last executing test programs: 2m52.448099573s ago: executing program 0 (id=344): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fchdir(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000012002927000000000000008b050021"], 0x38}}, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x67) 2m49.114924959s ago: executing program 0 (id=352): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x49, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x8f) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032abd7000ffdbdf257c0000000c00990008000000660000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000808000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x420408f0}, 0x4000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000bc0)={'rti800\x00', [0x8, 0x4, 0x9, 0x6, 0x1, 0x7, 0x6, 0x9, 0x10, 0x28, 0xf, 0x0, 0x10, 0x8, 0xfffffe01, 0x7ffe, 0x40, 0x8, 0x2, 0x67e, 0x7f, 0x2, 0x1003d, 0x1, 0xffffff01, 0x8, 0x3, 0xfc, 0x2d, 0x9af2, 0xe, 0x101]}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f0000000d00)=ANY=[]) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000001d40)=ANY=[@ANYBLOB="4004fe000000fe064d7d2ec6eec69e8eafa86f83acbdf9a474879095afce3b0f6df106e5738c84eaba9bbc5b75f35886d38d27f37c4f03c85d73a095c6146e6857569edfb21f1c9250da0eb95f26c0711fcf6ec1ce9700be3779482a2b91c708f524ed92a377bfc8495991ba87eb99af61cbc557f67e55559801bc6bb799d38d007e3edc665d9d7330ee072ec2e878b48954536292e6abb16932154252804fa9ff2d510787812d2c2759da9de0bcdb4c1326a53f4342f4acaff85451e2cc062cb7071c5f88a522cd65d3cc168d9127e5cd4254b33ee2e8e169d77e3287c82f7e4eec4a27895b1a077824ef09439c8feff581db814842ae7afa99f219d89763e7e2a010f604d63a870777"], &(0x7f0000000200)={0x0, 0x3, 0x47, @string={0x47, 0x3, "19eeeb3f360a366addd822a2615df20e2093a654a0960d2815c139806a98466348924bdba74372602bbea305088d74a3af66607fc16203fb0a762b6b4d60a5ef1daade0885"}}, &(0x7f0000000280)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xcb, 0x86, 0x8000, 0xe7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x47, 0x94, 0x0, 0x5, 0x1}, @ptm_cap={0x3}, @generic={0x14, 0x10, 0x2, "0fb3db1c1453e7b0780aff00a38a5c5774"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x3, "76551c3f", "6df0ba74"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x10, 0x9, 0x1, 0x300, 0x200}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000440)={0x0, 0x0, 0xa9, "1f67f095135941e5c6f7bcb1e463cd2b023d81450966e4a98c83d512933d645342902b20b28a224122f3ad25b422b3d55c3017ef0887d8e551304527afdf5dea619cb1d29ff54ca40e7a2672d356f7b3c9cee932a6de2df8d73df7e2eea431dc6e4e371ce2fc0484f17988402b44cc7a237da1dce34757c8a9dfc71a9fe4791f776a02354e370146c0a52ddb18bf593415678d0095c596486aa3f588bb3279b0214607c7cc2abdfde4"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8a}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)=ANY=[@ANYBLOB="0300"], &(0x7f0000000780)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "ff90"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x63}, &(0x7f0000000880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="05cb2e1f4c34"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e78a"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x22}}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x000\r'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f00000005c0)={0xc0, 0x453, 0x400, 0x70bd25, 0x25dfdbff, "240fc9a5bd3185e3711aa655fddab52866103ba9b3910a634aa195bf9439b2e57cf1e2ba2fdb5a2055ca60bb78e112effcdd5304477dc86205934f3d300c11b3e14a085a62795a43a75af963da30d9ac42a18394ad5d8b6c20478028f6fbd282475cf27eb8d05c40065862d2eb643c4546e3529b23542e50f1c5ac366fb1782628240b7f96d1b3c453be5d04db4a90f042fffb55db661630709c77d5d1dd3749edc7a3850f3bf4436ba1348764", ["", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000811}, 0x408c0) 2m46.423244453s ago: executing program 0 (id=363): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000cc0)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) chdir(0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0xc00, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x40404f26, 0x5, 0x2, 0x401, 0xc, 0x49, 0xfff, 0x5c95239c, 0x5, 0x3bf, 0x802, 0x1600, 0x1, 0x20000001, 0x9, 0xe1cb, 0x6, 0x0, 0x400, 0x195, 0x6, 0x0, 0xb, 0x402, 0x9, 0x3, 0x41, 0x5, 0x6, 0x8000003, 0xdffffffa]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) write$tun(0xffffffffffffffff, 0x0, 0x8f) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00032abd7000ffdbdf257c0000000c00990008000000660000000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff00000a0006000808000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x420408f0}, 0x4000000) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xde64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000bc0)={'rti800\x00', [0x8, 0x4, 0x9, 0x6, 0x1, 0x7, 0x6, 0x9, 0x10, 0x28, 0xf, 0x0, 0x10, 0x8, 0xfffffe01, 0x7ffe, 0x40, 0x8, 0x2, 0x67e, 0x7f, 0x2, 0x1003d, 0x1, 0xffffff01, 0x8, 0x3, 0xfc, 0x2d, 0x9af2, 0xe, 0x101]}) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f0000000d00)=ANY=[]) syz_usb_control_io(r4, &(0x7f0000000400)={0x2c, &(0x7f0000001d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)={0x0, 0x3, 0x47, @string={0x47, 0x3, "19eeeb3f360a366addd822a2615df20e2093a654a0960d2815c139806a98466348924bdba74372602bbea305088d74a3af66607fc16203fb0a762b6b4d60a5ef1daade0885"}}, &(0x7f0000000280)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xcb, 0x86, 0x8000, 0xe7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x47, 0x94, 0x0, 0x5, 0x1}, @ptm_cap={0x3}, @generic={0x14, 0x10, 0x2, "0fb3db1c1453e7b0780aff00a38a5c5774"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x1, 0x0, 0x3, "76551c3f", "6df0ba74"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0x10, 0x9, 0x1, 0x300, 0x200}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000440)={0x0, 0x0, 0xa9, "1f67f095135941e5c6f7bcb1e463cd2b023d81450966e4a98c83d512933d645342902b20b28a224122f3ad25b422b3d55c3017ef0887d8e551304527afdf5dea619cb1d29ff54ca40e7a2672d356f7b3c9cee932a6de2df8d73df7e2eea431dc6e4e371ce2fc0484f17988402b44cc7a237da1dce34757c8a9dfc71a9fe4791f776a02354e370146c0a52ddb18bf593415678d0095c596486aa3f588bb3279b0214607c7cc2abdfde4"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x8a}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000740)=ANY=[@ANYBLOB="0300"], &(0x7f0000000780)={0x40, 0x7, 0x2, 0x8001}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "ff90"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x63}, &(0x7f0000000880)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @random="05cb2e1f4c34"}, &(0x7f0000000900)={0x40, 0x19, 0x2, "e78a"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0xf}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x22}}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x000\r'], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c80)={&(0x7f00000005c0)={0xc0, 0x453, 0x400, 0x70bd25, 0x25dfdbff, "240fc9a5bd3185e3711aa655fddab52866103ba9b3910a634aa195bf9439b2e57cf1e2ba2fdb5a2055ca60bb78e112effcdd5304477dc86205934f3d300c11b3e14a085a62795a43a75af963da30d9ac42a18394ad5d8b6c20478028f6fbd282475cf27eb8d05c40065862d2eb643c4546e3529b23542e50f1c5ac366fb1782628240b7f96d1b3c453be5d04db4a90f042fffb55db661630709c77d5d1dd3749edc7a3850f3bf4436ba1348764", ["", ""]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000811}, 0x408c0) 2m42.745691694s ago: executing program 0 (id=376): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x7, 0x10, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) (async) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x80) (async) getdents64(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setxattr$incfs_id(0x0, &(0x7f0000000140), 0x0, 0x0, 0x2) (async) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) connect$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e1f, 0x2, @empty, 0x802}, 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@ssrr={0x89, 0x3, 0xe2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@generic={0x1, 0x12, "6af9d1e5fa0c807331d1a6d0ac6f60dd"}, @eol, @exp_fastopen={0xfe, 0xa, 0xf989, "2e392a869ba3"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) preadv(r2, &(0x7f0000000a40)=[{0x0, 0xfffffffffffffe89}], 0x1, 0x8, 0x3) (async) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x1790) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={r6, @multicast2, @loopback}, 0xc) 2m42.488036394s ago: executing program 0 (id=378): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) pwritev2(r3, &(0x7f0000000180)=[{0x0}], 0x1, 0x8001, 0x2, 0x17) (fail_nth: 2) 2m41.968353372s ago: executing program 0 (id=379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="6d9b0b31"], 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b5", 0x1}], 0x1}}], 0x2, 0x1404c894) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x22002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48}) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x1, 0x5, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x19) r5 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x18) bind$tipc(r5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 2m26.855321082s ago: executing program 32 (id=379): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB="6d9b0b31"], 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="b5", 0x1}], 0x1}}], 0x2, 0x1404c894) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x22002, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000380)={0x48}) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x1, 0x5, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x19) r5 = socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[], 0x18) bind$tipc(r5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES16=r1], 0x1000f) 35.741545726s ago: executing program 2 (id=749): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) 35.628805212s ago: executing program 2 (id=751): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x6, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000440), 0x210081, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='team0\x00', 0x10) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0xa}, 0x10) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, &(0x7f00000060c0)={'filter\x00', 0x0, 0x4, 0x61, [0x7, 0x6, 0xf, 0xf6, 0x4, 0x3], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000180)=""/97}, &(0x7f0000001940)=0x78) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = creat(&(0x7f0000004940)='./file0/../file0\x00', 0xac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000004800302e75"], 0x15) r9 = dup(r8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) fstat(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=r10, @ANYBLOB='O\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x1000) recvmmsg(r1, &(0x7f0000005f40)=[{{&(0x7f0000000500)=@caif=@dbg, 0x80, &(0x7f0000000000)=[{&(0x7f0000000640)=""/131, 0x83}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f00000007c0)=""/110, 0x6e}], 0x3, &(0x7f0000000840)=""/4096, 0x1000}}, {{&(0x7f0000001840)=@hci, 0x80, &(0x7f0000002ec0)=[{&(0x7f00000018c0)=""/48, 0x30}, {&(0x7f0000001900)=""/12, 0xc}, {&(0x7f00000029c0)=""/145, 0x91}, {&(0x7f0000002a80)=""/196, 0xc4}, {&(0x7f0000002b80)=""/69, 0x45}, {&(0x7f0000002c00)=""/242, 0xf2}, {&(0x7f0000002d00)=""/152, 0x98}, {&(0x7f0000001940)}, {&(0x7f0000002dc0)=""/254, 0xfe}], 0x9, &(0x7f0000002f80)=""/236, 0xec}, 0xc8bd}, {{&(0x7f0000003080)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000004280)=[{&(0x7f0000003100)=""/236, 0xec}, {&(0x7f0000003200)=""/90, 0x5a}, {&(0x7f0000003280)=""/4083, 0xff3}], 0x3, &(0x7f00000042c0)=""/38, 0x26}, 0x1}, {{&(0x7f0000004300), 0x80, &(0x7f0000004740)=[{&(0x7f00000043c0)=""/89, 0x59}, {&(0x7f0000004440)=""/166, 0xa6}, {&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000004600)=""/31, 0x1f}, {&(0x7f0000004640)=""/178, 0xb2}, {&(0x7f0000004700)}], 0x7, &(0x7f00000047c0)=""/228, 0xe4}, 0x3}, {{&(0x7f00000048c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000006200)=""/160, 0xa0}, {&(0x7f0000004a00)=""/10, 0xa}, {&(0x7f0000004a40)=""/7, 0x7}, {&(0x7f0000004a80)=""/50, 0x32}, {&(0x7f0000004ac0)=""/136, 0x88}, {&(0x7f0000004b80)=""/178, 0xb2}, {&(0x7f0000004c40)=""/4096, 0x1000}], 0x7}, 0x3ff}, {{&(0x7f0000005cc0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d40)=""/75, 0x4b}, {&(0x7f0000005dc0)=""/45, 0x2d}], 0x2, &(0x7f0000005e40)=""/240, 0xf0}, 0xfe}], 0x6, 0x2, 0x0) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r11, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 34.456962411s ago: executing program 2 (id=754): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r0, &(0x7f0000000000)=""/181, 0xb5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x1}, 0x6) syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0) socket(0x10, 0x3, 0x0) 29.716031868s ago: executing program 2 (id=767): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r0], 0x25c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0) 27.656159302s ago: executing program 2 (id=776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 27.264001302s ago: executing program 2 (id=779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 26.383198531s ago: executing program 33 (id=779): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 16.946540687s ago: executing program 3 (id=808): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_pwait2(r1, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2fb4f3c623899ff3}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e1b000/0x4000)=nil, 0x4000, &(0x7f00000004c0)='nfc\x00') 13.400100401s ago: executing program 3 (id=822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 11.927416071s ago: executing program 1 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x40102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000240), 0x4) clock_adjtime(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29042cbd7000fcdbdf25160000001800f97f140802006e657464657673696d300000000000000500030001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40500c5}, 0x0) 10.023570151s ago: executing program 3 (id=831): socket(0x18, 0x5, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x280000b, 0x28011, r1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x3c4e, &(0x7f0000000bc0)={0x0, 0xcb44, 0x3040, 0x0, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], &(0x7f0000000080)=[0x3fffffffffff], 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x20800, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) 8.683892089s ago: executing program 1 (id=836): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, &(0x7f00000014c0), 0x1, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtaction={0xd8, 0x30, 0x9, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_vlan={0xc0, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x92, 0x6, "822a3327364ecf8d0d12a39f06a45d4cf4febc26118952595389d7b7756068c89bd45057b70502b4dd76f2d3c8a2d31917805d08fd78a36a066cbf78277f4b3c70bac65e604b4901779d00d829960c2f81f996b682c33a22f0f7498e19b89a9054c25513b6023c372e23199a28c555af0d5c1deb406f80b4324b894d4feff7e9daf0e89dc212dcf05f2347ee55ca"}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000005c0)) ioctl$int_in(r4, 0x5452, &(0x7f0000000440)=0xffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000380)=0xe712) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)='%+9llu \x00'}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000f5ffffff004d1137dc8a57e9097400"/28], 0x50) lseek(r5, 0x9, 0x0) 7.31758874s ago: executing program 1 (id=840): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0xc0c00) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) dup3(0xffffffffffffffff, r1, 0x27d3c993f1432fc2) (async) r2 = dup3(0xffffffffffffffff, r1, 0x27d3c993f1432fc2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './cgroup\x00'}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') epoll_create(0x10001) (async) r4 = epoll_create(0x10001) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77b787745166646e6f3d", @ANYRESHEX=r4, @ANYBLOB="2c0004bb8d307589d090a489f279cc0b6724746c3a980996efefa10eb76295c6e0551e94a7ef04f0f533f268e43bccdf3769c90b83742111fcf90f4567c2cc52015cf707c8168f6b88818c66fa3d0e8ef0aded7f49f74d4a1942fb26a65ce68496bc69e50fc5ccb38c0a6104ce9fe1f8f077357ff2a7fce34df23bd92addbf395c3cdd895197596d799580736f23e0039e629bda3f68370fb0428475fb513e46a301f030aa221720b65bb5aa0ff3d1e5e47e00f17841f1d25c2d56d24b6e657f7e7e1a7f8375a1132fbf5c"]) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c77b787745166646e6f3d", @ANYRESHEX=r4, @ANYBLOB="2c0004bb8d307589d090a489f279cc0b6724746c3a980996efefa10eb76295c6e0551e94a7ef04f0f533f268e43bccdf3769c90b83742111fcf90f4567c2cc52015cf707c8168f6b88818c66fa3d0e8ef0aded7f49f74d4a1942fb26a65ce68496bc69e50fc5ccb38c0a6104ce9fe1f8f077357ff2a7fce34df23bd92addbf395c3cdd895197596d799580736f23e0039e629bda3f68370fb0428475fb513e46a301f030aa221720b65bb5aa0ff3d1e5e47e00f17841f1d25c2d56d24b6e657f7e7e1a7f8375a1132fbf5c"]) write$UHID_INPUT(r2, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5, 0x101000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r5, 0x4}, 0x20) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x20000, 0x0) (async) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext2\x00', 0x20000, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) (async) fsmount(r7, 0x0, 0x1) 6.803872877s ago: executing program 3 (id=843): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) timer_settime(r1, 0x1, &(0x7f00000038c0), &(0x7f0000003900)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x6, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x400, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x2, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x7, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x9, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x101], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x5, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073597a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c00014000000000000000002c0001800a0001006c696d69740000001c0002800c000240000000001000"], 0x110}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) socket$vsock_stream(0x28, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 6.582254996s ago: executing program 1 (id=845): syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0xa83b, 0x10, 0x40002, 0xfffffffd}, &(0x7f0000000340)=0x0, &(0x7f0000000240)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000030030000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x8}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0xfd}) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 5.254358573s ago: executing program 5 (id=851): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) r2 = socket(0x840000000002, 0x3, 0xff) (async) r3 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x8}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640000000000003552bde5c064c6", 0x15}, {&(0x7f0000000340)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}], 0x1, 0x0) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 4.984057801s ago: executing program 5 (id=852): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x288, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7bcf, 0x2830, 0x9, 0x1, 0x2, 0x7, 0x2]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x18, 0xb, 0x60, 0x3, 0x3, 0x16, 0x15, 0xb, 0x1b, 0x6c, 0xb, 0xb, 0x5, 0x2e, 0x12, 0x60, 0x5, 0x16, 0x14]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x1}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x6}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x5, 0xc, 0x16, 0x2, 0x11, 0x30, 0x2, 0xb, 0xc, 0x24, 0x48, 0xb, 0x48, 0x4, 0x16, 0x6, 0x24, 0x60]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x4, 0xb}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x7}, {0x0, 0x1f}, {0x2, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x7, 0xfffb, 0xffff, 0x7b, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2200, 0x80, 0x7a, 0x8001, 0x5, 0x1d, 0x6]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x6, 0xff25, 0x5, 0x5, 0x7000, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87f, 0x3, 0x9bc5, 0x8d, 0x7, 0x1ff, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x6c, 0x24, 0x30, 0xc, 0x9, 0x9, 0x30, 0x3, 0xc, 0x6, 0x2, 0x24, 0x36, 0x3, 0x60, 0x1b, 0xc, 0xc, 0x2, 0x12, 0x16, 0xb, 0x9, 0x60, 0x1, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x36, 0x16, 0x1b, 0x30, 0x4, 0x2, 0x4, 0x5, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x3}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x7}, {0x4}, {0x1, 0xe}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x7}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x9}, {0x3, 0x14}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d27, 0xb6, 0xf78a, 0x1, 0x0, 0x1, 0x1, 0x6000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x7a, 0x1d, 0x4, 0x1000, 0xc, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x4, 0xfe64, 0x6b, 0x7, 0x1, 0x418]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x30, 0x24, 0xc, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe5c8, 0x6, 0x8001, 0x5, 0x4, 0xf94c, 0x2, 0x5ecf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x0, 0x8, 0x0, 0x9, 0x8000, 0xfc57]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x6, 0x12, 0x18, 0x24, 0x0, 0x2, 0x6, 0x1b, 0x30, 0x5, 0x6c, 0x24, 0x1b, 0x4, 0x60, 0x3, 0x48, 0x6c, 0x16, 0x12, 0x12, 0x0, 0x18, 0x2, 0x6c, 0x3, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x2d, 0x18, 0x36, 0xc, 0x60, 0x36, 0x24, 0x30, 0x36, 0xc, 0x60, 0x1b, 0x3]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x48, 0x24, 0x48, 0x24, 0x60, 0x48, 0x1b, 0x36]}]}]}]}, 0x288}}, 0x4000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe6b7af09cb2a6115}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x70, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) 4.892101548s ago: executing program 4 (id=853): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffe6, 0xb}, {0x7, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x5, 0x8, 0xe, 0x5cb1, 0x80, 0x9e4, 0xa5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008050) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.593777586s ago: executing program 4 (id=854): socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x11) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write$rfkill(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00'}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_int(r2, &(0x7f0000000040)=0x800000000001c8, 0x12) socket$netlink(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) munlockall() io_uring_enter(r5, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 4.010508374s ago: executing program 6 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0xffff2000, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=@newtfilter={0xf8, 0x2c, 0x200, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0xfff1, 0x2}, {0xfff2, 0x11}}, [@f_rsvp6={{0xa}, {0xc8, 0x2, [@TCA_RSVP_ACT={0xa4, 0x6, [@m_pedit={0x6c, 0x1b, 0x0, 0x0, {{0xa}, {0x4}, {0x3f, 0x6, "40f25715d336f247bb56b302e610eba76d3a9a45bb88e4da3774f2e38aee56860fcf58bd88dfa4b38e142395537154fa29e14bce0e6ebcf764a4c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_connmark={0x34, 0xa, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x1, 0x5, 0x8}, {0x5, 0x0, 0x5}, 0x62, 0x5b, 0x5}}]}}]}, 0xf8}}, 0x0) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2}}], 0x2, 0x60, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xb}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x299}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4000080) 3.664275796s ago: executing program 3 (id=858): r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f0000000240)=[{0x2, 0xd5db}, {0x0, 0x200, 0x800}], 0x2) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(r1, 0x8b2d, &(0x7f0000000080)) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0x1af, &(0x7f0000000540)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x179, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x2a, "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"}]}}}}}}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x81) 3.311830004s ago: executing program 1 (id=859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) inotify_init() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) clock_nanosleep(0xa, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9f"], 0x0, 0x3e}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRESHEX, @ANYBLOB="d50633028000000001"], 0x6f4}}, 0x58014) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000040)=@gcm_256={{0x303}, "ab4fc659949ab924", "794cc3819b2325af225bcc55d7711a8f3b1123673f4f98d74ebae07697f22c28", "94dbed0a", "7a3ae7b1c7e44fe9"}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001d00010029bd70000000000007000000", @ANYRES32=r6, @ANYBLOB="080012000a0002"], 0x28}}, 0x10) unshare(0x20000400) 3.232309347s ago: executing program 4 (id=860): accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = open$dir(0x0, 0x0, 0x1) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1f, 0x12, r0, 0x80000000) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f00000004c0), &(0x7f0000000500)=0x30) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 3.099766833s ago: executing program 6 (id=861): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008"], 0x5c}}, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0xf6, r2, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) 2.156100701s ago: executing program 5 (id=862): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 2.154610624s ago: executing program 4 (id=863): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x8, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts]}}}}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000400)={@empty, @dev, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0xff, 0x6, 0x0, @remote, @local, {[@cipso={0x86, 0x20, 0x0, [{0x1, 0x3, '/'}, {0x5, 0x8, "a96fe26683b0"}, {0x0, 0x2}, {0x5, 0xd, "fd1a1756fff496321572aa"}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={&(0x7f0000000800)="ad76ce7c11976b59315952ccedbd23e49ef8ffbb1f39fb00ae77600c1ec0e988944663f06c8890d6851933c633b9114eb2a191aeb95fb76967c9a8e0d99b13cadcae771ecca7c6304ebf05e36b20b01d828c02c22e80a2f18855d3e02107c6e0044f09ea1338e614a71ae5cce36f9d9e8d413f78cd7a6426a05178c18a1be27227df5a075c6e6365109996d64a10a6f72bd44d6dcd99a4ded72c6954722caa23263b5d2259cb7ad89b521b8b6f00c6789905f2851a49cf98f6bd65255c990f77e2f9bf7d", &(0x7f00000011c0)=""/4096, &(0x7f0000000900)="45c2452d6f8ba31386dca30325f207b4013096e87a322284f6f24d5714589b4045a4e7f3eb55afb1091f723dd12aa2bd730f50fddb8bacb3776c501ac0ebd79aff35c18eb979d3af4ae3bd11d132a9065512ef0c53abf5458cd4f012fc468100f0e642c3493f8cc76d0fb28659b4642c04837f3648a142e3dd383864082ec45461e9b570e87e8d12816c833cd2a577cac8e8e6e51227423ba35af89b42d1e74874a66f3e085bc670", &(0x7f0000000000)="e1c35e4b3f88d58fd69cfd0f0b2e0e256a423e17c48620ed899a4cb67888ea7479adcf0143f003d0ee6c532ea8400deaf733ffb50f", 0x40, 0xffffffffffffffff, 0x4}, 0x38) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) 1.999584969s ago: executing program 6 (id=864): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/4096) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x50) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2}, 0xc) prctl$PR_GET_NO_NEW_PRIVS(0x27) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) 1.513240634s ago: executing program 5 (id=865): socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000001500)={&(0x7f0000001400)=[0x0], &(0x7f00000000c0)=[0x0], 0x0, &(0x7f00000014c0), 0x1, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtaction={0xd8, 0x30, 0x9, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_vlan={0xc0, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x92, 0x6, "822a3327364ecf8d0d12a39f06a45d4cf4febc26118952595389d7b7756068c89bd45057b70502b4dd76f2d3c8a2d31917805d08fd78a36a066cbf78277f4b3c70bac65e604b4901779d00d829960c2f81f996b682c33a22f0f7498e19b89a9054c25513b6023c372e23199a28c555af0d5c1deb406f80b4324b894d4feff7e9daf0e89dc212dcf05f2347ee55ca"}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f00000005c0)) ioctl$int_in(r4, 0x5452, &(0x7f0000000440)=0xffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000380)=0xe712) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000000), &(0x7f0000000180)='%+9llu \x00'}, 0x20) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000f5ffffff004d1137dc8a57e9097400"/28], 0x50) lseek(r5, 0x9, 0x0) 1.381192326s ago: executing program 6 (id=866): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, 0x0) 1.377186041s ago: executing program 1 (id=867): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2f7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x6, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x80, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@flushpolicy={0x40, 0x12, 0x105, 0x0, 0x25dfdbfe, "", [@proto={0x5, 0x19, 0xff}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@private=0xa010102, 0xa, 0x6, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) 1.343050254s ago: executing program 6 (id=868): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000037b52040422c0816b58f010203010902120001000020000904"], 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000b, 0x8012, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000040), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r5, r4, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000003680)=ANY=[@ANYBLOB="747261733d756e95e02c00b3"]) 1.184561251s ago: executing program 4 (id=869): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 604.834385ms ago: executing program 5 (id=870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xf3, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @remote, 0x4e23, 0x2, 'sed\x00', 0x2e, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44) keyctl$restrict_keyring(0x1d, 0x0, 0x0, &(0x7f00000004c0)='&@--@#^)\\}/@^}\x9d\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x9, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x0) 481.31829ms ago: executing program 6 (id=871): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x66000080) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = gettid() setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r2, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r3], 0x28}}, 0x0) 151.582095ms ago: executing program 3 (id=872): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x288, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x26c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x7bcf, 0x2830, 0x9, 0x1, 0x2, 0x7, 0x2]}}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x48, 0x18, 0xb, 0x60, 0x3, 0x3, 0x16, 0x15, 0xb, 0x1b, 0x6c, 0xb, 0xb, 0x5, 0x2e, 0x12, 0x60, 0x5, 0x16, 0x14]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x6}, {0x1, 0x2}, {0x7, 0x9}, {0x6, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x8}, {0x1}, {0x7, 0x7}, {0x7, 0xa}, {0x5, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x0, 0x2}, {0x0, 0x8}, {0x2, 0x6}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x6}, {0x5, 0x9}, {0x0, 0x4}, {0x5, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x5, 0xc, 0x16, 0x2, 0x11, 0x30, 0x2, 0xb, 0xc, 0x24, 0x48, 0xb, 0x48, 0x4, 0x16, 0x6, 0x24, 0x60]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x6, 0x7}, {0x7, 0x9}, {0x2, 0xa}, {0x4, 0x2}, {0x4, 0x1}, {0x4, 0x6}, {0x4, 0x8}, {0x4, 0xb}, {0x5, 0x3}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x7}, {0x0, 0x1f}, {0x2, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0x7, 0xfffb, 0xffff, 0x7b, 0x3, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2200, 0x80, 0x7a, 0x8001, 0x5, 0x1d, 0x6]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x6, 0xff25, 0x5, 0x5, 0x7000, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x87f, 0x3, 0x9bc5, 0x8d, 0x7, 0x1ff, 0x8, 0x9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x6c, 0x24, 0x30, 0xc, 0x9, 0x9, 0x30, 0x3, 0xc, 0x6, 0x2, 0x24, 0x36, 0x3, 0x60, 0x1b, 0xc, 0xc, 0x2, 0x12, 0x16, 0xb, 0x9, 0x60, 0x1, 0x1, 0x5]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x4, 0x36, 0x16, 0x1b, 0x30, 0x4, 0x2, 0x4, 0x5, 0x6c, 0x6]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x3, 0x3}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x0, 0x7}, {0x4}, {0x1, 0xe}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x4, 0x4}, {0x2, 0x7}, {0x7, 0x7}]}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x9}, {0x3, 0x14}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5d27, 0xb6, 0xf78a, 0x1, 0x0, 0x1, 0x1, 0x6000]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x7a, 0x1d, 0x4, 0x1000, 0xc, 0xa]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x4, 0xfe64, 0x6b, 0x7, 0x1, 0x418]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x30, 0x24, 0xc, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe5c8, 0x6, 0x8001, 0x5, 0x4, 0xf94c, 0x2, 0x5ecf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3, 0x0, 0x8, 0x0, 0x9, 0x8000, 0xfc57]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x18, 0x6, 0x12, 0x18, 0x24, 0x0, 0x2, 0x6, 0x1b, 0x30, 0x5, 0x6c, 0x24, 0x1b, 0x4, 0x60, 0x3, 0x48, 0x6c, 0x16, 0x12, 0x12, 0x0, 0x18, 0x2, 0x6c, 0x3, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x2d, 0x18, 0x36, 0xc, 0x60, 0x36, 0x24, 0x30, 0x36, 0xc, 0x60, 0x1b, 0x3]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x48, 0x24, 0x48, 0x24, 0x60, 0x48, 0x1b, 0x36]}]}]}]}, 0x288}}, 0x4000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xe6b7af09cb2a6115}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x70, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000280)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025", 0x1d}, {&(0x7f0000000580)="fa21bd2b5c40cc420740358ffc7f9f4b6e68fc8d1aa2597e7b484f301f11e35f22", 0x21}], 0x2) 43.417008ms ago: executing program 4 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@index_off}]}) r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1b980c37, 0x121000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x3, 0x3, 0x5, 0x2f, 0x7, 0x7, 0x5, 0xffe, 0x1, 0x0, 0x1, 0x1003, 0x6, 0xffff, 0xffff, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x3, 0x10, 0x0, 0x8, 0xe2df, 0x746f, 0x8, 0x5, 0x3, 0x1, 0x4, 0x8049]}) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 5 (id=874): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, 0x0, 0x0, 0x24000801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x810, r3, 0xffffc000) ioctl$vim2m_VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000001040)={0x1, @pix_mp={0x4, 0x1, 0x34343452, 0x5, 0x7, [{0x2, 0x202b2ad6}, {0x3, 0x9}, {0x2, 0xfffffff4}, {0xb57, 0x6b1}, {0x4, 0xada}, {0x9, 0x6}, {0x8, 0x7c7065a0}, {0x4, 0x8001}], 0xec, 0x4, 0x7, 0x2, 0x7}}) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffa8) creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x94) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$inet_buf(r6, 0x118, 0x4, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): /0x6e0 [ 202.526550][ T7485] tomoyo_path_number_perm+0x245/0x580 [ 202.526569][ T7485] ? tomoyo_path_number_perm+0x237/0x580 [ 202.526591][ T7485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 202.526612][ T7485] ? find_held_lock+0x2b/0x80 [ 202.526638][ T7485] ? find_held_lock+0x2b/0x80 [ 202.526651][ T7485] ? hook_file_ioctl_common+0x145/0x410 [ 202.526666][ T7485] ? __fget_files+0x20e/0x3c0 [ 202.526681][ T7485] security_file_ioctl+0x9b/0x240 [ 202.526698][ T7485] __x64_sys_ioctl+0xb7/0x210 [ 202.526715][ T7485] do_syscall_64+0xcd/0x4e0 [ 202.526731][ T7485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.526742][ T7485] RIP: 0033:0x7fb49ff8ec29 [ 202.526752][ T7485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.526762][ T7485] RSP: 002b:00007fb4a0df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.526774][ T7485] RAX: ffffffffffffffda RBX: 00007fb4a01d5fa0 RCX: 00007fb49ff8ec29 [ 202.526782][ T7485] RDX: 0000200000000140 RSI: 0000000040087543 RDI: 0000000000000003 [ 202.526790][ T7485] RBP: 00007fb4a0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 202.526796][ T7485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.526802][ T7485] R13: 00007fb4a01d6038 R14: 00007fb4a01d5fa0 R15: 00007ffe945a71b8 [ 202.526816][ T7485] [ 202.526826][ T7485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.686764][ T7469] chnl_net:caif_netlink_parms(): no params data found [ 203.648312][ T5848] Bluetooth: hci5: command tx timeout [ 203.771048][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.787189][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.807593][ T7469] bridge_slave_0: entered allmulticast mode [ 203.815086][ T7469] bridge_slave_0: entered promiscuous mode [ 203.857936][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.865051][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.873419][ T7469] bridge_slave_1: entered allmulticast mode [ 203.890701][ T7469] bridge_slave_1: entered promiscuous mode [ 203.903916][ T7501] tipc: Started in network mode [ 203.909908][ T7501] tipc: Node identity aae09f875e92, cluster identity 4711 [ 203.917224][ T7501] tipc: Enabled bearer , priority 0 [ 203.927614][ T7501] tipc: Resetting bearer [ 203.942681][ T7500] tipc: Disabling bearer [ 203.980741][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.009841][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.092380][ T7469] team0: Port device team_slave_0 added [ 204.107129][ T7469] team0: Port device team_slave_1 added [ 204.127812][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.134776][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.347060][ T5974] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 204.356540][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.368936][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.377002][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.404513][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.463473][ T7469] hsr_slave_0: entered promiscuous mode [ 204.473985][ T7469] hsr_slave_1: entered promiscuous mode [ 204.485588][ T7469] debugfs: 'hsr0' already exists in 'hsr' [ 204.497062][ T7469] Cannot create hsr debugfs directory [ 204.517454][ T5974] usb 3-1: Using ep0 maxpacket: 8 [ 204.537205][ T5974] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 204.546391][ T5974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.557159][ T5974] usb 3-1: config 0 has no interface number 0 [ 204.563755][ T5974] usb 3-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 204.577038][ T5974] usb 3-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.643868][ T5974] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 204.658494][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.690667][ T5974] usb 3-1: Product: syz [ 204.691865][ T7515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.700094][ T5974] usb 3-1: Manufacturer: syz [ 204.714296][ T5974] usb 3-1: SerialNumber: syz [ 204.721166][ T7515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.731946][ T5974] usb 3-1: config 0 descriptor?? [ 204.927123][ T5924] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 205.009551][ T7469] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.032663][ T7469] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 205.103034][ T5974] usb 3-1: USB disconnect, device number 21 [ 205.108597][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 205.123572][ T7469] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 205.138777][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.158580][ T5924] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 205.175853][ T7469] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.177492][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.184467][ T5924] usb 2-1: Product: syz [ 205.196637][ T5924] usb 2-1: Manufacturer: syz [ 205.209160][ T5924] usb 2-1: SerialNumber: syz [ 205.233576][ T5924] usb 2-1: config 0 descriptor?? [ 205.290340][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.306114][ T7469] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.324047][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.331277][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.349401][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.356547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.442051][ T5924] gs_usb 2-1:0.0: Couldn't send data format (err=-71) [ 205.450977][ T5924] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 205.468042][ T5924] usb 2-1: USB disconnect, device number 16 [ 205.527139][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.714797][ T7469] veth0_vlan: entered promiscuous mode [ 205.727415][ T7469] veth1_vlan: entered promiscuous mode [ 205.752765][ T7469] veth0_macvtap: entered promiscuous mode [ 205.762284][ T7469] veth1_macvtap: entered promiscuous mode [ 205.768199][ T5848] Bluetooth: hci5: command tx timeout [ 205.786382][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.798980][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.868858][ T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.897346][ T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.047614][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.309732][ T7548] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.361914][ T7548] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.365783][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.478778][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.504694][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.575647][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.604843][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.693201][ T30] audit: type=1400 audit(1758482305.672:379): avc: denied { mounton } for pid=7469 comm="syz-executor" path="/root/syzkaller.F3DbP6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 206.763649][ T30] audit: type=1400 audit(1758482305.722:380): avc: denied { mount } for pid=7469 comm="syz-executor" name="/" dev="gadgetfs" ino=7059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 207.450104][ T30] audit: type=1400 audit(1758482306.222:381): avc: denied { lock } for pid=7563 comm="syz.5.418" path="socket:[17562]" dev="sockfs" ino=17562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 207.770731][ T5925] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 207.807098][ T5848] Bluetooth: hci5: command tx timeout [ 207.954606][ T7578] block nbd0: Attempted send on invalid socket [ 207.961114][ T7578] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 207.997117][ T30] audit: type=1804 audit(1758482306.842:382): pid=7580 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.445" name="/newroot/119/file0" dev="tmpfs" ino=657 res=1 errno=0 [ 208.176933][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 208.184214][ T5925] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 208.197767][ T5925] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 208.210691][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.239970][ T5925] usb 6-1: Product: syz [ 208.247703][ T30] audit: type=1400 audit(1758482307.232:383): avc: denied { connect } for pid=7581 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.280887][ T5925] usb 6-1: Manufacturer: syz [ 208.287203][ T5925] usb 6-1: SerialNumber: syz [ 208.304980][ T5925] usb 6-1: config 0 descriptor?? [ 208.325096][ T7586] bridge_slave_0: left allmulticast mode [ 208.335669][ T5925] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 208.347829][ T7586] bridge_slave_0: left promiscuous mode [ 208.353555][ T5925] usb 6-1: setting power ON [ 208.361777][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 208.396169][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.414282][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.426333][ T5925] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 208.435584][ T5925] usb 6-1: media controller created [ 208.567099][ T5898] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 208.586121][ T7586] bridge_slave_1: left allmulticast mode [ 208.591937][ T7586] bridge_slave_1: left promiscuous mode [ 208.599587][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.627527][ T7586] bond0: (slave bond_slave_0): Releasing backup interface [ 208.649118][ T7586] bond0: (slave bond_slave_1): Releasing backup interface [ 208.685367][ T7586] team0: Port device team_slave_0 removed [ 208.709998][ T7586] team0: Port device team_slave_1 removed [ 208.869586][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.900282][ T5898] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 208.913495][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 208.961278][ T5898] usb 3-1: can't read configurations, error -61 [ 208.984904][ T5925] usb 6-1: selecting invalid altsetting 6 [ 209.066452][ T30] audit: type=1400 audit(1758482308.022:384): avc: denied { listen } for pid=7570 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.096197][ T5925] usb 6-1: digital interface selection failed (-22) [ 209.109635][ T5925] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 209.122168][ T30] audit: type=1400 audit(1758482308.072:385): avc: denied { accept } for pid=7570 comm="syz.5.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 209.142344][ T5925] usb 6-1: setting power OFF [ 209.148057][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 209.154526][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 209.166031][ T5925] (NULL device *): no alternate interface [ 209.206447][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 209.223256][ T5898] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 209.444386][ T5898] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 209.481341][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 209.491491][ T5898] usb 3-1: can't read configurations, error -61 [ 209.872860][ T5898] usb usb3-port1: attempt power cycle [ 209.898593][ T5848] Bluetooth: hci5: command tx timeout [ 210.237689][ T5898] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 210.258213][ T5898] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 210.267573][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 210.275141][ T5898] usb 3-1: can't read configurations, error -61 [ 210.419010][ T7606] netlink: 'syz.4.449': attribute type 11 has an invalid length. [ 210.548331][ T5898] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 210.567826][ T5898] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 210.576948][ T5898] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 210.584625][ T5898] usb 3-1: can't read configurations, error -61 [ 210.593323][ T5898] usb usb3-port1: unable to enumerate USB device [ 211.529952][ T24] usb 6-1: USB disconnect, device number 2 [ 212.643023][ T7621] netlink: 'syz.1.452': attribute type 11 has an invalid length. [ 212.667297][ T7623] FAULT_INJECTION: forcing a failure. [ 212.667297][ T7623] name failslab, interval 1, probability 0, space 0, times 0 [ 212.758640][ T7623] CPU: 0 UID: 0 PID: 7623 Comm: syz.2.453 Not tainted syzkaller #0 PREEMPT(full) [ 212.758665][ T7623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.758688][ T7623] Call Trace: [ 212.758694][ T7623] [ 212.758700][ T7623] dump_stack_lvl+0x16c/0x1f0 [ 212.758725][ T7623] should_fail_ex+0x512/0x640 [ 212.758746][ T7623] ? __kmalloc_noprof+0xbf/0x510 [ 212.758765][ T7623] ? bpf_test_init.isra.0+0x9e/0x140 [ 212.758781][ T7623] should_failslab+0xc2/0x120 [ 212.758801][ T7623] __kmalloc_noprof+0xd2/0x510 [ 212.758817][ T7623] ? __lock_acquire+0x62e/0x1ce0 [ 212.758848][ T7623] bpf_test_init.isra.0+0x9e/0x140 [ 212.758869][ T7623] bpf_prog_test_run_xdp+0x4f0/0x1590 [ 212.758899][ T7623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 212.758921][ T7623] ? __might_fault+0x70/0x190 [ 212.758940][ T7623] ? fput+0x9b/0xd0 [ 212.758962][ T7623] ? __bpf_prog_get+0x97/0x2a0 [ 212.758980][ T7623] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 212.759001][ T7623] __sys_bpf+0x1050/0x4de0 [ 212.759026][ T7623] ? __pfx___sys_bpf+0x10/0x10 [ 212.759048][ T7623] ? ksys_write+0x190/0x250 [ 212.759070][ T7623] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 212.759104][ T7623] ? fput+0x9b/0xd0 [ 212.759123][ T7623] ? ksys_write+0x1ac/0x250 [ 212.759138][ T7623] ? __pfx_ksys_write+0x10/0x10 [ 212.759158][ T7623] __x64_sys_bpf+0x78/0xc0 [ 212.759180][ T7623] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.759200][ T7623] do_syscall_64+0xcd/0x4e0 [ 212.759222][ T7623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.759240][ T7623] RIP: 0033:0x7fb49ff8ec29 [ 212.759255][ T7623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.759273][ T7623] RSP: 002b:00007fb4a0df7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.759289][ T7623] RAX: ffffffffffffffda RBX: 00007fb4a01d5fa0 RCX: 00007fb49ff8ec29 [ 212.759300][ T7623] RDX: 0000000000000050 RSI: 0000200000000d00 RDI: 000000000000000a [ 212.759310][ T7623] RBP: 00007fb4a0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.759320][ T7623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.759331][ T7623] R13: 00007fb4a01d6038 R14: 00007fb4a01d5fa0 R15: 00007ffe945a71b8 [ 212.759354][ T7623] [ 212.988369][ C0] vkms_vblank_simulate: vblank timer overrun [ 213.134040][ T30] audit: type=1804 audit(1758482312.112:386): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.457" name="/newroot/3/file0" dev="tmpfs" ino=33 res=1 errno=0 [ 213.280748][ T7634] xt_l2tp: missing protocol rule (udp|l2tpip) [ 214.327468][ T7649] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 214.336489][ T7649] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 214.344320][ T7649] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 214.351900][ T7649] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 214.359874][ T7649] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 214.366985][ T7649] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 214.373467][ T7649] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 214.381591][ T7649] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 214.388775][ T7649] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 214.396414][ T7649] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 214.406948][ T7649] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 214.911257][ T57] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 214.920211][ T5974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 215.013722][ T30] audit: type=1400 audit(1758482313.992:387): avc: denied { create } for pid=7655 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 215.084208][ T30] audit: type=1400 audit(1758482314.012:388): avc: denied { setopt } for pid=7655 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 215.090983][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.119094][ T5974] usb 6-1: Using ep0 maxpacket: 8 [ 215.124241][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.137061][ T5974] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 1552, setting to 1024 [ 215.151410][ T5974] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 215.165121][ T57] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 215.174471][ T5974] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 8 [ 215.189049][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.206705][ T5974] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.227995][ T5974] usb 6-1: config 1 interface 0 has no altsetting 0 [ 215.237077][ T5974] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.247442][ T57] usb 2-1: config 0 descriptor?? [ 215.259382][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.276647][ T5974] usb 6-1: Product: syz [ 215.286797][ T5974] usb 6-1: Manufacturer: syz [ 215.297043][ T5974] usb 6-1: SerialNumber: syz [ 215.313970][ T7654] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.322164][ T7654] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 215.394344][ T30] audit: type=1400 audit(1758482314.372:389): avc: denied { write } for pid=7655 comm="syz.4.464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 215.413219][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.460215][ T7645] comedi comedi3: comedi_config --init_data is deprecated [ 215.468944][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.477508][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.695917][ T57] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 215.743196][ T57] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 215.770656][ T57] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 215.786144][ T57] cypress 0003:04B4:DE64.000F: unknown main item tag 0x0 [ 216.107782][ T30] audit: type=1400 audit(1758482314.852:390): avc: denied { watch } for pid=7662 comm="syz.2.465" path="/108/file5" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 216.130477][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.141051][ T57] cypress 0003:04B4:DE64.000F: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0 [ 216.196828][ T57] usb 2-1: USB disconnect, device number 17 [ 216.211171][ T30] audit: type=1400 audit(1758482314.852:391): avc: denied { watch_sb } for pid=7662 comm="syz.2.465" path="/108/file5" dev="tmpfs" ino=600 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 216.365198][ T7668] fido_id[7668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 217.322628][ T30] audit: type=1326 audit(1758482316.302:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ff8ec29 code=0x7ffc0000 [ 217.345886][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.415784][ T7680] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 217.478975][ T5974] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 217.527021][ T5974] usb 6-1: USB disconnect, device number 3 [ 217.563107][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.471'. [ 217.573006][ T7682] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 217.596706][ T7678] pim6reg: entered allmulticast mode [ 217.653467][ T30] audit: type=1326 audit(1758482316.382:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fb49ff8ec29 code=0x7ffc0000 [ 217.747173][ T30] audit: type=1326 audit(1758482316.422:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ff8ec29 code=0x7ffc0000 [ 217.771188][ T30] audit: type=1326 audit(1758482316.422:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7673 comm="syz.2.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb49ff8ec29 code=0x7ffc0000 [ 221.259968][ T7725] FAULT_INJECTION: forcing a failure. [ 221.259968][ T7725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.304060][ T7725] CPU: 0 UID: 0 PID: 7725 Comm: syz.2.482 Not tainted syzkaller #0 PREEMPT(full) [ 221.304077][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.304084][ T7725] Call Trace: [ 221.304088][ T7725] [ 221.304092][ T7725] dump_stack_lvl+0x16c/0x1f0 [ 221.304111][ T7725] should_fail_ex+0x512/0x640 [ 221.304128][ T7725] _copy_from_iter+0x29f/0x1720 [ 221.304147][ T7725] ? __pfx__copy_from_iter+0x10/0x10 [ 221.304163][ T7725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 221.304182][ T7725] copy_page_from_iter+0xde/0x180 [ 221.304203][ T7725] tun_build_skb.constprop.0+0x2e8/0x1500 [ 221.304235][ T7725] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 221.304259][ T7725] ? unwind_get_return_address+0x59/0xa0 [ 221.304278][ T7725] ? arch_stack_walk+0xa6/0x100 [ 221.304307][ T7725] ? _kstrtoull+0x145/0x200 [ 221.304319][ T7725] ? __pfx__kstrtoull+0x10/0x10 [ 221.304332][ T7725] tun_get_user+0x14ae/0x3ce0 [ 221.304354][ T7725] ? __pfx_tun_get_user+0x10/0x10 [ 221.304372][ T7725] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 221.304391][ T7725] ? find_held_lock+0x2b/0x80 [ 221.304409][ T7725] ? tun_get+0x191/0x370 [ 221.304428][ T7725] tun_chr_write_iter+0xdc/0x210 [ 221.304446][ T7725] vfs_write+0x7d3/0x11d0 [ 221.304458][ T7725] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 221.304477][ T7725] ? __pfx_vfs_write+0x10/0x10 [ 221.304486][ T7725] ? find_held_lock+0x2b/0x80 [ 221.304508][ T7725] ksys_write+0x12a/0x250 [ 221.304519][ T7725] ? __pfx_ksys_write+0x10/0x10 [ 221.304534][ T7725] do_syscall_64+0xcd/0x4e0 [ 221.304549][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.304561][ T7725] RIP: 0033:0x7fb49ff8d6df [ 221.304570][ T7725] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 221.304581][ T7725] RSP: 002b:00007fb4a0df7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 221.304592][ T7725] RAX: ffffffffffffffda RBX: 00007fb4a01d5fa0 RCX: 00007fb49ff8d6df [ 221.304599][ T7725] RDX: 0000000000000036 RSI: 0000200000001800 RDI: 00000000000000c8 [ 221.304606][ T7725] RBP: 00007fb4a0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.304612][ T7725] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 221.304618][ T7725] R13: 00007fb4a01d6038 R14: 00007fb4a01d5fa0 R15: 00007ffe945a71b8 [ 221.304632][ T7725] [ 221.536208][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.711891][ T7730] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 221.719191][ T7730] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 221.725727][ T7730] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 221.732654][ T7730] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 221.739364][ T7730] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 221.746514][ T7730] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 221.753140][ T7730] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 221.760043][ T7730] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 221.766573][ T7730] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 221.773730][ T7730] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 221.780378][ T7730] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 222.042463][ T7732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.483'. [ 222.051529][ T5898] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 222.095744][ T7732] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 222.228504][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.248473][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.373871][ T5898] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 222.395346][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.669685][ T7738] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 222.897816][ T5898] usb 3-1: config 0 descriptor?? [ 222.925923][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 222.925935][ T30] audit: type=1400 audit(1758482321.902:430): avc: denied { create } for pid=7734 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.980314][ T30] audit: type=1400 audit(1758482321.902:431): avc: denied { setopt } for pid=7734 comm="syz.1.