last executing test programs: 3m22.223283385s ago: executing program 0 (id=1382): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2234, &(0x7f0000000880)={[{0x1000, 0x4e00, "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"}, {0x83, 0x4e00, "1eb2443da1eaa46cb6b02e47fc323c1696b515287b537a2779c7e05427d3fc89d933f7014be6af205ed1cd6cfca96dc2c68e712bea225a363aeffc9067f48352e9a1a314f1e6bf250e0c47f8fe31cdc8e3b6a30116547a296545b2319f223bc115f3c31adc9beb0ea59ed2f711788666e19bd461fe6e2b3b8d7cbbd9251f8de3ae9e8d"}, {0xc2, 0x4e00, "483c4390a8d14becc9a4d923fba17f67ffb65e1780c4a17dfe33a615b623b407414550ec149603c5225ccd7561956383060ab374a11c93e03e836b2d77b76beb8a2359b13e4428fad602cc9928a8d5cf55ddd3da38d14436bebf06f74e1814b18ce60bf768de5bad6d3e117134a4c41d76c814c5bf1d3bb3de674be1b7bdd0454f0a54eeda382fe1050f7cfa17adadfa423987aafa29aae1470408f84a03b4ec25a3eeb46f1b799896a4105fb746227aa315715d7eabebe2f457ebc53540ff977a16"}, {0x1000, 0x4e00, "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"}, {0xd5, 0x4e00, "d71bcaa0f3d481324acf7895c4076542946ea766dbf016e50fcad31e2ac62bdb1e7a59628ba1a6bfbe537a253ceba8fcccd8b7e08a2d667308b83439ecf71a94336f0646d2e2035ecd3b5ad0ba171aa0bd8e94f008b932399362d9abbf84de0a28f9e74944e2b5b7701d848174c9c319626de3c7cab19d22c9452f748e72ad7a5b65340a19ad80b4e3add801a386dac5457c9ea7f4d58daac290607324bcbf8b85f31b1dac74855b46631ad86ff210d97d6c5df1d9e1a7db4837beafdafbbf268d578700d13d2567a840656034a63dd46ec96f443c"}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0xfffffffffffffff8, 0xa82, 0xfffffffffffffc01, &(0x7f0000000100)=""/34}) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f0000000040)={0x0, &(0x7f00001a4180)}) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_BUFINFO(r4, 0xc02c640e, &(0x7f0000000000)={0x2, 0x4, 0xa, 0x7f, 0x0, 0x20000008, 0x1}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000840)={0x0, 0x7fffffff, 0x5, 0x7, 0x8, 0x735b}) 3m21.489456618s ago: executing program 0 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000100)={0x1856, {0x25, 0x8, 0x7, 0x3, 0x5}}) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r1, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m21.336378564s ago: executing program 0 (id=1387): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x418}}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001f80)={0x2c, 0x0, &(0x7f0000001e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc09}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m19.78162214s ago: executing program 0 (id=1392): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffe) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fddbdf25040000000cb3038008000100040000006c0004803c0007800800040001000000080002004b33000008000200fdffffff08000200ff0f0000080003000008000008000200080000000800e9ff0a0000002c0007800800030001000000080003000200000008000200090000000800040004000000080001000f0000004c000380080003000900000008000008000300dd8c000008000200050000000800030001010000080002005d00000008000300ff0f00000800020072070000", @ANYRESOCT=r5], 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008011) close(r3) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x0, 0xb71}, {0x7db, 0x3, 0x3, 0xd}, {0x1, 0x8, 0x7, 0x37107c5e}, {0x7f, 0x8, 0x2}]}, 0x10) 3m16.368437592s ago: executing program 0 (id=1405): futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0xc5000002) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3m16.253965571s ago: executing program 0 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) 3m0.056331103s ago: executing program 32 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x1f, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) 2m52.39432948s ago: executing program 3 (id=1489): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getflags(r3, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRESDEC=r2, @ANYRES32, @ANYBLOB="000000010400000000000000"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f00000004c0)={[{@xattr}, {@subsystem='net_prio'}, {@xattr}, {@clone_children}], [{@euid_gt={'euid>', 0xffffffffffffffff}}, {@measure}, {@dont_appraise}, {@smackfsdef}, {@pcr={'pcr', 0x3d, 0x30}}, {@appraise}]}) mount(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x1840802, &(0x7f0000000400)='\xe7\a\x16\x00\xcf\xb4\xdf\xb4Y\xb7\xa3p|\xbe\x84\x87X\x81\xc3\x1fV>8&@\xbeS\xde\x8f\xd7\x1e>\xbf\x10,\x11\nz\xb4|o\xe2\xafv\xf2\xbcyR\x1d\x16g\x8c~!\xfcZ\xe9`)\xea\x035\x14\xb2+K\xf2\x81#1C\xb6t\xd6H\x838?W$\x05T\xb3O!\xa2\xee\x05\xec\x1f\xc9$\x96\x83b\xd1\x9b\x82\xac\'\\\x13\xfc\xb9\xa2we\xa6\x1736{p^\x13\x9c\xd3?\xe6\'\x10\x8en\xcf\x16\x0f\x0f\xbc\x82*\x84\xea\xc5\xce\xb2\xda\xf9\xa7\x12\xebP\xb88z\xb9\b\xd0:\x18\xfdcE$V0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180), 0x0, 0x162, &(0x7f00000001c0)={0x0, 0x989680}) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) 2m48.252671512s ago: executing program 4 (id=1498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611988020000000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0x4) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000500)={0x2515, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000000000/0x4000)=nil}) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x701, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 2m47.820260583s ago: executing program 4 (id=1500): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000850) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2m46.105914559s ago: executing program 4 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 2m44.370158345s ago: executing program 3 (id=1506): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0", @ANYRES8=r2], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, r3, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5f}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffff, 0x6e}}}}, [@NL80211_ATTR_VENDOR_DATA={0xea, 0xc5, "91741f9351f84420184e5a8a6972df2f7f2d3f4523f5a561f5b24dc56f92bb593ffb018265b460c4e8ba83abe14db544ae37b122f7ee417f9448313c82a96689cd51629eca19a944f602912ae4c3c99500553a242d8e7af4c1589fe78e58829c157aeca1e6bcaa709a8bddeec651b29209ad4e903c822804a74e85624873b41c6f179c9d0508a2126acc61768910ef855950f19ba184386105da3418badc5ecf2bf623f70a3d5d012858e0b1e99f50de1200bdeff244074aa6b1febc5e8e828c75a055fa27f8209113d1f701e511158dacba2a378a85c725bb351616efd441b59f78a9753fdf"}, @NL80211_ATTR_VENDOR_DATA={0x1c, 0xc5, "6234099dd8a79016fc519b7860d6e0a28582ecfb3a126410"}, @NL80211_ATTR_VENDOR_ID={0x8}]}, 0x140}, 0x1, 0x0, 0x0, 0x4004}, 0x804) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x6}, [@null, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 2m43.688902498s ago: executing program 3 (id=1508): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x45, 0x0, 0x0) 2m43.248219443s ago: executing program 3 (id=1509): r0 = socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x2b, 0x3, 0x1000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000013c0)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000001600)=[{{&(0x7f0000000100)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000001500)="6e821be744110db04b45e9402764f66e6e049d459eafcfed70d79af081259766b7ab69fb48010c7b61aea2f47ce70fea34d035b5a5763a498e79d789ef2534", 0x3f}, {&(0x7f00000003c0)="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", 0x1000}], 0x2, &(0x7f0000001640)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000002800000000000000010000000100000089faae8be2369c7b99ba20bc6b2c9b4a8e2f24a05c922c6a9362b4cc28949561365ef887b3e5478db2bd4e83", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000a55b7dabdac2e3ebd2b6824961295a650353dfbf10f7f0c1b80ece8f690e294edf0263d951acbe9446c4a8aa2f72091039abddb238d0f5fd56df2f401813e9cf9ae5c032bb31918ef67be34f1274ef3aaaab1f7464228cfc7e955c71cff40e37a97ae2b5a4c8bf2ad36ebae204231c3d27f30b66e5a27cf6f957c4e1887d47df93340ea060473daa7eb9a8e147b93e5349f2c0d337b5e515f3a0108bc4b28f20a73500fae25100855369b033c1fc1fd1f9a4d0147ce4f1b650e56b83efe6ec7bba2fbdda8b"], 0xe0, 0x8080}}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x9180, 0xfffffffe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x2fef, &(0x7f0000000300)={0x0, 0x4a98, 0x80, 0x3, 0xd9}, 0x0, &(0x7f0000000380)) (async) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(0x0, 0x0) (async, rerun: 32) r4 = getpid() (rerun: 32) r5 = syz_pidfd_open(r4, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(r5, 0x24020000) (async) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) (async) landlock_create_ruleset(0x0, 0x0, 0x0) (async) umount2(&(0x7f0000000040)='.\x00', 0x2) (async) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) (async, rerun: 32) r6 = userfaultfd(0x801) (rerun: 32) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a23000/0x4000)=nil, 0x4000}}) 2m43.171401386s ago: executing program 4 (id=1510): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0xa4) 2m42.914546023s ago: executing program 3 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25df9bfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) 2m42.831730033s ago: executing program 4 (id=1512): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}, "341517c1b7df60c7"}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f08000900"], 0x250}}, 0x2000c000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001140)="91", 0x1}], 0x1}}], 0x1, 0x4040) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000180)=r5) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0xc1105511, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000001180)={0x12b4, 0x0, 0x5, 0x401, 0x0, 0x0, {0x1}, [{{0x254, 0x1, {{0x1, 0xc}, 0x6e, 0x0, 0xe, 0x81, 0x11, 'syz1\x00', "1c0fcde374c491f2265f149ae07932da97da31438e0109073e6e0e9dd88caf7e", "a52e899ec2f82560bf68b18b2ba05d3e1b206274618f09ecebc048988d3ae9f7", [{0x1000, 0x81, {0x2a86adcc3a0bbe26, 0xe}}, {0x3, 0x1, {0xaa3745d52dfba225, 0x3}}, {0x59, 0x4, {0x1}}, {0x3ccd, 0x8, {0x3, 0x9}}, {0xff, 0x90a, {0x1, 0xfffffff9}}, {0xfffe, 0x848e, {0x3, 0x6}}, {0x9, 0xff, {0x2, 0x3}}, {0x9, 0x800, {0x3, 0x1}}, {0x6, 0x401, {0x0, 0x200}}, {0x3, 0x1, {0x3, 0xc51}}, {0x8, 0xa, {0x2, 0x9}}, {0x4, 0x1, {0x2, 0xfffffff9}}, {0x0, 0x401, {0x3, 0x9}}, {0xf800, 0x1, {0x2, 0x7}}, {0x8, 0x7, {0x3, 0x4e}}, {0xa, 0x4, {0x0, 0x2}}, {0x1, 0x4, {0x0, 0xfffffffa}}, {0x8001, 0x5, {0x3, 0xffffffff}}, {0x7, 0x7, {0x1, 0x3}}, {0x400, 0x601, {0x0, 0x6}}, {0x31, 0xb0ea, {0x1}}, {0x0, 0x3, {0x0, 0x4}}, {0x6, 0x22d, {0x0, 0x2}}, {0x5, 0x1, {0x3, 0xc}}, {0x6, 0x7, {0x1, 0x1bcb}}, {0x90, 0x1000, {0x3, 0xffffffff}}, {0x800, 0x9, {0x1, 0x7}}, {0x2, 0x828, {0x2, 0xf447}}, {0x72f0, 0x0, {0x3, 0x7}}, {0xf, 0xbfba, {0x0, 0x6}}, {0xffff, 0x4, {0x2, 0x23e}}, {0x6b7, 0x1000, {0x2, 0x9}}, {0x8000, 0x3e, {0x2, 0x9c}}, {0x9, 0x2, {0x3}}, {0x9, 0x8000, {0x0, 0xc029f792}}, {0x9, 0xd, {0x0, 0x80000001}}, {0x6, 0x5, {0x3, 0x5}}, {0x2, 0x7, {0x3, 0x1000}}, {0xcf35, 0x9, {0x2, 0x1}}, {0xae, 0x100, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x10000}, 0x7, 0xad, 0x207, 0x5, 0x28, 'syz1\x00', "d86786570f194cd01ae49c80b152cbdd5ce63eb4fd5d8bfd9023c505d6632b34", "d95d61b98590610324a8dbf1826d0925ae9ec42aa70b3622bc18454230214cf4", [{0x8, 0x3b04, {0x0, 0x418}}, {0x7, 0x9, {0x3, 0x8001}}, {0x6, 0xffff, {0x2, 0x7f}}, {0x401, 0x6}, {0x8001, 0x0, {0x3, 0x81}}, {0xe, 0x2, {0x2, 0x5}}, {0x1, 0x9, {0x3, 0x96}}, {0xdd6e, 0x6}, {0x8, 0xfffb, {0x2, 0x8}}, {0x7, 0xcb33, {0x2, 0x2}}, {0x6, 0xfff8, {0x2, 0x5}}, {0x10, 0x0, {0x1, 0xc8c}}, {0x6, 0x6, {0x3, 0x541843a7}}, {0x5, 0x200, {0x1, 0x3}}, {0x1, 0xc0, {0x3, 0x10}}, {0xc996, 0x1, {0x3, 0x3ff}}, {0x1, 0x5be1, {0x2, 0x3}}, {0x0, 0x6, {0x0, 0x4}}, {0x400, 0x9, {0x3, 0x4}}, {0x7, 0xba, {0x2, 0x9}}, {0x8, 0xfd51, {0x0, 0x1000}}, {0x75bb, 0x6, {0x2}}, {0x0, 0x7ff, {0x1, 0xfffffff9}}, {0x0, 0x7, {0x3, 0xe81}}, {0x9, 0x8000, {0xfe4aab8ee6b932a4, 0x9}}, {0x8, 0x3, {0x3, 0x3}}, {0x2, 0x0, {0x1, 0x3}}, {0x5, 0x2, {0x3, 0x8000}}, {0x9, 0x8, {0x1, 0x4}}, {0x8, 0x4e1, {0x1, 0x7}}, {0x2, 0x7, {0x3, 0x9}}, {0xf9f2, 0xca}, {0x8, 0x6, {0x3, 0x3}}, {0x1, 0x5c, {0x3, 0xc}}, {0xfff1, 0x5, {0x2, 0x3}}, {0x4, 0x80, {0x2, 0x2}}, {0xf, 0x6, {0x0, 0x2}}, {0x7, 0x10, {0x1, 0x7}}, {0x8000, 0x4, {0x1, 0x7fffffff}}, {0x9, 0x3, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x1, 0xd1}, 0xfc, 0x9, 0x8bb, 0x4, 0x0, 'syz1\x00', "2c18972908ade5d33e303964aece55d9207e6390b0afb0d2c08457851e5f9124", "7e0b70d6577ca15329a8937153142cdac7f779c77c0c986300441fa80b8b4e0e", [{0x8, 0x6, {0x0, 0x5}}, {0x1, 0xd1f, {0x0, 0x4}}, {0x3, 0x9, {0x0, 0x2}}, {0x7, 0xffff, {0x2, 0x7}}, {0x4, 0x6, {0x2, 0x28b9}}, {0x5, 0x7, {0x3, 0x4}}, {0x2, 0x1000, {0x2, 0x7}}, {0xff, 0x3, {0x3, 0x401}}, {0x8, 0x7, {0x2, 0x54c}}, {0x0, 0x6, {0x2, 0xc032}}, {0x2, 0x7, {0x1, 0x1000}}, {0x8, 0x9, {0x2, 0x1}}, {0x63c, 0xffff, {0x3, 0x4}}, {0x1, 0x0, {0x4, 0x5}}, {0x800, 0x2, {0x0, 0x8}}, {0x9, 0x7, {0x0, 0xfffffff3}}, {0x2, 0xb942, {0x2, 0x1}}, {0x1ff, 0x200, {0x1, 0x4}}, {0x9, 0x7, {0x2, 0x2}}, {0x4, 0x2, {0x1, 0x80}}, {0xd8e, 0x9, {0x1, 0x3}}, {0x8, 0x1, {0x2, 0x13}}, {0x3, 0x7, {0x3, 0x9}}, {0xff24, 0xfffd, {0x1, 0xfffffc00}}, {0x5ad, 0x4, {0x0, 0x4}}, {0x30, 0x2, {0x0, 0x80000001}}, {0x4, 0x9, {0x1, 0x9}}, {0xf0, 0xa2, {0x3, 0x8}}, {0x4, 0xffff, {0x1, 0xffffffff}}, {0x5, 0x4, {0x0, 0x4}}, {0x0, 0x2, {0x2}}, {0x1, 0x3, {0x2, 0x9}}, {0x9, 0x2, {0x1, 0x7b1}}, {0x7, 0x3, {0x0, 0xfffffff8}}, {0x0, 0x3, {0x2, 0x1}}, {0x304, 0x5, {0x3, 0x7}}, {0x2, 0x2, {0x3, 0x101}}, {0x3, 0x5, {0x0, 0x1357}}, {0x0, 0xfffc, {0x3, 0x3}}, {0xa, 0x81, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0xa0}, 0x1, 0x81, 0x860, 0x8, 0x10, 'syz0\x00', "e221b4e7ed7ed6a4aa5815dcd3a53db90d91da4591f74834c4d814943cbafbb7", "7f19335a7d51d73fb96f2665a81763fc5b8795721a1c0949d8ce44856c762ab4", [{0x2, 0x3, {0x2, 0x5}}, {0x7, 0x3, {0x3, 0xd760}}, {0x8, 0x10, {0x1, 0xffff8001}}, {0xa8, 0x6df7, {0x3, 0xc50}}, {0x4, 0x8, {0x0, 0x5}}, {0x0, 0x3, {0x0, 0x7}}, {0xe86, 0x1, {0x0, 0xd}}, {0xffff, 0x800, {0xf6bcc6242b35921, 0x5}}, {0x7a, 0x9, {0x2, 0xb}}, {0x5, 0x8, {0x0, 0x4}}, {0xfffc, 0x7, {0x1, 0x5}}, {0x9, 0x3e24, {0x0, 0x49}}, {0x8, 0xb31, {0x1, 0x7}}, {0x7, 0xfff, {0x0, 0x1}}, {0x7ff, 0x5, {0x403999bb3ac4aa81, 0x2}}, {0x8, 0x9, {0x2, 0x5}}, {0x2, 0x852, {0x3, 0x10001}}, {0x1, 0x1, {0x0, 0x4}}, {0x400, 0xffff, {0x0, 0x80}}, {0x5, 0x5, {0x0, 0x4}}, {0x7, 0x7, {0x3, 0xd46}}, {0x8001, 0x400, {0x0, 0x7}}, {0x1, 0x1, {0x1, 0x53}}, {0x100, 0x2, {0x2, 0x9}}, {0x8, 0x7cec, {0x0, 0x40}}, {0x19e9, 0x2, {0x1, 0x2}}, {0xfb21, 0x7ff, {0x2, 0x8000}}, {0x9, 0x800, {0x2, 0x4da}}, {0x7f, 0x0, {0x1, 0x80000000}}, {0x1, 0xc, {0x2, 0x7}}, {0x9, 0xc, {0x2, 0x5}}, {0x191, 0x3, {0x2, 0x18000000}}, {0x100, 0x8, {0x1, 0xfffffffe}}, {0xa1b, 0x5, {0x2, 0x8}}, {0x2, 0x7, {0x0, 0x926}}, {0x5, 0xd266, {0x3, 0x4}}, {0x9, 0x81, {0x0, 0x80000000}}, {0x7, 0x2, {0x0, 0x7fff}}, {0x7, 0x180, {0x2, 0x1ff}}, {0x1, 0x3, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x3, 0x7fff}, 0xb, 0x6, 0x3, 0x4, 0x4, 'syz0\x00', "3ee073a3102bc66c6582c6c0370036611d165a8dd9ef6739a25dff20b3b4fde0", "41f514765b102a009fad6e2f5f7e1be9fa26d439dbf10826b6973d884fc0afad", [{0x8000, 0xbd4f, {0x0, 0x8001}}, {0x6, 0xff01, {0x0, 0x80}}, {0x1, 0x2, {0x3, 0xfffffff9}}, {0x8, 0x7, {0x2}}, {0x2a, 0x9, {0x0, 0x3ff}}, {0xb, 0x2b68, {0x808b9c3a1fe16f30}}, {0x8, 0x401, {0x3, 0x1}}, {0xfffc, 0x7, {0x88f581d54bb1646, 0x7ff}}, {0x0, 0x0, {0x0, 0xfffffffd}}, {0xf573, 0x6, {0x3, 0x240}}, {0xce0, 0xb697}, {0x0, 0x4, {0x1, 0xa}}, {0xe070, 0x248, {0x2, 0x41}}, {0xfff8, 0x6, {0x1, 0x80000001}}, {0x5, 0x793e, {0x1, 0x4a9}}, {0xfef2, 0x9, {0x2, 0xfffff001}}, {0x1, 0xeb, {0x2, 0x4}}, {0x2, 0x0, {0xf5283262b9f52f48}}, {0x40, 0x3, {0x1, 0x1ff}}, {0x9, 0x3ff, {0xf774e582babf58f6, 0x3}}, {0x3, 0x0, {0x3, 0x1ff}}, {0x3, 0x7c6, {0x1, 0x1}}, {0x400, 0x2, {0x0, 0x3b}}, {0xec, 0x4, {0x3, 0x1}}, {0x3, 0xe, {0x0, 0x1}}, {0x5, 0x8, {0x2, 0xff}}, {0x7c, 0x3c, {0x0, 0xfffffff7}}, {0x4, 0x6, {0x2, 0x200}}, {0xf, 0x1, {0x2, 0x3}}, {0x186, 0x3ff, {0x0, 0x2}}, {0xd, 0x6, {0x2, 0x3}}, {0xd86d, 0x5b, {0x0, 0xffff}}, {0x90da, 0x0, {0x1, 0x9}}, {0x1, 0x1, {0x1, 0x9}}, {0xb, 0x5, {0x0, 0x2}}, {0x5, 0xffff, {0x3, 0x4}}, {0x4, 0x3e0, {0x2, 0xfffffff8}}, {0xbcd5, 0x5, {0x3, 0x80}}, {0x7ff, 0x3, {0x0, 0x7f}}, {0x3, 0x6, {0x0, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x5, 0x10, 0x2, 0x7, 0x18, 'syz0\x00', "760deb8227b4df8c9a0d35acc11f619534b8cf3b2174d1da99bff6f0d2ed122f", "9290a1c4e6dbe74cea778a740cbb0a862b4e768b79688082abf03704e7c64125", [{0x0, 0x6, {0x3, 0x7}}, {0x3, 0x7, {0x1}}, {0x1, 0x9, {0x1, 0x7}}, {0x8, 0x7, {0x3, 0x300}}, {0x2, 0xdd7e, {0x0, 0x3ff}}, {0x7, 0x7, {0x0, 0xfffffffd}}, {0x101, 0xffff, {0x0, 0x2}}, {0x8, 0x8, {0x1, 0x401}}, {0xfff7, 0x100, {0x0, 0x7}}, {0x1ff, 0x3, {0x3, 0x5}}, {0x4, 0x9, {0x3, 0x3}}, {0x2, 0x8, {0x2, 0x7}}, {0x5, 0x4, {0x3, 0xa20}}, {0x8, 0x7a00, {0x1}}, {0x22, 0x4, {0x2, 0x91}}, {0x3, 0x8, {0x1, 0x80}}, {0xfff1, 0x8001, {0x2, 0x7fffffff}}, {0x8, 0x40, {0x0, 0x4}}, {0x3, 0xe, {0x0, 0x10}}, {0x7fff, 0x1, {0x3, 0x9}}, {0x101, 0x9, {0x1, 0xb54}}, {0x5, 0x8000, {0x3, 0x7}}, {0x9, 0x101, {0x3, 0x4}}, {0x0, 0x8, {0x1, 0x1}}, {0xd, 0x7, {0x3, 0xcf}}, {0x8, 0x8000, {0x1, 0x3}}, {0x4, 0xff36, {0x2, 0xffff0f1f}}, {0x5, 0x3, {0x3, 0x2}}, {0x8, 0x6, {0x3, 0xfffff876}}, {0x1000, 0x718, {0x17d8b51beb218dd1, 0x80000001}}, {0x2771, 0x9, {0x3, 0x9}}, {0x5, 0x5, {0x1, 0x7}}, {0xd24, 0x9, {0x1, 0x3}}, {0x0, 0x6, {0x0, 0x1}}, {0x5, 0xac, {0x3, 0x2}}, {0x7fff, 0x8, {0x3, 0x83}}, {0xe, 0xb57, {0x3, 0x933}}, {0x1, 0x6, {0x1, 0x1}}, {0x3, 0x8, {0x3, 0x8000}}, {0xa9b, 0xa1, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x81, 0x3, 0x200, 0x7, 0x27, 'syz1\x00', "1fa217834c05c79cf41543c7ede69c601ac93d6d7aba8ac5edb549ba468f4687", "862d26a87e3cd6b6d7abe2aaeb8940b35d6ac8be5c83e54176b0ed81a7eacd15", [{0x8000, 0x1c, {0x0, 0xe}}, {0xdf, 0xf492, {0x1}}, {0x0, 0x0, {0x1, 0x9}}, {0x5, 0x5, {0x1, 0x3}}, {0x1, 0xc, {0x1, 0xfff}}, {0x345, 0x6, {0x3}}, {0x0, 0x7fff, {0x1, 0x8}}, {0x8, 0x9, {0x0, 0xfff}}, {0x3, 0x7ff8, {0x3, 0xffff}}, {0x4, 0x9, {0x2, 0x1}}, {0xd, 0x0, {0x1, 0x6}}, {0xf1, 0x7, {0x3, 0x5}}, {0x0, 0x81, {0x1, 0xdfbb}}, {0x86fe, 0x2d3f, {0x2, 0x2}}, {0x0, 0x5, {0x1, 0x8001}}, {0xf, 0x1420, {0x3, 0xfff}}, {0x3, 0xff, {0x0, 0x9}}, {0x6, 0x2, {0x1, 0xfffffffa}}, {0x6, 0x5, {0x0, 0x5}}, {0xcc, 0x3, {0x2, 0x7}}, {0xff80, 0xfff8, {0x2, 0x8000}}, {0x200, 0x7, {0x2, 0x4}}, {0x8001, 0x6, {0x0, 0xaba}}, {0x5, 0x4, {0x2, 0x9}}, {0x3, 0x2e1b, {0x0, 0x80000001}}, {0xc, 0x61dc, {0x3, 0x6}}, {0x1, 0x1, {0x3, 0x2}}, {0x81, 0x1, {0x3, 0x7}}, {0x7, 0x5, {0x1, 0x6}}, {0x4, 0xfc00, {0x2, 0x9}}, {0x10, 0x9, {0x3, 0x7}}, {0x1, 0xc45b, {0x0, 0x1}}, {0x1, 0x2, {0x0, 0x40}}, {0xf, 0x2, {0x1, 0x800}}, {0x1, 0x0, {0x3, 0xfffffff7}}, {0x8, 0x6, {0x3, 0x800}}, {0x5, 0x7f, {0x2, 0xb}}, {0x7ff, 0x5e06, {0x0, 0xfffffffe}}, {0x200, 0x1ff, {0x1, 0x3}}, {0x7, 0x9, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x2}, 0x4, 0x1b, 0x8, 0x4, 0x23, 'syz1\x00', "4de09fd5322ffc54621859a8a6ffe95639b2754708402cd18b24a077ef197455", "533ebdbd0b5d578c5fe232b3ae2003759321e0a422e89f374aa2a5361fe39576", [{0x6, 0x6, {0x2, 0x3}}, {0x8240, 0x3, {0x1, 0x46a8}}, {0x7f, 0x7, {0x0, 0x4}}, {0x0, 0x8, {0x2, 0x3}}, {0x2, 0xce, {0x3, 0x1ff}}, {0xcfc, 0xb4, {0x2, 0x221a}}, {0x0, 0xfffd, {0x0, 0x80}}, {0xfffe, 0x8, {0x1, 0x5}}, {0x5, 0x5, {0x2, 0xfffffc00}}, {0x3, 0x0, {0x3, 0x2}}, {0x1, 0x0, {0x0, 0x4}}, {0x7, 0x9, {0x2, 0x4ed3}}, {0x6, 0x7, {0x0, 0x3}}, {0xca8, 0x2, {0x3, 0xfffffffc}}, {0x7, 0xbfe, {0x0, 0xe}}, {0x5b, 0x0, {0x0, 0x9}}, {0x8, 0x5, {0x3, 0x50c0}}, {0x32, 0x6, {0x2, 0x3ff}}, {0x7f, 0xfc01, {0x2, 0x640a}}, {0x81, 0xe, {0x0, 0x10}}, {0xb6, 0x0, {0x0, 0x6c000}}, {0x3, 0x6, {0x1, 0x4}}, {0x7f, 0x7, {0x1, 0x1}}, {0x8001, 0x9, {0x1, 0xfffffffa}}, {0xb75b, 0x200, {0x2, 0x5}}, {0x0, 0x2, {0x3, 0x7ba}}, {0x5, 0x6, {0x0, 0x7}}, {0x4, 0xf2, {0x2, 0x7}}, {0x3, 0x0, {0x1, 0x859}}, {0x1, 0x8, {0x2, 0xfffffff7}}, {0x6, 0x3, {0x2, 0x2}}, {0xaf7a, 0xf, {0x3, 0x9}}, {0x7, 0xf, {0x3, 0x80000000}}, {0x8000, 0x8, {0x0, 0x3}}, {0xf933, 0x82e, {0x1, 0x7}}, {0x8, 0x565f, {0x3, 0x9}}, {0x0, 