666.988744][ T5898] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 667.300657][ T5933] aquacomputer_d5next 0003:0C70:F011.0022: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 667.478322][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 668.080737][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 668.100003][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 668.110701][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.123903][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 668.134156][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.163790][T12840] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1841'. [ 668.193538][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 668.230102][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 668.240729][ T9] usb 5-1: SerialNumber: syz [ 668.250472][ T9] usb 5-1: config 0 descriptor?? [ 668.261356][ T9] hso 5-1:0.0: Can't find BULK OUT endpoint [ 668.459974][T12830] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1839'. [ 668.471354][ T5933] usb 5-1: USB disconnect, device number 58 [ 668.478393][T12559] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 668.491461][ T5877] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 668.500945][ T9] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 668.534427][ T30] audit: type=1400 audit(2000000037.200:686): avc: denied { accept } for pid=12845 comm="syz.2.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 668.640763][ T5877] usb 1-1: device descriptor read/64, error -71 [ 668.641927][T12559] usb 6-1: too many configurations: 164, using maximum allowed: 8 [ 668.656120][T12559] usb 6-1: config index 0 descriptor too short (expected 65454, got 106) [ 668.664975][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.676695][T12559] usb 6-1: config index 1 descriptor too short (expected 65454, got 106) [ 668.685488][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.697870][T12559] usb 6-1: config index 2 descriptor too short (expected 65454, got 106) [ 668.706773][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.719406][T12559] usb 6-1: config index 3 descriptor too short (expected 65454, got 106) [ 668.727953][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.739122][T12559] usb 6-1: config index 4 descriptor too short (expected 65454, got 106) [ 668.747654][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.758907][T12559] usb 6-1: config index 5 descriptor too short (expected 65454, got 106) [ 668.767699][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.777938][ T5898] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 668.786831][T12559] usb 6-1: config index 6 descriptor too short (expected 65454, got 106) [ 668.796241][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.807410][T12559] usb 6-1: config index 7 descriptor too short (expected 65454, got 106) [ 668.815948][T12559] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 668.828159][T12559] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 668.837302][T12559] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.845391][T12559] usb 6-1: Product: syz [ 668.849593][T12559] usb 6-1: Manufacturer: syz [ 668.854315][T12559] usb 6-1: SerialNumber: syz [ 668.862391][T12559] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 668.878964][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 668.890864][ T5877] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 668.940753][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 668.947420][ T5898] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 668.955648][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.966680][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.977108][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 668.990054][ T5898] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 669.000012][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.015374][ T5898] usb 3-1: config 0 descriptor?? [ 669.031061][ T5877] usb 1-1: device descriptor read/64, error -71 [ 669.031329][ T5898] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 669.052891][ T5180] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 669.074378][ T5180] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 669.152233][ T5877] usb usb1-port1: attempt power cycle [ 669.344193][ T6707] Bluetooth: hci1: Frame reassembly failed (-84) [ 669.353431][ T5180] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 669.363559][ T5180] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 669.485065][T12842] netlink: 'syz.5.1842': attribute type 10 has an invalid length. [ 669.517428][ T30] audit: type=1400 audit(2000000038.180:687): avc: denied { wake_alarm } for pid=12845 comm="syz.2.1844" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 669.564579][T12842] batman_adv: batadv0: Adding interface: wlan0 [ 669.581322][T12853] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 669.589554][T12842] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.617830][T12842] batman_adv: batadv0: Interface activated: wlan0 [ 669.637953][ T5962] usb 3-1: USB disconnect, device number 60 [ 669.681424][ T5877] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 669.724505][T12857] evm: overlay not supported [ 669.732185][ T5877] usb 1-1: device descriptor read/8, error -71 [ 669.970776][ T5877] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 670.001460][ T5877] usb 1-1: device descriptor read/8, error -71 [ 670.111304][ T5877] usb usb1-port1: unable to enumerate USB device [ 670.150863][ T9] usb 2-1: device descriptor read/64, error -71 [ 670.441166][ T9] usb 2-1: reset high-speed USB device number 61 using dummy_hcd [ 670.452605][ T9] usb 2-1: device reset changed ep0 maxpacket size! [ 670.487815][ T5877] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 670.497822][ T5810] usb 2-1: USB disconnect, device number 61 [ 670.629942][ T10] usb 6-1: Service connection timeout for: 256 [ 670.639451][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 670.650796][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 670.665291][ T10] ath9k_htc: Failed to initialize the device [ 670.666492][ T5877] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 670.684663][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 670.720827][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.741138][ T5877] usb 3-1: config 0 descriptor?? [ 670.770842][ T5810] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 670.950939][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 670.960998][ T5877] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 670.969790][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 670.981884][ T5877] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 670.984054][ T5810] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.989083][ T5877] usb 3-1: media controller created [ 671.000577][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 671.013316][ T5810] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 671.025063][ T5810] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3b [ 671.034210][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.042929][ T5810] usb 2-1: Product: syz [ 671.047131][ T5810] usb 2-1: Manufacturer: syz [ 671.051764][ T5810] usb 2-1: SerialNumber: syz [ 671.058266][ T5810] usb 2-1: config 0 descriptor?? [ 671.162057][ T5877] az6027: usb out operation failed. (-71) [ 671.168133][ T5877] az6027: usb out operation failed. (-71) [ 671.175657][ T5877] stb0899_attach: Driver disabled by Kconfig [ 671.181792][ T5877] az6027: no front-end attached [ 671.181792][ T5877] [ 671.189081][ T5877] az6027: usb out operation failed. (-71) [ 671.194841][ T5877] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 671.203150][ T5877] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input42 [ 671.215512][ T5877] dvb-usb: schedule remote query interval to 400 msecs. [ 671.222526][ T5877] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 671.233271][ T5877] usb 3-1: USB disconnect, device number 61 [ 671.262705][ T5877] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 671.341060][ T5830] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 671.646378][ T5962] usb 6-1: USB disconnect, device number 28 [ 672.502004][T12901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 672.622457][T12880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.643172][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 672.990135][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1858'. [ 673.006379][ T10] usb 2-1: USB disconnect, device number 62 [ 673.031874][T12905] netlink: 'syz.2.1858': attribute type 20 has an invalid length. [ 673.048267][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.053106][T12905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1858'. [ 673.058767][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.066094][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1858'. [ 673.076305][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.085048][T12905] netlink: 'syz.2.1858': attribute type 20 has an invalid length. [ 673.095867][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.811490][ T5962] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 673.834172][T12915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12915 comm=syz.1.1862 [ 674.128422][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 674.249067][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.317699][ T5962] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 674.332876][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.357853][ T5962] usb 5-1: config 0 descriptor?? [ 674.414316][T12932] tipc: Started in network mode [ 674.419407][T12932] tipc: Node identity 1e2aebadf4bd, cluster identity 4711 [ 674.438427][T12932] tipc: Enabled bearer , priority 0 [ 674.447672][T12932] syzkaller0: entered promiscuous mode [ 674.453263][T12932] syzkaller0: entered allmulticast mode [ 674.485361][T12932] tipc: Resetting bearer [ 674.510161][T12931] tipc: Resetting bearer [ 674.530947][T12931] tipc: Disabling bearer [ 674.570878][ T5877] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 674.644744][ T10] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 675.027914][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 675.070734][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 675.237004][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 675.286338][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.330811][ T30] audit: type=1400 audit(2000000043.970:688): avc: denied { connect } for pid=12916 comm="syz.4.