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.233856][ T7729] comedi comedi3: comedi_config --init_data is deprecated [ 223.245178][ T7729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.253935][ T7729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.466928][ T7746] netlink: 'syz.1.487': attribute type 11 has an invalid length. [ 223.571958][ T5898] cypress 0003:04B4:DE64.0010: unknown main item tag 0x0 [ 223.597927][ T5898] cypress 0003:04B4:DE64.0010: unknown main item tag 0x0 [ 223.619145][ T5898] cypress 0003:04B4:DE64.0010: unknown main item tag 0x0 [ 223.633269][ T5898] cypress 0003:04B4:DE64.0010: unknown main item tag 0x0 [ 223.634380][ T7749] vxcan1 speed is unknown, defaulting to 1000 [ 223.643649][ T5898] cypress 0003:04B4:DE64.0010: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.2-1/input0 [ 223.719674][ T978] usb 3-1: USB disconnect, device number 26 [ 223.765642][ T7751] fido_id[7751]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 223.876985][ T92] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.957104][ T5974] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 224.036999][ T92] usb 6-1: Using ep0 maxpacket: 16 [ 224.045143][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.066945][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.236851][ T5974] usb 5-1: config 0 has no interfaces? [ 224.244080][ T5974] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 224.253317][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.261323][ T5974] usb 5-1: Product: syz [ 224.266269][ T5974] usb 5-1: Manufacturer: syz [ 224.270992][ T5974] usb 5-1: SerialNumber: syz [ 224.277957][ T5974] usb 5-1: config 0 descriptor?? [ 224.331942][ T92] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.345671][ T92] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 224.355202][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.364794][ T92] usb 6-1: config 0 descriptor?? [ 224.616830][ T30] audit: type=1400 audit(1758482323.592:432): avc: denied { mount } for pid=7757 comm="syz.1.491" name="/" dev="autofs" ino=18816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 224.639109][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.645561][ T7749] veth0_macvtap: left promiscuous mode [ 224.724874][ T30] audit: type=1400 audit(1758482323.702:433): avc: denied { ioctl } for pid=7757 comm="syz.1.491" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 224.758893][ T7749] veth0_macvtap: entered promiscuous mode [ 224.825113][ T5974] usb 5-1: USB disconnect, device number 9 [ 224.843177][ T92] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 224.861584][ T92] shield 0003:0955:7214.0011: unknown main item tag 0x0 [ 224.870931][ T7758] vlan2: entered promiscuous mode [ 224.876348][ T92] shield 0003:0955:7214.0011: item fetching failed at offset 3/5 [ 224.888568][ T7758] vlan2: entered allmulticast mode [ 224.888637][ T92] shield 0003:0955:7214.0011: Parse failed [ 224.893850][ T7758] hsr_slave_1: entered allmulticast mode [ 224.901523][ T92] shield 0003:0955:7214.0011: probe with driver shield failed with error -22 [ 224.971721][ T30] audit: type=1400 audit(1758482323.952:434): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 225.430394][ T5974] usb 6-1: USB disconnect, device number 4 [ 225.500725][ T7772] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 226.274489][ T7545] Bluetooth: hci6: Frame reassembly failed (-84) [ 226.398354][ T7778] Bluetooth: hci6: Frame reassembly failed (-84) [ 226.625711][ T7772] Bluetooth: hci6: Frame reassembly failed (-84) [ 227.965581][ T7789] block nbd0: Attempted send on invalid socket [ 227.972137][ T7789] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 228.014305][ T146] veth0_macvtap: left promiscuous mode [ 228.287241][ T5848] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 229.052509][ T7804] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 229.060319][ T7804] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 229.067116][ T7804] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 229.074042][ T7804] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 229.084986][ T7804] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 229.092560][ T7804] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 229.099336][ T7804] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 229.106418][ T7804] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 229.113184][ T7804] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 229.120555][ T7804] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 229.127312][ T7804] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 229.548300][ T5898] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 229.778892][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.364575][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.375220][ T5898] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 230.384602][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.413173][ T5898] usb 6-1: config 0 descriptor?? [ 230.819314][ T7816] overlayfs: missing 'lowerdir' [ 231.280765][ T7819] comedi comedi0: Minor 3 specified more than once! [ 231.302494][ T7801] comedi comedi3: comedi_config --init_data is deprecated [ 231.310854][ T7801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.319669][ T7801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.729937][ T5898] cypress 0003:04B4:DE64.0012: unknown main item tag 0x0 [ 231.741470][ T5898] cypress 0003:04B4:DE64.0012: unknown main item tag 0x0 [ 231.862795][ T5898] cypress 0003:04B4:DE64.0012: unknown main item tag 0x0 [ 231.879381][ T5898] cypress 0003:04B4:DE64.0012: unknown main item tag 0x0 [ 231.929071][ T5898] cypress 0003:04B4:DE64.0012: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 231.977788][ T5898] usb 6-1: USB disconnect, device number 5 [ 232.073676][ T7834] fido_id[7834]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 232.282335][ T7843] tipc: Enabling of bearer rejected, failed to enable media [ 232.365561][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 232.385850][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 232.394712][ T7847] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 232.413056][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.421550][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.432279][ T7847] bridge0: entered allmulticast mode [ 232.645498][ T30] audit: type=1400 audit(1758482331.342:435): avc: denied { nlmsg_write } for pid=7836 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 233.236076][ T30] audit: type=1400 audit(1758482332.212:436): avc: denied { listen } for pid=7856 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 233.725000][ T7859] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 234.716579][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 235.235302][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 235.253159][ T7875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 235.341929][ T7877] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 235.349322][ T7877] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 235.355926][ T7877] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 235.362916][ T7877] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 235.369974][ T7877] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 235.377279][ T7877] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 235.384316][ T7877] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 235.393567][ T7877] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 235.417355][ T7877] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 235.539556][ T7875] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 235.642832][ T7877] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 235.656780][ T7875] overlayfs: missing 'lowerdir' [ 235.678315][ T7877] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 235.755958][ T5898] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 236.136689][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.155417][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.180474][ T5898] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 236.195674][ T7889] FAULT_INJECTION: forcing a failure. [ 236.195674][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 236.210063][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.4.521 Not tainted syzkaller #0 PREEMPT(full) [ 236.210089][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.210101][ T7889] Call Trace: [ 236.210106][ T7889] [ 236.210114][ T7889] dump_stack_lvl+0x16c/0x1f0 [ 236.210143][ T7889] should_fail_ex+0x512/0x640 [ 236.210165][ T7889] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 236.210188][ T7889] should_failslab+0xc2/0x120 [ 236.210209][ T7889] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 236.210228][ T7889] ? __alloc_skb+0x2b2/0x380 [ 236.210253][ T7889] __alloc_skb+0x2b2/0x380 [ 236.210272][ T7889] ? __pfx___alloc_skb+0x10/0x10 [ 236.210295][ T7889] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 236.210323][ T7889] netlink_alloc_large_skb+0x69/0x130 [ 236.210348][ T7889] netlink_sendmsg+0x6a1/0xdd0 [ 236.210375][ T7889] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.210407][ T7889] ____sys_sendmsg+0xa95/0xc70 [ 236.210435][ T7889] ? copy_msghdr_from_user+0x10a/0x160 [ 236.210457][ T7889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.210494][ T7889] ___sys_sendmsg+0x134/0x1d0 [ 236.210517][ T7889] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.210576][ T7889] __sys_sendmsg+0x16d/0x220 [ 236.210598][ T7889] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.210636][ T7889] do_syscall_64+0xcd/0x4e0 [ 236.210661][ T7889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.210679][ T7889] RIP: 0033:0x7fc80f98ec29 [ 236.210694][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.210711][ T7889] RSP: 002b:00007fc81079c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.210729][ T7889] RAX: ffffffffffffffda RBX: 00007fc80fbd5fa0 RCX: 00007fc80f98ec29 [ 236.210741][ T7889] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 236.210752][ T7889] RBP: 00007fc81079c090 R08: 0000000000000000 R09: 0000000000000000 [ 236.210763][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.210773][ T7889] R13: 00007fc80fbd6038 R14: 00007fc80fbd5fa0 R15: 00007fffb94ef5f8 [ 236.210796][ T7889] [ 236.423897][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.434996][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.475232][ T5898] usb 6-1: config 0 descriptor?? [ 236.673623][ T7899] tipc: Enabling of bearer rejected, failed to enable media [ 236.816132][ T7876] comedi comedi3: comedi_config --init_data is deprecated [ 236.824956][ T7876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.833766][ T7876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.974746][ T7897] block nbd0: Attempted send on invalid socket [ 236.981064][ T7897] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 237.074267][ T5898] cypress 0003:04B4:DE64.0013: unknown main item tag 0x0 [ 237.675408][ T5898] cypress 0003:04B4:DE64.0013: unknown main item tag 0x0 [ 237.684224][ T5898] cypress 0003:04B4:DE64.0013: unknown main item tag 0x0 [ 237.691596][ T5898] cypress 0003:04B4:DE64.0013: unknown main item tag 0x0 [ 237.721141][ T5898] cypress 0003:04B4:DE64.0013: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 237.776350][ T5898] usb 6-1: USB disconnect, device number 6 [ 237.891966][ T7914] fido_id[7914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 237.937926][ T5848] Bluetooth: hci4: unexpected subevent 0x0a length: 99 > 30 [ 238.256693][ T978] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 238.547172][ T978] usb 3-1: Using ep0 maxpacket: 16 [ 238.586636][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.598242][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.611874][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.624757][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 238.633940][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.644080][ T978] usb 3-1: config 0 descriptor?? [ 238.907192][ T30] audit: type=1804 audit(1758482337.882:437): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.532" name="/newroot/109/file0" dev="tmpfs" ino=613 res=1 errno=0 [ 238.929392][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.150259][ T978] HID 045e:07da: Invalid code 65791 type 1 [ 239.438213][ T978] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0014/input/input15 [ 239.568441][ T978] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 241.207059][ T5974] usb 3-1: reset high-speed USB device number 27 using dummy_hcd [ 241.592467][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 241.992718][ T7973] netlink: 'syz.1.539': attribute type 11 has an invalid length. [ 242.310585][ T57] usb 3-1: USB disconnect, device number 27 [ 242.353932][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.541'. [ 242.365472][ T7980] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 242.993040][ T7989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.543'. [ 243.098281][ T7989] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 243.867015][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 243.978939][ T8009] netlink: 'syz.2.547': attribute type 11 has an invalid length. [ 244.089810][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 244.983581][ T5898] usb 5-1: config 0 has an invalid interface number: 38 but max is 0 [ 245.002172][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.012391][ T5898] usb 5-1: config 0 has no interface number 0 [ 245.018719][ T5898] usb 5-1: config 0 interface 38 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 245.030783][ T5898] usb 5-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.049493][ T5898] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 245.063689][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.073856][ T5898] usb 5-1: Product: syz [ 245.078237][ T5898] usb 5-1: Manufacturer: syz [ 245.082890][ T5898] usb 5-1: SerialNumber: syz [ 245.091415][ T5898] usb 5-1: config 0 descriptor?? [ 245.098972][ T5898] xbox_remote_probe: Unexpected endpoint_in [ 245.167077][ T978] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.318306][ T978] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.329551][ T978] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 245.339434][ T978] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.349691][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.363330][ T92] usb 5-1: USB disconnect, device number 10 [ 245.437663][ T8014] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.450345][ T978] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.812796][ T5898] usb 2-1: USB disconnect, device number 18 [ 247.861868][ T8040] netlink: 'syz.4.554': attribute type 11 has an invalid length. [ 250.051190][ T5848] Bluetooth: hci4: unexpected subevent 0x0a length: 99 > 30 [ 250.475417][ T30] audit: type=1400 audit(1758482349.452:438): avc: denied { read } for pid=8062 comm="syz.5.563" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 251.973506][ T8074] tipc: Enabling of bearer rejected, failed to enable media [ 252.274619][ T8082] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 252.283936][ T8082] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 252.291408][ T8082] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 252.299379][ T8082] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 252.306794][ T8082] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 252.314389][ T8082] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 252.323488][ T8082] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 252.332114][ T8082] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 252.339586][ T8082] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 252.346922][ T8082] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 252.359797][ T8082] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 252.867198][ T92] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 253.540383][ T8095] netlink: 'syz.4.571': attribute type 11 has an invalid length. [ 253.649447][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.671402][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.698390][ T92] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 253.851687][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.310664][ T92] usb 6-1: config 0 descriptor?? [ 254.907109][ T8080] comedi comedi3: comedi_config --init_data is deprecated [ 254.916226][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.924926][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.140853][ T92] cypress 0003:04B4:DE64.0015: unknown main item tag 0x0 [ 255.411360][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.437029][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.921577][ T92] cypress 0003:04B4:DE64.0015: unknown main item tag 0x0 [ 255.977886][ T92] cypress 0003:04B4:DE64.0015: unknown main item tag 0x0 [ 256.003690][ T92] cypress 0003:04B4:DE64.0015: unknown main item tag 0x0 [ 256.023936][ T92] cypress 0003:04B4:DE64.0015: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 256.103796][ T92] usb 6-1: USB disconnect, device number 7 [ 256.133384][ T8121] vxcan1 speed is unknown, defaulting to 1000 [ 256.173113][ T8118] fido_id[8118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 256.443523][ T30] audit: type=1804 audit(1758482355.422:439): pid=8129 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.579" name="/newroot/122/file0" dev="tmpfs" ino=687 res=1 errno=0 [ 257.069602][ T8138] tipc: Enabling of bearer rejected, failed to enable media [ 257.339882][ T5898] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 257.603789][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.635226][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.685542][ T5898] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 