0x1, {0x3, 0x9}}, {0x6, 0x0, {0x1, 0x3}}, {0x8, 0x8, {0x3, 0x52e}}, {0x8, 0xfeff, {0x7a72efad66f1b6a1, 0x1}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 2m42.500413045s ago: executing program 4 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x600000) accept$packet(r1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x25, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r5, @ANYBLOB="0000000200000000b708000002000044619f923ec1d053923a19007b8af8ff00000000bfa200000000000007020000f8ffff030003000008000000b70400bf91000000000000b7020000020000008500000084000000b7000000009fec97166a66dd6f9b8f0bf154bd96993cc2b051b792555786c5891bcf3f5436d4e172a64c53904013cd1867f9782cfc00"/152], &(0x7f0000004540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25df9bfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) 2m26.659996655s ago: executing program 33 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25df9bfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) 2m26.261143836s ago: executing program 34 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x600000) accept$packet(r1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x25, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r5, @ANYBLOB="0000000200000000b708000002000044619f923ec1d053923a19007b8af8ff00000000bfa200000000000007020000f8ffff030003000008000000b70400bf91000000000000b7020000020000008500000084000000b7000000009fec97166a66dd6f9b8f0bf154bd96993cc2b051b792555786c5891bcf3f5436d4e172a64c53904013cd1867f9782cfc00"/152], &(0x7f0000004540)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25df9bfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x88855}, 0x20006004) 16.414478935s ago: executing program 6 (id=1949): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r1, @ANYBLOB="1c005e80080005006d08fbff070006"], 0x38}}, 0x0) (fail_nth: 4) 15.277375999s ago: executing program 6 (id=1952): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffe) close(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) 11.801236557s ago: executing program 6 (id=1958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff6d}, 0x94) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x8, 0x800007}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x6044891}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r2, 0x0, 0x4040) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x2, 0x2, @time={0x367f, 0xff7ffffd}, {}, {0xae}, @result={0xfffffffa, 0x2}}], 0x1c) read$hidraw(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) read$rfkill(0xffffffffffffffff, &(0x7f00000002c0), 0x8) socket(0x10, 0x2, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r3], 0x0) 11.228434646s ago: executing program 5 (id=1961): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = dup2(r0, r0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)=0x2) socket$xdp(0x2c, 0x3, 0x0) read$FUSE(r5, 0x0, 0x0) 9.711912152s ago: executing program 5 (id=1966): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffe) close(r3) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000340)=0x1) 8.274053233s ago: executing program 6 (id=1970): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xf, &(0x7f0000000000)) mkdir(0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002000000000000"], 0xa0}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000640)='\xcd\xff\xea\x1f\x02\x00E\x88-\xb0\xbc`(\xe8\x92\xe9\xf9\xd0\x803\x05\x00R\xac\x15\xfb\x8e\x7fx,\x9c\x00\x00\x00\x90\xc7\x11U\xdcd\\\xdc\x1b+\tq\xf4\xbe\x99\xd6\x11;\x9b\xc4\xad\xf73|J\x96\xf4L\xfb\xf2\xba\xe5\xdd0 }\x9bdq\xa9X\xed\xef\xf2\t\xafN\x80\xe2\x14\xbc\xc3Le\xe2p.&\x00\x10N\xe6\xd5\xfb]\xe4\x9a\x83FS\xc4&\xf3T\xa8\x8b\xb5L\xafx\x9cco&?\xb1\x95?z\xd3\xdb.7\xc1\xc8b\xe9|\xaaM\x04+*\x18\x86!:\x7fp\xf1\xacsPxx \xf3\x14w\xb6\x8e\xae\xa3\x11\x02\xd0N\xfcu\xc7\xb0\nr\x95l\xc7\xbc\x0e;\xcb\xfbn\x03\x935\xfb\xf8Z\xd0V-,\xf1\xea\r\xef\xfe_\xee\xb1\xc0\x06\xbegmU_*\xd7\x1f\x00'/219, 0x2) pwritev(r8, &(0x7f0000000080)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x3, 0x0) sendfile(r7, r8, 0x0, 0x8000fb00) 8.120091964s ago: executing program 2 (id=1971): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0xc000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'lo\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4050) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2843, 0x0) vmsplice(r4, 0x0, 0x0, 0x8) r5 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0xc4a9, 0x0, 0xa}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r8 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r5, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 7.16666641s ago: executing program 5 (id=1972): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x109881, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) 6.864355919s ago: executing program 5 (id=1973): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6.80721529s ago: executing program 5 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a0b040000000000000000020000002c000480280001801100063aef86d884e233df28c16d00b4a70100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000001400000011"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0xa621}) socket$kcm(0x2, 0xa, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe567b0a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) close_range(r6, 0xffffffffffffffff, 0x0) 6.762011296s ago: executing program 6 (id=1975): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4f23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setresuid(0x0, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000002900"], 0x18}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000300)={&(0x7f0000000500)=[{0x6, 0x10, 0x3, &(0x7f0000000180)="968c1e"}, {0x5, 0x400, 0x0, 0x0}], 0x2}) 5.82714387s ago: executing program 5 (id=1976): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0xffffffe4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc00000001090212"], 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) getpid() r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x2, 0x10) 5.81738353s ago: executing program 7 (id=1977): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004094}, 0x20048050) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 5.520305329s ago: executing program 7 (id=1979): r0 = syz_open_dev$media(&(0x7f0000000040), 0x0, 0x200) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fb3edc7b2b02f94cf63f94c4b69a00800b00010000006d0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f0000000240)) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_open_procfs$pagemap(0x0, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x4d, 0x4, 0x0, 0x0, 0x0) fcntl$setown(r5, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x5c) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) 5.20242353s ago: executing program 1 (id=1980): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e22, 0x8, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x11, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.814855757s ago: executing program 2 (id=1981): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)="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", 0x681}], 0x1}, 0x24000008) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0x0, 0x41ff7484, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x44, r3, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001000)={0x56c, r3, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x80}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x614}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x34d, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @device_b, @from_mac=@broadcast, {0x9, 0xd89}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x1010, 0x2, @device_b, {0x0, 0x7, @random="372a95eb2540c8"}, @val={0x1, 0x5, [{0x72}, {0x36, 0x1}, {0x6c, 0x1}, {0x1b, 0x1}, {0x18}]}, @void, [{0xdd, 0x2e, "b8a44094c052a5d9861703cddca0206cdd399f5544b692701d3e0de542145cd4ee286fd48448928aedfdef1fe7c0"}, {0xdd, 0x58, "044c585b07ad4b9f4f6047d73ce23fe8ec7d9be0f4e2eeb361cff822e49f76ab0550b619bbcb3c193f20bf0a516988c693db6dcd03407861a54a59bdf3ea35671e63282122d2dd2962909cf48634372888b0a8e4ef2e9938"}, {0xdd, 0xbe, "588d2e658c26b9dcd0f840f4e4b7ffda11426d064ba67578b229b14bebbce822daf9d59dc71b1c86cd4fe8173cffd368f09b09b73dcb446662276ccdb2f0eb84b923ee7d22b47f032e6c8e71e16f19f328d1d59c56ce93c582ae0e86503dc33e8d723982ed13a8b4fc658453b54c553e8b0fe8511b774a32803f4f2fbf4429c469c8864b17c6adfa538975f66df5cb979a8329cd62cf17612017ca1e656c0481ea294b2c2fdcdf946417b9e55bbd76d510676de2b5701d48a0678a35f34f"}, {0xdd, 0xf7, "bcbb0e3b89a1847fb64ac8d71943cdbd431f8b2cdffb22b0d18752e0294e51b8137d3d3916c43f867a19753cde7d1b6d0aa880f2ad89f0c0e70eb3ab06e6a320e9a5c457f0a508c6d5f00c8b605ca3c3094b201c225c034facee3b4ecee7df9ee158a507d8955c458d177b9c63ef691ab8f808dbb503206f19425baa037e50c5652c1481c369c8c693c98808a5db79eb211143c92a61dbea8b10b1845b53b3192f886eeccb4e6522f8952410ac6c98c29d7b4726a8c60844bd2a253fdc847fd37735291afecd2bf8eb75626a2ed7705ef2e1b7a72879c7de8c137c6c7a3c32c5d835a838cd922d3842a940a0bcf3ab325fd4839983a4ce"}, {0xdd, 0xce, "79dde47f8a6733795360b868ec398872d4edf75d5b5a840274b27c1e61d6258fd0dfdbe71f6eddb0fcc5cc3540d94342a491ed0f916614e76b66a8eb4987180506722cfe65dce60988843e06e5f76d32ad020b4dbedf02298eb0d48c85fda8c3a36e5b587e876280f7266dd876bf1be9077b6f8df131086a1f38e345625f86057921e7bdad5c04ee60273fde244242f76bbd3ba072d7f99c549d326c4eb8f52d027a0be0330619869d6a820631d42a80f569843664f58635d4156143018ed34481e0f8ce4791983b4262432e9457"}]}}, @NL80211_ATTR_FRAME={0x1b1, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="8c76cc9214db", {0x0, 0x4}}, 0x100, 0xa, @random=0x5, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x1, 0x0, {0x8, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x4}}, [{0xdd, 0xb6, "a326fdb5993d7a9b10641851590b3c47719bbdb12915c2a6eeacd721908848466dca31c9c14504ae45a336fd23ccdd79fb42589f032bb80584e00eb12f9e0c51f5a272a4dec05c7dbef445423a3223a802b962d6aea33c523aa3bfc78656dec265cec35063d5454e2b3dacaabe898ea54fe0e5d062e9ff8aa116f866639ead9a88806aa3630ada47f2b1365e272bc31cedc0cd2ecf9eb2a590392ecc021634451f83503f3a86948d096157c531b40d706bd8a6eafcbd"}, {0xdd, 0xb9, "08695c4b7d5e5fb633e14ab3f683cf789f9397d7e4d3a0eb2360f0871bb904987741b42856feffc8897803dd385ad740e3df5e0a659701e402630441a2598f34da9aeb144af0afbbdb4443736942459c2978618ec12ebf56901e5a11f3c27d0fc3e036b32f30cb185177a4d097f372a3b3780c6269cc8aebffb8405b275aec1aac4c2147aae4e27f6e6e5604df11c18e091f1496270b3efef7adbf63bec2850b6ec9d1c838dbe74b7014ba553506bc496011983e4671c7cae1"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x180}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x5, 0x3, 0xb17e, 0x2]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x56c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) setrlimit(0x9, &(0x7f0000000000)={0xfffffffffffffffd, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.416427142s ago: executing program 2 (id=1982): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x4f, 0x2, 0x2, "3258ae1e00307c55fe0700091e0000002000", 0x48524742}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000003c0)={0x390000, 0x7, 0x400, r5, 0x0, &(0x7f0000000380)={0x990a6c, 0x0, '\x00', @string=&(0x7f0000000340)=0x9}}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=@framed={{0x76, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x68}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x11}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, 0x0, 0x4018000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 3.474638471s ago: executing program 2 (id=1983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0xffffffffffffffce, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x800, 0x0, 0x3, 0x1}, 0x20) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x4801, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_open_procfs$userns(0x0, &(0x7f0000000580)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r5}) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x8936, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r3, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000180), 0x0, 0x162, &(0x7f00000001c0)={0x0, 0x989680}) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) 3.412034465s ago: executing program 7 (id=1984): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24) (async, rerun: 64) r1 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x18, 0x1406, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) (async) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a"], 0x0) (async, rerun: 32) getpid() (async, rerun: 32) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x98e86, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x89}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000d1}, 0x4004804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd2(0x4001, 0x800) r8 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000040)={r8, 0x7, 0x2, r7}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r7, 0x8, 0x2, r8}) r9 = eventfd(0xfffffffc) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f00000001c0)={r9, 0x8, 0x1, r7}) (async) dup3(r2, r0, 0x0) 2.784135521s ago: executing program 1 (id=1985): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000002"], 0x50) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.722898614s ago: executing program 7 (id=1986): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffe) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16, @ANYBLOB="00012cbd7000fddbdf25040000000cb3038008000100040000006c0004803c0007800800040001000000080002004b33000008000200fdffffff08000200ff0f0000080003000008000008000200080000000800e9ff0a0000002c0007800800030001000000080003000200000008000200090000000800040004000000080001000f0000004c000380080003000900000008000008000300dd8c000008000200050000000800030001010000080002005d00000008000300ff0f00000800020072070000", @ANYRESOCT=r5], 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008011) close(r3) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r7 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000240)=r7) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r7}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000340)=0x1) 2.633567014s ago: executing program 1 (id=1987): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e001"], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x90) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)='\x00', 0xfffffffffffffffe) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r6, @ANYBLOB="00012cbd7000fddbdf25040000000cb3038008000100040000006c0004803c0007800800040001000000080002004b33000008000200fdffffff08000200ff0f0000080003000008000008000200080000000800e9ff0a0000002c0007800800030001000000080003000200000008000200090000000800040004000000080001000f0000004c000380080003000900000008000008000300dd8c000008000200050000000800030001010000080002005d00000008000300ff0f00000800020072070000", @ANYRESOCT=r5], 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008011) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) r8 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r7, 0x4004af07, &(0x7f0000000240)=r8) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f0000000040)={0x1, r8}) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x5, 0x5, 0x0, 0xb71}, {0x7db, 0x3, 0x3, 0xd}, {0x1, 0x8, 0x7, 0x37107c5e}, {0x7f, 0x8, 0x2}]}, 0x10) 2.564968949s ago: executing program 6 (id=1988): bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) syz_emit_ethernet(0x6e, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4008041, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000010000114000000000000000000000000fdad91f41db77d0e804c496d762ec4c239d9bc62d8c0cec5413e4dc6423d21bdaec3d0d03becbadd245a8703d41200351e85deae84a13d9d743db13017aebfcea3d913f539f741c45dc652bff0038243ce9c74af35358e8dae62412b6a756a307b9919073ca21fbe57b166314e57bb009f6d4da6ecf6db777301bbfc91e5dd1266547a3d2a4851ad4a1f5a5555fab666a4b9c59f1462a67cc6273cf010949fca3e9688bf4c6087f2b47b75321c014968", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c0002800800", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x4c}}, 0x884) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 2.16507819s ago: executing program 2 (id=1989): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x7, 0x100}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 1.068482161s ago: executing program 2 (id=1990): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$int_in(r0, 0x5421, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) close(r5) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, 0x0, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301010000020000000000000000000c0002"], 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000100)=@l={0x92, 0xf, 0xd0, 0x19, 0x1, 0x38, 0xfff8}) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@tracing={0xffffffffffffffff, 0x81f6}}, 0x20) 1.004171084s ago: executing program 1 (id=1991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r1, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7}}], 0x18}, 0x40812) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a0b040000000000000000020000002c000480280001801100063aef86d884e233df28c16d00b4a70100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000001400000011"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'wg1\x00', 0xa621}) socket$kcm(0x2, 0xa, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r6, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2a71f0d3fe13be00", "3d0e00000000003efe567b0a5b857206", "47eb0b4a89ffff000000000000c94742"}, 0x4, 0x4}) close_range(r5, 0xffffffffffffffff, 0x0) 437.637861ms ago: executing program 1 (id=1992): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) syz_emit_ethernet(0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="aa7d0a068a18f1f8463b0f322c9221aaaaaaaaaabbbbbbbbbbbb86dd60c0280000202b00fc020000000000000000000000000000fe8000000000000000000000000000aa2b02020900000000fe80004cee2a0556000000000000000000000000370000002114d91b4be2c5f8a41af21321eaf747bc99a3c2d7b7124baa07a84404b1cffb6d6c10b2ff31ce1008d0eb8e598c1618cd96345b1a530124c6db9a8328e3"], 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="d2ffffff", @ANYRES16=r3, @ANYRES8=0x0], 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x0) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRESDEC=0x0, @ANYRES16=r6, @ANYRES16=r5], 0x44}}, 0x4014) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r7, 0x4147, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="fbff1000000083bc763bc4d51a6ccafefa26a916cf246b93c583985c57c85099e2"], 0x0, 0x0, 0x0, 0x0}) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 164.200973ms ago: executing program 1 (id=1993): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) flock(r0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 64) socket$unix(0x1, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) (async) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000540)=@gcm_256={{0x303}, "c4050000e600", "5b1ca27242814e2574782afc92f336e9adfbeefae84568d75ad5363fd38b1147", "d020d1bf", "e6802a20126357d3"}, 0x38) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) capget(&(0x7f0000000080)={0x0, r4}, &(0x7f00000000c0)={0x3, 0x7, 0x1ff, 0x4, 0x5, 0x6}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'macvtap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) 71.40329ms ago: executing program 7 (id=1994): r0 = socket(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) rseq(0xfffffffffffffffe, 0xfffffffffffffecd, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500090002000000", 0x24) 0s ago: executing program 7 (id=1995): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = eventfd2(0x8, 0x0) ppoll(&(0x7f0000000500)=[{r1, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xf, &(0x7f0000000000)) mkdir(0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc0100000000000000000000ea2fa43c000000000000000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002000000000000"], 0xa0}}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = memfd_create(&(0x7f0000000640)='\xcd\xff\xea\x1f\x02\x00E\x88-\xb0\xbc`(\xe8\x92\xe9\xf9\xd0\x803\x05\x00R\xac\x15\xfb\x8e\x7fx,\x9c\x00\x00\x00\x90\xc7\x11U\xdcd\\\xdc\x1b+\tq\xf4\xbe\x99\xd6\x11;\x9b\xc4\xad\xf73|J\x96\xf4L\xfb\xf2\xba\xe5\xdd0 }\x9bdq\xa9X\xed\xef\xf2\t\xafN\x80\xe2\x14\xbc\xc3Le\xe2p.