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 675.364615][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.375096][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.418487][ T10] usb 2-1: config 0 descriptor?? [ 675.458662][ T5877] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 675.480780][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.488989][ T5877] usb 3-1: Product: syz [ 675.493640][ T5877] usb 3-1: Manufacturer: syz [ 675.498231][ T5877] usb 3-1: SerialNumber: syz [ 675.516046][ T5877] usb 3-1: config 0 descriptor?? [ 675.572424][ T5877] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 675.578879][ T5877] gspca_stv06xx: st6422 sensor detected [ 675.977034][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 676.001312][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 676.036037][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 676.059865][ T10] usb 2-1: media controller created [ 676.094268][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 676.241182][ T5898] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 676.274764][ T10] az6027: usb out operation failed. (-71) [ 676.682182][ T10] az6027: usb out operation failed. (-71) [ 676.698127][ T10] stb0899_attach: Driver disabled by Kconfig [ 676.701404][ T5962] usbhid 5-1:0.0: can't add hid device: -71 [ 676.712933][ T5962] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 676.724795][ T5962] usb 5-1: USB disconnect, device number 59 [ 676.739728][ T10] az6027: no front-end attached [ 676.739728][ T10] [ 676.762333][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 676.798875][ T10] az6027: usb out operation failed. (-71) [ 676.805433][ T5898] usb 1-1: can't read configurations, error -61 [ 676.909930][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 676.947448][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input44 [ 677.051358][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 677.082525][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 677.091394][ T5898] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 677.139502][ T10] usb 2-1: USB disconnect, device number 63 [ 677.283792][T12974] capability: warning: `syz.5.1879' uses deprecated v2 capabilities in a way that may be insecure [ 677.342436][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 677.360193][ T5898] usb 1-1: can't read configurations, error -61 [ 677.369607][ T5898] usb usb1-port1: attempt power cycle [ 677.375856][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 677.520802][ T5877] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 677.543498][ T5877] usb 3-1: USB disconnect, device number 62 [ 677.830793][ T5898] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 678.219134][T12984] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1882'. [ 678.250368][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 678.258423][ T5898] usb 1-1: can't read configurations, error -61 [ 678.411087][ T5898] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 678.434522][ T5898] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 678.442314][ T5898] usb 1-1: can't read configurations, error -61 [ 678.459986][ T5898] usb usb1-port1: unable to enumerate USB device [ 678.512982][T12990] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1884'. [ 678.930744][ T5877] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 679.080807][ T5898] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 679.089745][ T5877] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.101140][ T5810] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 679.134387][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 679.192788][ T5877] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 679.202305][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.230745][ T5877] usb 3-1: Product: syz [ 679.230748][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 679.236365][ T5898] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 679.260203][ T5877] usb 3-1: Manufacturer: syz [ 679.282051][ T5810] usb 2-1: Using ep0 maxpacket: 16 [ 679.287524][ T5877] usb 3-1: SerialNumber: syz [ 679.295758][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.311471][ T5877] usb 3-1: config 0 descriptor?? [ 679.323041][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 679.351467][ T5898] usb 1-1: config 0 descriptor?? [ 679.376980][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.423574][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 679.492210][ T5810] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 679.527075][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.553679][ T5877] usb 3-1: USB disconnect, device number 63 [ 679.597875][ T5898] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 679.619851][ T5810] usb 2-1: config 0 descriptor?? [ 679.631220][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 679.652549][ T5898] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 679.673019][ T5898] usb 1-1: media controller created [ 679.706571][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 679.763892][T12969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.802176][ T5898] az6027: usb out operation failed. (-71) [ 679.808430][ T5898] az6027: usb out operation failed. (-71) [ 679.815539][ T5898] stb0899_attach: Driver disabled by Kconfig [ 679.823700][ T5898] az6027: no front-end attached [ 679.823700][ T5898] [ 679.842044][ T5898] az6027: usb out operation failed. (-71) [ 679.866815][ T5898] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 679.881911][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 679.894327][ T5898] dvb-usb: schedule remote query interval to 400 msecs. [ 679.913491][ T5898] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 679.935666][ T5898] usb 1-1: USB disconnect, device number 77 [ 679.969510][ T5898] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 680.040616][ T5810] aquacomputer_d5next 0003:0C70:F011.0023: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 681.730864][T12813] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 681.950990][ T5810] usb 2-1: reset high-speed USB device number 64 using dummy_hcd [ 682.020940][T12813] usb 1-1: Using ep0 maxpacket: 16 [ 682.049521][T12813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.068284][T12813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 682.079770][T12813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 682.090128][T12813] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 682.100611][T12813] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.133202][T12813] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 682.161239][T12813] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 682.169268][T12813] usb 1-1: Manufacturer: syz [ 682.174574][T13019] FAULT_INJECTION: forcing a failure. [ 682.174574][T13019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.816753][T13019] CPU: 1 UID: 0 PID: 13019 Comm: syz.1.1891 Not tainted syzkaller #0 PREEMPT(full) [ 682.816779][T13019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 682.816789][T13019] Call Trace: [ 682.816795][T13019] [ 682.816802][T13019] dump_stack_lvl+0x16c/0x1f0 [ 682.816824][T13019] should_fail_ex+0x512/0x640 [ 682.816847][T13019] _copy_from_user+0x2e/0xd0 [ 682.816869][T13019] copy_msghdr_from_user+0x98/0x160 [ 682.816890][T13019] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 682.816927][T13019] ___sys_sendmsg+0xfe/0x1d0 [ 682.816949][T13019] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.817000][T13019] __sys_sendmsg+0x16d/0x220 [ 682.817020][T13019] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.817054][T13019] do_syscall_64+0xcd/0x4e0 [ 682.817071][T13019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.817089][T13019] RIP: 0033:0x7f233c38eec9 [ 682.817103][T13019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.817120][T13019] RSP: 002b:00007f233d30d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.817137][T13019] RAX: ffffffffffffffda RBX: 00007f233c5e5fa0 RCX: 00007f233c38eec9 [ 682.817149][T13019] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000004 [ 682.817159][T13019] RBP: 00007f233d30d090 R08: 0000000000000000 R09: 0000000000000000 [ 682.817169][T13019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.817180][T13019] R13: 00007f233c5e6038 R14: 00007f233c5e5fa0 R15: 00007fff73711418 [ 682.817202][T13019] [ 682.980638][T12813] usb 1-1: config 0 descriptor?? [ 683.010490][T13028] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1893'. [ 683.235703][ C1] sd 0:0:1:0: [sda] tag#7254 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 683.246101][ C1] sd 0:0:1:0: [sda] tag#7254 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 683.374731][ T5898] usb 2-1: USB disconnect, device number 64 [ 684.255073][T13048] FAULT_INJECTION: forcing a failure. [ 684.255073][T13048] name failslab, interval 1, probability 0, space 0, times 0 [ 684.268623][T13048] CPU: 1 UID: 0 PID: 13048 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 684.268647][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 684.268657][T13048] Call Trace: [ 684.268663][T13048] [ 684.268670][T13048] dump_stack_lvl+0x16c/0x1f0 [ 684.268693][T13048] should_fail_ex+0x512/0x640 [ 684.268735][T13048] ? __kmalloc_cache_noprof+0x5f/0x780 [ 684.268763][T13048] should_failslab+0xc2/0x120 [ 684.268781][T13048] __kmalloc_cache_noprof+0x72/0x780 [ 684.268799][T13048] ? __lock_acquire+0xb97/0x1ce0 [ 684.268812][T13048] ? __request_region+0x5c/0xf0 [ 684.268825][T13048] ? __request_region+0x5c/0xf0 [ 684.268835][T13048] __request_region+0x5c/0xf0 [ 684.268847][T13048] comedi_request_region+0x6d/0x1c0 [ 684.268866][T13048] dmm32at_attach+0x5c/0x8e0 [ 684.268880][T13048] comedi_device_attach+0x3b3/0x900 [ 684.268901][T13048] do_devconfig_ioctl+0x1b1/0x710 [ 684.268914][T13048] ? __mutex_lock+0x1c5/0x1060 [ 684.268926][T13048] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 684.268947][T13048] ? find_held_lock+0x2b/0x80 [ 684.268966][T13048] comedi_unlocked_ioctl+0x165d/0x2f00 [ 684.268985][T13048] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 684.269004][T13048] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 684.269021][T13048] ? do_vfs_ioctl+0x128/0x14f0 [ 684.269038][T13048] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 684.269059][T13048] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 684.269086][T13048] ? hook_file_ioctl_common+0x145/0x410 [ 684.269106][T13048] ? selinux_file_ioctl+0x180/0x270 [ 684.269117][T13048] ? selinux_file_ioctl+0xb4/0x270 [ 684.269130][T13048] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 684.269146][T13048] __x64_sys_ioctl+0x18e/0x210 [ 684.269163][T13048] do_syscall_64+0xcd/0x4e0 [ 684.269176][T13048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.269188][T13048] RIP: 0033:0x7f98b218eec9 [ 684.269197][T13048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.269208][T13048] RSP: 002b:00007f98b3017038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.269219][T13048] RAX: ffffffffffffffda RBX: 00007f98b23e5fa0 RCX: 00007f98b218eec9 [ 684.269226][T13048] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 684.269233][T13048] RBP: 00007f98b3017090 R08: 0000000000000000 R09: 0000000000000000 [ 684.269239][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.269245][T13048] R13: 00007f98b23e6038 R14: 00007f98b23e5fa0 R15: 00007ffe67664b88 [ 684.269259][T13048] [ 684.520499][T13048] comedi comedi2: dmm32at: I/O port conflict (0xb013,16) [ 684.572673][T12813] rc_core: IR keymap rc-hauppauge not found [ 684.578870][T12813] Registered IR keymap rc-empty [ 684.587927][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 684.611121][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 684.631488][T12813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 684.645015][T12813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 684.717207][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 684.750834][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 684.771200][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 684.792295][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 684.929834][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.187389][T13059] FAULT_INJECTION: forcing a failure. [ 685.187389][T13059] name failslab, interval 1, probability 0, space 0, times 0 [ 685.200712][T13059] CPU: 0 UID: 0 PID: 13059 Comm: syz.5.1901 Not tainted syzkaller #0 PREEMPT(full) [ 685.200737][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.200747][T13059] Call Trace: [ 685.200753][T13059] [ 685.200759][T13059] dump_stack_lvl+0x16c/0x1f0 [ 685.200781][T13059] should_fail_ex+0x512/0x640 [ 685.200800][T13059] ? __kmalloc_noprof+0xca/0x880 [ 685.200827][T13059] should_failslab+0xc2/0x120 [ 685.200848][T13059] __kmalloc_noprof+0xdd/0x880 [ 685.200872][T13059] ? video_usercopy+0x1a0/0x1720 [ 685.200900][T13059] ? video_usercopy+0x1a0/0x1720 [ 685.200921][T13059] ? do_vfs_ioctl+0x128/0x14f0 [ 685.200943][T13059] video_usercopy+0x1a0/0x1720 [ 685.200967][T13059] ? __pfx___video_do_ioctl+0x10/0x10 [ 685.200989][T13059] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 685.201009][T13059] ? __pfx_video_usercopy+0x10/0x10 [ 685.201046][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.201047][T13059] v4l2_ioctl+0x1bd/0x250 [ 685.201071][T13059] ? __pfx_v4l2_ioctl+0x10/0x10 [ 685.201094][T13059] __x64_sys_ioctl+0x18e/0x210 [ 685.201119][T13059] do_syscall_64+0xcd/0x4e0 [ 685.201136][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.201152][T13059] RIP: 0033:0x7f424298eec9 [ 685.201183][T13059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.201199][T13059] RSP: 002b:00007f4243904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.201220][T13059] RAX: ffffffffffffffda RBX: 00007f4242be5fa0 RCX: 00007f424298eec9 [ 685.201231][T13059] RDX: 0000200000000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 685.201241][T13059] RBP: 00007f4243904090 R08: 0000000000000000 R09: 0000000000000000 [ 685.201250][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.201260][T13059] R13: 00007f4242be6038 R14: 00007f4242be5fa0 R15: 00007ffdfae07ba8 [ 685.201281][T13059] [ 685.419652][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.426085][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.860801][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 685.913789][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 686.439218][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 686.506045][T12813] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 686.568515][T12813] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 686.608296][T12813] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 686.632549][T12813] usb 1-1: USB disconnect, device number 78 [ 686.874095][T13083] FAULT_INJECTION: forcing a failure. [ 686.874095][T13083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.887610][T13083] CPU: 0 UID: 0 PID: 13083 Comm: syz.2.1907 Not tainted syzkaller #0 PREEMPT(full) [ 686.887635][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 686.887645][T13083] Call Trace: [ 686.887651][T13083] [ 686.887658][T13083] dump_stack_lvl+0x16c/0x1f0 [ 686.887680][T13083] should_fail_ex+0x512/0x640 [ 686.887705][T13083] _copy_from_user+0x2e/0xd0 [ 686.887727][T13083] kstrtouint_from_user+0xd6/0x1d0 [ 686.887753][T13083] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 686.887777][T13083] ? __lock_acquire+0xb97/0x1ce0 [ 686.887809][T13083] proc_fail_nth_write+0x83/0x220 [ 686.887832][T13083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 686.887861][T13083] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 686.887881][T13083] vfs_write+0x2a0/0x11d0 [ 686.887903][T13083] ? __pfx___mutex_lock+0x10/0x10 [ 686.887920][T13083] ? __pfx_vfs_write+0x10/0x10 [ 686.887945][T13083] ? __fget_files+0x20e/0x3c0 [ 686.887972][T13083] ksys_write+0x12a/0x250 [ 686.887989][T13083] ? __pfx_ksys_write+0x10/0x10 [ 686.888013][T13083] do_syscall_64+0xcd/0x4e0 [ 686.888032][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.888051][T13083] RIP: 0033:0x7f98b218d97f [ 686.888065][T13083] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 686.888082][T13083] RSP: 002b:00007f98b3017030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 686.888100][T13083] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f98b218d97f [ 686.888111][T13083] RDX: 0000000000000001 RSI: 00007f98b30170a0 RDI: 0000000000000004 [ 686.888122][T13083] RBP: 00007f98b3017090 R08: 0000000000000000 R09: 0000000000000000 [ 686.888132][T13083] R10: 0000000004004040 R11: 0000000000000293 R12: 0000000000000001 [ 686.888143][T13083] R13: 00007f98b23e6038 R14: 00007f98b23e5fa0 R15: 00007ffe67664b88 [ 686.888169][T13083] [ 688.260938][ T30] audit: type=1400 audit(2000000056.910:689): avc: denied { setattr } for pid=5828 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 689.502232][T12813] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 689.531029][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 689.672391][T12813] usb 1-1: Using ep0 maxpacket: 16 [ 689.681527][T12813] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 689.700787][T12813] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.700804][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 689.702059][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 689.720932][T12813] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.747510][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.759932][T12813] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 689.768913][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 689.769872][T12813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.789416][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33288, setting to 1024 [ 689.805851][T12813] usb 1-1: Product: syz [ 689.810031][T12813] usb 1-1: Manufacturer: syz [ 689.814918][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 689.825638][T12813] usb 1-1: SerialNumber: syz [ 689.912723][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 689.942557][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.951858][ T9] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=1 [ 689.959917][ T9] usb 2-1: Manufacturer: syz [ 689.983002][ T9] usb 2-1: SerialNumber: syz [ 689.989365][T13113] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 690.003830][T13110] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 690.011269][T13110] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 690.108031][T13114] tipc: Enabled bearer , priority 0 [ 690.130407][T13114] syzkaller0: entered promiscuous mode [ 690.136239][T13114] syzkaller0: entered allmulticast mode [ 690.266125][T12813] usb 1-1: 0:2 : does not exist [ 691.228487][ T10] tipc: Node number set to 3935824813 [ 691.391886][T13112] tipc: Resetting bearer [ 691.451773][T13112] tipc: Disabling bearer [ 691.624405][T12813] usb 1-1: USB disconnect, device number 79 [ 691.651755][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 691.698478][ T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 691.723229][ T9] usb 2-1: USB disconnect, device number 65 [ 691.920812][ T976] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 691.995527][T13139] tmpfs: Bad value for 'nr_blocks' [ 692.080796][ T976] usb 6-1: Using ep0 maxpacket: 16 [ 692.102606][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 692.195762][ T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 692.282041][ T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 692.310835][T12813] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 692.376068][T13143] netlink: 5464 bytes leftover after parsing attributes in process `syz.2.1924'. [ 692.428373][ T976] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 692.477806][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.764686][ T976] usb 6-1: config 0 descriptor?? [ 692.798210][T12813] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 693.091620][T12813] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 693.239652][T12813] usb 2-1: config 0 has no interface number 0 [ 693.248829][ T976] aquacomputer_d5next 0003:0C70:F011.0024: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.5-1/input0 [ 693.263676][T12813] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 49, using maximum allowed: 30 [ 693.305266][T12813] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 49 [ 693.322083][T12813] usb 2-1: config 0 interface 255 has no altsetting 0 [ 693.392113][T12813] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 693.582754][T12813] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.177554][T12813] usb 2-1: config 0 descriptor?? [ 694.540860][ T5884] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 694.550236][ T976] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 694.556168][T13139] IPVS: Error connecting to the multicast addr [ 694.804684][ T976] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 696.050710][ T976] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 696.059630][ T976] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 696.074334][ T976] usb 3-1: config 220 has no interface number 2 [ 696.080723][ T976] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 696.093926][ T976] usb 3-1: config 220 interface 0 has no altsetting 0 [ 696.105666][ T976] usb 3-1: config 220 interface 76 has no altsetting 0 [ 696.113337][ T976] usb 3-1: config 220 interface 1 has no altsetting 0 [ 696.124951][T13174] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 696.134164][T13179] FAULT_INJECTION: forcing a failure. [ 696.134164][T13179] name failslab, interval 1, probability 0, space 0, times 0 [ 696.156046][T13179] CPU: 0 UID: 0 PID: 13179 Comm: syz.5.1931 Not tainted syzkaller #0 PREEMPT(full) [ 696.156064][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 696.156071][T13179] Call Trace: [ 696.156076][T13179] [ 696.156081][T13179] dump_stack_lvl+0x16c/0x1f0 [ 696.156095][T13179] should_fail_ex+0x512/0x640 [ 696.156108][T13179] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 696.156137][T13179] should_failslab+0xc2/0x120 [ 696.156158][T13179] kmem_cache_alloc_noprof+0x75/0x6e0 [ 696.156184][T13179] ? find_held_lock+0x2b/0x80 [ 696.156206][T13179] ? getname_flags.part.0+0x4c/0x550 [ 696.156232][T13179] ? getname_flags.part.0+0x4c/0x550 [ 696.156248][T13179] getname_flags.part.0+0x4c/0x550 [ 696.156268][T13179] getname_flags+0x93/0xf0 [ 696.156285][T13179] user_path_at+0x24/0x60 [ 696.156307][T13179] __x64_sys_mount+0x1fb/0x310 [ 696.156329][T13179] ? __pfx___x64_sys_mount+0x10/0x10 [ 696.156351][T13179] do_syscall_64+0xcd/0x4e0 [ 696.156364][T13179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.156375][T13179] RIP: 0033:0x7f424298eec9 [ 696.156384][T13179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.156401][T13179] RSP: 002b:00007f4243904038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 696.156414][T13179] RAX: ffffffffffffffda RBX: 00007f4242be5fa0 RCX: 00007f424298eec9 [ 696.156425][T13179] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 696.156436][T13179] RBP: 00007f4243904090 R08: 0000200000000000 R09: 0000000000000000 [ 696.156446][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.156456][T13179] R13: 00007f4242be6038 R14: 00007f4242be5fa0 R15: 00007ffdfae07ba8 [ 696.156478][T13179] [ 696.335454][ C0] vkms_vblank_simulate: vblank timer overrun [ 696.579043][ T5877] usb 6-1: USB disconnect, device number 29 [ 697.404486][ T976] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 697.431891][ T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.475581][ T976] usb 3-1: can't set config #220, error -71 [ 697.493231][ T976] usb 3-1: USB disconnect, device number 64 [ 697.580544][T13191] FAULT_INJECTION: forcing a failure. [ 697.580544][T13191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.596793][T13191] CPU: 1 UID: 0 PID: 13191 Comm: syz.5.1935 Not tainted syzkaller #0 PREEMPT(full) [ 697.596818][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 697.596828][T13191] Call Trace: [ 697.596834][T13191] [ 697.596840][T13191] dump_stack_lvl+0x16c/0x1f0 [ 697.596862][T13191] should_fail_ex+0x512/0x640 [ 697.596885][T13191] _copy_from_user+0x2e/0xd0 [ 697.596908][T13191] __sys_bpf+0x248/0x4980 [ 697.596930][T13191] ? __pfx___sys_bpf+0x10/0x10 [ 697.596946][T13191] ? find_held_lock+0x2b/0x80 [ 697.596975][T13191] ? find_held_lock+0x2b/0x80 [ 697.597006][T13191] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 697.597035][T13191] ? fput+0x9b/0xd0 [ 697.597060][T13191] ? ksys_write+0x1ac/0x250 [ 