257.944020][ T8150] block nbd0: Attempted send on invalid socket [ 257.951342][ T8150] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 258.043306][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.183479][ T5898] usb 6-1: config 0 descriptor?? [ 258.447349][ T8133] comedi comedi3: comedi_config --init_data is deprecated [ 258.455619][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.464346][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.672904][ T8161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.586'. [ 258.683393][ T5898] cypress 0003:04B4:DE64.0016: unknown main item tag 0x0 [ 258.699074][ T5898] cypress 0003:04B4:DE64.0016: unknown main item tag 0x0 [ 258.710358][ T8161] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 258.722432][ T5898] cypress 0003:04B4:DE64.0016: unknown main item tag 0x0 [ 258.739178][ T5898] cypress 0003:04B4:DE64.0016: unknown main item tag 0x0 [ 258.770441][ T5898] cypress 0003:04B4:DE64.0016: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 258.924357][ T57] usb 6-1: USB disconnect, device number 8 [ 258.988291][ T8164] fido_id[8164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 259.084254][ T30] audit: type=1400 audit(1758482358.062:440): avc: denied { ioctl } for pid=8167 comm="syz.4.588" path="pid:[4026532783]" dev="nsfs" ino=4026532783 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 259.162397][ T8168] netlink: 'syz.2.587': attribute type 11 has an invalid length. [ 259.761720][ T8176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.636249][ T8182] block nbd0: Attempted send on invalid socket [ 260.642710][ T8182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 261.401553][ T8188] block nbd0: Attempted send on invalid socket [ 261.407969][ T8188] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 261.937000][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 262.504086][ T9] usb 5-1: device descriptor read/all, error -61 [ 262.637146][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 263.186944][ T9] usb 5-1: device descriptor read/64, error -71 [ 263.581084][ T9] usb usb5-port1: attempt power cycle [ 263.724616][ T5848] Bluetooth: hci2: unexpected subevent 0x0a length: 99 > 30 [ 265.408987][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 265.567038][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 265.582873][ T9] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 265.598163][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.601249][ T8228] vxcan1 speed is unknown, defaulting to 1000 [ 265.613353][ T9] usb 5-1: Product: syz [ 265.747108][ T9] usb 5-1: Manufacturer: syz [ 265.773896][ T9] usb 5-1: SerialNumber: syz [ 265.790133][ T9] usb 5-1: config 0 descriptor?? [ 265.917531][ T8235] : renamed from bridge_slave_0 (while UP) [ 265.934015][ T30] audit: type=1400 audit(1758482364.912:441): avc: denied { setopt } for pid=8232 comm="syz.5.605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 266.057331][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 266.441366][ T9] gspca_sunplus: reg_w_riv err -71 [ 266.446534][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 266.536052][ T8240] block nbd0: Attempted send on invalid socket [ 266.542388][ T8240] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 266.569513][ T9] usb 5-1: USB disconnect, device number 14 [ 266.867154][ T57] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 268.181096][ T57] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 268.436495][ T57] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 268.444187][ T57] usb 3-1: can't read configurations, error -61 [ 268.468092][ T8254] bridge1: entered promiscuous mode [ 268.576982][ T57] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 269.003652][ T57] usb 3-1: too many configurations: 149, using maximum allowed: 8 [ 269.053059][ T8265] netlink: 'syz.5.612': attribute type 11 has an invalid length. [ 269.135979][ T57] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 269.147206][ T57] usb 3-1: can't read configurations, error -61 [ 269.159458][ T57] usb usb3-port1: attempt power cycle [ 270.659125][ T8278] comedi comedi0: Minor 3 specified more than once! [ 271.416938][ T92] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 271.599505][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.649207][ T92] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.707461][ T92] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 271.749811][ T92] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.782883][ T92] usb 6-1: config 0 descriptor?? [ 272.498118][ T8280] comedi comedi3: comedi_config --init_data is deprecated [ 272.510377][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.519049][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.805471][ T92] cypress 0003:04B4:DE64.0017: unknown main item tag 0x0 [ 272.816195][ T92] cypress 0003:04B4:DE64.0017: unknown main item tag 0x0 [ 272.825382][ T92] cypress 0003:04B4:DE64.0017: unknown main item tag 0x0 [ 272.834905][ T92] cypress 0003:04B4:DE64.0017: unknown main item tag 0x0 [ 272.868728][ T92] cypress 0003:04B4:DE64.0017: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 272.982692][ T92] usb 6-1: USB disconnect, device number 9 [ 273.057935][ T8300] fido_id[8300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 273.156520][ T8303] netlink: 'syz.4.622': attribute type 11 has an invalid length. [ 273.714022][ T30] audit: type=1400 audit(1758482372.662:442): avc: denied { map } for pid=8306 comm="syz.2.624" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 273.846940][ T30] audit: type=1400 audit(1758482372.662:443): avc: denied { execute } for pid=8306 comm="syz.2.624" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 274.053311][ T92] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 274.165796][ T8314] netlink: 'syz.2.625': attribute type 11 has an invalid length. [ 274.306912][ T92] usb 6-1: Using ep0 maxpacket: 8 [ 274.321213][ T92] usb 6-1: unable to get BOS descriptor or descriptor too short [ 274.330854][ T92] usb 6-1: config 4 interface 0 has no altsetting 0 [ 274.343110][ T92] usb 6-1: string descriptor 0 read error: -22 [ 274.349714][ T92] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 274.359055][ T92] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.411470][ T92] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 274.422233][ T8316] vxcan1 speed is unknown, defaulting to 1000 [ 274.442750][ T92] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 274.474752][ T92] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 274.498725][ T92] usb 6-1: media controller created [ 274.563842][ T92] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.614366][ T8309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.676470][ T8309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.697010][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 274.786652][ T92] zl10353_read_register: readreg error (reg=127, ret==0) [ 274.845908][ T9] usb 2-1: device descriptor read/64, error -71 [ 274.942134][ T92] usb 6-1: USB disconnect, device number 10 [ 275.524561][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 275.596413][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'. [ 275.653629][ T30] audit: type=1400 audit(1758482374.632:444): avc: denied { write } for pid=8330 comm="syz.2.631" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 275.669544][ T9] usb 2-1: device descriptor read/64, error -71 [ 275.676822][ C1] vkms_vblank_simulate: vblank timer overrun [ 275.725863][ T5848] Bluetooth: hci2: unexpected subevent 0x0a length: 99 > 30 [ 275.789592][ T9] usb usb2-port1: attempt power cycle [ 276.092030][ T5898] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 276.267059][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 276.287964][ T9] usb 2-1: device descriptor read/8, error -71 [ 276.362600][ T8344] FAULT_INJECTION: forcing a failure. [ 276.362600][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 276.370201][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 276.381568][ T8344] CPU: 0 UID: 0 PID: 8344 Comm: syz.2.636 Not tainted syzkaller #0 PREEMPT(full) [ 276.381595][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.381611][ T8344] Call Trace: [ 276.381618][ T8344] [ 276.381625][ T8344] dump_stack_lvl+0x16c/0x1f0 [ 276.381656][ T8344] should_fail_ex+0x512/0x640 [ 276.381682][ T8344] should_failslab+0xc2/0x120 [ 276.381704][ T8344] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 276.381723][ T8344] ? dst_alloc+0x99/0x1a0 [ 276.381746][ T8344] dst_alloc+0x99/0x1a0 [ 276.381767][ T8344] rt_dst_alloc+0x35/0x3a0 [ 276.381794][ T8344] ip_route_output_key_hash_rcu+0x87a/0x28e0 [ 276.381821][ T8344] ip_route_output_key_hash+0x137/0x2e0 [ 276.381840][ T8344] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 276.381857][ T8344] ? __pfx_sock_has_perm+0x10/0x10 [ 276.381890][ T8344] __ip4_datagram_connect+0x846/0x14c0 [ 276.381927][ T8344] __ip6_datagram_connect+0xcf0/0x1480 [ 276.381957][ T8344] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 276.381988][ T8344] ? ip6_datagram_connect_v6_only+0x73/0xa0 [ 276.382010][ T8344] ip6_datagram_connect_v6_only+0x73/0xa0 [ 276.382035][ T8344] inet_dgram_connect+0x143/0x200 [ 276.382064][ T8344] ? __pfx_inet_dgram_connect+0x10/0x10 [ 276.382088][ T8344] __sys_connect_file+0x13e/0x1a0 [ 276.382111][ T8344] __sys_connect+0x13b/0x160 [ 276.382129][ T8344] ? __pfx___sys_connect+0x10/0x10 [ 276.382158][ T8344] ? __pfx_ksys_write+0x10/0x10 [ 276.382182][ T8344] __x64_sys_connect+0x72/0xb0 [ 276.382198][ T8344] ? lockdep_hardirqs_on+0x7c/0x110 [ 276.382220][ T8344] do_syscall_64+0xcd/0x4e0 [ 276.382245][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.382263][ T8344] RIP: 0033:0x7fb49ff8ec29 [ 276.382277][ T8344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.382294][ T8344] RSP: 002b:00007fb4a0df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 276.382310][ T8344] RAX: ffffffffffffffda RBX: 00007fb4a01d5fa0 RCX: 00007fb49ff8ec29 [ 276.382322][ T8344] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000004 [ 276.382333][ T8344] RBP: 00007fb4a0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.382343][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.382353][ T8344] R13: 00007fb4a01d6038 R14: 00007fb4a01d5fa0 R15: 00007ffe945a71b8 [ 276.382378][ T8344] [ 276.386724][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 276.709383][ T5898] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 276.721359][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.737551][ T5898] usb 5-1: config 0 descriptor?? [ 276.765225][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 276.793997][ T9] usb 2-1: device descriptor read/8, error -71 [ 276.897753][ T978] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 276.908325][ T9] usb usb2-port1: unable to enumerate USB device [ 277.059261][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 277.066058][ T978] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 277.088526][ T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.101095][ T978] usb 3-1: config 0 has no interface number 0 [ 277.108558][ T978] usb 3-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 277.123067][ T978] usb 3-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.141653][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 277.151304][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.159933][ T978] usb 3-1: Product: syz [ 277.164311][ T978] usb 3-1: Manufacturer: syz [ 277.165385][ T5898] uclogic 0003:28BD:0042.0018: interface is invalid, ignoring [ 277.256165][ T978] usb 3-1: SerialNumber: syz [ 277.302193][ T978] usb 3-1: config 0 descriptor?? [ 277.459370][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.466067][ T30] audit: type=1400 audit(1758482376.442:445): avc: denied { ioctl } for pid=8350 comm="syz.1.638" path="socket:[21575]" dev="sockfs" ino=21575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 277.493751][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.522514][ T5898] usb 5-1: USB disconnect, device number 15 [ 277.586601][ T9] usb 3-1: USB disconnect, device number 31 [ 277.605937][ T30] audit: type=1400 audit(1758482376.582:446): avc: denied { write } for pid=8353 comm="syz.5.639" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 277.652502][ T8357] tipc: Enabling of bearer rejected, failed to enable media [ 277.709799][ T8360] netlink: 64 bytes leftover after parsing attributes in process `syz.5.642'. [ 279.688970][ T30] audit: type=1400 audit(1758482378.662:447): avc: denied { ioctl } for pid=8373 comm="syz.4.645" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 279.786883][ T8380] vxcan1 speed is unknown, defaulting to 1000 [ 280.107120][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 280.287011][ T24] usb 6-1: device descriptor read/64, error -71 [ 280.557808][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 280.797294][ T24] usb 6-1: device descriptor read/64, error -71 [ 280.817576][ T57] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 280.927376][ T24] usb usb6-port1: attempt power cycle [ 281.017259][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 281.024712][ T57] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 281.039877][ T57] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.058537][ T57] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 281.073580][ T57] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 281.091764][ T57] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 281.108248][ T57] usb 5-1: config 1 interface 0 has no altsetting 0 [ 281.126733][ T57] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 281.155738][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.224331][ T57] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 281.311935][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 281.418062][ T24] usb 6-1: device descriptor read/8, error -71 [ 281.692107][ T57] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 281.731602][ T57] usb 5-1: USB disconnect, device number 16 [ 281.776968][ T8413] tipc: Enabling of bearer rejected, failed to enable media [ 281.787059][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 281.877506][ T24] usb 6-1: device descriptor read/8, error -71 [ 281.994489][ T24] usb usb6-port1: unable to enumerate USB device [ 282.677013][ T24] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 283.215937][ T8435] overlayfs: missing 'lowerdir' [ 283.389049][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 283.503587][ T8441] comedi comedi0: Minor 3 specified more than once! [ 283.820404][ T24] usb 5-1: config 0 has an invalid interface number: 38 but max is 0 [ 283.846808][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.871669][ T24] usb 5-1: config 0 has no interface number 0 [ 283.888245][ T24] usb 5-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 284.440946][ T24] usb 5-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.478733][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 284.490616][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.502944][ T24] usb 5-1: Product: syz [ 284.507377][ T24] usb 5-1: Manufacturer: syz [ 284.511969][ T24] usb 5-1: SerialNumber: syz [ 284.539325][ T24] usb 5-1: config 0 descriptor?? [ 284.557761][ T30] audit: type=1400 audit(1758482383.532:448): avc: denied { lock } for pid=8445 comm="syz.1.663" path="socket:[21323]" dev="sockfs" ino=21323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 284.713374][ T30] audit: type=1400 audit(1758482383.692:449): avc: denied { accept } for pid=8449 comm="syz.5.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 284.752537][ T5974] usb 5-1: USB disconnect, device number 17 [ 284.877041][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 285.136023][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 285.154313][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.166919][ T24] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 285.196924][ T24] usb 2-1: can't read configurations, error -71 [ 285.807067][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 285.885409][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.668'. [ 285.924490][ T8467] netlink: 'syz.1.668': attribute type 10 has an invalid length. [ 285.976994][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 286.005843][ T8472] vxcan1 speed is unknown, defaulting to 1000 [ 286.020309][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.035061][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.045484][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 286.063891][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.087789][ T9] usb 3-1: config 0 descriptor?? [ 286.347761][ T57] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 286.607328][ T57] usb 6-1: device descriptor read/64, error -71 [ 286.709152][ T9] ft260 0003:0403:6030.0019: unknown main item tag 0x7 [ 286.896949][ T57] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 286.903801][ T8482] block nbd0: Attempted send on invalid socket [ 287.022270][ T8482] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 287.074806][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.121217][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.134696][ T9] ft260 0003:0403:6030.0019: chip code: 6424 8183 [ 287.187062][ T57] usb 6-1: device descriptor read/64, error -71 [ 287.297197][ T57] usb usb6-port1: attempt power cycle [ 287.327167][ T5925] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 287.345012][ T9] ft260 0003:0403:6030.0019: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 287.499424][ T5925] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 287.513293][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 287.522653][ T5925] usb 5-1: can't read configurations, error -61 [ 287.547560][ T9] ft260 0003:0403:6030.0019: failed to retrieve status: -32, no wakeup [ 287.580552][ T9] ft260 0003:0403:6030.0019: failed to retrieve status: -5 [ 287.647305][ T57] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 287.667140][ T5925] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 287.669045][ T57] usb 6-1: device descriptor read/8, error -71 [ 287.786015][ T9] ft260 0003:0403:6030.0019: failed to reset I2C controller: -71 [ 287.825588][ T9] usb 3-1: USB disconnect, device number 32 [ 287.838693][ T5925] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 287.869187][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 287.889129][ T5925] usb 5-1: can't read configurations, error -61 [ 287.903836][ T5925] usb usb5-port1: attempt power cycle [ 287.956971][ T57] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 287.977382][ T57] usb 6-1: device descriptor read/8, error -71 [ 288.087937][ T57] usb usb6-port1: unable to enumerate USB device [ 288.247042][ T5925] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 288.277949][ T5925] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 288.287394][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 288.294971][ T5925] usb 5-1: can't read configurations, error -61 [ 288.428366][ T5925] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 288.458725][ T5925] usb 5-1: too many configurations: 149, using maximum allowed: 8 [ 288.469892][ T5925] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 288.478482][ T5925] usb 5-1: can't read configurations, error -61 [ 288.486117][ T5925] usb usb5-port1: unable to enumerate USB device [ 288.636951][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 288.798265][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 288.804642][ T9] usb 3-1: config 0 has an invalid interface number: 38 but max is 0 [ 288.813354][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.865330][ T9] usb 3-1: config 0 has no interface number 0 [ 288.872386][ T9] usb 3-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.886988][ T9] usb 3-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.909871][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 288.921734][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.930095][ T9] usb 3-1: Product: syz [ 288.935017][ T9] usb 3-1: Manufacturer: syz [ 288.939704][ T9] usb 3-1: SerialNumber: syz [ 288.948790][ T9] usb 3-1: config 0 descriptor?? [ 289.159588][ T9] usb 3-1: USB disconnect, device number 33 [ 289.547033][ T30] audit: type=1400 audit(1758482388.462:450): avc: denied { read write } for pid=8504 comm="syz.1.679" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 289.911705][ T30] audit: type=1400 audit(1758482388.462:451): avc: denied { open } for pid=8504 comm="syz.1.679" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 291.293745][ T8525] netlink: 'syz.2.682': attribute type 11 has an invalid length. [ 292.026070][ T30] audit: type=1400 audit(1758482390.922:452): avc: denied { read write } for pid=8530 comm="syz.5.686" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 292.051734][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.070318][ T30] audit: type=1400 audit(1758482390.932:453): avc: denied { open } for pid=8530 comm="syz.5.686" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 292.115494][ T30] audit: type=1400 audit(1758482390.992:454): avc: denied { name_connect } for pid=8530 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 292.194935][ T30] audit: type=1400 audit(1758482391.092:455): avc: denied { getopt } for pid=8530 comm="syz.5.