&\x00\x10N\xe6\xd5\xfb]\xe4\x9a\x83FS\xc4&\xf3T\xa8\x8b\xb5L\xafx\x9cco&?\xb1\x95?z\xd3\xdb.7\xc1\xc8b\xe9|\xaaM\x04+*\x18\x86!:\x7fp\xf1\xacsPxx \xf3\x14w\xb6\x8e\xae\xa3\x11\x02\xd0N\xfcu\xc7\xb0\nr\x95l\xc7\xbc\x0e;\xcb\xfbn\x03\x935\xfb\xf8Z\xd0V-,\xf1\xea\r\xef\xfe_\xee\xb1\xc0\x06\xbegmU_*\xd7\x1f\x00'/219, 0x2) sendmsg$inet(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="c8", 0x1}], 0x1}, 0x800) sendfile(r7, r8, 0x0, 0x8000fb00) kernel console output (not intermixed with test programs): device string! [ 498.392609][T11862] [ 498.392820][T11862] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 498.454633][T11862] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 498.462134][T11862] UDF-fs: Scanning with blocksize 512 failed [ 498.468531][T11862] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 498.476213][T11862] UDF-fs: Scanning with blocksize 1024 failed [ 498.482440][T11862] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 498.489920][T11862] UDF-fs: Scanning with blocksize 2048 failed [ 498.496157][T11862] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 498.503589][T11862] UDF-fs: Scanning with blocksize 4096 failed [ 498.540935][T11864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1601'. [ 498.562916][T11864] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.871868][T11837] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1598'. [ 499.528098][ T29] ssu100 8-1:0.0: probe with driver ssu100 failed with error -71 [ 499.544520][ T29] usb 8-1: USB disconnect, device number 2 [ 500.551193][ T30] audit: type=1326 audit(2000000133.596:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 500.713416][T11886] lo speed is unknown, defaulting to 1000 [ 501.112735][ T30] audit: type=1326 audit(2000000133.596:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 501.192437][T11885] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 501.373205][ T30] audit: type=1326 audit(2000000133.596:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 501.415672][ T30] audit: type=1326 audit(2000000133.596:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 501.441883][ T30] audit: type=1326 audit(2000000133.596:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 501.884302][ T30] audit: type=1326 audit(2000000133.605:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 501.967174][ T30] audit: type=1326 audit(2000000133.605:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 502.252808][ T5914] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 502.274032][ T30] audit: type=1326 audit(2000000133.605:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 503.318919][ T30] audit: type=1326 audit(2000000133.605:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 503.347373][ T30] audit: type=1326 audit(2000000133.605:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 503.503571][ T30] audit: type=1326 audit(2000000133.605:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 503.659514][ T5914] usb 8-1: device descriptor read/64, error -71 [ 503.688173][ T30] audit: type=1326 audit(2000000133.605:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 504.124391][ T30] audit: type=1326 audit(2000000133.605:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 504.167000][ T30] audit: type=1326 audit(2000000133.614:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 504.237355][ T30] audit: type=1326 audit(2000000133.614:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11882 comm="syz.1.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe0df19c799 code=0x7ffc0000 [ 504.266752][ T5914] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 504.408873][T11911] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 504.426830][ T5914] usb 8-1: device descriptor read/64, error -71 [ 504.655423][ T5914] usb usb8-port1: attempt power cycle [ 505.661913][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 505.670985][T11924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 505.680366][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 505.689346][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1616'. [ 506.806372][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 507.301108][ T24] usb 2-1: device descriptor read/64, error -71 [ 507.354909][ T5914] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 507.504228][ T5914] usb 8-1: device descriptor read/64, error -71 [ 507.611012][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 507.984604][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.095164][ T5914] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 508.151160][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 508.151194][ T30] audit: type=1400 audit(2000000140.736:2146): avc: denied { bind } for pid=11963 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 508.151984][T11965] FAULT_INJECTION: forcing a failure. [ 508.151984][T11965] name failslab, interval 1, probability 0, space 0, times 0 [ 508.157482][ T30] audit: type=1400 audit(2000000140.736:2147): avc: denied { connect } for pid=11963 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 508.210803][T11965] CPU: 0 UID: 0 PID: 11965 Comm: syz.2.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.210833][T11965] Tainted: [L]=SOFTLOCKUP [ 508.210839][T11965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.210849][T11965] Call Trace: [ 508.210856][T11965] [ 508.210863][T11965] dump_stack_lvl+0x100/0x190 [ 508.210896][T11965] should_fail_ex.cold+0x5/0xa [ 508.210919][T11965] should_failslab+0xc2/0x120 [ 508.210937][T11965] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 508.210960][T11965] ? kvm_vm_ioctl+0x390/0x4080 [ 508.210982][T11965] ? kasan_save_stack+0x30/0x50 [ 508.211006][T11965] ? vmx_vcpu_precreate+0xc8/0x220 [ 508.211028][T11965] kvm_vm_ioctl+0x390/0x4080 [ 508.211058][T11965] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 508.211092][T11965] ? tomoyo_path_number_perm+0x46d/0x580 [ 508.211115][T11965] ? kasan_quarantine_put+0x104/0x240 [ 508.211144][T11965] ? lockdep_hardirqs_on+0x78/0x100 [ 508.211169][T11965] ? find_held_lock+0x2b/0x80 [ 508.211190][T11965] ? tomoyo_path_number_perm+0x28f/0x580 [ 508.211210][T11965] ? tomoyo_path_number_perm+0x28f/0x580 [ 508.211234][T11965] ? tomoyo_path_number_perm+0x188/0x580 [ 508.211256][T11965] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.211287][T11965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 508.211312][T11965] ? do_vfs_ioctl+0x226/0x13e0 [ 508.211338][T11965] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 508.211363][T11965] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 508.211394][T11965] ? __fget_files+0x215/0x3d0 [ 508.211423][T11965] ? hook_file_ioctl_common+0x146/0x410 [ 508.211457][T11965] ? selinux_file_ioctl+0x139/0x290 [ 508.211479][T11965] ? selinux_file_ioctl+0xb4/0x290 [ 508.211503][T11965] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 508.211523][T11965] __x64_sys_ioctl+0x18e/0x210 [ 508.211550][T11965] do_syscall_64+0x106/0xf80 [ 508.211571][T11965] ? clear_bhb_loop+0x40/0x90 [ 508.211592][T11965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.211610][T11965] RIP: 0033:0x7ff2a639c799 [ 508.211625][T11965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.211638][T11965] RSP: 002b:00007ff2a45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.211654][T11965] RAX: ffffffffffffffda RBX: 00007ff2a6616090 RCX: 00007ff2a639c799 [ 508.211664][T11965] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004 [ 508.211673][T11965] RBP: 00007ff2a45d5090 R08: 0000000000000000 R09: 0000000000000000 [ 508.211683][T11965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.211692][T11965] R13: 00007ff2a6616128 R14: 00007ff2a6616090 R15: 00007ffc4ab43618 [ 508.211717][T11965] [ 508.492695][ T5914] usb 8-1: device descriptor read/64, error -71 [ 508.553902][ T30] audit: type=1400 audit(2000000140.736:2148): avc: denied { write } for pid=11963 comm="syz.2.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 508.764818][ T5914] usb usb8-port1: attempt power cycle [ 508.935477][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1629'. [ 508.947416][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1629'. [ 509.960289][ T5914] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 510.252920][ T5914] usb 8-1: device descriptor read/8, error -71 [ 510.486625][T11982] FAULT_INJECTION: forcing a failure. [ 510.486625][T11982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.505796][T11982] CPU: 0 UID: 0 PID: 11982 Comm: syz.6.1630 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.505817][T11982] Tainted: [L]=SOFTLOCKUP [ 510.505821][T11982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.505828][T11982] Call Trace: [ 510.505831][T11982] [ 510.505835][T11982] dump_stack_lvl+0x100/0x190 [ 510.505857][T11982] should_fail_ex.cold+0x5/0xa [ 510.505873][T11982] _copy_from_user+0x2e/0xd0 [ 510.505892][T11982] comedi_unlocked_ioctl+0x44d/0x3310 [ 510.505905][T11982] ? tomoyo_path_number_perm+0x188/0x580 [ 510.505928][T11982] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 510.505943][T11982] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.505960][T11982] ? do_vfs_ioctl+0x226/0x13e0 [ 510.505977][T11982] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 510.505993][T11982] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 510.506018][T11982] ? selinux_file_ioctl+0x139/0x290 [ 510.506032][T11982] ? selinux_file_ioctl+0xb4/0x290 [ 510.506048][T11982] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 510.506060][T11982] __x64_sys_ioctl+0x18e/0x210 [ 510.506077][T11982] do_syscall_64+0x106/0xf80 [ 510.506091][T11982] ? clear_bhb_loop+0x40/0x90 [ 510.506105][T11982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.506116][T11982] RIP: 0033:0x7ff686f9c799 [ 510.506125][T11982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.506136][T11982] RSP: 002b:00007ff687ea3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.506147][T11982] RAX: ffffffffffffffda RBX: 00007ff687215fa0 RCX: 00007ff686f9c799 [ 510.506154][T11982] RDX: 0000200000000000 RSI: 00000000c02c640e RDI: 0000000000000003 [ 510.506160][T11982] RBP: 00007ff687ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 510.506166][T11982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.506173][T11982] R13: 00007ff687216038 R14: 00007ff687215fa0 R15: 00007ffd62f85f98 [ 510.506187][T11982] [ 511.294513][ T5141] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 511.511578][ T5141] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 511.520644][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.536591][ T5141] usb 2-1: config 0 descriptor?? [ 511.565509][ T5141] cp210x 2-1:0.0: cp210x converter detected [ 512.281650][ T5141] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 512.309550][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1640'. [ 512.583267][ T30] audit: type=1400 audit(2000000144.722:2149): avc: denied { ioctl } for pid=12015 comm="syz.7.1640" path="/dev/ptyr2" dev="devtmpfs" ino=137 ioctlcmd=0x5404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 512.622837][ T5141] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 512.654322][ T5141] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 512.685400][ T5141] usb 2-1: cp210x converter now attached to ttyUSB0 [ 512.949206][ T5141] usb 2-1: USB disconnect, device number 33 [ 512.959661][ T5141] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 512.975620][ T5141] cp210x 2-1:0.0: device disconnected [ 513.455618][ T5141] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 513.514138][T12023] 9p: Bad value for 'rfdno' [ 513.676731][ T5141] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 513.738291][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.788119][ T5141] usb 2-1: config 0 descriptor?? [ 513.810887][ T5141] cp210x 2-1:0.0: cp210x converter detected [ 513.871738][T12032] ptrace attach of "./syz-executor exec"[12033] was attempted by "./syz-executor exec"[12032] [ 514.055112][T11986] batadv_slave_0: entered promiscuous mode [ 514.066033][T11986] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 514.091645][T11986] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1631'. [ 514.674842][ T5141] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 514.700263][ T5141] cp210x 2-1:0.0: querying part number failed [ 514.819663][ T5141] usb 2-1: cp210x converter now attached to ttyUSB0 [ 514.889739][T12014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.957989][T12014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.246295][ T5811] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 515.293055][ T30] audit: type=1400 audit(2000000147.408:2150): avc: denied { ioctl } for pid=12050 comm="syz.5.1649" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 515.353234][ T30] audit: type=1400 audit(2000000147.408:2151): avc: denied { getopt } for pid=12050 comm="syz.5.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.576196][ T5811] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.589503][ T5811] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 515.691514][ T5811] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.724125][ T5811] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 515.992482][ T5811] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 516.015111][ T5811] usb 3-1: Manufacturer: syz [ 516.027604][ T5811] usb 3-1: SerialNumber: syz [ 516.043748][T12044] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 516.328157][T12014] batadv_slave_0: left promiscuous mode [ 516.360193][T12044] ptrace attach of "./syz-executor exec"[12065] was attempted by "./syz-executor exec"[12044] [ 516.933434][ T24] usb 2-1: USB disconnect, device number 34 [ 516.972665][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 517.001585][ T24] cp210x 2-1:0.0: device disconnected [ 518.685845][ T5811] yealink 3-1:36.0: invalid payload size 1024, expected 16 [ 518.707840][T12085] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 518.718698][ T5811] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input20 [ 518.824847][T12085] overlay: ./file1 is not a directory [ 518.861271][ T30] audit: type=1400 audit(2000000150.609:2152): avc: denied { create } for pid=12084 comm="syz.7.1656" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 518.861662][ T30] audit: type=1400 audit(2000000150.609:2153): avc: denied { associate } for pid=12084 comm="syz.7.1656" name="bus" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 518.863711][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.052083][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.059127][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.066073][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.073013][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.080209][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.087114][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.094015][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.100917][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.107670][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.113527][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.120431][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.127164][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.133020][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.139914][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.146649][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.152507][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.159508][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.166245][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.172119][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.179018][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.185758][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.191621][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.198524][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.205265][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.211219][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.218138][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.224896][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.230784][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.237725][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.244486][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.250349][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.257249][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.263985][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.270029][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.276960][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.283710][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.289583][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.296903][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.303671][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.309643][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.316571][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.323311][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.329193][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.336120][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.342864][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.348739][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.355652][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.362405][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.368269][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.375269][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.382008][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.387877][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.394781][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.401517][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.407400][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.414338][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.421089][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.426984][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.433918][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.440664][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.446534][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.453435][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.460170][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.466089][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.473012][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.479757][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.485751][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.493057][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.499795][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.505656][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.512553][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.519286][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.525145][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.532060][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.538806][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.544671][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.551565][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.558307][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