697.597077][T13191] ? __pfx_ksys_write+0x10/0x10 [ 697.597097][T13191] __x64_sys_bpf+0x78/0xc0 [ 697.597113][T13191] ? lockdep_hardirqs_on+0x7c/0x110 [ 697.597138][T13191] do_syscall_64+0xcd/0x4e0 [ 697.597156][T13191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.597181][T13191] RIP: 0033:0x7f424298eec9 [ 697.597196][T13191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.597213][T13191] RSP: 002b:00007f4243904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.597230][T13191] RAX: ffffffffffffffda RBX: 00007f4242be5fa0 RCX: 00007f424298eec9 [ 697.597242][T13191] RDX: 0000000000000010 RSI: 0000200000000500 RDI: 000000000000001d [ 697.597252][T13191] RBP: 00007f4243904090 R08: 0000000000000000 R09: 0000000000000000 [ 697.597263][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.597273][T13191] R13: 00007f4242be6038 R14: 00007f4242be5fa0 R15: 00007ffdfae07ba8 [ 697.597296][T13191] [ 697.848863][T12813] usb 2-1: string descriptor 0 read error: -71 [ 697.866408][T12813] usb 2-1: USB disconnect, device number 66 [ 698.010209][T13200] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 698.127938][T13203] bond2 (unregistering): Released all slaves [ 698.233481][T13200] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 698.489736][ C1] sd 0:0:1:0: [sda] tag#7236 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 698.508378][ C1] sd 0:0:1:0: [sda] tag#7236 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 698.752841][T12813] libceph: connect (1)[c::]:6789 error -101 [ 698.759091][T12813] libceph: mon0 (1)[c::]:6789 connect error [ 698.804574][T13215] ceph: No mds server is up or the cluster is laggy [ 698.813567][T12813] libceph: connect (1)[c::]:6789 error -101 [ 698.852473][T12813] libceph: mon0 (1)[c::]:6789 connect error [ 699.881052][T12813] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 700.090815][T12813] usb 6-1: Using ep0 maxpacket: 16 [ 700.122251][T12813] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.141025][T12813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.162778][T12813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 700.181658][T12813] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.208799][T12813] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.337879][T12813] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.364301][T12813] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.416736][T12813] usb 6-1: Manufacturer: syz [ 700.450775][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 700.455643][T12813] usb 6-1: config 0 descriptor?? [ 700.642384][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 700.652010][ T9] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 700.661356][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 700.671925][ T9] usb 3-1: config 220 has no interface number 2 [ 700.699968][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 700.762889][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 700.773787][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 700.793158][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 700.797764][T12813] rc_core: IR keymap rc-hauppauge not found [ 700.815790][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 700.822487][T12813] Registered IR keymap rc-empty [ 700.837841][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.846142][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 700.861085][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 700.873343][ T9] usb 3-1: Product: syz [ 700.881593][T12813] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 700.884415][ T9] usb 3-1: Manufacturer: syz [ 700.912734][T12813] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49 [ 700.918128][ T9] usb 3-1: SerialNumber: syz [ 700.946901][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 700.985870][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.031880][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.061555][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.080850][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.108623][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.141753][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.171363][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.210813][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.274155][T12813] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.303491][T12813] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 701.336801][T12813] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 701.361630][T12813] usb 6-1: USB disconnect, device number 30 [ 703.024185][T13235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 703.079228][T13272] random: crng reseeded on system resumption [ 703.089686][ T30] audit: type=1400 audit(2000000071.740:690): avc: denied { append } for pid=13271 comm="syz.5.1955" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 703.470229][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 703.486756][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 703.558548][ T9] usb 3-1: selecting invalid altsetting 0 [ 703.611133][ T9] usb 3-1: selecting invalid altsetting 0 [ 703.616963][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 703.677371][ T9] usb 3-1: USB disconnect, device number 65 [ 704.921784][ T30] audit: type=1400 audit(2000000073.590:691): avc: denied { read } for pid=13289 comm="syz.5.1960" path="socket:[39116]" dev="sockfs" ino=39116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 705.031437][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.046177][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.062164][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.094084][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.103271][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 705.507153][ T6166] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.303651][ T6166] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.394248][T13303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.486857][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.566636][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 706.764111][ T6166] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.048266][ T6166] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.107199][T13291] chnl_net:caif_netlink_parms(): no params data found [ 707.180885][ T5837] Bluetooth: hci1: command tx timeout [ 707.453583][T13291] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.480643][T13291] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.488743][T13291] bridge_slave_0: entered allmulticast mode [ 707.519353][T13291] bridge_slave_0: entered promiscuous mode [ 707.582333][T13291] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.604378][T13291] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.621446][T13291] bridge_slave_1: entered allmulticast mode [ 707.642988][T13291] bridge_slave_1: entered promiscuous mode [ 708.196853][T13291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.300984][T13338] syz_tun: entered allmulticast mode [ 708.383746][T13291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.472233][T13291] team0: Port device team_slave_0 added [ 708.482178][ T6166] team0: left allmulticast mode [ 708.487056][ T6166] C: left allmulticast mode [ 708.492273][ T6166] team_slave_1: left allmulticast mode [ 708.499775][ T6166] team0: left promiscuous mode [ 708.505330][ T6166] C: left promiscuous mode [ 708.512224][ T6166] team_slave_1: left promiscuous mode [ 708.519418][ T6166] bridge0: port 3(team0) entered disabled state [ 708.537791][ T6166] bridge_slave_1: left allmulticast mode [ 708.543625][ T6166] bridge_slave_1: left promiscuous mode [ 708.556146][ T6166] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.572240][ T6166] bridge_slave_0: left allmulticast mode [ 708.577992][ T6166] bridge_slave_0: left promiscuous mode [ 708.601440][ T6166] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.790887][ T5877] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 708.958618][ T5877] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 709.001034][T13346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1973'. [ 709.074193][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.084808][ T5877] usb 3-1: config 0 descriptor?? [ 709.260999][ T5837] Bluetooth: hci1: command tx timeout [ 709.375525][ T6166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.386169][ T30] audit: type=1400 audit(2000000078.050:692): avc: denied { bind } for pid=13350 comm="syz.5.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 709.465672][ T6166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.546811][ T6166] bond0 (unregistering): Released all slaves [ 709.552372][ T5877] [drm:udl_init] *ERROR* Selecting channel failed [ 709.705896][T13347] Falling back ldisc for ptm2. [ 709.735151][ T5877] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 709.743939][ T5877] [drm] Initialized udl on minor 2 [ 709.752903][ T5877] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 709.761271][ T5877] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 709.776403][T12813] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 709.787226][ T5877] usb 3-1: USB disconnect, device number 66 [ 709.802032][T12813] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 709.893710][ T6166] bond1 (unregistering): (slave veth3): Releasing active interface [ 709.901877][ T6166] vlan2: entered promiscuous mode [ 709.908683][ T6166] bond1 (unregistering): (slave vlan2): Releasing active interface [ 709.918586][ T6166] bond1 (unregistering): Released all slaves [ 709.930434][T13333] syz_tun: left allmulticast mode [ 709.950706][T13291] team0: Port device team_slave_1 added [ 710.099063][T13291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.106629][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.136024][T13291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.154620][ T6166] tipc: Disabling bearer [ 710.271318][ T6166] tipc: Left network mode [ 710.337126][T13291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.370424][T13291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.441364][T13291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.482788][T13369] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 710.500385][T13367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1979'. [ 710.900218][T13380] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1984'. [ 711.005111][T13378] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1984'. [ 711.029992][T13291] hsr_slave_0: entered promiscuous mode [ 711.036507][T13291] hsr_slave_1: entered promiscuous mode [ 711.042816][T13291] debugfs: 'hsr0' already exists in 'hsr' [ 711.048591][T13291] Cannot create hsr debugfs directory [ 711.059933][ T6166] batman_adv: batadv0: Interface deactivated: wlan0 [ 711.312440][ T6166] batman_adv: batadv0: Removing interface: wlan0 [ 711.323735][ T5810] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 711.341580][ T5837] Bluetooth: hci1: command tx timeout [ 711.372883][ T30] audit: type=1400 audit(2000000080.040:693): avc: denied { connect } for pid=13384 comm="syz.0.