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 292.214515][ C0] vkms_vblank_simulate: vblank timer overrun [ 293.479928][ T30] audit: type=1400 audit(1758482392.452:456): avc: denied { write } for pid=8548 comm="syz.2.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 293.519725][ T30] audit: type=1400 audit(1758482392.492:457): avc: denied { read } for pid=8551 comm="syz.5.692" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 293.550170][ T30] audit: type=1400 audit(1758482392.492:458): avc: denied { open } for pid=8551 comm="syz.5.692" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 293.618722][ T30] audit: type=1400 audit(1758482392.502:459): avc: denied { ioctl } for pid=8551 comm="syz.5.692" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 293.687749][ T5933] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 293.866965][ T5898] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 293.876162][ T5933] usb 5-1: config 32 has an invalid interface number: 77 but max is 16 [ 293.887439][ T5933] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 17 [ 293.901177][ T5933] usb 5-1: config 32 has no interface number 0 [ 293.911576][ T5933] usb 5-1: config 32 interface 77 has no altsetting 0 [ 293.947448][ T5933] usb 5-1: New USB device found, idVendor=046d, idProduct=08fd, bcdDevice=d5.79 [ 293.967055][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.975530][ T5933] usb 5-1: Product: syz [ 293.981504][ T5933] usb 5-1: Manufacturer: syz [ 293.986956][ T5933] usb 5-1: SerialNumber: syz [ 294.185154][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 294.204999][ T5898] usb 6-1: config 0 has an invalid interface number: 38 but max is 0 [ 294.215085][ T5898] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.240654][ T5898] usb 6-1: config 0 has no interface number 0 [ 294.246974][ T5898] usb 6-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.257914][ T5898] usb 6-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.283393][ T5898] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 294.302755][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.343884][ T5898] usb 6-1: Product: syz [ 294.348913][ T5898] usb 6-1: Manufacturer: syz [ 294.357073][ T5898] usb 6-1: SerialNumber: syz [ 294.371141][ T5898] usb 6-1: config 0 descriptor?? [ 295.113764][ T57] usb 6-1: USB disconnect, device number 19 [ 295.761296][ T8580] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 295.769520][ T8580] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 295.777098][ T8580] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 295.784002][ T8580] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 295.792334][ T8580] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 295.800378][ T8580] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 295.808367][ T8580] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 295.816573][ T8580] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 295.824140][ T8580] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 295.833496][ T8580] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 295.843136][ T8580] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 296.094335][ T30] audit: type=1400 audit(1758482395.072:460): avc: denied { read } for pid=8583 comm="syz.2.699" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 296.122228][ T30] audit: type=1400 audit(1758482395.072:461): avc: denied { open } for pid=8583 comm="syz.2.699" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 296.216913][ T5898] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 296.217500][ T8587] netlink: 'syz.1.700': attribute type 13 has an invalid length. [ 296.281228][ T30] audit: type=1400 audit(1758482395.262:462): avc: denied { ioctl } for pid=8583 comm="syz.2.699" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 296.398478][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.412260][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.422528][ T5898] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 296.432581][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.444724][ T57] usb 5-1: USB disconnect, device number 22 [ 296.445316][ T5898] usb 6-1: config 0 descriptor?? [ 296.719718][ T8579] comedi comedi3: comedi_config --init_data is deprecated [ 296.728252][ T8579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.737212][ T8579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.267964][ T5898] cypress 0003:04B4:DE64.001A: unknown main item tag 0x0 [ 297.278627][ T5898] cypress 0003:04B4:DE64.001A: unknown main item tag 0x0 [ 297.285699][ T5898] cypress 0003:04B4:DE64.001A: unknown main item tag 0x0 [ 297.293204][ T5898] cypress 0003:04B4:DE64.001A: unknown main item tag 0x0 [ 297.303433][ T5898] cypress 0003:04B4:DE64.001A: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.5-1/input0 [ 297.422119][ T8601] batman_adv: batadv0: Adding interface: gretap1 [ 297.433233][ T8601] batman_adv: batadv0: Interface activated: gretap1 [ 297.440291][ T8601] batadv0: mtu less than device minimum [ 297.446986][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.458521][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.469883][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.481167][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.492592][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.503975][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.514912][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.525762][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.536576][ T8601] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.578768][ T9] usb 6-1: USB disconnect, device number 20 [ 297.632366][ T8610] overlayfs: missing 'lowerdir' [ 301.555503][ T8658] block nbd0: Attempted send on invalid socket [ 301.566558][ T8658] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 301.775238][ T8670] netlink: 'syz.2.719': attribute type 11 has an invalid length. [ 301.956998][ T57] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 302.220648][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 302.227655][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.240716][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.256679][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 302.279448][ T57] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 302.299009][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.412541][ T8677] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 302.420791][ T8677] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 302.429276][ T8677] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 302.432012][ T57] usb 6-1: config 0 descriptor?? [ 302.441641][ T8677] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 302.450491][ T8677] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 302.457972][ T8677] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 302.732641][ T8677] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 302.741453][ T8677] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 302.748309][ T8677] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 302.755498][ T8677] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 302.762438][ T8677] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 302.957419][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 303.100960][ T8680] FAULT_INJECTION: forcing a failure. [ 303.100960][ T8680] name failslab, interval 1, probability 0, space 0, times 0 [ 303.117232][ T8680] CPU: 0 UID: 0 PID: 8680 Comm: syz.2.723 Not tainted syzkaller #0 PREEMPT(full) [ 303.117265][ T8680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 303.117278][ T8680] Call Trace: [ 303.117284][ T8680] [ 303.117292][ T8680] dump_stack_lvl+0x16c/0x1f0 [ 303.117320][ T8680] should_fail_ex+0x512/0x640 [ 303.117341][ T8680] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 303.117363][ T8680] should_failslab+0xc2/0x120 [ 303.117382][ T8680] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 303.117400][ T8680] ? __alloc_skb+0x2b2/0x380 [ 303.117425][ T8680] __alloc_skb+0x2b2/0x380 [ 303.117444][ T8680] ? __pfx___alloc_skb+0x10/0x10 [ 303.117466][ T8680] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 303.117494][ T8680] netlink_alloc_large_skb+0x69/0x130 [ 303.117518][ T8680] netlink_sendmsg+0x6a1/0xdd0 [ 303.117544][ T8680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.117577][ T8680] ____sys_sendmsg+0xa95/0xc70 [ 303.117603][ T8680] ? copy_msghdr_from_user+0x10a/0x160 [ 303.117625][ T8680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.117661][ T8680] ___sys_sendmsg+0x134/0x1d0 [ 303.117684][ T8680] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.117736][ T8680] __sys_sendmsg+0x16d/0x220 [ 303.117758][ T8680] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.117794][ T8680] do_syscall_64+0xcd/0x4e0 [ 303.117820][ T8680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.117838][ T8680] RIP: 0033:0x7fb49ff8ec29 [ 303.117852][ T8680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.117868][ T8680] RSP: 002b:00007fb4a0df7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.117886][ T8680] RAX: ffffffffffffffda RBX: 00007fb4a01d5fa0 RCX: 00007fb49ff8ec29 [ 303.117897][ T8680] RDX: 00000000040008d0 RSI: 00002000000005c0 RDI: 0000000000000004 [ 303.117908][ T8680] RBP: 00007fb4a0df7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.117917][ T8680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.117926][ T8680] R13: 00007fb4a01d6038 R14: 00007fb4a01d5fa0 R15: 00007ffe945a71b8 [ 303.117950][ T8680] [ 303.118216][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.320019][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.349173][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.349643][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.367059][ T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 303.368604][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.376323][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.386691][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.401574][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.411842][ T9] usb 2-1: config 0 descriptor?? [ 303.412172][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.427085][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.434437][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.442042][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.449395][ T57] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 303.470871][ T57] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001B/input/input17 [ 303.489694][ T57] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 303.547292][ T24] usb 6-1: USB disconnect, device number 21 [ 303.577746][ T8683] fido_id[8683]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 303.626948][ T5898] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 303.642358][ T8675] comedi comedi3: comedi_config --init_data is deprecated [ 303.650353][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.659015][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.777004][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 303.783590][ T5898] usb 3-1: config 162 has an invalid interface number: 97 but max is 0 [ 303.791950][ T5898] usb 3-1: config 162 has no interface number 0 [ 303.798339][ T5898] usb 3-1: config 162 interface 97 has no altsetting 0 [ 303.807000][ T5898] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 303.816119][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.824231][ T5898] usb 3-1: Product: syz [ 303.829486][ T5898] usb 3-1: Manufacturer: syz [ 303.834111][ T5898] usb 3-1: SerialNumber: syz [ 303.874240][ T9] cypress 0003:04B4:DE64.001C: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.1-1/input0 [ 304.051228][ T30] audit: type=1400 audit(1758482403.032:463): avc: denied { setattr } for pid=8681 comm="syz.2.724" name="media3" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 304.057842][ T5898] metro_usb 3-1:162.97: Metrologic USB to Serial converter detected [ 304.100026][ T5898] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 304.138233][ T9] usb 2-1: USB disconnect, device number 25 [ 304.160578][ T30] audit: type=1400 audit(1758482403.132:464): avc: denied { connect } for pid=8685 comm="syz.5.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.168087][ T5898] usb 3-1: USB disconnect, device number 34 [ 304.195552][ T5898] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 304.197317][ T8686] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 304.231379][ T5898] metro_usb 3-1:162.97: device disconnected [ 305.937407][ T30] audit: type=1400 audit(1758482404.912:465): avc: denied { append } for pid=8709 comm="syz.2.733" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 305.964683][ T8714] FAULT_INJECTION: forcing a failure. [ 305.964683][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 306.028820][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.1.735 Not tainted syzkaller #0 PREEMPT(full) [ 306.028847][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.028858][ T8714] Call Trace: [ 306.028863][ T8714] [ 306.028871][ T8714] dump_stack_lvl+0x16c/0x1f0 [ 306.028898][ T8714] should_fail_ex+0x512/0x640 [ 306.028921][ T8714] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 306.028942][ T8714] should_failslab+0xc2/0x120 [ 306.028962][ T8714] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 306.028979][ T8714] ? __alloc_skb+0x2b2/0x380 [ 306.029003][ T8714] __alloc_skb+0x2b2/0x380 [ 306.029022][ T8714] ? __pfx___alloc_skb+0x10/0x10 [ 306.029042][ T8714] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 306.029070][ T8714] netlink_alloc_large_skb+0x69/0x130 [ 306.029095][ T8714] netlink_sendmsg+0x6a1/0xdd0 [ 306.029122][ T8714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.029154][ T8714] ____sys_sendmsg+0xa95/0xc70 [ 306.029180][ T8714] ? copy_msghdr_from_user+0x10a/0x160 [ 306.029201][ T8714] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.029237][ T8714] ___sys_sendmsg+0x134/0x1d0 [ 306.029259][ T8714] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.029306][ T8714] __sys_sendmsg+0x16d/0x220 [ 306.029327][ T8714] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.029364][ T8714] do_syscall_64+0xcd/0x4e0 [ 306.029390][ T8714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.029408][ T8714] RIP: 0033:0x7f31bed8ec29 [ 306.029423][ T8714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.029439][ T8714] RSP: 002b:00007f31bfbf5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.029456][ T8714] RAX: ffffffffffffffda RBX: 00007f31befd5fa0 RCX: 00007f31bed8ec29 [ 306.029474][ T8714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 306.029484][ T8714] RBP: 00007f31bfbf5090 R08: 0000000000000000 R09: 0000000000000000 [ 306.029494][ T8714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.029504][ T8714] R13: 00007f31befd6038 R14: 00007f31befd5fa0 R15: 00007ffc6859de98 [ 306.029527][ T8714] [ 307.215936][ T8739] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.739'. [ 307.725715][ T24] libceph: connect (1)[c::]:6789 error -101 [ 307.798658][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 308.114058][ T5898] libceph: connect (1)[b::]:6789 error -101 [ 308.120149][ T5898] libceph: mon0 (1)[b::]:6789 connect error [ 308.242622][ T8748] ceph: No mds server is up or the cluster is laggy [ 308.242621][ T8746] ceph: No mds server is up or the cluster is laggy [ 308.414161][ T8764] netlink: 36 bytes leftover after parsing attributes in process `syz.2.743'. [ 310.781349][ T30] audit: type=1400 audit(1758482409.762:466): avc: denied { create } for pid=8824 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 310.800688][ C0] vkms_vblank_simulate: vblank timer overrun [ 311.682375][ T30] audit: type=1400 audit(1758482409.812:467): avc: denied { getopt } for pid=8824 comm="syz.4.747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 312.136571][ T30] audit: type=1400 audit(1758482411.112:468): avc: denied { bind } for pid=8837 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 312.457010][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 312.467076][ T5933] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 312.677034][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 313.009674][ T5933] usb 5-1: config 0 has an invalid interface number: 158 but max is 0 [ 313.016916][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 313.023333][ T5933] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 313.030559][ T24] usb 2-1: config 0 has an invalid interface number: 38 but max is 0 [ 313.032074][ T5933] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 313.053148][ T5933] usb 5-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 313.061997][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.073496][ T5933] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 313.087063][ T5933] usb 5-1: config 0 has no interface number 0 [ 313.094492][ T5933] usb 5-1: config 0 has no interface number 1 [ 313.100576][ T24] usb 2-1: config 0 has no interface number 0 [ 313.100822][ T24] usb 2-1: config 0 interface 38 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.109766][ T5933] usb 5-1: config 0 interface 158 altsetting 0 has an endpoint descriptor with address 0x1E, changing to 0xE [ 313.121305][ T24] usb 2-1: config 0 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.134510][ T5933] usb 5-1: config 0 interface 158 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 313.154670][ T5933] usb 5-1: config 0 interface 158 altsetting 0 endpoint 0x5 has an invalid bInterval 220, changing to 11 [ 313.166307][ T5933] usb 5-1: config 0 interface 158 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 313.177810][ T5933] usb 5-1: config 0 interface 158 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.189102][ T5933] usb 5-1: config 0 interface 158 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.340324][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f8.63 [ 313.356344][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.365409][ T5933] usb 5-1: config 0 interface 158 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 313.382225][ T5933] usb 5-1: config 0 interface 158 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 313.393547][ T5933] usb 5-1: config 0 interface 158 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 8 [ 313.402414][ T24] usb 2-1: Product: syz [ 313.413960][ T24] usb 2-1: Manufacturer: syz [ 313.434190][ T5933] usb 5-1: config 0 interface 158 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 313.445657][ T24] usb 2-1: SerialNumber: syz [ 313.455637][ T5933] usb 5-1: config 0 interface 158 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 313.460390][ T24] usb 2-1: config 0 descriptor?? [ 313.488449][ T5933] usb 5-1: config 0 interface 202 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 313.622745][ T5933] usb 5-1: config 0 interface 202 altsetting 7 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 313.727638][ T8871] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.756'. [ 313.742626][ T5933] usb 5-1: config 0 interface 202 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 313.885476][ T5933] usb 5-1: config 0 interface 202 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 314.083545][ T5933] usb 5-1: config 0 interface 202 has no altsetting 0 [ 314.294641][ T5933] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=bd.58 [ 314.381479][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.467574][ T5933] usb 5-1: Product: syz [ 314.495236][ T5933] usb 5-1: Manufacturer: syz [ 314.522620][ T5933] usb 5-1: SerialNumber: syz [ 314.546046][ T24] usb 2-1: USB disconnect, device number 26 [ 314.614125][ T5933] usb 5-1: config 0 descriptor?? [ 314.680572][ T8843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.747191][ T8843] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.885726][ T30] audit: type=1400 audit(1758482413.852:469): avc: denied { ioctl } for pid=8874 comm="syz.5.758" path="socket:[23078]" dev="sockfs" ino=23078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 315.250947][ T8885] FAULT_INJECTION: forcing a failure. [ 315.250947][ T8885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.264328][ T8885] CPU: 1 UID: 0 PID: 8885 Comm: syz.1.761 Not tainted syzkaller #0 PREEMPT(full) [ 315.264352][ T8885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.264362][ T8885] Call Trace: [ 315.264368][ T8885] [ 315.264375][ T8885] dump_stack_lvl+0x16c/0x1f0 [ 315.264400][ T8885] should_fail_ex+0x512/0x640 [ 315.264422][ T8885] strncpy_from_user+0x3b/0x2e0 [ 315.264438][ T8885] getname_flags.part.0+0x8f/0x550 [ 315.264457][ T8885] getname_uflags+0x98/0xf0 [ 315.264469][ T8885] __x64_sys_execveat+0xc4/0x120 [ 315.264486][ T8885] do_syscall_64+0xcd/0x4e0 [ 315.264510][ T8885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.264527][ T8885] RIP: 0033:0x7f31bed8ec29 [ 315.264540][ T8885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.264556][ T8885] RSP: 002b:00007f31bfbf5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 315.264567][ T8885] RAX: ffffffffffffffda RBX: 00007f31befd5fa0 RCX: 00007f31bed8ec29 [ 315.264574][ T8885] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 315.264580][ T8885] RBP: 00007f31bfbf5090 R08: 0000000000000000 R09: 0000000000000000 [ 315.264586][ T8885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.264593][ T8885] R13: 00007f31befd6038 R14: 00007f31befd5fa0 R15: 00007ffc6859de98 [ 315.264606][ T8885] [ 315.610404][ T5933] usb 5-1: unsupported MDLM descriptors [ 315.718069][ T5933] usb 5-1: USB disconnect, device number 23 [ 316.858619][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.865389][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.993971][ T30] audit: type=1400 audit(1758482416.962:470): avc: denied { mounton } for pid=8922 comm="syz.5.768" path="/syzcgroup/net/syz5/cgroup.procs" dev="cgroup" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 318.171367][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 318.393074][ T8930] FAULT_INJECTION: forcing a failure. [ 318.393074][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.593453][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.5.771 Not tainted syzkaller #0 PREEMPT(full) [ 318.593478][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.593487][ T8930] Call Trace: [ 318.593493][ T8930] [ 318.593503][ T8930] dump_stack_lvl+0x16c/0x1f0 [ 318.593529][ T8930] should_fail_ex+0x512/0x640 [ 318.593555][ T8930] _copy_from_iter+0x29f/0x1720 [ 318.593584][ T8930] ? __pfx__copy_from_iter+0x10/0x10 [ 318.593606][ T8930] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 318.593635][ T8930] copy_page_from_iter+0xde/0x180 [ 318.593660][ T8930] tun_build_skb.constprop.0+0x2e8/0x1500 [ 318.593694][ T8930] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 318.593716][ T8930] ? unwind_get_return_address+0x59/0xa0 [ 318.593736][ T8930] ? arch_stack_walk+0xa6/0x100 [ 318.593765][ T8930] ? _kstrtoull+0x145/0x200 [ 318.593781][ T8930] ? __pfx__kstrtoull+0x10/0x10 [ 318.593799][ T8930] tun_get_user+0x14ae/0x3ce0 [ 318.593833][ T8930] ? __pfx_tun_get_user+0x10/0x10 [ 318.593858][ T8930] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 318.593887][ T8930] ? find_held_lock+0x2b/0x80 [ 318.593908][ T8930] ? tun_get+0x191/0x370 [ 318.593936][ T8930] tun_chr_write_iter+0xdc/0x210 [ 318.593962][ T8930] vfs_write+0x7d3/0x11d0 [ 318.593980][ T8930] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 318.594007][ T8930] ? __pfx_vfs_write+0x10/0x10 [ 318.594022][ T8930] ? find_held_lock+0x2b/0x80 [ 318.594055][ T8930] ksys_write+0x12a/0x250 [ 318.594072][ T8930] ? __pfx_ksys_write+0x10/0x10 [ 318.594095][ T8930] do_syscall_64+0xcd/0x4e0 [ 318.594118][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.594145][ T8930] RIP: 0033:0x7f1d5318d6df [ 318.594161][ T8930] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 318.594177][ T8930] RSP: 002b:00007f1d540df000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 318.594193][ T8930] RAX: ffffffffffffffda RBX: 00007f1d533d5fa0 RCX: 00007f1d5318d6df [ 318.594203][ T8930] RDX: 000000000000006a RSI: 0000200000000180 RDI: 00000000000000c8 [ 318.594212][ T8930] RBP: 00007f1d540df090 R08: 0000000000000000 R09: 0000000000000000 [ 318.594222][ T8930] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000001 [ 318.594231][ T8930] R13: 00007f1d533d6038 R14: 00007f1d533d5fa0 R15: 00007ffc1ce43408 [ 318.594261][ T8930] [ 318.594526][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 318.837030][ T9] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 318.845660][ T9] usb 3-1: Product: syz [ 318.849987][ T9] usb 3-1: SerialNumber: syz [ 318.867227][ T9] usb 3-1: config 0 descriptor?? [ 318.982476][ T8938] NILFS (loop5): device size too small [ 319.161202][ T9] ldusb 3-1:0.0: Interrupt in endpoint not found [ 319.169223][ T30] audit: type=1400 audit(1758482418.132:471): avc: denied { write } for pid=8931 comm="syz.4.772" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 319.175363][ T9] usb 3-1: USB disconnect, device number 35 [ 319.592647][ T8944] team0: Mode changed to "loadbalance" [ 319.733243][ T8944] "syz.1.775" (8944) uses obsolete ecb(arc4) skcipher [ 320.471772][ T8954] vxcan1 speed is unknown, defaulting to 1000 [ 320.856986][ T5898] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 320.887982][ T8960] netlink: 'syz.4.778': attribute type 11 has an invalid length. [ 321.101353][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.115639][ T5898] usb 2-1: config 0 has no interfaces? [ 321.121564][ T5898] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.136702][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.201254][ T5898] usb 2-1: config 0 descriptor?? [ 321.450226][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.458856][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.600337][ T30] audit: type=1400 audit(1758482420.582:472): avc: denied { mount } for pid=8964 comm="syz.5.782" name="/" dev="hugetlbfs" ino=24321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 321.623152][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.650411][ T8965] netlink: 'syz.5.782': attribute type 64 has an invalid length. [ 321.667549][ T8965] netlink: 'syz.5.782': attribute type 4 has an invalid length. [ 321.677273][ T8965] netlink: 152 bytes leftover after parsing attributes in process `syz.5.782'. [ 321.689149][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 321.699211][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 321.708386][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 321.716229][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 321.725403][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 321.781545][ T8967] vxcan1 speed is unknown, defaulting to 1000 [ 321.995979][ T30] audit: type=1400 audit(1758482420.972:473): avc: denied { unmount } for pid=7469 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 322.072245][ T30] audit: type=1400 audit(1758482421.052:474): avc: denied { read } for pid=8969 comm="syz.4.783" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 322.184356][ T30] audit: type=1400 audit(1758482421.052:475): avc: denied { open } for pid=8969 comm="syz.4.783" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 323.066294][ T9] usb 2-1: USB disconnect, device number 27 [ 323.826964][ T49] Bluetooth: hci2: command tx timeout [ 323.900395][ T8987] syzkaller0: entered promiscuous mode [ 323.905959][ T8987] syzkaller0: entered allmulticast mode [ 324.832485][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 324.912349][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.922302][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.932396][ T8967] bridge_slave_0: entered allmulticast mode [ 324.943081][ T8967] bridge_slave_0: entered promiscuous mode [ 324.952478][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.960099][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.967623][ T8967] bridge_slave_1: entered allmulticast mode [ 324.975611][ T8967] bridge_slave_1: entered promiscuous mode [ 325.028953][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.042874][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.084522][ T8967] team0: Port device team_slave_0 added [ 325.092763][ T8967] team0: Port device team_slave_1 added [ 325.139823][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.149513][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.186724][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.291456][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.298697][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.326670][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.340190][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.792'. [ 325.373776][ T8967] hsr_slave_0: entered promiscuous mode [ 325.380128][ T8967] hsr_slave_1: entered promiscuous mode [ 325.386229][ T8967] debugfs: 'hsr0' already exists in 'hsr' [ 325.393401][ T8967] Cannot create hsr debugfs directory [ 325.558254][ T8967] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.570423][ T8967] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 325.581692][ T8967] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 325.590959][ T8967] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 325.653661][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.675274][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.686404][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.693593][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.709491][ T6869] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.716627][ T6869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.868791][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.887259][ T49] Bluetooth: hci2: command tx timeout [ 326.116278][ T8967] veth0_vlan: entered promiscuous mode [ 326.125465][ T8967] veth1_vlan: entered promiscuous mode [ 326.141943][ T8967] veth0_macvtap: entered promiscuous mode [ 326.150379][ T8967] veth1_macvtap: entered promiscuous mode [ 326.165094][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.174774][ T8967] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.220704][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.235756][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.265968][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.369702][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.979543][ T9042] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 326.987546][ T9042] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 326.995767][ T9042] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 327.002796][ T9042] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 327.010182][ T9042] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 327.024822][ T9042] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 327.041086][ T9042] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 327.048385][ T9042] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 327.055091][ T9042] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 327.062418][ T9042] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 327.069245][ T9042] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 327.544770][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.553043][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.591555][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.667989][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.807303][ T5970] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 327.848296][ T30] audit: type=1400 audit(1758482426.812:476): avc: denied { mounton } for pid=9053 comm="syz.5.799" path="/73/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 327.967090][ T49] Bluetooth: hci2: command tx timeout [ 328.062871][ T30] audit: type=1400 audit(1758482427.042:477): avc: denied { unmount } for pid=7469 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 328.078400][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.094596][ T30] audit: type=1400 audit(1758482427.072:478): avc: denied { map } for pid=9056 comm="syz.6.800" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 328.094899][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.130809][ T5970] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 328.203827][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.239234][ T5970] usb 5-1: config 0 descriptor?? [ 328.434708][ T9067] block nbd0: Attempted send on invalid socket [ 328.440997][ T9067] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 328.531675][ T9037] comedi comedi3: comedi_config --init_data is deprecated [ 328.540393][ T9037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.549035][ T9037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.737914][ T9069] vxcan1 speed is unknown, defaulting to 1000 [ 328.748972][ T9071] input: syz0 as /devices/virtual/input/input19 [ 328.757014][ T24] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 328.777241][ T5970] hid_parser_main: 4 callbacks suppressed [ 328.777258][ T5970] cypress 0003:04B4:DE64.001D: unknown main item tag 0x0 [ 328.873822][ T5970] cypress 0003:04B4:DE64.001D: unknown main item tag 0x0 [ 328.911606][ T5970] cypress 0003:04B4:DE64.001D: unknown main item tag 0x0 [ 328.929453][ T5970] cypress 0003:04B4:DE64.001D: unknown main item tag 0x0 [ 328.939148][ T24] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 328.960133][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 328.976045][ T24] usb 6-1: can't read configurations, error -61 [ 329.000293][ T5970] cypress 0003:04B4:DE64.001D: hidraw0: USB HID v0.00 Device [HID 04b4:de64] on usb-dummy_hcd.4-1/input0 [ 329.027606][ T57] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 329.049672][ T5970] usb 5-1: USB disconnect, device number 24 [ 329.117052][ T24] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 329.175424][ T9076] fido_id[9076]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 329.197432][ T57] usb 2-1: no configurations [ 329.202064][ T57] usb 2-1: can't read configurations, error -22 [ 329.312233][ T24] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 329.345382][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 329.371717][ T24] usb 6-1: can't read configurations, error -61 [ 329.381982][ T57] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 329.392854][ T24] usb usb6-port1: attempt power cycle [ 329.503030][ T9080] block nbd0: Attempted send on invalid socket [ 329.509986][ T9080] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 329.568433][ T57] usb 2-1: no configurations [ 329.575999][ T57] usb 2-1: can't read configurations, error -22 [ 329.587317][ T57] usb usb2-port1: attempt power cycle [ 329.733997][ T30] audit: type=1400 audit(1758482428.712:479): avc: denied { ioctl } for pid=9081 comm="syz.4.806" path="socket:[24803]" dev="sockfs" ino=24803 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 329.758518][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.769896][ T24] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 329.787226][ T5970] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 329.823283][ T24] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 329.842409][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 329.853558][ T24] usb 6-1: can't read configurations, error -61 [ 329.926906][ T57] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 329.948127][ T57] usb 2-1: no configurations [ 329.952791][ T57] usb 2-1: can't read configurations, error -22 [ 329.993377][ T5970] usb 7-1: too many configurations: 149, using maximum allowed: 8 [ 330.001514][ T24] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 330.011354][ T5970] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 330.021664][ T5970] usb 7-1: can't read configurations, error -61 [ 330.032060][ T24] usb 6-1: too many configurations: 