.564188][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.571102][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.577849][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.583734][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.590642][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.597398][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.603403][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.610305][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.617041][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.622910][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.629803][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.636547][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.642419][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.649320][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.656055][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.661948][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.668871][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.675618][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.681495][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.688454][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.695195][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.701072][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.708079][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.714831][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.720730][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.727645][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.734386][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.740371][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.747339][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.754120][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.760096][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.767127][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.773904][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.779848][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.786820][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.793588][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.799492][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.806569][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.813340][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.819860][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.826933][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.833742][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.839650][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.846589][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.853334][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.859224][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.866218][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.872985][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.878934][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.886766][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.893515][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.899412][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.906361][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.913114][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.919012][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.927891][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.934652][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.940725][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.947681][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.954431][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.960365][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.967351][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.974132][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.980147][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 519.987085][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 519.993830][ C1] yealink 3-1:36.0: unexpected response 0 [ 519.999931][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.006932][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.013683][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.019568][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.026476][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.033230][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.040217][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.047251][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.054042][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.060295][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.067265][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.074042][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.079954][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.086902][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.093666][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.099643][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.106624][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.113386][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.119283][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.126209][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.132970][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.138833][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.146454][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.153207][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.159115][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.166017][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.172755][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.178638][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.185552][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.192288][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.198160][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.205191][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.211940][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.217799][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.224716][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.231455][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.238080][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.245239][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.251984][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.257962][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.264895][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.271660][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.277588][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.284635][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.291430][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.297483][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.304476][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.311244][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.317217][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.324636][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.331425][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.337626][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.344570][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.351326][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.357229][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.364372][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.371129][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.377006][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.383948][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.390715][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.396651][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.403703][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.410468][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.416367][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.423341][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.430087][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.435984][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.442919][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.449676][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.455589][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.463494][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.470268][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.476452][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.476954][ T5141] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 520.483412][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.497543][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.503787][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.510758][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.517551][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.523476][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.530455][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.537251][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.543142][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.550149][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.556940][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.562878][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.569843][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.576618][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.582745][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.589687][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.596464][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.602388][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.609439][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.616212][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.622103][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.629170][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.635931][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.641811][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.648806][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.655573][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.661485][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.668423][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.675184][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.681074][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.688193][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.694950][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.700838][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.707767][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.714512][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.720397][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.727380][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.734141][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.740089][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.748049][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.754809][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.760768][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.767699][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.774451][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.780354][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.787314][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.794080][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.800105][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.807074][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.813835][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.819708][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.826637][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.831130][ T5141] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 520.833405][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.850011][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.857043][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.863801][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.869723][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.876669][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.883434][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.889398][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.896408][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.903190][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.909303][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.917261][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.924058][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.929999][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.936966][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.943747][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.949736][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.956688][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.963498][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.969441][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.976381][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 520.983163][ C1] yealink 3-1:36.0: unexpected response 0 [ 520.989077][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 520.996436][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.003229][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.009120][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.016141][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.022905][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.028809][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.035737][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.042511][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.048508][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.055455][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.060375][ T5141] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 521.062227][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.062437][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.072716][ T30] audit: type=1400 audit(2000000150.721:2154): avc: denied { mounton } for pid=12084 comm="syz.7.1656" path="/9/bus" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 521.078058][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.182925][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.191318][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.199537][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.206320][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.212538][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.219520][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.226552][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.233475][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.241056][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.247825][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.253839][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.260906][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.267669][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.273592][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.280533][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.287284][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.293163][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.300126][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.306869][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.312746][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.319722][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.326481][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.332400][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.339324][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.346076][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.353397][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.360607][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.367384][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.373344][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.380351][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.387128][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.393088][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.400055][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.406812][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.412735][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.419697][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.426436][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.432365][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.439319][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.446057][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.451936][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.458963][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.465712][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.471636][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.478552][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.485295][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.491183][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.498333][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.505084][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.510989][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.518229][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.524989][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.530890][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.537866][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.544611][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.550529][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.557466][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.564223][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.577423][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.584728][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.591509][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.597482][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.605389][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.612176][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.612667][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 521.626246][ T5811] usb 3-1: USB disconnect, device number 38 [ 521.632254][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 521.632280][ C1] yealink 3-1:36.0: unexpected response 0 [ 521.632304][ C1] yealink 3-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 521.659974][ T5141] usb 8-1: config 1 interface 0 has no altsetting 0 [ 521.695274][ T30] audit: type=1400 audit(2000000151.666:2155): avc: denied { watch watch_reads } for pid=12084 comm="syz.7.1656" path="/9/bus" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 521.707687][ T5141] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 521.929480][ T5141] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.938908][ T5141] usb 8-1: Product: syz [ 521.943168][ T5141] usb 8-1: Manufacturer: syz [ 521.951280][ T5141] usb 8-1: SerialNumber: syz [ 522.015153][ T5141] usb 8-1: can't set config #1, error -71 [ 522.041636][ T5141] usb 8-1: USB disconnect, device number 10 [ 522.103304][ T30] audit: type=1400 audit(2000000153.790:2156): avc: denied { rmdir } for pid=11661 comm="syz-executor" name="bus" dev="tmpfs" ino=65 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 522.432647][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1664'. [ 522.771798][ T30] audit: type=1400 audit(2000000154.361:2157): avc: denied { setopt } for pid=12099 comm="syz.5.