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 711.392377][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.460773][ T5810] usb 6-1: device descriptor read/64, error -71 [ 711.492865][T13388] netdevsim netdevsim0: Direct firmware load for . [ 711.492865][T13388] failed with error -2 [ 711.511387][T13388] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 711.511387][T13388] [ 711.593916][ T6166] hsr_slave_0: left promiscuous mode [ 711.599601][ T6166] hsr_slave_1: left promiscuous mode [ 711.605691][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 711.616016][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 711.624094][ T6166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.632420][ T6166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.647054][ T6166] veth1_macvtap: left promiscuous mode [ 711.652922][ T6166] veth0_macvtap: left promiscuous mode [ 711.658516][ T6166] veth1_vlan: left promiscuous mode [ 711.664593][ T6166] veth0_vlan: left promiscuous mode [ 711.754036][ T5810] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 711.920776][ T5810] usb 6-1: device descriptor read/64, error -71 [ 712.033384][ T5810] usb usb6-port1: attempt power cycle [ 712.114020][ T6166] team0 (unregistering): Port device team_slave_1 removed [ 712.144338][ T6166] team0 (unregistering): Port device C removed [ 712.381346][ T5810] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 712.424277][ T5810] usb 6-1: device descriptor read/8, error -71 [ 712.512379][T13291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 712.522906][T13291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.533547][T13291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.548874][T13291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.671509][ T5810] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 712.716347][ T5810] usb 6-1: device descriptor read/8, error -71 [ 712.767206][T13291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.875912][ T5810] usb usb6-port1: unable to enumerate USB device [ 712.894705][T13291] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.381033][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.388166][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.430897][ T5837] Bluetooth: hci1: command tx timeout [ 713.456944][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.464097][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.807457][T13291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.954546][T13291] veth0_vlan: entered promiscuous mode [ 713.969131][T13291] veth1_vlan: entered promiscuous mode [ 713.988841][T13291] veth0_macvtap: entered promiscuous mode [ 713.997190][T13291] veth1_macvtap: entered promiscuous mode [ 714.010555][T13291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.024368][T13291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.036730][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.046370][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.069036][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.077984][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.412923][T13428] Option 'D' to dns_resolver key: bad/missing value [ 715.181941][ T4511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.191459][ T8246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.217773][ T4511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.226687][ T8246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.600802][T13437] binder: 13436:13437 unknown command 0 [ 715.606630][T13437] binder: 13436:13437 ioctl c0306201 200000004a40 returned -22 [ 716.372102][T13456] 9pnet_fd: Insufficient options for proto=fd [ 716.382835][T13456] syz.1.1998 (13456): /proc/13451/oom_adj is deprecated, please use /proc/13451/oom_score_adj instead. [ 716.405387][T13447] netlink: 'syz.2.1996': attribute type 12 has an invalid length. [ 717.192815][T13456] bpq0: entered promiscuous mode [ 717.250477][ T30] audit: type=1400 audit(2000000085.900:694): avc: denied { map } for pid=13441 comm="syz.2.1996" path="socket:[40075]" dev="sockfs" ino=40075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 718.423698][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 718.711194][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 718.930811][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 719.135483][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 719.161795][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 719.187808][ T30] audit: type=1326 audit(2000000087.850:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.255022][ T30] audit: type=1326 audit(2000000087.920:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.280305][ T30] audit: type=1326 audit(2000000087.920:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.422986][ T30] audit: type=1326 audit(2000000087.920:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.647683][ T30] audit: type=1326 audit(2000000087.920:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.693493][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 719.700720][ T30] audit: type=1326 audit(2000000087.970:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.731315][ T30] audit: type=1326 audit(2000000087.970:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.755568][ T30] audit: type=1326 audit(2000000087.970:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.785705][ T30] audit: type=1326 audit(2000000087.970:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13479 comm="syz.6.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1c2cb8eec9 code=0x7ffc0000 [ 719.827620][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 719.840568][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.870773][ T10] usb 3-1: Product: syz [ 719.875167][ T10] usb 3-1: Manufacturer: syz [ 719.897353][ T10] usb 3-1: SerialNumber: syz [ 719.915082][ T10] usb 3-1: config 0 descriptor?? [ 719.928009][T13470] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 719.939647][ T10] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 720.313338][ T5898] usb 3-1: USB disconnect, device number 67 [ 720.510143][ T5877] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 720.699445][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.709976][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.724169][ T5877] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 720.767556][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.775795][ C1] sd 0:0:1:0: [sda] tag#7234 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 720.786186][ C1] sd 0:0:1:0: [sda] tag#7234 CDB: Read(6) 08 00 00 00 00 00 00 00 8b 00 00 01 [ 720.824033][ T5877] usb 1-1: config 0 descriptor?? [ 720.866446][ T5877] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 720.879178][ T976] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 721.077735][ T976] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 721.095681][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.106441][ T976] usb 6-1: config 0 descriptor?? [ 721.571141][ T976] [drm:udl_init] *ERROR* Selecting channel failed [ 721.586973][ T976] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 721.598163][ T976] [drm] Initialized udl on minor 2 [ 721.614879][ T976] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 721.644931][ T976] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 721.653209][ T5877] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 721.713044][ T5877] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 721.721252][ T976] usb 6-1: USB disconnect, device number 35 [ 721.753361][ T5877] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 722.070886][ T5877] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 722.122442][T13524] fuse: Unknown parameter '' [ 722.260816][T13526] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 722.263244][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 722.281580][ T4511] Bluetooth: hci3: Frame reassembly failed (-84) [ 722.410833][ T5877] usb 3-1: config 4 has an invalid interface number: 9 but max is 0 [ 722.441691][ T5877] usb 3-1: config 4 has no interface number 0 [ 722.461765][ T5877] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 722.491939][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 722.491953][ T30] audit: type=1400 audit(2000000091.160:739): avc: denied { append } for pid=13522 comm="syz.6.2018" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 722.554980][ T5877] usb 3-1: config 4 interface 9 has no altsetting 0 [ 722.583322][ T5877] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 722.612111][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.620278][ T5877] usb 3-1: Product: syz [ 722.624768][ T5877] usb 3-1: Manufacturer: syz [ 722.629797][ T5877] usb 3-1: SerialNumber: syz [ 722.639908][T13518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 722.655127][ T5877] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 722.851211][ T6166] usb 3-1: Failed to submit usb control message: -71 [ 722.851414][ T5877] usb 3-1: USB disconnect, device number 68 [ 723.002160][ T6166] usb 3-1: unable to send the bmi data to the device: -71 [ 723.009989][ T6166] usb 3-1: unable to get target info from device [ 723.016688][ T6166] usb 3-1: could not get target info (-71) [ 723.028727][ T6166] usb 3-1: could not probe fw (-71) [ 723.228263][ T10] usb 1-1: USB disconnect, device number 80 [ 723.275816][T13542] kvm: user requested TSC rate below hardware speed [ 723.283023][T13542] kvm: user requested TSC rate below hardware speed [ 723.290898][T13542] kvm: user requested TSC rate below hardware speed [ 724.301527][ T5837] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 724.358128][ T30] audit: type=1400 audit(2000000093.020:740): avc: denied { ioctl } for pid=13551 comm="syz.5.2024" path="socket:[41100]" dev="sockfs" ino=41100 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 724.480834][T13562] netlink: 'syz.5.2024': attribute type 10 has an invalid length. [ 724.532936][T13562] veth0_vlan: left promiscuous mode [ 724.658131][T13562] veth0_vlan: entered promiscuous mode [ 724.670337][T13562] team0: Device veth0_vlan failed to register rx_handler [ 724.684376][T13577] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2028'. [ 725.403607][T13577] nbd: socks must be embedded in a SOCK_ITEM attr [ 727.031679][ T30] audit: type=1400 audit(2000000095.700:741): avc: denied { bind } for pid=13608 comm="syz.1.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 727.136261][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2037'. [ 727.871967][T13625] FAULT_INJECTION: forcing a failure. [ 727.871967][T13625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.903721][T13625] CPU: 1 UID: 0 PID: 13625 Comm: syz.6.2040 Not tainted syzkaller #0 PREEMPT(full) [ 727.903745][T13625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.903756][T13625] Call Trace: [ 727.903762][T13625] [ 727.903769][T13625] dump_stack_lvl+0x16c/0x1f0 [ 727.903791][T13625] should_fail_ex+0x512/0x640 [ 727.903814][T13625] _copy_from_iter+0x29f/0x1720 [ 727.903839][T13625] ? __alloc_skb+0x200/0x380 [ 727.903859][T13625] ? __pfx__copy_from_iter+0x10/0x10 [ 727.903878][T13625] ? netlink_autobind.isra.0+0x158/0x370 [ 727.903910][T13625] netlink_sendmsg+0x820/0xdd0 [ 727.903932][T13625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.903964][T13625] ____sys_sendmsg+0xa98/0xc70 [ 727.903991][T13625] ? copy_msghdr_from_user+0x10a/0x160 [ 727.904011][T13625] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.904049][T13625] ___sys_sendmsg+0x134/0x1d0 [ 727.904068][T13625] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.904113][T13625] __sys_sendmsg+0x16d/0x220 [ 727.904133][T13625] ? __pfx___sys_sendmsg+0x10/0x10 [ 727.904167][T13625] do_syscall_64+0xcd/0x4e0 [ 727.904186][T13625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.904203][T13625] RIP: 0033:0x7f1c2cb8eec9 [ 727.904217][T13625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.904233][T13625] RSP: 002b:00007f1c2da0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.904249][T13625] RAX: ffffffffffffffda RBX: 00007f1c2cde5fa0 RCX: 00007f1c2cb8eec9 [ 727.904260][T13625] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 727.904269][T13625] RBP: 00007f1c2da0a090 R08: 0000000000000000 R09: 0000000000000000 [ 727.904280][T13625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.904289][T13625] R13: 00007f1c2cde6038 R14: 00007f1c2cde5fa0 R15: 00007fff0d5b97d8 [ 727.904313][T13625] [ 728.103649][T13621] team0: No ports can be present during mode change [ 728.630823][ T5877] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 728.809523][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 729.842109][T13636] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 729.889364][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.116264][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.128995][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 730.139411][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.873207][T13650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 731.073602][ T5877] usb 1-1: config 0 descriptor?? [ 731.127993][T13650] syz.2.2045 (13650) used greatest stack depth: 19720 bytes left [ 731.271077][T13658] tipc: Enabled bearer , priority 0 [ 731.299278][T13658] syzkaller0: entered promiscuous mode [ 731.304931][T13658] syzkaller0: entered allmulticast mode [ 731.329365][T13658] tipc: Resetting bearer [ 731.685015][ T5877] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 731.709626][ T5877] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 731.724483][ T5877] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 731.733751][T13657] tipc: Resetting bearer [ 731.747738][ T5877] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 731.755675][ T5877] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 731.766694][ T5877] koneplus 0003:1E7D:2D51.