149, using maximum allowed: 8 [ 330.041715][ T24] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 330.049630][ T49] Bluetooth: hci2: command tx timeout [ 330.055797][ T24] usb 6-1: can't read configurations, error -61 [ 330.062488][ T24] usb usb6-port1: unable to enumerate USB device [ 330.158476][ T57] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 330.177288][ T5970] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 330.185641][ T57] usb 2-1: no configurations [ 330.190459][ T57] usb 2-1: can't read configurations, error -22 [ 330.197052][ T57] usb usb2-port1: unable to enumerate USB device [ 330.236934][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 330.338146][ T5970] usb 7-1: too many configurations: 149, using maximum allowed: 8 [ 330.347635][ T5970] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 330.355380][ T5970] usb 7-1: can't read configurations, error -61 [ 330.362167][ T5970] usb usb7-port1: attempt power cycle [ 330.397012][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 330.403541][ T9] usb 5-1: config index 0 descriptor too short (expected 6180, got 36) [ 330.411878][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.422070][ T9] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.434972][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 330.441833][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 330.451132][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.461004][ T9] usb 5-1: config 0 descriptor?? [ 330.469073][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 330.706919][ T5970] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 330.728622][ T5970] usb 7-1: too many configurations: 149, using maximum allowed: 8 [ 330.737878][ T5970] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 330.745442][ T5970] usb 7-1: can't read configurations, error -61 [ 330.876875][ T5970] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 330.897847][ T5970] usb 7-1: too many configurations: 149, using maximum allowed: 8 [ 330.907031][ T5970] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 330.914601][ T5970] usb 7-1: can't read configurations, error -61 [ 330.921311][ T5970] usb usb7-port1: unable to enumerate USB device [ 331.024222][ T9090] binder: 9087:9090 ioctl 400c620e 200000000240 returned -22 [ 331.966885][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 332.456926][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 332.471895][ T24] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 332.483066][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.505593][ T24] usb 6-1: config 0 descriptor?? [ 332.526310][ T24] usb 6-1: interface 1 not found [ 332.724153][ T24] usb 6-1: USB disconnect, device number 26 [ 332.770330][ T49] Bluetooth: hci0: unexpected subevent 0x0a length: 99 > 30 [ 332.981186][ T30] audit: type=1400 audit(1758482431.962:480): avc: denied { unmount } for pid=9108 comm="syz.6.814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 333.021917][ T30] audit: type=1400 audit(1758482431.962:481): avc: denied { associate } for pid=9108 comm="syz.6.814" name="rdma.current" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 333.044432][ T30] audit: type=1400 audit(1758482431.962:482): avc: denied { execute } for pid=9108 comm="syz.6.814" path="/rdma.current" dev="rootfs" ino=24839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 333.051507][ T5925] usb 5-1: USB disconnect, device number 25 [ 333.114896][ T9113] syzkaller0: entered promiscuous mode [ 333.123392][ T9113] syzkaller0: entered allmulticast mode [ 333.147791][ T9115] netdevsim netdevsim6: Firmware load for '/../file0' refused, path contains '..' component [ 333.502209][ T9126] fuse: Bad value for 'fd' [ 333.936174][ T24] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 334.223856][ T24] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 65280, setting to 8 [ 334.288583][ T24] usb 6-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.308461][ T24] usb 6-1: config 1 interface 0 has no altsetting 0 [ 335.204279][ T9141] comedi comedi0: Minor 3 specified more than once! [ 336.136956][ T5856] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 336.997101][ T30] audit: type=1400 audit(1758482435.262:483): avc: denied { remount } for pid=9147 comm="syz.4.828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 337.407252][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.40 [ 337.416567][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.440822][ T9145] nvme_fabrics: missing parameter 'transport=%s' [ 337.455454][ T24] usb 6-1: Product: ᰁ [ 337.466392][ T24] usb 6-1: Manufacturer: ࠧ [ 337.480753][ T9145] nvme_fabrics: missing parameter 'nqn=%s' [ 337.494700][ T24] usb 6-1: can't set config #1, error -71 [ 337.504991][ T24] usb 6-1: USB disconnect, device number 27 [ 337.529335][ T9151] syzkaller0: entered promiscuous mode [ 337.534927][ T9151] syzkaller0: entered allmulticast mode [ 337.566959][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 337.614073][ T5856] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 337.633906][ T9161] netlink: 16 bytes leftover after parsing attributes in process `syz.5.832'. [ 337.635967][ T5856] usb 2-1: config 0 has no interface number 0 [ 337.651016][ T5856] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 337.660546][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.674584][ T5856] usb 2-1: config 0 descriptor?? [ 337.720855][ T9165] netlink: 104 bytes leftover after parsing attributes in process `syz.4.833'. [ 337.752668][ T9166] netlink: 'syz.5.832': attribute type 10 has an invalid length. [ 337.816671][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.826382][ T9166] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 337.878934][ T5856] viperboard 2-1:0.143: version 0.00 found at bus 002 address 032 [ 338.659672][ T5856] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 338.678307][ T5856] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 338.709011][ T5856] usb 2-1: USB disconnect, device number 32 [ 339.773558][ T9190] comedi comedi0: Minor 3 specified more than once! [ 340.326622][ T9195] 9pnet_fd: Insufficient options for proto=fd [ 340.337266][ T9196] 9pnet_fd: Insufficient options for proto=fd [ 340.922423][ T9208] netlink: 'syz.6.844': attribute type 11 has an invalid length. [ 341.207301][ T5898] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 341.467217][ T5898] usb 2-1: config 7 descriptor has 1 excess byte, ignoring [ 341.551534][ T5898] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 341.615880][ T5898] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 341.635986][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.654599][ T5898] usb 2-1: Product: syz [ 341.665068][ T5898] usb 2-1: Manufacturer: syz [ 341.678530][ T5898] usb 2-1: SerialNumber: syz [ 341.727228][ T5898] rndis_host 2-1:7.0: skipping garbage [ 341.736948][ T5898] usb 2-1: bad CDC descriptors [ 341.757516][ T5898] option 2-1:7.0: GSM modem (1-port) converter detected [ 342.123621][ T9225] use of bytesused == 0 is deprecated and will be removed in the future, [ 342.132449][ T9225] use the actual size instead. [ 342.389764][ T9229] raw_sendmsg: syz.5.851 forgot to set AF_INET. Fix it! [ 342.655254][ T9236] syzkaller0: entered promiscuous mode [ 342.661213][ T9236] syzkaller0: entered allmulticast mode [ 343.404488][ T9241] block device autoloading is deprecated and will be removed. [ 344.084742][ T24] usb 2-1: USB disconnect, device number 33 [ 344.091817][ T24] option 2-1:7.0: device disconnected [ 344.446010][ T9258] netlink: 28 bytes leftover after parsing attributes in process `syz.6.861'. [ 344.826413][ T9260] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.859'. [ 346.374185][ T9279] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 347.035581][ T9291] vxcan1 speed is unknown, defaulting to 1000 [ 347.585703][ T31] INFO: task syz-executor:5845 blocked for more than 143 seconds. [ 347.694383][ T9298] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 347.704456][ T9298] SELinux: failed to load policy SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 348.348499][ T9299] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 348.366424][ T31] Not tainted syzkaller #0 [ 348.373225][ T30] audit: type=1400 audit(1758482446.732:484): avc: denied { getopt } for pid=9295 comm="syz.5.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 348.397019][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.405691][ T31] task:syz-executor state:D stack:23112 pid:5845 tgid:5845 ppid:1 task_flags:0x400140 flags:0x00004004 [ 348.425458][ T9299] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 348.486883][ T31] Call Trace: [ 348.490209][ T31] [ 348.496023][ T31] __schedule+0x1190/0x5de0 [ 348.500663][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 348.505623][ T31] ? __pfx___schedule+0x10/0x10 [ 348.510820][ T31] ? find_held_lock+0x2b/0x80 [ 348.515514][ T31] ? schedule+0x2d7/0x3a0 [ 348.520049][ T31] schedule+0xe7/0x3a0 [ 348.524243][ T31] v9fs_evict_inode+0x26f/0x300 [ 348.529447][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 348.534830][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 348.546942][ T31] ? evict+0x3a2/0x920 [ 348.556886][ T31] ? __pfx_v9fs_evict_inode+0x10/0x10 [ 348.562317][ T31] evict+0x3e3/0x920 [ 348.666899][ T31] ? __pfx_evict+0x10/0x10 [ 348.671386][ T31] ? iput+0x519/0x880 [ 348.675379][ T31] iput+0x521/0x880 [ 348.714056][ T31] ? __pfx_v9fs_drop_inode+0x10/0x10 [ 348.726760][ T31] dentry_unlink_inode+0x29c/0x480 [ 348.734761][ T31] __dentry_kill+0x1d0/0x600 [ 348.749270][ T31] dput.part.0+0x4b1/0x9b0 [ 348.753737][ T31] shrink_dcache_for_umount+0x159/0x3e0 [ 348.769307][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 348.774558][ T31] generic_shutdown_super+0x6c/0x390 [ 348.783303][ T31] kill_anon_super+0x3a/0x60 [ 348.790678][ T31] v9fs_kill_super+0x3d/0xa0 [ 348.795284][ T31] deactivate_locked_super+0xc1/0x1a0 [ 348.801575][ T31] deactivate_super+0xde/0x100 [ 348.806346][ T31] cleanup_mnt+0x225/0x450 [ 348.813548][ T31] task_work_run+0x150/0x240 [ 348.823898][ T31] ? __pfx_task_work_run+0x10/0x10 [ 348.832432][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 348.838602][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 348.843888][ T31] do_syscall_64+0x41c/0x4e0 [ 348.848852][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.854747][ T31] RIP: 0033:0x7f635e78ff57 [ 348.859191][ T31] RSP: 002b:00007ffe885d6b08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 348.867735][ T31] RAX: 0000000000000000 RBX: 00007f635e811c2d RCX: 00007f635e78ff57 [ 348.875697][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe885d6bc0 [ 348.883703][ T31] RBP: 00007ffe885d6bc0 R08: 0000000000000000 R09: 0000000000000000 [ 348.891870][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe885d7c50 [ 348.899871][ T31] R13: 00007f635e811c2d R14: 000000000002d3d0 R15: 00007ffe885d7c90 [ 348.907956][ T31] [ 348.911011][ T31] [ 348.911011][ T31] Showing all locks held in the system: [ 348.918798][ T31] 2 locks held by kworker/0:0/9: [ 348.927026][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 348.972463][ T31] #1: ffff8880b8424088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 349.006892][ T31] 4 locks held by kworker/1:0/24: [ 349.011961][ T31] 1 lock held by khungtaskd/31: [ 349.027061][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 349.060822][ T31] 3 locks held by kworker/1:1/57: [ 349.065887][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 349.116851][ T31] #1: ffffc900015e7d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 349.126575][ T31] #2: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 349.166906][ T31] 2 locks held by getty/5615: [ 349.171618][ T31] #0: ffff88814d4fe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 349.206928][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 349.236952][ T31] 1 lock held by syz-executor/5845: [ 349.242180][ T31] #0: ffff88807961a0e0 (&type->s_umount_key#72){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 349.266920][ T31] 5 locks held by kworker/u8:9/6869: [ 349.272253][ T31] #0: ffff88801c6f4148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 349.285290][ T31] #1: ffffc9001bedfd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 349.295958][ T31] #2: ffffffff9036f290 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 349.306299][ T31] #3: ffffffff90385588 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 349.315484][ T31] #4: ffffffff8e5ccb38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 349.325574][ T31] 6 locks held by syz-executor/7469: [ 349.331018][ T31] #0: ffff888078390dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 349.340731][ T31] #1: ffff8880783900b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 349.350451][ T31] #2: ffffffff905edba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 349.360510][ T31] #3: ffff88806dc78338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 349.369849][ T31] #4: ffffffff90620f10 (hidp_session_sem){++++}-{4:4}, at: hidp_session_remove+0x20/0x360 [ 349.379945][ T31] #5: ffffffff8fb992c8 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x184/0x4d0 [ 349.391018][ T31] 4 locks held by kworker/u8:11/7545: [ 349.396519][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 349.406480][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 349.415233][ T31] #2: ffff8880b8525b18 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6b8/0xd30 [ 349.424247][ T31] #3: ffffffff9b0a20d8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 349.434680][ T31] 3 locks held by syz.1.652/8401: [ 349.439769][ T31] #0: ffff88805d414dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 349.449374][ T31] #1: ffff88805d4140b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 349.459099][ T31] #2: ffffffff905edba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 349.469251][ T31] 1 lock held by khidpd_16bf5505/8687: [ 349.474691][ T31] #0: ffff8880783900b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_unregister_user+0x71/0x240 [ 349.484455][ T31] 3 locks held by syz.6.871/9290: [ 349.489731][ T31] #0: ffff888022fa0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 349.500686][ T31] #1: ffff888022fa00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 349.510439][ T31] #2: ffffffff905edba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 349.520468][ T31] 3 locks held by syz-executor/9293: [ 349.525737][ T31] #0: ffff88802337cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 349.535313][ T31] #1: ffff88802337c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 349.544995][ T31] #2: ffffffff905edba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 349.555152][ T31] [ 349.559272][ T31] ============================================= [ 349.559272][ T31] [ 349.567847][ T31] NMI backtrace for cpu 0 [ 349.567862][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 349.567879][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.567888][ T31] Call Trace: [ 349.567893][ T31] [ 349.567900][ T31] dump_stack_lvl+0x116/0x1f0 [ 349.567924][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 349.567938][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 349.567956][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.567979][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 349.567996][ T31] watchdog+0xf0e/0x1260 [ 349.568016][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.568030][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 349.568049][ T31] ? __kthread_parkme+0x19e/0x250 [ 349.568078][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.568094][ T31] kthread+0x3c2/0x780 [ 349.568109][ T31] ? __pfx_kthread+0x10/0x10 [ 349.568125][ T31] ? rcu_is_watching+0x12/0xc0 [ 349.568144][ T31] ? __pfx_kthread+0x10/0x10 [ 349.568159][ T31] ret_from_fork+0x56a/0x730 [ 349.568171][ T31] ? __pfx_kthread+0x10/0x10 [ 349.568186][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.568213][ T31] [ 349.568218][ T31] Sending NMI from CPU 0 to CPUs 1: [ 349.690968][ C1] NMI backtrace for cpu 1 [ 349.690982][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 349.690998][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.691006][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 349.691026][ C1] Code: 6d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 46 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 349.691038][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 349.691049][ C1] RAX: 00000000011f8549 RBX: 0000000000000001 RCX: ffffffff8b94cb49 [ 349.691058][ C1] RDX: 0000000000000000 RSI: ffffffff8de52cd1 RDI: ffffffff8c163400 [ 349.691066][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 349.691074][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 349.691082][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab7590 R15: 0000000000000000 [ 349.691091][ C1] FS: 0000000000000000(0000) GS:ffff8881247b2000(0000) knlGS:0000000000000000 [ 349.691105][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.691113][ C1] CR2: 00007f31bfb07d60 CR3: 000000000e380000 CR4: 00000000003526f0 [ 349.691121][ C1] Call Trace: [ 349.691126][ C1] [ 349.691130][ C1] default_idle+0x13/0x20 [ 349.691147][ C1] default_idle_call+0x6d/0xb0 [ 349.691163][ C1] do_idle+0x391/0x510 [ 349.691181][ C1] ? __pfx_do_idle+0x10/0x10 [ 349.691195][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 349.691211][ C1] cpu_startup_entry+0x4f/0x60 [ 349.691226][ C1] start_secondary+0x21d/0x2b0 [ 349.691245][ C1] ? __pfx_start_secondary+0x10/0x10 [ 349.691264][ C1] common_startup_64+0x13e/0x148 [ 349.691283][ C1] [ 349.879638][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 349.886525][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 349.895635][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 349.905776][ T31] Call Trace: [ 349.909044][ T31] [ 349.911962][ T31] dump_stack_lvl+0x3d/0x1f0 [ 349.916543][ T31] vpanic+0x6e8/0x7a0 [ 349.920512][ T31] ? __pfx_vpanic+0x10/0x10 [ 349.925003][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.930974][ T31] panic+0xca/0xd0 [ 349.934671][ T31] ? __pfx_panic+0x10/0x10 [ 349.939075][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 349.944434][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 349.950565][ T31] ? watchdog+0xd78/0x1260 [ 349.954961][ T31] ? watchdog+0xd6b/0x1260 [ 349.959360][ T31] watchdog+0xd89/0x1260 [ 349.963586][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.968241][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 349.973422][ T31] ? __kthread_parkme+0x19e/0x250 [ 349.978432][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.983088][ T31] kthread+0x3c2/0x780 [ 349.987136][ T31] ? __pfx_kthread+0x10/0x10 [ 349.991705][ T31] ? rcu_is_watching+0x12/0xc0 [ 349.996476][ T31] ? __pfx_kthread+0x10/0x10 [ 350.001048][ T31] ret_from_fork+0x56a/0x730 [ 350.005617][ T31] ? __pfx_kthread+0x10/0x10 [ 350.010186][ T31] ret_from_fork_asm+0x1a/0x30 [ 350.014949][ T31] [ 350.018156][ T31] Kernel Offset: disabled [ 350.022456][ T31] Rebooting in 86400 seconds..