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 523.408170][T12125] 9p: Bad value for 'rfdno' [ 524.096764][T12135] netlink: 'syz.5.1667': attribute type 1 has an invalid length. [ 524.124852][T12135] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 524.158305][T12135] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 524.284612][T12143] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1667'. [ 524.299965][T12142] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1669'. [ 524.324188][T12142] netlink: 'syz.6.1669': attribute type 9 has an invalid length. [ 524.332136][T12143] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1667'. [ 524.361878][T12142] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1669'. [ 524.441841][T12139] bond1: (slave gretap1): making interface the new active one [ 524.552993][T12139] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 524.814356][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1670'. [ 524.825908][T12155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 528.245969][ T5914] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 528.495624][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 528.510103][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.531613][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 528.576214][ T5914] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 528.629084][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.666644][ T5914] usb 2-1: config 0 descriptor?? [ 528.687144][T12178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.766491][T12194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1683'. [ 528.779099][T12194] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 530.400314][T12206] netlink: 'syz.7.1687': attribute type 1 has an invalid length. [ 530.458249][ T5811] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 530.580034][T12206] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1687'. [ 530.599743][T12206] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1687'. [ 530.641709][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 530.658362][ T5811] usb 7-1: unable to get BOS descriptor or descriptor too short [ 530.672836][ T5811] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 530.683839][ T5811] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 530.697772][ T5811] usb 7-1: SerialNumber: ર볠ã«ã’箶ꇶ鬵íŽå¼è´”侑᧧딽둞醰ᩀ舎疳ץ跱䗂Ảற줋槺엫뺕뵧å³æ›ì«‰é½¤é±”喺猪í’觭䄚慉赎㶧ᱨ᩟톕꒸䱨瑿ꅺ룹ᯒ輓çºçµƒî§èˆá‚¥ [ 530.965587][ T5811] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 531.000417][ T5811] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 531.039101][ T5811] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 531.062588][ T5811] usb 7-1: media controller created [ 531.160471][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 531.258711][ T5914] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 531.273318][ T5914] usb 2-1: USB disconnect, device number 35 [ 531.336388][ T5811] zl10353_read_register: readreg error (reg=127, ret==0) [ 532.410574][ T5811] usb 7-1: USB disconnect, device number 2 [ 532.933918][ T5811] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 533.200673][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.208654][ T5811] usb 2-1: too many configurations: 117, using maximum allowed: 8 [ 533.228880][ T5811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 533.237004][ T5811] usb 2-1: can't read configurations, error -61 [ 533.383412][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 533.407131][ T5811] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 533.657953][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.668284][ T5811] usb 2-1: too many configurations: 117, using maximum allowed: 8 [ 533.935779][ T5811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 533.950003][ T5811] usb 2-1: can't read configurations, error -61 [ 533.965924][ T5811] usb usb2-port1: attempt power cycle [ 534.447695][T12250] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 534.456020][T12252] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 534.472908][T12252] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 534.475799][ T5811] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 534.496460][T12250] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 534.510340][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 534.523070][ T5811] usb 2-1: too many configurations: 117, using maximum allowed: 8 [ 534.550846][ T5811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 534.570268][ T5811] usb 2-1: can't read configurations, error -61 [ 534.599249][T12252] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 534.619979][T12252] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 534.626665][T12250] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 534.639902][T12252] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 534.651931][T12250] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 534.662617][T12252] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 534.687346][T12250] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 534.694389][T12250] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 534.801269][ T5811] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 534.831298][T12263] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 534.832148][ T5811] usb 2-1: unable to get BOS descriptor or descriptor too short [ 534.850813][ T5811] usb 2-1: too many configurations: 117, using maximum allowed: 8 [ 534.875636][ T5811] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 534.886344][ T5811] usb 2-1: can't read configurations, error -61 [ 534.888661][T12263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.893580][ T5811] usb usb2-port1: unable to enumerate USB device [ 534.971416][T12269] bond2: (slave gretap2): making interface the new active one [ 534.981070][T12269] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 537.142608][ T30] audit: type=1400 audit(2000000167.172:2158): avc: denied { mount } for pid=12294 comm="syz.6.1712" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 537.165074][ T30] audit: type=1400 audit(2000000167.172:2159): avc: denied { mounton } for pid=12294 comm="syz.6.1712" path="/30/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 537.563958][ T5881] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 537.863182][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 537.880970][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.995073][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 538.021727][ T5881] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 538.043325][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.061653][ T5881] usb 2-1: Product: syz [ 538.071773][ T5881] usb 2-1: Manufacturer: syz [ 538.082978][ T5881] usb 2-1: SerialNumber: syz [ 538.098728][ T5881] usb 2-1: config 0 descriptor?? [ 538.122207][ T5881] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 538.233109][ T30] audit: type=1400 audit(2000000168.885:2160): avc: denied { unmount } for pid=11656 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 538.379547][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.482613][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.669587][T12321] fuse: Bad value for 'fd' [ 538.722976][ T5881] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 538.755564][ T5881] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 539.251275][ T5881] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 539.273436][ T5881] usb 2-1: USB disconnect, device number 40 [ 540.145337][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 540.620211][ T793] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 540.630959][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 540.645275][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 540.656884][ T10] usb 6-1: config 0 has no interface number 0 [ 540.695709][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 540.704957][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.757825][ T10] usb 6-1: Product: syz [ 540.773235][ T10] usb 6-1: Manufacturer: syz [ 540.829248][ T10] usb 6-1: SerialNumber: syz [ 540.834809][ T793] usb 2-1: unable to get BOS descriptor or descriptor too short [ 540.910419][ T793] usb 2-1: config 74 has an invalid interface number: 240 but max is 0 [ 540.964031][ T10] usb 6-1: config 0 descriptor?? [ 540.973699][ T793] usb 2-1: config 74 has no interface number 0 [ 540.983609][ T793] usb 2-1: config 74 interface 240 has no altsetting 0 [ 541.090874][ T793] usb 2-1: string descriptor 0 read error: -22 [ 541.097169][ T793] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 541.106349][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.141618][ T793] net1080 2-1:74.240: probe with driver net1080 failed with error -22 [ 541.529064][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 541.550780][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 542.305713][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 542.737800][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 542.755955][ T10] usb 6-1: USB disconnect, device number 8 [ 543.385815][ T5919] usb 2-1: USB disconnect, device number 41 [ 543.562488][ T30] audit: type=1400 audit(2000000173.872:2161): avc: denied { getopt } for pid=12381 comm="syz.1.1734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 545.602812][T12407] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 546.928170][ T793] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 547.519632][ T793] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.562001][ T793] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 547.571119][ T793] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 547.580283][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.598594][ T793] usb 7-1: config 0 descriptor?? [ 547.609292][ T793] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 547.616094][ T793] dvb-usb: bulk message failed: -22 (3/0) [ 548.000474][ T793] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 548.052123][ T793] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 548.080537][ T793] usb 7-1: media controller created [ 548.401868][T12433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1748'. [ 548.892136][ T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 548.927634][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1748'. [ 548.938324][ T793] dvb-usb: bulk message failed: -22 (6/0) [ 548.944397][ T793] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 548.986407][ T793] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input21 [ 549.004185][T12440] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 549.175204][ T793] dvb-usb: schedule remote query interval to 150 msecs. [ 549.196616][ T793] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 549.514847][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 549.520722][ T10] dvb-usb: error while querying for an remote control event. [ 549.651565][ T793] usb 7-1: USB disconnect, device number 3 [ 549.710102][ T793] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 550.609848][T12466] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1758'. [ 550.619679][T12466] netlink: 'syz.2.1758': attribute type 9 has an invalid length. [ 550.632796][T12466] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1758'. [ 550.665682][ T793] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 550.831594][T12475] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 550.836670][T12470] lo speed is unknown, defaulting to 1000 [ 550.877959][ T793] usb 8-1: Using ep0 maxpacket: 32 [ 550.893593][ T793] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.904130][ T793] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.913805][T12475] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 550.931658][ T793] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 550.942407][ T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.953135][T12475] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 550.965943][ T793] usb 8-1: Product: syz [ 550.972754][ T793] usb 8-1: Manufacturer: syz [ 551.011971][T12478] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1761'. [ 551.034165][T12478] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1761'. [ 551.049901][ T793] usb 8-1: SerialNumber: syz [ 551.062033][ T793] usb 8-1: config 0 descriptor?? [ 551.692209][ T793] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 551.746134][T12490] kvm: pic: non byte read [ 551.750812][T12490] kvm: pic: non byte read [ 551.778490][T12490] kvm: pic: non byte read [ 551.782966][T12490] kvm: pic: non byte read [ 551.816641][T12490] kvm: pic: non byte read [ 551.865613][ T793] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 551.886017][ T793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.901578][ T793] usb 6-1: Product: syz [ 551.912808][ T793] usb 6-1: Manufacturer: syz [ 551.918146][ T793] usb 6-1: SerialNumber: syz [ 551.930079][ T793] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.946437][ T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 552.618123][ T5914] usb 6-1: USB disconnect, device number 9 [ 552.767459][ T30] audit: type=1400 audit(2000000182.398:2162): avc: denied { append } for pid=12505 comm="syz.1.1769" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 553.315397][ T10] usb 6-1: Service connection timeout for: 256 [ 553.329442][ T10] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 553.343168][ T10] ath9k_htc: Failed to initialize the device [ 553.351814][ T5914] usb 6-1: ath9k_htc: USB layer deinitialized [ 553.456790][T12515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1770'. [ 553.470480][T12515] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 553.788307][ T5919] usb 8-1: USB disconnect, device number 11 [ 554.202145][ T5919] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 554.378042][ T5919] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 554.387303][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.399247][ T5919] usb 6-1: config 0 descriptor?? [ 554.413201][T12528] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1774'. [ 554.811609][ T5919] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 555.030832][T12521] fuse: Bad value for 'fd' [ 555.165370][T12521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.620603][T12521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.647764][ T5919] [drm:udl_init] *ERROR* Selecting channel failed [ 555.691681][ T5919] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 555.703827][ T5919] [drm] Initialized udl on minor 2 [ 555.720976][ T5919] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.735512][ T5919] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 555.756708][ T29] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 555.768549][ T5919] usb 6-1: USB disconnect, device number 10 [ 555.777583][ T29] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 555.971181][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 556.756203][ T5919] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 556.931724][T12563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1783'. [ 556.940961][T12563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1783'. [ 556.992130][ T5919] usb 7-1: device descriptor read/64, error -71 [ 557.044747][ T5811] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 557.783106][ T5919] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 557.814093][ T5811] usb 6-1: device descriptor read/64, error -71 [ 557.958625][ T5919] usb 7-1: device descriptor read/64, error -71 [ 558.203131][ T5919] usb usb7-port1: attempt power cycle [ 559.000313][ T5811] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 559.902358][ T5919] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 559.987893][T12581] kvm_intel: kvm [12580]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x7d [ 561.032875][ T29] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 561.079703][ T5919] usb 7-1: device not accepting address 6, error -71 [ 561.467594][T12593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.547508][T12607] FAULT_INJECTION: forcing a failure. [ 562.547508][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 562.560546][T12607] CPU: 1 UID: 0 PID: 12607 Comm: syz.5.1794 Tainted: G L syzkaller #0 PREEMPT(full) [ 562.560573][T12607] Tainted: [L]=SOFTLOCKUP [ 562.560579][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 562.560589][T12607] Call Trace: [ 562.560596][T12607] [ 562.560603][T12607] dump_stack_lvl+0x100/0x190 [ 562.560637][T12607] should_fail_ex.cold+0x5/0xa [ 562.560659][T12607] ? ip_options_get+0xa4/0x420 [ 562.560680][T12607] should_failslab+0xc2/0x120 [ 562.560697][T12607] __kmalloc_noprof+0xe0/0x850 [ 562.560727][T12607] ip_options_get+0xa4/0x420 [ 562.560752][T12607] ? __pfx_ip_options_get+0x10/0x10 [ 562.560772][T12607] ? irqentry_exit+0x180/0x670 [ 562.560794][T12607] ? lockdep_hardirqs_on+0x78/0x100 [ 562.560816][T12607] ? irqentry_exit+0x180/0x670 [ 562.560847][T12607] ip_cmsg_send+0x86f/0xbc0 [ 562.560876][T12607] ? udp_cmsg_send+0x25a/0x2d0 [ 562.560901][T12607] udp_sendmsg+0x1dba/0x2890 [ 562.560926][T12607] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 562.560952][T12607] ? __pfx_udp_sendmsg+0x10/0x10 [ 562.560975][T12607] ? avc_has_perm+0x135/0x1e0 [ 562.561005][T12607] ? sock_has_perm+0x258/0x2f0 [ 562.561024][T12607] ? __pfx_sock_has_perm+0x10/0x10 [ 562.561055][T12607] ? __pfx_udp_sendmsg+0x10/0x10 [ 562.561079][T12607] inet_sendmsg+0x105/0x140 [ 562.561096][T12607] ____sys_sendmsg+0x98d/0xb70 [ 562.561121][T12607] ? __pfx_inet_sendmsg+0x10/0x10 [ 562.561139][T12607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.561168][T12607] ? __pfx__kstrtoull+0x10/0x10 [ 562.561187][T12607] ? preempt_schedule_notrace+0x5f/0xd0 [ 562.561213][T12607] ___sys_sendmsg+0x190/0x1e0 [ 562.561242][T12607] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.561281][T12607] ? find_held_lock+0x2b/0x80 [ 562.561320][T12607] __sys_sendmmsg+0x205/0x430 [ 562.561343][T12607] ? __pfx___sys_sendmmsg+0x10/0x10 [ 562.561362][T12607] ? trace_sched_exit_tp+0x13a/0x180 [ 562.561396][T12607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 562.561430][T12607] ? fput+0x79/0x100 [ 562.561451][T12607] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 562.561479][T12607] ? rcu_is_watching+0x12/0xc0 [ 562.561502][T12607] __x64_sys_sendmmsg+0x9c/0x100 [ 562.561523][T12607] ? lockdep_hardirqs_on+0x78/0x100 [ 562.561543][T12607] do_syscall_64+0x106/0xf80 [ 562.561563][T12607] ? clear_bhb_loop+0x40/0x90 [ 562.561585][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.561602][T12607] RIP: 0033:0x7f75aff9c799 [ 562.561618][T12607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.561633][T12607] RSP: 002b:00007f75b0ee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 562.561651][T12607] RAX: ffffffffffffffda RBX: 00007f75b0216180 RCX: 00007f75aff9c799 [ 562.561662][T12607] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 0000000000000008 [ 562.561672][T12607] RBP: 00007f75b0ee5090 R08: 0000000000000000 R09: 0000000000000000 [ 562.561682][T12607] R10: 00000000000400c4 R11: 0000000000000246 R12: 0000000000000001 [ 562.561692][T12607] R13: 00007f75b0216218 R14: 00007f75b0216180 R15: 00007ffccda3baf8 [ 562.561717][T12607] [ 563.617669][T12611] FAULT_INJECTION: forcing a failure. [ 563.617669][T12611] name failslab, interval 1, probability 0, space 0, times 0 [ 563.630363][T12611] CPU: 1 UID: 0 PID: 12611 Comm: syz.2.1787 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.630390][T12611] Tainted: [L]=SOFTLOCKUP [ 563.630396][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.630406][T12611] Call Trace: [ 563.630414][T12611] [ 563.630421][T12611] dump_stack_lvl+0x100/0x190 [ 563.630452][T12611] should_fail_ex.cold+0x5/0xa [ 563.630476][T12611] ? ip_options_get+0xa4/0x420 [ 563.630496][T12611] should_failslab+0xc2/0x120 [ 563.630514][T12611] __kmalloc_noprof+0xe0/0x850 [ 563.630544][T12611] ip_options_get+0xa4/0x420 [ 563.630565][T12611] ? lockdep_hardirqs_on+0x78/0x100 [ 563.630590][T12611] ? __pfx_ip_options_get+0x10/0x10 [ 563.630618][T12611] ip_cmsg_send+0x86f/0xbc0 [ 563.630647][T12611] ? udp_cmsg_send+0x25a/0x2d0 [ 563.630673][T12611] udp_sendmsg+0x1dba/0x2890 [ 563.630698][T12611] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 563.630723][T12611] ? __pfx_udp_sendmsg+0x10/0x10 [ 563.630764][T12611] ? avc_has_perm+0x135/0x1e0 [ 563.630793][T12611] ? sock_has_perm+0x258/0x2f0 [ 563.630812][T12611] ? __pfx_sock_has_perm+0x10/0x10 [ 563.630844][T12611] ? __pfx_udp_sendmsg+0x10/0x10 [ 563.630867][T12611] inet_sendmsg+0x105/0x140 [ 563.630885][T12611] ____sys_sendmsg+0x98d/0xb70 [ 563.630910][T12611] ? __pfx_inet_sendmsg+0x10/0x10 [ 563.630928][T12611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 563.630972][T12611] ___sys_sendmsg+0x190/0x1e0 [ 563.631000][T12611] ? __pfx____sys_sendmsg+0x10/0x10 [ 563.631038][T12611] ? find_held_lock+0x2b/0x80 [ 563.631077][T12611] __sys_sendmmsg+0x205/0x430 [ 563.631101][T12611] ? __pfx___sys_sendmmsg+0x10/0x10 [ 563.631121][T12611] ? trace_sched_exit_tp+0x13a/0x180 [ 563.631155][T12611] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.631188][T12611] ? fput+0x79/0x100 [ 563.631209][T12611] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 563.631236][T12611] ? rcu_is_watching+0x12/0xc0 [ 563.631259][T12611] __x64_sys_sendmmsg+0x9c/0x100 [ 563.631280][T12611] ? lockdep_hardirqs_on+0x78/0x100 [ 563.631301][T12611] do_syscall_64+0x106/0xf80 [ 563.631322][T12611] ? clear_bhb_loop+0x40/0x90 [ 563.631343][T12611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.631361][T12611] RIP: 0033:0x7ff2a639c799 [ 563.631376][T12611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.631392][T12611] RSP: 002b:00007ff2a45b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 563.631409][T12611] RAX: ffffffffffffffda RBX: 00007ff2a6616180 RCX: 00007ff2a639c799 [ 563.631420][T12611] RDX: 0000000000000001 RSI: 0000200000000c00 RDI: 000000000000000b [ 563.631431][T12611] RBP: 00007ff2a45b4090 R08: 0000000000000000 R09: 0000000000000000 [ 563.631440][T12611] R10: 00000000000400c4 R11: 0000000000000246 R12: 0000000000000001 [ 563.631450][T12611] R13: 00007ff2a6616218 R14: 00007ff2a6616180 R15: 00007ffc4ab43618 [ 563.631476][T12611] [ 565.206095][T12616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.534194][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 567.154875][T12653] netlink: 'syz.2.1800': attribute type 10 has an invalid length. [ 567.166172][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.187645][T12653] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 567.217767][ T5919] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 567.349623][T12653] loop5: detected capacity change from 0 to 7 [ 567.365279][T11929] Dev loop5: unable to read RDB block 7 [ 567.373129][T11929] loop5: AHDI p1 [ 567.538412][T12658] veth0: Caught tx_queue_len zero misconfig [ 567.854636][T11929] loop5: partition table partially beyond EOD, truncated [ 567.901747][ T5919] usb 2-1: device descriptor read/64, error -71 [ 568.265823][T12659] netlink: 'syz.2.1800': attribute type 10 has an invalid length. [ 568.273736][T12659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1800'. [ 568.284504][T12659] batadv0: entered promiscuous mode [ 568.369373][T12659] batadv0: entered allmulticast mode [ 568.411905][T12653] Dev loop5: unable to read RDB block 7 [ 568.417799][T12653] loop5: AHDI p1 [ 568.422455][T12653] loop5: partition table partially beyond EOD, truncated [ 568.430581][ T5919] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 568.448827][T12659] bond0: (slave batadv0): Releasing backup interface [ 568.519883][T12659] bridge0: port 3(batadv0) entered blocking state [ 568.561164][T12659] bridge0: port 3(batadv0) entered disabled state [ 568.574950][ T5919] usb 2-1: device descriptor read/64, error -71 [ 568.703458][ T5919] usb usb2-port1: attempt power cycle [ 568.962559][T11591] batman_adv: batadv0: IGMP Querier appeared [ 568.968802][T11591] batman_adv: batadv0: MLD Querier appeared [ 569.006106][T12678] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 569.066426][ T5919] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 569.571567][ T5919] usb 2-1: device descriptor read/8, error -71 [ 569.657911][T12681] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 569.691082][T12681] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 569.773639][T12686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1810'. [ 570.014549][T12694] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1812'. [ 570.126204][T12696] loop6: detected capacity change from 0 to 7 [ 570.172096][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.181945][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.193456][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.203081][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.228622][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.238297][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.250630][T12697] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1811'. [ 570.358860][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.368529][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.378350][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.387971][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.397485][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.407064][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.438524][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.448178][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.459118][T12696] ldm_validate_partition_table(): Disk read failed. [ 570.466910][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.476499][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.484934][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.494508][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.504295][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 570.513881][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 570.526472][T12696] Dev loop6: unable to read RDB block 0 [ 570.560963][T12696] loop6: unable to read partition table [ 570.567685][T12696] loop6: partition table beyond EOD, truncated [ 570.574417][T12696] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 571.098050][T12678] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1808'. [ 571.131337][T12678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1808'. [ 571.178366][T12706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1816'. [ 571.184087][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1815'. [ 571.199063][ T30] audit: type=1400 audit(2000000199.738:2163): avc: denied { ioctl } for pid=12703 comm="syz.7.1816" path="socket:[40678]" dev="sockfs" ino=40678 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 571.374648][ T793] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 571.386424][T12712] binder: 12701:12712 ioctl c0306201 200000000040 returned -14 [ 571.550520][ T793] usb 2-1: Using ep0 maxpacket: 8 [ 571.583073][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.605778][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 571.652270][ T793] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 571.677332][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.695266][ T5811] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 571.705302][ T793] usb 2-1: config 0 descriptor?? [ 571.718419][T12700] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 571.948761][ T5811] usb 7-1: device descriptor read/64, error -71 [ 572.838626][ T5811] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 573.011341][ T10] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 573.011406][ T5811] usb 7-1: device descriptor read/64, error -71 [ 573.169929][ T10] usb 3-1: device descriptor read/64, error -71 [ 573.170036][ T5811] usb usb7-port1: attempt power cycle [ 573.437003][ T10] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 573.534419][T12746] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1825'. [ 573.544054][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1825'. [ 573.560296][T12746] IPv6: sit1: Disabled Multicast RS [ 573.567891][T12746] sit1: entered allmulticast mode [ 573.580474][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.587303][ T10] usb 3-1: device descriptor read/64, error -71 [ 573.588772][ T5811] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 573.624499][ T5811] usb 7-1: device descriptor read/8, error -71 [ 573.725732][ T10] usb usb3-port1: attempt power cycle [ 573.885822][ T5811] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 573.909601][ T5811] usb 7-1: device descriptor read/8, error -71 [ 573.960643][ T29] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 574.036958][ T5811] usb usb7-port1: unable to enumerate USB device [ 574.099653][ T10] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 574.124011][ T29] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 574.133547][ T10] usb 3-1: device descriptor read/8, error -71 [ 574.133624][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.148349][ T29] usb 8-1: Product: syz [ 574.152506][ T29] usb 8-1: Manufacturer: syz [ 574.157126][ T29] usb 8-1: SerialNumber: syz [ 574.284956][ T793] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 574.305130][ T793] usb 2-1: USB disconnect, device number 46 [ 574.557968][T12756] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1827'. [ 574.724915][ T10] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 574.756557][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 574.769210][ T10] usb 3-1: device descriptor read/8, error -71 [ 574.804616][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 574.912032][ T10] usb usb3-port1: unable to enumerate USB device [ 574.946346][T12762] fuse: Bad value for 'fd' [ 575.604286][T12774] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 575.632948][T12774] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 575.729472][T12781] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 575.748149][T12781] FAULT_INJECTION: forcing a failure. [ 575.748149][T12781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.763028][T12781] CPU: 0 UID: 0 PID: 12781 Comm: syz.2.1834 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.763054][T12781] Tainted: [L]=SOFTLOCKUP [ 575.763060][T12781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.763069][T12781] Call Trace: [ 575.763075][T12781] [ 575.763081][T12781] dump_stack_lvl+0x100/0x190 [ 575.763113][T12781] should_fail_ex.cold+0x5/0xa [ 575.763138][T12781] _copy_from_iter+0x1f4/0x1690 [ 575.763159][T12781] ? __asan_memset+0x23/0x50 [ 575.763183][T12781] ? __pfx__copy_from_iter+0x10/0x10 [ 575.763198][T12781] ? __pfx___alloc_skb+0x10/0x10 [ 575.763227][T12781] netlink_sendmsg+0x808/0xda0 [ 575.763254][T12781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.763274][T12781] ? __might_fault+0x20/0x140 [ 575.763305][T12781] ____sys_sendmsg+0x9e1/0xb70 [ 575.763328][T12781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.763353][T12781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.763388][T12781] ___sys_sendmsg+0x190/0x1e0 [ 575.763413][T12781] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.763467][T12781] __sys_sendmsg+0x170/0x220 [ 575.763488][T12781] ? __pfx___sys_sendmsg+0x10/0x10 [ 575.763524][T12781] do_syscall_64+0x106/0xf80 [ 575.763545][T12781] ? clear_bhb_loop+0x40/0x90 [ 575.763564][T12781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.763576][T12781] RIP: 0033:0x7ff2a639c799 [ 575.763586][T12781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.763596][T12781] RSP: 002b:00007ff2a45f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.763607][T12781] RAX: ffffffffffffffda RBX: 00007ff2a6615fa0 RCX: 00007ff2a639c799 [ 575.763614][T12781] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 575.763622][T12781] RBP: 00007ff2a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 575.763632][T12781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.763641][T12781] R13: 00007ff2a6616038 R14: 00007ff2a6615fa0 R15: 00007ffc4ab43618 [ 575.763665][T12781] [ 576.022086][ T793] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 576.204710][ T793] usb 7-1: Using ep0 maxpacket: 8 [ 576.232381][ T793] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 576.239848][ T793] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 576.296567][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.316169][T12793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1837'. [ 576.326981][T12793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 576.446402][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 576.680730][ T793] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.707902][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.744016][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.812144][ T793] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 576.824092][T12770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.834115][ T793] usb 7-1: config 168 interface 0 has no altsetting 0 [ 576.844716][ T793] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 576.846106][T12770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.852889][ T793] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 576.875705][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 576.889762][ T793] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.906370][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 576.918558][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 576.937925][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 576.951194][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 576.951217][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.982144][ T29] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 576.991110][ T793] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 577.071983][ T793] usb 7-1: config 168 interface 0 has no altsetting 0 [ 577.079813][ T793] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 577.087421][ T793] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 577.098656][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 577.110142][ T793] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.122055][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 577.133321][ T793] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 577.216143][ T29] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 577.235051][ T793] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 577.266752][ T29] usb 8-1: USB disconnect, device number 13 [ 577.419009][ T793] usb 7-1: config 168 interface 0 has no altsetting 0 [ 577.428792][ T793] usb 7-1: string descriptor 0 read error: -22 [ 577.582505][ T793] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 577.668654][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.709302][ T793] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 577.965162][T12816] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.972414][T12816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.979807][T12816] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.986853][T12816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.059950][T12816] bridge0: entered promiscuous mode [ 578.080571][T12816] bridge0: entered allmulticast mode [ 578.145388][T12772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.171802][T12772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.310302][T11591] batman_adv: batadv0: IGMP Querier disappeared - multicast optimizations disabled [ 578.319734][T11591] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 578.674225][ T5811] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 578.813110][ T29] usb 7-1: USB disconnect, device number 12 [ 578.822780][ T5811] usb 2-1: device descriptor read/64, error -71 [ 578.950145][ T30] audit: type=1400 audit(2000000206.981:2164): avc: denied { read } for pid=5475 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 578.981331][T12825] can0: slcan on ptm0. [ 579.103096][T12772] adutux: No device or device unplugged -19 [ 579.143964][ T5811] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 579.188978][T12824] can0 (unregistered): slcan off ptm0. [ 579.275511][ T30] audit: type=1326 audit(2000000207.252:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 579.302548][ T30] audit: type=1326 audit(2000000207.252:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 579.329516][ T30] audit: type=1326 audit(2000000207.262:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 579.368017][ T5811] usb 2-1: device descriptor read/64, error -71 [ 579.543381][ T30] audit: type=1326 audit(2000000207.262:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 579.738459][ T5811] usb usb2-port1: attempt power cycle [ 579.744930][ T30] audit: type=1326 audit(2000000207.262:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 579.768581][ T30] audit: type=1326 audit(2000000207.262:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 580.785210][ T30] audit: type=1326 audit(2000000207.262:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 580.808791][ T30] audit: type=1326 audit(2000000207.262:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 581.088962][ T30] audit: type=1326 audit(2000000207.262:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12826 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff2a639c799 code=0x7ffc0000 [ 581.137084][T12853] serio: Serial port ptm0 [ 581.152321][ T5811] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 581.174655][ T5811] usb 2-1: device descriptor read/8, error -71 [ 581.392829][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1852'. [ 581.404967][T12865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 581.505682][ T5811] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 581.761463][ T5811] usb 2-1: device not accepting address 50, error -71 [ 581.768620][ T5811] usb usb2-port1: unable to enumerate USB device [ 582.428614][T12888] input: syz0 as /devices/virtual/input/input22 [ 585.576395][ T5881] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 585.599299][T12931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1868'. [ 585.715577][ T5881] usb 8-1: device descriptor read/64, error -71 [ 586.003904][ T5881] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 586.067927][ T793] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 586.153445][ T5881] usb 8-1: device descriptor read/64, error -71 [ 586.239058][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 586.254760][ T793] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 586.270905][ T793] usb 3-1: config 0 has no interface number 0 [ 586.271148][ T5881] usb usb8-port1: attempt power cycle [ 586.285647][ T793] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 586.307784][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.338106][ T793] usb 3-1: Product: syz [ 586.354355][ T793] usb 3-1: Manufacturer: syz [ 586.366068][ T793] usb 3-1: SerialNumber: syz [ 586.381376][ T793] usb 3-1: config 0 descriptor?? [ 586.677081][ T5881] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 586.718232][ T5881] usb 8-1: device descriptor read/8, error -71 [ 587.144597][ T793] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 587.290327][ T5881] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 587.317548][ T793] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 587.435771][ T5881] usb 8-1: device descriptor read/8, error -71 [ 587.564164][ T5881] usb usb8-port1: unable to enumerate USB device [ 587.913422][ T793] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 587.929070][ T793] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 588.028931][ T793] usb 3-1: USB disconnect, device number 43 [ 588.805051][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 588.816844][T12967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 590.341301][ T793] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 590.513540][ T793] usb 7-1: device descriptor read/64, error -71 [ 590.699552][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 590.699564][ T30] audit: type=1400 audit(2000000217.967:2243): avc: denied { create } for pid=12989 comm="syz.2.