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 731.788610][T13657] tipc: Disabling bearer [ 732.106827][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 732.118255][T13676] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 732.369112][ T5877] usb 1-1: USB disconnect, device number 81 [ 732.584556][ T30] audit: type=1400 audit(2000000101.230:742): avc: denied { ioctl } for pid=13684 comm="syz.2.2054" path="socket:[41379]" dev="sockfs" ino=41379 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 732.710317][T13671] trusted_key: syz.6.2051 sent an empty control message without MSG_MORE. [ 732.723375][ T30] audit: type=1400 audit(2000000101.230:743): avc: denied { read } for pid=13684 comm="syz.2.2054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 732.810761][ T976] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 733.015894][ T976] usb 3-1: Using ep0 maxpacket: 8 [ 733.043292][ T976] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 733.053745][T13694] FAULT_INJECTION: forcing a failure. [ 733.053745][T13694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.070952][ T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.091478][T13694] CPU: 1 UID: 0 PID: 13694 Comm: syz.5.2058 Not tainted syzkaller #0 PREEMPT(full) [ 733.091502][T13694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 733.091513][T13694] Call Trace: [ 733.091520][T13694] [ 733.091528][T13694] dump_stack_lvl+0x16c/0x1f0 [ 733.091552][T13694] should_fail_ex+0x512/0x640 [ 733.091575][T13694] _copy_from_iter+0x29f/0x1720 [ 733.091600][T13694] ? __alloc_skb+0x200/0x380 [ 733.091621][T13694] ? __pfx__copy_from_iter+0x10/0x10 [ 733.091641][T13694] ? netlink_autobind.isra.0+0x158/0x370 [ 733.091675][T13694] netlink_sendmsg+0x820/0xdd0 [ 733.091702][T13694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.091735][T13694] sock_write_iter+0x566/0x610 [ 733.091761][T13694] ? __pfx_sock_write_iter+0x10/0x10 [ 733.091795][T13694] ? bpf_lsm_file_permission+0x9/0x10 [ 733.091815][T13694] ? security_file_permission+0x71/0x210 [ 733.091838][T13694] ? rw_verify_area+0xcf/0x6c0 [ 733.091868][T13694] vfs_write+0x7d0/0x11d0 [ 733.091887][T13694] ? __pfx_sock_write_iter+0x10/0x10 [ 733.091915][T13694] ? __pfx_vfs_write+0x10/0x10 [ 733.091931][T13694] ? find_held_lock+0x2b/0x80 [ 733.091973][T13694] ksys_write+0x1f8/0x250 [ 733.091990][T13694] ? __pfx_ksys_write+0x10/0x10 [ 733.092016][T13694] do_syscall_64+0xcd/0x4e0 [ 733.092036][T13694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.092053][T13694] RIP: 0033:0x7f424298eec9 [ 733.092069][T13694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.092087][T13694] RSP: 002b:00007f4243904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 733.092105][T13694] RAX: ffffffffffffffda RBX: 00007f4242be5fa0 RCX: 00007f424298eec9 [ 733.092117][T13694] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000006 [ 733.092128][T13694] RBP: 00007f4243904090 R08: 0000000000000000 R09: 0000000000000000 [ 733.092139][T13694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.092150][T13694] R13: 00007f4242be6038 R14: 00007f4242be5fa0 R15: 00007ffdfae07ba8 [ 733.092175][T13694] [ 733.092989][ T976] usb 3-1: config 0 descriptor?? [ 733.989243][ T976] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 736.854108][ T30] audit: type=1400 audit(2000000105.520:744): avc: denied { search } for pid=13732 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.893696][ T30] audit: type=1400 audit(2000000105.520:745): avc: denied { search } for pid=13732 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.935327][ T30] audit: type=1400 audit(2000000105.520:746): avc: denied { search } for pid=13732 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1834 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.971111][ T30] audit: type=1400 audit(2000000105.520:747): avc: denied { search } for pid=13732 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.040216][ T976] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 737.042836][ T30] audit: type=1400 audit(2000000105.700:748): avc: denied { read open } for pid=13743 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.050638][ T976] asix 3-1:0.0: probe with driver asix failed with error -71 [ 737.155776][ T30] audit: type=1400 audit(2000000105.700:749): avc: denied { getattr } for pid=13743 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 737.211957][ T30] audit: type=1400 audit(2000000105.700:750): avc: denied { getattr } for pid=13743 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 737.238668][ T30] audit: type=1400 audit(2000000105.870:751): avc: denied { read } for pid=13746 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1873 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 737.272347][ T976] usb 3-1: USB disconnect, device number 69 [ 737.424720][T13759] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 737.773317][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 737.773333][ T30] audit: type=1400 audit(2000000106.440:753): avc: denied { module_request } for pid=13764 comm="syz.1.2071" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 738.220936][ T30] audit: type=1400 audit(2000000106.860:754): avc: denied { add_name } for pid=13732 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.380817][ T30] audit: type=1400 audit(2000000106.870:755): avc: denied { create } for pid=13732 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 738.404681][ T30] audit: type=1400 audit(2000000106.870:756): avc: denied { write } for pid=13732 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb2.link" dev="tmpfs" ino=2058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 739.011561][ T30] audit: type=1400 audit(2000000106.870:757): avc: denied { append } for pid=13732 comm="dhcpcd-run-hook" name="resolv.conf.lapb2.link" dev="tmpfs" ino=2058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 739.069488][ T30] audit: type=1400 audit(2000000107.670:758): avc: denied { remove_name } for pid=13781 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=2058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.177905][ T30] audit: type=1400 audit(2000000107.670:759): avc: denied { unlink } for pid=13781 comm="rm" name="resolv.conf.lapb2.link" dev="tmpfs" ino=2058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 740.460819][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 740.621233][ T10] usb 2-1: too many configurations: 164, using maximum allowed: 8 [ 740.641435][ T10] usb 2-1: config index 0 descriptor too short (expected 65454, got 106) [ 740.659189][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.670876][ T976] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 740.701868][ T10] usb 2-1: config index 1 descriptor too short (expected 65454, got 106) [ 740.724506][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.758982][ T10] usb 2-1: config index 2 descriptor too short (expected 65454, got 106) [ 740.784230][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.815186][ T10] usb 2-1: config index 3 descriptor too short (expected 65454, got 106) [ 740.842304][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.850850][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.874181][ T10] usb 2-1: config index 4 descriptor too short (expected 65454, got 106) [ 740.880728][ T976] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 740.894255][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.900742][ T976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.916797][ T10] usb 2-1: config index 5 descriptor too short (expected 65454, got 106) [ 740.922426][ T976] usb 1-1: config 0 descriptor?? [ 740.929481][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.942565][ T10] usb 2-1: config index 6 descriptor too short (expected 65454, got 106) [ 741.128000][ T976] pwc: Askey VC010 type 2 USB webcam detected. [ 741.128347][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.289604][ T10] usb 2-1: config index 7 descriptor too short (expected 65454, got 106) [ 741.306972][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.462717][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 741.482972][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.486554][ T976] pwc: recv_control_msg error -32 req 02 val 2b00 [ 741.503455][ T10] usb 2-1: Product: syz [ 741.507756][ T10] usb 2-1: Manufacturer: syz [ 741.530882][ T10] usb 2-1: SerialNumber: syz [ 741.912064][ T976] pwc: recv_control_msg error -32 req 02 val 2700 [ 741.919206][ T976] pwc: recv_control_msg error -32 req 02 val 2c00 [ 741.937815][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 741.958752][T12559] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 741.984881][ T976] pwc: recv_control_msg error -32 req 04 val 1000 [ 742.003280][ T976] pwc: recv_control_msg error -32 req 04 val 1300 [ 742.024621][ T976] pwc: recv_control_msg error -32 req 04 val 1400 [ 742.038634][ T976] pwc: recv_control_msg error -32 req 02 val 2000 [ 742.057561][ T976] pwc: recv_control_msg error -32 req 02 val 2100 [ 742.077693][ T976] pwc: recv_control_msg error -32 req 04 val 1500 [ 742.098745][ T976] pwc: recv_control_msg error -32 req 02 val 2500 [ 742.117020][ T976] pwc: recv_control_msg error -32 req 02 val 2400 [ 742.141132][ T976] pwc: recv_control_msg error -32 req 02 val 2600 [ 742.165318][ T976] pwc: recv_control_msg error -32 req 02 val 2900 [ 742.187469][ T976] pwc: recv_control_msg error -32 req 02 val 2800 [ 742.306639][T13824] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 742.441164][T13836] infiniband syz!: set active [ 742.452066][T13836] infiniband syz!: added team_slave_0 [ 742.672587][T13883] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2090'. [ 743.424930][T12559] usb 2-1: Service connection timeout for: 256 [ 743.431376][T12559] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 743.465957][T13836] syz!: rxe_create_cq: returned err = -12 [ 743.483039][T13836] infiniband syz!: Couldn't create ib_mad CQ [ 743.501943][T13836] infiniband syz!: Couldn't open port 1 [ 743.521387][T12559] ath9k_htc: Failed to initialize the device [ 743.535589][T12559] usb 2-1: ath9k_htc: USB layer deinitialized [ 743.587076][T13836] RDS/IB: syz!: added [ 743.605852][ T5898] usb 2-1: USB disconnect, device number 67 [ 743.918943][T13893] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20003 [ 744.014746][ T30] audit: type=1400 audit(2000000112.670:760): avc: denied { ioctl } for pid=13891 comm="syz.6.2092" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 744.795299][ T30] audit: type=1400 audit(2000000113.460:761): avc: denied { read } for pid=13911 comm="syz.2.2097" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 744.877813][ T30] audit: type=1400 audit(2000000113.460:762): avc: denied { open } for pid=13911 comm="syz.2.2097" path="/434/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 744.952862][ T30] audit: type=1400 audit(2000000113.460:763): avc: denied { ioctl } for pid=13911 comm="syz.2.2097" path="/434/file0/file0" dev="fuse" ino=2 ioctlcmd=0x933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 746.204558][T13937] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 746.211112][T13937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 746.232629][T13937] vhci_hcd vhci_hcd.0: Device attached [ 746.279137][T13937] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 746.285687][T13937] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 746.301135][T13943] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 746.307761][T13943] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 746.356234][T13937] vhci_hcd vhci_hcd.0: Device attached [ 746.360946][T13951] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 746.368315][T13951] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 746.381907][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2104'. [ 746.391057][T13956] FAULT_INJECTION: forcing a failure. [ 746.391057][T13956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.392220][T13956] [ 746.392226][T13956] ====================================================== [ 746.392231][T13956] WARNING: possible circular locking dependency detected [ 746.392236][T13956] syzkaller #0 Not tainted [ 746.392243][T13956] ------------------------------------------------------ [ 746.392248][T13956] syz.1.2104/13956 is trying to acquire lock: [ 746.392255][T13956] ffffffff8e0cf5c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 746.392295][T13956] [ 746.392295][T13956] but task is already holding lock: [ 746.392299][T13956] ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 746.392332][T13956] [ 746.392332][T13956] which lock already depends on the new lock. [ 746.392332][T13956] [ 746.392336][T13956] [ 746.392336][T13956] the existing dependency chain (in reverse order) is: [ 746.392341][T13956] [ 746.392341][T13956] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 746.392356][T13956] _raw_spin_lock_nested+0x31/0x40 [ 746.392376][T13956] raw_spin_rq_lock_nested+0x29/0x130 [ 746.392393][T13956] task_rq_lock+0xcf/0x490 [ 746.392410][T13956] cgroup_move_task+0x81/0x2a0 [ 746.392430][T13956] css_set_move_task+0x288/0x5f0 [ 746.392444][T13956] cgroup_post_fork+0x201/0x9d0 [ 746.392462][T13956] copy_process+0x602d/0x76a0 [ 746.392480][T13956] kernel_clone+0xfc/0x930 [ 746.392498][T13956] user_mode_thread+0xc8/0x110 [ 746.392516][T13956] rest_init+0x23/0x2b0 [ 746.392529][T13956] start_kernel+0x3f3/0x4e0 [ 746.392547][T13956] x86_64_start_reservations+0x18/0x30 [ 746.392566][T13956] x86_64_start_kernel+0x130/0x190 [ 746.392583][T13956] common_startup_64+0x13e/0x148 [ 746.392598][T13956] [ 746.392598][T13956] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 746.392614][T13956] _raw_spin_lock_irqsave+0x3a/0x60 [ 746.392631][T13956] try_to_wake_up+0xb7/0x1870 [ 746.392649][T13956] __wake_up_common+0x132/0x1f0 [ 746.392663][T13956] __wake_up+0x31/0x60 [ 746.392680][T13956] tty_port_default_wakeup+0x47/0x60 [ 746.392693][T13956] serial8250_tx_chars+0x68e/0x860 [ 746.392706][T13956] serial8250_handle_irq+0x761/0xcb0 [ 746.392719][T13956] serial8250_default_handle_irq+0x9e/0x270 [ 746.392732][T13956] serial8250_interrupt+0xf5/0x1d0 [ 746.392747][T13956] __handle_irq_event_percpu+0x233/0x920 [ 746.392761][T13956] handle_irq_event+0xab/0x1e0 [ 746.392775][T13956] handle_edge_irq+0x3ca/0x9e0 [ 746.392788][T13956] __common_interrupt+0xcd/0x2f0 [ 746.392803][T13956] common_interrupt+0xba/0xe0 [ 746.392815][T13956] asm_common_interrupt+0x26/0x40 [ 746.392825][T13956] pv_native_safe_halt+0xf/0x20 [ 746.392839][T13956] default_idle+0x13/0x20 [ 746.392849][T13956] default_idle_call+0x6c/0xb0 [ 746.392860][T13956] do_idle+0x38d/0x500 [ 746.392873][T13956] cpu_startup_entry+0x4f/0x60 [ 746.392886][T13956] start_secondary+0x21d/0x2b0 [ 746.392895][T13956] common_startup_64+0x13e/0x148 [ 746.392907][T13956] [ 746.392907][T13956] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 746.392920][T13956] _raw_spin_lock_irqsave+0x3a/0x60 [ 746.392935][T13956] __wake_up+0x1c/0x60 [ 746.392950][T13956] tty_port_default_wakeup+0x47/0x60 [ 746.392962][T13956] serial8250_tx_chars+0x68e/0x860 [ 746.392974][T13956] serial8250_handle_irq+0x761/0xcb0 [ 746.392987][T13956] serial8250_default_handle_irq+0x9e/0x270 [ 746.393001][T13956] serial8250_interrupt+0xf5/0x1d0 [ 746.393015][T13956] __handle_irq_event_percpu+0x233/0x920 [ 746.393029][T13956] handle_irq_event+0xab/0x1e0 [ 746.393043][T13956] handle_edge_irq+0x3ca/0x9e0 [ 746.393055][T13956] __common_interrupt+0xcd/0x2f0 [ 746.393070][T13956] common_interrupt+0xba/0xe0 [ 746.393081][T13956] asm_common_interrupt+0x26/0x40 [ 746.393091][T13956] pv_native_safe_halt+0xf/0x20 [ 746.393105][T13956] default_idle+0x13/0x20 [ 746.393115][T13956] default_idle_call+0x6c/0xb0 [ 746.393125][T13956] do_idle+0x38d/0x500 [ 746.393138][T13956] cpu_startup_entry+0x4f/0x60 [ 746.393152][T13956] start_secondary+0x21d/0x2b0 [ 746.393160][T13956] common_startup_64+0x13e/0x148 [ 746.393171][T13956] [ 746.393171][T13956] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 746.393189][T13956] _raw_spin_lock_irqsave+0x3a/0x60 [ 746.393203][T13956] serial8250_console_write+0x181/0x1890 [ 746.393217][T13956] console_flush_all+0x801/0xc60 [ 746.393230][T13956] console_unlock+0xd8/0x210 [ 746.393243][T13956] vprintk_emit+0x3d7/0x680 [ 746.393257][T13956] _printk+0xc7/0x100 [ 746.393267][T13956] register_console+0xc2d/0x11b0 [ 746.393281][T13956] univ8250_console_init+0x5f/0x90 [ 746.393297][T13956] console_init+0x14f/0x680 [ 746.393311][T13956] start_kernel+0x29f/0x4e0 [ 746.393324][T13956] x86_64_start_reservations+0x18/0x30 [ 746.393339][T13956] x86_64_start_kernel+0x130/0x190 [ 746.393352][T13956] common_startup_64+0x13e/0x148 [ 746.393364][T13956] [ 746.393364][T13956] -> #0 (console_owner){-.-.}-{0:0}: [ 746.393377][T13956] __lock_acquire+0x12a6/0x1ce0 [ 746.393387][T13956] lock_acquire+0x179/0x350 [ 746.393397][T13956] console_lock_spinning_enable+0x72/0x80 [ 746.393410][T13956] console_flush_all+0x7aa/0xc60 [ 746.393424][T13956] console_unlock+0xd8/0x210 [ 746.393437][T13956] vprintk_emit+0x3d7/0x680 [ 746.393450][T13956] _printk+0xc7/0x100 [ 746.393460][T13956] should_fail_ex+0x4e7/0x640 [ 746.393471][T13956] strncpy_from_user+0x3b/0x2e0 [ 746.393480][T13956] strncpy_from_user_nofault+0x7f/0x180 [ 746.393490][T13956] bpf_probe_read_compat_str+0xe8/0x180 [ 746.393503][T13956] bpf_prog_fd5bf94a8716d85f+0x3e/0x55 [ 746.393511][T13956] bpf_trace_run4+0x24f/0x5b0 [ 746.393524][T13956] __bpf_trace_sched_switch+0x145/0x190 [ 746.393537][T13956] __traceiter_sched_switch+0x6f/0xc0 [ 746.393550][T13956] __schedule+0x183b/0x5de0 [ 746.393563][T13956] preempt_schedule_common+0x44/0xc0 [ 746.393578][T13956] preempt_schedule_thunk+0x16/0x30 [ 746.393594][T13956] vprintk_emit+0x408/0x680 [ 746.393608][T13956] _printk+0xc7/0x100 [ 746.393618][T13956] __nla_validate_parse+0x751/0x2880 [ 746.393631][T13956] __nla_parse+0x40/0x60 [ 746.393643][T13956] rtnl_dellink+0x195/0xa90 [ 746.393655][T13956] rtnetlink_rcv_msg+0x95b/0xe90 [ 746.393668][T13956] netlink_rcv_skb+0x158/0x420 [ 746.393681][T13956] netlink_unicast+0x5a7/0x870 [ 746.393693][T13956] netlink_sendmsg+0x8c8/0xdd0 [ 746.393705][T13956] ____sys_sendmsg+0xa98/0xc70 [ 746.393720][T13956] ___sys_sendmsg+0x134/0x1d0 [ 746.393730][T13956] __sys_sendmsg+0x16d/0x220 [ 746.393741][T13956] do_syscall_64+0xcd/0x4e0 [ 746.393749][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.393759][T13956] [ 746.393759][T13956] other info that might help us debug this: [ 746.393759][T13956] [ 746.393762][T13956] Chain exists of: [ 746.393762][T13956] console_owner --> &p->pi_lock --> &rq->__lock [ 746.393762][T13956] [ 746.393777][T13956] Possible unsafe locking scenario: [ 746.393777][T13956] [ 746.393779][T13956] CPU0 CPU1 [ 746.393782][T13956] ---- ---- [ 746.393785][T13956] lock(&rq->__lock); [ 746.393791][T13956] lock(&p->pi_lock); [ 746.393798][T13956] lock(&rq->__lock); [ 746.393805][T13956] lock(console_owner); [ 746.393811][T13956] [ 746.393811][T13956] *** DEADLOCK *** [ 746.393811][T13956] [ 746.393813][T13956] 4 locks held by syz.1.2104/13956: [ 746.393819][T13956] #0: ffff8880b863a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 746.393846][T13956] #1: ffffffff8e1c23a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1d5/0x5b0 [ 746.393872][T13956] #2: ffffffff8e1afa00 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 746.393895][T13956] #3: ffffffff8e1afa70 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 746.393921][T13956] [ 746.393921][T13956] stack backtrace: [ 746.393928][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.1.2104 Not tainted syzkaller #0 PREEMPT(full) [ 746.393940][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 746.393947][T13956] Call Trace: [ 746.393951][T13956] [ 746.393955][T13956] dump_stack_lvl+0x116/0x1f0 [ 746.393965][T13956] print_circular_bug+0x275/0x350 [ 746.393977][T13956] check_noncircular+0x14c/0x170 [ 746.393989][T13956] __lock_acquire+0x12a6/0x1ce0 [ 746.394003][T13956] lock_acquire+0x179/0x350 [ 746.394014][T13956] ? console_lock_spinning_enable+0x61/0x80 [ 746.394029][T13956] ? console_lock_spinning_enable+0x4a/0x80 [ 746.394044][T13956] console_lock_spinning_enable+0x72/0x80 [ 746.394058][T13956] ? console_lock_spinning_enable+0x61/0x80 [ 746.394073][T13956] console_flush_all+0x7aa/0xc60 [ 746.394089][T13956] ? __pfx_console_flush_all+0x10/0x10 [ 746.394105][T13956] ? is_printk_cpu_sync_owner+0x32/0x40 [ 746.394123][T13956] console_unlock+0xd8/0x210 [ 746.394136][T13956] ? __pfx_console_unlock+0x10/0x10 [ 746.394151][T13956] ? do_raw_spin_unlock+0x140/0x230 [ 746.394165][T13956] ? _printk+0xc7/0x100 [ 746.394180][T13956] ? __down_trylock_console_sem+0xb0/0x140 [ 746.394193][T13956] vprintk_emit+0x3d7/0x680 [ 746.394208][T13956] ? __pfx_vprintk_emit+0x10/0x10 [ 746.394224][T13956] ? __pfx_vsnprintf+0x10/0x10 [ 746.394240][T13956] _printk+0xc7/0x100 [ 746.394251][T13956] ? __pfx__printk+0x10/0x10 [ 746.394264][T13956] ? __pfx____ratelimit+0x10/0x10 [ 746.394279][T13956] ? __lock_acquire+0x62e/0x1ce0 [ 746.394289][T13956] ? mlx4_init_mr_table+0x286/0xa60 [ 746.394306][T13956] should_fail_ex+0x4e7/0x640 [ 746.394318][T13956] strncpy_from_user+0x3b/0x2e0 [ 746.394329][T13956] strncpy_from_user_nofault+0x7f/0x180 [ 746.394340][T13956] bpf_probe_read_compat_str+0xe8/0x180 [ 746.394353][T13956] bpf_prog_fd5bf94a8716d85f+0x3e/0x55 [ 746.394361][T13956] bpf_trace_run4+0x24f/0x5b0 [ 746.394375][T13956] ? __pfx_bpf_trace_run4+0x10/0x10 [ 746.394390][T13956] ? __lock_acquire+0xb97/0x1ce0 [ 746.394402][T13956] __bpf_trace_sched_switch+0x145/0x190 [ 746.394417][T13956] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 746.394432][T13956] ? psi_group_change+0x4c1/0xbe0 [ 746.394444][T13956] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 