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 590.861646][ T30] audit: type=1400 audit(2000000217.986:2244): avc: denied { write } for pid=12989 comm="syz.2.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 590.890206][ T793] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 590.984228][ T30] audit: type=1400 audit(2000000218.248:2245): avc: denied { append } for pid=12993 comm="syz.1.1881" name="usbmon4" dev="devtmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 591.082888][ T793] usb 7-1: device descriptor read/64, error -71 [ 591.083811][T12997] binder: 12993:12997 ioctl c0306201 200000000540 returned -22 [ 591.232552][T12996] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 591.239191][T12996] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 591.248334][ T793] usb usb7-port1: attempt power cycle [ 591.421209][T12996] vhci_hcd vhci_hcd.0: Device attached [ 591.699623][ T10] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 591.712456][T12998] vhci_hcd: connection reset by peer [ 591.718330][ T13] vhci_hcd vhci_hcd.2: stop threads [ 591.724318][ T13] vhci_hcd vhci_hcd.2: release socket [ 591.729769][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 591.866556][ T793] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 592.085777][ T793] usb 7-1: device descriptor read/8, error -71 [ 592.201696][ T5914] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 592.806099][ T5914] usb 6-1: device descriptor read/64, error -71 [ 592.812747][ T793] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 592.853978][ T793] usb 7-1: device descriptor read/8, error -71 [ 592.874961][ T5860] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 592.977769][ T793] usb usb7-port1: unable to enumerate USB device [ 593.110008][ T5860] usb 2-1: device descriptor read/64, error -71 [ 593.116361][ T5914] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 593.281006][ T5914] usb 6-1: device descriptor read/64, error -71 [ 593.312715][T13017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1886'. [ 593.329994][T13017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13017 comm=syz.2.1886 [ 593.434066][ T5860] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 593.449231][ T5914] usb usb6-port1: attempt power cycle [ 593.472832][T13021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13021 comm=syz.2.1886 [ 593.990546][ T5860] usb 2-1: device descriptor read/64, error -71 [ 594.199599][ T5860] usb usb2-port1: attempt power cycle [ 594.242803][ T5914] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 594.293436][ T30] audit: type=1400 audit(2000000221.346:2246): avc: denied { read write } for pid=13025 comm="syz.7.1888" dev="sockfs" ino=41370 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 594.331343][ T5914] usb 6-1: device descriptor read/8, error -71 [ 594.662872][ T5860] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 594.946671][ T5914] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 594.992497][ T5860] usb 2-1: device descriptor read/8, error -71 [ 595.046682][T13039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1892'. [ 595.204551][ T5914] usb 6-1: device not accepting address 16, error -71 [ 595.213124][ T5914] usb usb6-port1: unable to enumerate USB device [ 596.311964][T13059] random: crng reseeded on system resumption [ 596.597367][ T30] audit: type=1400 audit(2000000223.236:2247): avc: denied { write } for pid=13047 comm="syz.5.1894" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 596.935741][ T30] audit: type=1400 audit(2000000223.797:2248): avc: denied { connect } for pid=13062 comm="syz.2.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 597.160044][ T5860] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 597.345512][ T10] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 597.489206][ T5860] usb 7-1: Using ep0 maxpacket: 32 [ 597.636676][ T5860] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 597.646108][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.728632][ T5860] usb 7-1: config 0 descriptor?? [ 598.112753][ T5860] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 598.126297][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 598.142763][ T5860] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 598.167036][ T5860] usb 7-1: media controller created [ 598.173717][T13061] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 598.208892][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 598.288224][ T5860] az6027: usb out operation failed. (-71) [ 598.313722][ T5860] az6027: usb out operation failed. (-71) [ 598.336460][ T5860] stb0899_attach: Driver disabled by Kconfig [ 598.353868][ T5860] az6027: no front-end attached [ 598.353868][ T5860] [ 598.372057][ T5860] az6027: usb out operation failed. (-71) [ 598.383475][ T5860] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 598.409680][ T5860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input23 [ 598.439771][ T5860] dvb-usb: schedule remote query interval to 400 msecs. [ 598.451757][ T5860] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 598.492746][ T5860] usb 7-1: USB disconnect, device number 17 [ 598.540236][ T5860] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 598.706309][T13074] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 598.863851][T13074] ip6tnl0: Caught tx_queue_len zero misconfig [ 599.211741][ T5914] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 599.259987][T13090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1905'. [ 599.457804][ T5914] usb 8-1: Using ep0 maxpacket: 16 [ 599.590592][T13097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 599.968811][ T5914] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 600.145950][ T5914] usb 8-1: config 0 has no interface number 0 [ 600.165401][ T5914] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 600.190554][ T5914] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 600.210984][ T5914] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 600.290099][ T5914] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.332120][ T5914] usb 8-1: Product: syz [ 600.349146][ T5914] usb 8-1: Manufacturer: syz [ 600.434651][ T5914] usb 8-1: SerialNumber: syz [ 600.451207][ T5914] usb 8-1: config 0 descriptor?? [ 600.458377][T13083] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 600.466505][T13083] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 600.710744][T13083] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 600.734226][T13083] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 601.001911][T13110] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1909'. [ 601.012610][T13110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1909'. [ 601.027955][T13110] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 601.057490][ T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 601.231549][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 601.238302][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 601.249663][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 601.268041][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 601.277616][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.287070][ T5914] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 601.299979][ T5914] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 601.351843][ T10] usb 2-1: config 0 descriptor?? [ 601.361749][T13106] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 601.379950][ T5914] asix 8-1:0.251: probe with driver asix failed with error -71 [ 601.404183][ T5914] usb 8-1: USB disconnect, device number 18 [ 601.477235][ T5881] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 601.713863][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 601.725188][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.739691][ T5881] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 601.749069][ T5881] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 601.765758][ T5881] usb 7-1: Manufacturer: syz [ 601.772351][ T5881] usb 7-1: config 0 descriptor?? [ 602.311614][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 602.329801][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 602.394008][ T5881] usb 7-1: USB disconnect, device number 18 [ 603.445194][T13134] netlink: 'syz.5.1915': attribute type 1 has an invalid length. [ 603.558156][T13134] netlink: 'syz.5.1915': attribute type 2 has an invalid length. [ 603.663577][T13130] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1914'. [ 604.024070][ T5881] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 604.126826][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 604.248654][ T5881] usb 6-1: Using ep0 maxpacket: 8 [ 604.275812][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 604.286918][ T5881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51017, setting to 1024 [ 604.348147][ T5881] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.351391][ T10] usb 2-1: USB disconnect, device number 55 [ 604.392485][ T5881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.466130][ T5881] usb 6-1: config 0 descriptor?? [ 604.486749][T13140] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 604.849882][T13154] FAULT_INJECTION: forcing a failure. [ 604.849882][T13154] name failslab, interval 1, probability 0, space 0, times 0 [ 604.896781][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.2.1920 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.896820][T13154] Tainted: [L]=SOFTLOCKUP [ 604.896826][T13154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.896837][T13154] Call Trace: [ 604.896843][T13154] [ 604.896850][T13154] dump_stack_lvl+0x100/0x190 [ 604.896883][T13154] should_fail_ex.cold+0x5/0xa [ 604.896905][T13154] should_failslab+0xc2/0x120 [ 604.896924][T13154] __kmalloc_cache_noprof+0x7a/0x6f0 [ 604.896945][T13154] ? __request_region+0x5c/0xf0 [ 604.896969][T13154] ? __pfx___mutex_lock+0x10/0x10 [ 604.896997][T13154] __request_region+0x5c/0xf0 [ 604.897026][T13154] comedi_request_region+0x6d/0x100 [ 604.897048][T13154] dt2801_attach+0x66/0xfa0 [ 604.897073][T13154] comedi_device_attach+0x3d2/0x660 [ 604.897102][T13154] do_devconfig_ioctl+0x1b3/0x6d0 [ 604.897127][T13154] ? comedi_unlocked_ioctl+0x180/0x3310 [ 604.897146][T13154] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 604.897186][T13154] ? find_held_lock+0x2b/0x80 [ 604.897217][T13154] comedi_unlocked_ioctl+0x860/0x3310 [ 604.897236][T13154] ? tomoyo_path_number_perm+0x188/0x580 [ 604.897263][T13154] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 604.897287][T13154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 604.897313][T13154] ? do_vfs_ioctl+0x226/0x13e0 [ 604.897337][T13154] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 604.897363][T13154] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 604.897396][T13154] ? __fget_files+0x215/0x3d0 [ 604.897413][T13154] ? hook_file_ioctl_common+0x146/0x410 [ 604.897447][T13154] ? selinux_file_ioctl+0x139/0x290 [ 604.897467][T13154] ? selinux_file_ioctl+0xb4/0x290 [ 604.897490][T13154] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 604.897510][T13154] __x64_sys_ioctl+0x18e/0x210 [ 604.897537][T13154] do_syscall_64+0x106/0xf80 [ 604.897558][T13154] ? clear_bhb_loop+0x40/0x90 [ 604.897580][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.897597][T13154] RIP: 0033:0x7ff2a639c799 [ 604.897611][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.897626][T13154] RSP: 002b:00007ff2a45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.897644][T13154] RAX: ffffffffffffffda RBX: 00007ff2a6615fa0 RCX: 00007ff2a639c799 [ 604.897654][T13154] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 604.897664][T13154] RBP: 00007ff2a45f6090 R08: 0000000000000000 R09: 0000000000000000 [ 604.897673][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.897683][T13154] R13: 00007ff2a6616038 R14: 00007ff2a6615fa0 R15: 00007ffc4ab43618 [ 604.897709][T13154] [ 604.897845][T13154] comedi comedi0: dt2801: I/O port conflict (0xffff,2) [ 605.901253][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 606.050927][ T10] usb 8-1: device descriptor read/64, error -71 [ 606.746034][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 606.905695][ T10] usb 8-1: device descriptor read/64, error -71 [ 606.970516][ T5881] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 607.055484][ T5881] usb 6-1: USB disconnect, device number 17 [ 607.088912][ T10] usb usb8-port1: attempt power cycle [ 607.782182][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 607.808984][ T10] usb 8-1: device descriptor read/8, error -71 [ 607.857201][ T5141] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 608.049142][ T5141] usb 7-1: device descriptor read/64, error -71 [ 608.123933][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 608.143144][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1929'. [ 608.177557][ T10] usb 8-1: device descriptor read/8, error -71 [ 608.521907][ T10] usb usb8-port1: unable to enumerate USB device [ 608.569269][ T30] audit: type=1400 audit(2000000234.699:2249): avc: denied { mount } for pid=13192 comm="syz.1.1930" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 608.594156][ T5141] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 608.611060][T13193] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 608.743454][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1931'. [ 608.757107][T13200] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 608.766724][ T5141] usb 7-1: device descriptor read/64, error -71 [ 608.893707][ T5141] usb usb7-port1: attempt power cycle [ 608.955718][T13193] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 608.968522][T13193] overlayfs: failed to look up (tracing) for ino (-66) [ 609.152851][ T30] audit: type=1400 audit(2000000235.252:2250): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 609.256797][ T5141] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 609.279234][ T5141] usb 7-1: device descriptor read/8, error -71 [ 609.598585][ T5141] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 609.621185][ T5141] usb 7-1: device descriptor read/8, error -71 [ 609.738273][ T5141] usb usb7-port1: unable to enumerate USB device [ 610.915105][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1938'. [ 610.925058][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1938'. [ 610.938753][T13225] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 612.893570][T13246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1944'. [ 613.261580][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'. [ 613.274896][T13251] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1944'. [ 613.883324][T13257] lo speed is unknown, defaulting to 1000 [ 614.210634][ T30] audit: type=1326 audit(2000000239.566:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.303415][ T30] audit: type=1326 audit(2000000239.566:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.327378][ T30] audit: type=1326 audit(2000000239.575:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.376464][ T30] audit: type=1326 audit(2000000239.575:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.400275][ T30] audit: type=1326 audit(2000000239.575:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.445380][ T30] audit: type=1326 audit(2000000239.575:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.588967][ T30] audit: type=1326 audit(2000000239.575:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 614.770583][ T30] audit: type=1326 audit(2000000239.575:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 615.216033][ T30] audit: type=1326 audit(2000000239.575:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 615.239632][ T30] audit: type=1326 audit(2000000239.575:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13254 comm="syz.7.1946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61cd9c799 code=0x7ffc0000 [ 615.324101][T13270] FAULT_INJECTION: forcing a failure. [ 615.324101][T13270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.417189][T13270] CPU: 1 UID: 0 PID: 13270 Comm: syz.6.1949 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.417216][T13270] Tainted: [L]=SOFTLOCKUP [ 615.417220][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.417227][T13270] Call Trace: [ 615.417231][T13270] [ 615.417236][T13270] dump_stack_lvl+0x100/0x190 [ 615.417259][T13270] should_fail_ex.cold+0x5/0xa [ 615.417275][T13270] _copy_from_iter+0x1f4/0x1690 [ 615.417289][T13270] ? __asan_memset+0x23/0x50 [ 615.417305][T13270] ? __pfx__copy_from_iter+0x10/0x10 [ 615.417315][T13270] ? __pfx___alloc_skb+0x10/0x10 [ 615.417334][T13270] netlink_sendmsg+0x808/0xda0 [ 615.417355][T13270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.417369][T13270] ? __might_fault+0x20/0x140 [ 615.417390][T13270] ____sys_sendmsg+0x9e1/0xb70 [ 615.417406][T13270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.417423][T13270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.417446][T13270] ___sys_sendmsg+0x190/0x1e0 [ 615.417465][T13270] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.417499][T13270] __sys_sendmsg+0x170/0x220 [ 615.417513][T13270] ? __pfx___sys_sendmsg+0x10/0x10 [ 615.417536][T13270] do_syscall_64+0x106/0xf80 [ 615.417550][T13270] ? clear_bhb_loop+0x40/0x90 [ 615.417563][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.417575][T13270] RIP: 0033:0x7ff686f9c799 [ 615.417585][T13270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.417595][T13270] RSP: 002b:00007ff687ea3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.417607][T13270] RAX: ffffffffffffffda RBX: 00007ff687215fa0 RCX: 00007ff686f9c799 [ 615.417614][T13270] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 615.417620][T13270] RBP: 00007ff687ea3090 R08: 0000000000000000 R09: 0000000000000000 [ 615.417626][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.417632][T13270] R13: 00007ff687216038 R14: 00007ff687215fa0 R15: 00007ffd62f85f98 [ 615.417647][T13270] [ 615.701394][T13272] overlay: Bad value for 'workdir' [ 615.903498][ T5881] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 616.195196][ T5881] usb 2-1: device descriptor read/64, error -71 [ 616.734631][ T5881] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 616.919427][ T5881] usb 2-1: device descriptor read/64, error -71 [ 617.197564][ T5881] usb usb2-port1: attempt power cycle [ 617.677323][ T5881] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 617.812940][ T5881] usb 2-1: device descriptor read/8, error -71 [ 618.131660][T13295] trusted_key: syz.1.1956 sent an empty control message without MSG_MORE. [ 619.539683][T13295] kthread_run failed with err -4 [ 619.606315][ T29] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 619.761197][ T29] usb 7-1: device descriptor read/64, error -71 [ 619.942678][ T5881] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 620.028133][ T29] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 620.105147][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 620.121265][ T5881] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 620.131031][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.139317][ T5881] usb 2-1: Product: syz [ 620.220186][ T29] usb 7-1: device descriptor read/64, error -71 [ 620.338548][ T29] usb usb7-port1: attempt power cycle [ 620.362040][ T5881] usb 2-1: Manufacturer: syz [ 620.376931][ T5881] usb 2-1: SerialNumber: syz [ 620.705769][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 620.705787][ T30] audit: type=1400 audit(2000000246.051:2280): avc: denied { read } for pid=13308 comm="syz.1.1959" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 620.722810][ T29] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 620.758730][ T30] audit: type=1400 audit(2000000246.051:2281): avc: denied { ioctl } for pid=13308 comm="syz.1.1959" path="/378/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 620.786938][ T5881] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 620.909553][ T29] usb 7-1: device descriptor read/8, error -71 [ 620.915934][ T5881] usb 2-1: USB disconnect, device number 60 [ 621.182300][ T29] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 621.204165][ T29] usb 7-1: device descriptor read/8, error -71 [ 621.530613][ T29] usb usb7-port1: unable to enumerate USB device [ 622.733348][T13351] netlink: 'syz.7.1969': attribute type 1 has an invalid length. [ 622.841214][T13353] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 622.913829][T13353] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 622.968712][ T30] audit: type=1400 audit(2000000248.184:2282): avc: denied { create } for pid=13350 comm="syz.7.