746.394461][T13956] __traceiter_sched_switch+0x6f/0xc0 [ 746.394475][T13956] __schedule+0x183b/0x5de0 [ 746.394491][T13956] ? find_held_lock+0x2b/0x80 [ 746.394506][T13956] ? up+0xcb/0x140 [ 746.394516][T13956] ? __pfx___schedule+0x10/0x10 [ 746.394532][T13956] ? rcu_is_watching+0x12/0xc0 [ 746.394547][T13956] ? __up_console_sem+0x8f/0xe0 [ 746.394559][T13956] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.394576][T13956] ? preempt_schedule_thunk+0x16/0x30 [ 746.394592][T13956] preempt_schedule_common+0x44/0xc0 [ 746.394608][T13956] preempt_schedule_thunk+0x16/0x30 [ 746.394624][T13956] ? vprintk_emit+0x3f6/0x680 [ 746.394639][T13956] ? vprintk_emit+0x403/0x680 [ 746.394653][T13956] vprintk_emit+0x408/0x680 [ 746.394668][T13956] ? __pfx_vprintk_emit+0x10/0x10 [ 746.394683][T13956] ? find_held_lock+0x2b/0x80 [ 746.394699][T13956] _printk+0xc7/0x100 [ 746.394710][T13956] ? __pfx__printk+0x10/0x10 [ 746.394723][T13956] ? __pfx____ratelimit+0x10/0x10 [ 746.394738][T13956] ? is_bpf_text_address+0x94/0x1a0 [ 746.394752][T13956] ? __nla_validate_parse+0x66c/0x2880 [ 746.394767][T13956] __nla_validate_parse+0x751/0x2880 [ 746.394783][T13956] ? __pfx___nla_validate_parse+0x10/0x10 [ 746.394798][T13956] ? stack_trace_save+0x8e/0xc0 [ 746.394815][T13956] ? __pfx_stack_trace_save+0x10/0x10 [ 746.394832][T13956] __nla_parse+0x40/0x60 [ 746.394846][T13956] rtnl_dellink+0x195/0xa90 [ 746.394858][T13956] ? consume_skb+0xcc/0x100 [ 746.394871][T13956] ? nlmon_xmit+0xa5/0xe0 [ 746.394885][T13956] ? dev_hard_start_xmit+0x97/0x740 [ 746.394901][T13956] ? __dev_queue_xmit+0xa46/0x4490 [ 746.394910][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 746.394922][T13956] ? ____sys_sendmsg+0xa98/0xc70 [ 746.394938][T13956] ? ___sys_sendmsg+0x134/0x1d0 [ 746.394949][T13956] ? __sys_sendmsg+0x16d/0x220 [ 746.394960][T13956] ? do_syscall_64+0xcd/0x4e0 [ 746.394969][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.394991][T13956] ? __lock_acquire+0x62e/0x1ce0 [ 746.395002][T13956] ? irqentry_exit+0x3b/0x90 [ 746.395011][T13956] ? lockdep_hardirqs_on+0x7c/0x110 [ 746.395029][T13956] ? find_held_lock+0x2b/0x80 [ 746.395043][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 746.395054][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 746.395066][T13956] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 746.395079][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 746.395091][T13956] rtnetlink_rcv_msg+0x95b/0xe90 [ 746.395104][T13956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.395119][T13956] ? ref_tracker_free+0x37c/0x830 [ 746.395132][T13956] netlink_rcv_skb+0x158/0x420 [ 746.395145][T13956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 746.395159][T13956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 746.395179][T13956] ? netlink_deliver_tap+0x1ae/0xd30 [ 746.395193][T13956] netlink_unicast+0x5a7/0x870 [ 746.395207][T13956] ? __pfx_netlink_unicast+0x10/0x10 [ 746.395223][T13956] netlink_sendmsg+0x8c8/0xdd0 [ 746.395237][T13956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 746.395253][T13956] ____sys_sendmsg+0xa98/0xc70 [ 746.395268][T13956] ? copy_msghdr_from_user+0x10a/0x160 [ 746.395280][T13956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 746.395298][T13956] ___sys_sendmsg+0x134/0x1d0 [ 746.395311][T13956] ? __pfx____sys_sendmsg+0x10/0x10 [ 746.395331][T13956] __sys_sendmsg+0x16d/0x220 [ 746.395342][T13956] ? __pfx___sys_sendmsg+0x10/0x10 [ 746.395359][T13956] do_syscall_64+0xcd/0x4e0 [ 746.395369][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.395379][T13956] RIP: 0033:0x7f233c38eec9 [ 746.395389][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 746.395400][T13956] RSP: 002b:00007f233d30d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.395409][T13956] RAX: ffffffffffffffda RBX: 00007f233c5e5fa0 RCX: 00007f233c38eec9 [ 746.395416][T13956] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 746.395423][T13956] RBP: 00007f233d30d090 R08: 0000000000000000 R09: 0000000000000000 [ 746.395429][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.395435][T13956] R13: 00007f233c5e6038 R14: 00007f233c5e5fa0 R15: 00007fff73711418 [ 746.395445][T13956] [ 747.795536][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.1.2104 Not tainted syzkaller #0 PREEMPT(full) [ 747.795552][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 747.795559][T13956] Call Trace: [ 747.795564][T13956] [ 747.795570][T13956] dump_stack_lvl+0x116/0x1f0 [ 747.795585][T13956] should_fail_ex+0x512/0x640 [ 747.795598][T13956] strncpy_from_user+0x3b/0x2e0 [ 747.795610][T13956] strncpy_from_user_nofault+0x7f/0x180 [ 747.795623][T13956] bpf_probe_read_compat_str+0xe8/0x180 [ 747.795639][T13956] bpf_prog_fd5bf94a8716d85f+0x3e/0x55 [ 747.795648][T13956] bpf_trace_run4+0x24f/0x5b0 [ 747.795662][T13956] ? __pfx_bpf_trace_run4+0x10/0x10 [ 747.795677][T13956] ? __lock_acquire+0xb97/0x1ce0 [ 747.795691][T13956] __bpf_trace_sched_switch+0x145/0x190 [ 747.795706][T13956] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 747.795722][T13956] ? psi_group_change+0x4c1/0xbe0 [ 747.795734][T13956] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 747.795751][T13956] __traceiter_sched_switch+0x6f/0xc0 [ 747.795766][T13956] __schedule+0x183b/0x5de0 [ 747.795782][T13956] ? find_held_lock+0x2b/0x80 [ 747.795797][T13956] ? up+0xcb/0x140 [ 747.795807][T13956] ? __pfx___schedule+0x10/0x10 [ 747.795824][T13956] ? rcu_is_watching+0x12/0xc0 [ 747.795840][T13956] ? __up_console_sem+0x8f/0xe0 [ 747.795852][T13956] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.795869][T13956] ? preempt_schedule_thunk+0x16/0x30 [ 747.795886][T13956] preempt_schedule_common+0x44/0xc0 [ 747.795902][T13956] preempt_schedule_thunk+0x16/0x30 [ 747.795919][T13956] ? vprintk_emit+0x3f6/0x680 [ 747.795934][T13956] ? vprintk_emit+0x403/0x680 [ 747.795948][T13956] vprintk_emit+0x408/0x680 [ 747.795964][T13956] ? __pfx_vprintk_emit+0x10/0x10 [ 747.795979][T13956] ? find_held_lock+0x2b/0x80 [ 747.795999][T13956] _printk+0xc7/0x100 [ 747.796010][T13956] ? __pfx__printk+0x10/0x10 [ 747.796023][T13956] ? __pfx____ratelimit+0x10/0x10 [ 747.796038][T13956] ? is_bpf_text_address+0x94/0x1a0 [ 747.796052][T13956] ? __nla_validate_parse+0x66c/0x2880 [ 747.796068][T13956] __nla_validate_parse+0x751/0x2880 [ 747.796084][T13956] ? __pfx___nla_validate_parse+0x10/0x10 [ 747.796099][T13956] ? stack_trace_save+0x8e/0xc0 [ 747.796116][T13956] ? __pfx_stack_trace_save+0x10/0x10 [ 747.796133][T13956] __nla_parse+0x40/0x60 [ 747.796148][T13956] rtnl_dellink+0x195/0xa90 [ 747.796161][T13956] ? consume_skb+0xcc/0x100 [ 747.796174][T13956] ? nlmon_xmit+0xa5/0xe0 [ 747.796188][T13956] ? dev_hard_start_xmit+0x97/0x740 [ 747.796205][T13956] ? __dev_queue_xmit+0xa46/0x4490 [ 747.796214][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 747.796226][T13956] ? ____sys_sendmsg+0xa98/0xc70 [ 747.796241][T13956] ? ___sys_sendmsg+0x134/0x1d0 [ 747.796252][T13956] ? __sys_sendmsg+0x16d/0x220 [ 747.796263][T13956] ? do_syscall_64+0xcd/0x4e0 [ 747.796272][T13956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.796294][T13956] ? __lock_acquire+0x62e/0x1ce0 [ 747.796306][T13956] ? irqentry_exit+0x3b/0x90 [ 747.796315][T13956] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.796332][T13956] ? find_held_lock+0x2b/0x80 [ 747.796346][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 747.796358][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 747.796370][T13956] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 747.796383][T13956] ? __pfx_rtnl_dellink+0x10/0x10 [ 747.796395][T13956] rtnetlink_rcv_msg+0x95b/0xe90 [ 747.796409][T13956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.796424][T13956] ? ref_tracker_free+0x37c/0x830 [ 747.796437][T13956] netlink_rcv_skb+0x158/0x420 [ 747.796451][T13956] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 747.796465][T13956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 747.796480][T13956] ? netlink_deliver_tap+0x1ae/0xd30 [ 747.796494][T13956] netlink_unicast+0x5a7/0x870 [ 747.796508][T13956] ? __pfx_netlink_unicast+0x10/0x10 [ 747.796524][T13956] netlink_sendmsg+0x8c8/0xdd0 [ 747.796539][T13956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 747.796555][T13956] ____sys_sendmsg+0xa98/0xc70 [ 747.796570][T13956] ? copy_msghdr_from_user+0x10a/0x160 [ 747.796582][T13956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 747.796600][T13956] ___sys_sendmsg+0x134/0x1d0 [ 747.796612][T13956] ? __pfx____sys_sendmsg+0x10/0x10 [ 747.796632][T13956] __sys_sendmsg+0x16d/0x220 [ 747.796645][T13956] ? __pfx___sys_sendmsg+0x10/0x10 [ 747.796661][T13956] do_syscall_64+0xcd/0x4e0 [ 747.796672][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.796682][T13956] RIP: 0033:0x7f233c38eec9 [ 747.796691][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.796702][T13956] RSP: 002b:00007f233d30d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 747.796713][T13956] RAX: ffffffffffffffda RBX: 00007f233c5e5fa0 RCX: 00007f233c38eec9 [ 747.796720][T13956] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 747.796726][T13956] RBP: 00007f233d30d090 R08: 0000000000000000 R09: 0000000000000000 [ 747.796733][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.796739][T13956] R13: 00007f233c5e6038 R14: 00007f233c5e5fa0 R15: 00007fff73711418 [ 747.796749][T13956] [ 747.824521][T13951] vhci_hcd vhci_hcd.0: Device attached [ 747.829235][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.832013][T13943] vhci_hcd vhci_hcd.0: Device attached [ 747.849294][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.849333][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.103692][ T30] audit: type=1400 audit(2000000116.770:764): avc: denied { read } for pid=13936 comm="syz.2.2101" path="socket:[42013]" dev="sockfs" ino=42013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 748.106326][ T976] pwc: recv_control_msg error -71 req 04 val 1200 [ 748.160768][ T5877] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 748.161131][ T976] pwc: Registered as video103. [ 748.230735][ T5898] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 748.268939][ T976] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 748.272119][ T976] usb 1-1: USB disconnect, device number 82 [ 748.277752][T13953] vhci_hcd: connection closed [ 748.295297][T13944] vhci_hcd: connection closed [ 748.321128][ T6166] vhci_hcd: stop threads [ 748.323277][T13938] vhci_hcd: connection reset by peer [ 748.329629][ T6166] vhci_hcd: release socket [ 748.359305][T13946] vhci_hcd: connection closed [ 748.428218][T13956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.442011][ T6166] vhci_hcd: disconnect device [ 748.450221][ T6166] vhci_hcd: stop threads [ 748.471362][ T6166] vhci_hcd: release socket [ 748.476099][ T6166] vhci_hcd: disconnect device [ 748.493362][ T6166] vhci_hcd: stop threads [ 748.504090][ T6166] vhci_hcd: release socket [ 748.514106][ T6166] vhci_hcd: disconnect device [ 748.524090][ T6166] vhci_hcd: stop threads [ 748.528396][ T6166] vhci_hcd: release socket [ 748.535832][ T6166] vhci_hcd: disconnect device [ 748.590711][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 748.597494][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.608543][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 748.641665][ T5898] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 748.670711][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.685705][ T5898] usb 2-1: config 0 descriptor?? [ 749.030889][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 749.037022][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 749.045936][ T5898] usb 2-1: USB disconnect, device number 68 [ 753.251165][ T5877] vhci_hcd: vhci_device speed not set