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 623.615709][ T30] audit: type=1400 audit(2000000248.203:2283): avc: denied { write } for pid=13350 comm="syz.7.1969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 623.648990][T13365] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1969'. [ 623.712584][T13365] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1969'. [ 623.773860][T13351] bond1: (slave gretap1): making interface the new active one [ 623.783432][T13351] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 624.146161][T13369] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 624.365116][T13375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1974'. [ 624.365138][T13375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1974'. [ 625.159324][T13376] lo speed is unknown, defaulting to 1000 [ 625.226141][ T5811] IPVS: starting estimator thread 0... [ 625.329604][T13381] IPVS: using max 44 ests per chain, 105600 per kthread [ 625.443265][T13385] tipc: Started in network mode [ 625.478058][T13385] tipc: Node identity 080211000001, cluster identity 4711 [ 625.512537][T13385] tipc: Enabled bearer , priority 0 [ 625.675031][T13390] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 625.727163][T13390] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 626.709144][ T5811] tipc: Node number set to 134418688 [ 627.946569][ T5860] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 628.228455][T13418] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 628.238369][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 628.267134][ T5860] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.277262][ T5860] usb 6-1: config 0 has no interfaces? [ 628.309899][ T5860] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 628.352771][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.362761][ T5860] usb 6-1: config 0 descriptor?? [ 628.489301][T13428] netlink: 'syz.6.1988': attribute type 1 has an invalid length. [ 628.826250][T13433] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 628.937263][T13428] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1988'. [ 629.023686][T13438] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1988'. [ 629.052729][T13433] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 629.112634][T13408] SET target dimension over the limit! [ 629.694245][T13436] bond2: (slave gretap1): making interface the new active one [ 629.785444][T13436] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 630.065486][T13449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1991'. [ 630.080250][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1991'. [ 630.957060][T13404] delete_channel: no stack [ 630.970491][T13460] macvtap0: entered promiscuous mode [ 631.005377][ T5141] usb 6-1: USB disconnect, device number 18 [ 631.025607][ T31] INFO: task syz.3.1511:11401 blocked for more than 143 seconds. [ 631.033789][ T31] Tainted: G L syzkaller #0 [ 631.045436][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.054151][ T31] task:syz.3.1511 state:D stack:27984 pid:11401 tgid:11400 ppid:5807 task_flags:0x400140 flags:0x00080002 [ 631.095697][ T31] Call Trace: [ 631.208128][ T31] [ 631.211481][ T31] __schedule+0xfee/0x6120 [ 631.217205][ T31] ? __lock_acquire+0x4a5/0x2630 [ 631.224525][ T31] ? irqentry_exit+0x180/0x670 [ 631.229915][ T31] ? __pfx___schedule+0x10/0x10 [ 631.234885][ T31] ? find_held_lock+0x2b/0x80 [ 631.239953][ T31] ? schedule+0x2bf/0x390 [ 631.244373][ T31] schedule+0xdd/0x390 [ 631.248810][ T31] schedule_preempt_disabled+0x13/0x30 [ 631.254356][ T31] __mutex_lock+0xc9a/0x1b90 [ 631.259009][ T31] ? kasan_save_track+0x14/0x30 [ 631.264612][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 631.272429][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 631.278454][ T31] ? netlink_rcv_skb+0x159/0x420 [ 631.363686][ T5881] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 631.729395][ T31] ? genl_rcv+0x28/0x40 [ 631.733678][ T31] ? ____sys_sendmsg+0x9e1/0xb70 [ 631.739459][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 631.745039][ T31] ? __asan_memset+0x23/0x50 [ 631.749711][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 631.755464][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 631.761497][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 631.767196][ T31] ? rcu_is_watching+0x12/0xc0 [ 631.799998][ T31] ? trace_kmalloc+0x101/0x130 [ 631.824842][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 631.843254][ T31] ? __nla_parse+0x40/0x60 [ 631.859038][ T5881] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 631.871021][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 631.901176][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 631.908187][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 631.916072][ T5881] usb 2-1: config 0 interface 0 has no altsetting 0 [ 631.932497][ T5881] usb 2-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00 [ 631.941552][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.952387][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 631.959014][ T31] ? bpf_lsm_capable+0x9/0x10 [ 631.963738][ T31] ? security_capable+0x80/0x260 [ 631.971024][ T5881] usb 2-1: config 0 descriptor?? [ 631.976047][ T31] genl_rcv_msg+0x560/0x800 [ 631.980585][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 631.985664][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 631.992157][ T31] netlink_rcv_skb+0x159/0x420 [ 631.997382][T13461] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 632.008980][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.023829][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.029731][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 632.035090][ T31] genl_rcv+0x28/0x40 [ 632.039961][ T31] netlink_unicast+0x5aa/0x870 [ 632.044794][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 632.050180][ T31] netlink_sendmsg+0x8b0/0xda0 [ 632.054972][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.060263][ T31] ? __might_fault+0x20/0x140 [ 632.068839][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 632.074960][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.080535][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.085947][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 632.091283][ T31] ___sys_sendmsg+0x190/0x1e0 [ 632.096055][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.101322][ T31] __sys_sendmsg+0x170/0x220 [ 632.105987][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.111117][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 632.116202][ T31] do_syscall_64+0x106/0xf80 [ 632.120831][ T31] ? clear_bhb_loop+0x40/0x90 [ 632.125586][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.131491][ T31] RIP: 0033:0x7f139279c799 [ 632.136034][ T31] RSP: 002b:00007f13936bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.144472][ T31] RAX: ffffffffffffffda RBX: 00007f1392a15fa0 RCX: 00007f139279c799 [ 632.152493][ T31] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000003 [ 632.160738][ T31] RBP: 00007f1392832c99 R08: 0000000000000000 R09: 0000000000000000 [ 632.168888][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.176891][ T31] R13: 00007f1392a16038 R14: 00007f1392a15fa0 R15: 00007ffef968e2b8 [ 632.184943][ T31] [ 632.188565][ T31] INFO: task syz.4.1515:11416 blocked for more than 144 seconds. [ 632.197790][ T31] Tainted: G L syzkaller #0 [ 632.204422][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.213185][ T31] task:syz.4.1515 state:D stack:26888 pid:11416 tgid:11413 ppid:5805 task_flags:0x400140 flags:0x00080002 [ 632.228294][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.237960][ T31] Call Trace: [ 632.241296][ T31] [ 632.244727][ T31] __schedule+0xfee/0x6120 [ 632.249354][ T31] ? __lock_acquire+0x4a5/0x2630 [ 632.262058][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.298273][ T31] ? __pfx___schedule+0x10/0x10 [ 632.304629][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.317324][ T31] ? find_held_lock+0x2b/0x80 [ 632.322146][ T31] ? schedule+0x2bf/0x390 [ 632.326498][ T31] schedule+0xdd/0x390 [ 632.331100][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.338940][ T31] schedule_preempt_disabled+0x13/0x30 [ 632.344442][ T31] __mutex_lock+0xc9a/0x1b90 [ 632.349041][ T31] ? kasan_save_track+0x14/0x30 [ 632.349992][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.363434][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc2/0x280 [ 632.370327][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 632.371745][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.376433][ T31] ? netlink_rcv_skb+0x159/0x420 [ 632.387537][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.389351][ T31] ? genl_rcv+0x28/0x40 [ 632.398947][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.410245][ T31] ? ____sys_sendmsg+0x9e1/0xb70 [ 632.413931][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.415792][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 632.428930][ T31] ? __asan_memset+0x23/0x50 [ 632.429124][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.433569][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 632.447247][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 632.453260][ T31] nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 632.459143][ T31] ? rcu_is_watching+0x12/0xc0 [ 632.463920][ T31] ? trace_kmalloc+0x101/0x130 [ 632.468806][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 632.475148][ T31] ? __nla_parse+0x40/0x60 [ 632.479701][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 632.486729][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 632.493837][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 632.499602][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 632.505697][ T31] ? bpf_lsm_capable+0x9/0x10 [ 632.510686][ T31] ? security_capable+0x80/0x260 [ 632.515664][ T31] genl_rcv_msg+0x560/0x800 [ 632.520694][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.525720][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 632.531969][ T31] netlink_rcv_skb+0x159/0x420 [ 632.536920][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 632.543804][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.549122][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 632.554505][ T31] genl_rcv+0x28/0x40 [ 632.558573][ T31] netlink_unicast+0x5aa/0x870 [ 632.563420][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 632.568770][ T31] netlink_sendmsg+0x8b0/0xda0 [ 632.573653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.579052][ T31] ? __might_fault+0x20/0x140 [ 632.583769][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 632.588719][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.594021][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.599399][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 632.604837][ T31] ___sys_sendmsg+0x190/0x1e0 [ 632.609610][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.614876][ T31] __sys_sendmsg+0x170/0x220 [ 632.619674][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.624831][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 632.630127][ T31] do_syscall_64+0x106/0xf80 [ 632.634722][ T31] ? clear_bhb_loop+0x40/0x90 [ 632.639585][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.645549][ T31] RIP: 0033:0x7fd80559c799 [ 632.650679][ T31] RSP: 002b:00007fd8063f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.660152][ T31] RAX: ffffffffffffffda RBX: 00007fd805815fa0 RCX: 00007fd80559c799 [ 632.672976][ T31] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000003 [ 632.676299][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.691225][ T31] RBP: 00007fd805632c99 R08: 0000000000000000 R09: 0000000000000000 [ 632.691419][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.699320][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.706395][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.714483][ T31] R13: 00007fd805816038 R14: 00007fd805815fa0 R15: 00007ffebbd25f98 [ 632.721551][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.729706][ T31] [ 632.736388][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.739153][ T31] [ 632.739153][ T31] Showing all locks held in the system: [ 632.746528][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.753831][ T31] 1 lock held by khungtaskd/31: [ 632.761022][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.761044][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.761062][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.761081][ T5881] wacom 0003:056A:00FA.000B: unknown main item tag 0x0 [ 632.773340][ T31] #0: [ 632.781926][ T5881] wacom 0003:056A:00FA.000B: reserved main item tag 0xd [ 632.805540][ T31] ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 632.815181][ T31] 2 locks held by getty/5571: [ 632.815202][ T5881] wacom 0003:056A:00FA.000B: hidraw0: USB HID v7f.fd Device [HID 056a:00fa] on usb-dummy_hcd.1-1/input0 [ 632.819961][ T31] #0: ffff888038ec00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 632.841001][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 632.852191][ T31] 2 locks held by syz.0.1407/10932: [ 632.857488][ T31] #0: ffffffff906bd890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.865892][ T31] #1: ffffffff8ec58fc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 632.876151][ T31] 2 locks held by syz.3.1511/11401: [ 632.881442][ T31] #0: ffffffff906bd890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.889889][ T31] #1: ffffffff8ec58fc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 632.900217][ T31] 2 locks held by syz.4.1515/11416: [ 632.905896][ T31] #0: ffffffff906bd890 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 632.914084][ T31] #1: ffffffff8ec58fc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 632.925370][ T31] 5 locks held by kworker/u8:13/11594: [ 632.930877][ T31] #0: ffff8880b843b1a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 632.940878][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 632.949713][ T31] #2: ffff8880b8526358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 632.958691][ T31] #3: ffffffff9b456048 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 632.969100][ T31] #4: ffffffff8e7e75e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0 [ 632.981115][ T31] 2 locks held by dhcpcd/13472: [ 632.985989][ T31] #0: ffff888036856260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 633.000283][ T31] #1: ffffffff8e7f31f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 633.010443][ T31] 2 locks held by dhcpcd/13474: [ 633.015325][ T31] #0: ffff8880339e0260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf50 [ 633.025036][ T31] #1: ffffffff8e7f31f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 633.036045][ T31] [ 633.038396][ T31] ============================================= [ 633.038396][ T31] [ 633.047062][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 633.056022][ T31] NMI backtrace for cpu 0 [ 633.056043][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 633.056068][ T31] Tainted: [L]=SOFTLOCKUP [ 633.056072][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.056079][ T31] Call Trace: [ 633.056084][ T31] [ 633.056089][ T31] dump_stack_lvl+0x100/0x190 [ 633.056111][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 633.056124][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 633.056145][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 633.056166][ T31] sys_info+0x141/0x190 [ 633.056182][ T31] watchdog+0xd25/0x1050 [ 633.056201][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.056217][ T31] ? __kthread_parkme+0x18c/0x230 [ 633.056235][ T31] ? kthread+0x13a/0x450 [ 633.056244][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.056258][ T31] kthread+0x370/0x450 [ 633.056268][ T31] ? __pfx_kthread+0x10/0x10 [ 633.056279][ T31] ret_from_fork+0x754/0xd80 [ 633.056291][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 633.056303][ T31] ? __switch_to+0x7b4/0x1120 [ 633.056317][ T31] ? __pfx_kthread+0x10/0x10 [ 633.056328][ T31] ret_from_fork_asm+0x1a/0x30 [ 633.056348][ T31] [ 633.056354][ T31] Sending NMI from CPU 0 to CPUs 1: [ 633.184639][ C1] NMI backtrace for cpu 1 [ 633.184658][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.184678][ C1] Tainted: [L]=SOFTLOCKUP [ 633.184683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.184691][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 633.184714][ C1] Code: 98 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 81 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 633.184728][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 633.184742][ C1] RAX: 000000000281c2bf RBX: ffff88801e69a4c0 RCX: ffffffff8b900c75 [ 633.184751][ C1] RDX: 0000000000000000 RSI: ffffffff8de76862 RDI: ffffffff8c1b05a0 [ 633.184759][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: ffffed10170a6795 [ 633.184767][ C1] R10: ffff8880b8533cab R11: 0000000000000000 R12: ffffed1003cd3498 [ 633.184776][ C1] R13: 0000000000000001 R14: ffffffff90d99210 R15: 0000000000000000 [ 633.184784][ C1] FS: 0000000000000000(0000) GS:ffff888124442000(0000) knlGS:0000000000000000 [ 633.184799][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.184807][ C1] CR2: 000056050f99f168 CR3: 0000000032552000 CR4: 00000000003526f0 [ 633.184816][ C1] Call Trace: [ 633.184821][ C1] [ 633.184826][ C1] default_idle+0x9/0x10 [ 633.184843][ C1] default_idle_call+0x6c/0xb0 [ 633.184860][ C1] do_idle+0x43a/0x550 [ 633.184880][ C1] ? __pfx_do_idle+0x10/0x10 [ 633.184899][ C1] cpu_startup_entry+0x4f/0x60 [ 633.184915][ C1] start_secondary+0x21d/0x2d0 [ 633.184935][ C1] ? __pfx_start_secondary+0x10/0x10 [ 633.184956][ C1] common_startup_64+0x13e/0x148 [ 633.184977][ C1] [ 633.361849][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 633.368723][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 633.379394][ T31] Tainted: [L]=SOFTLOCKUP [ 633.383692][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.393737][ T31] Call Trace: [ 633.397005][ T31] [ 633.399928][ T31] dump_stack_lvl+0x100/0x190 [ 633.404592][ T31] vpanic+0x552/0x970 [ 633.408576][ T31] ? __pfx_vpanic+0x10/0x10 [ 633.413077][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 633.419221][ T31] panic+0xd1/0xe0 [ 633.422919][ T31] ? __pfx_panic+0x10/0x10 [ 633.427313][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 633.433454][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 633.439594][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 633.445746][ T31] ? watchdog.cold+0x198/0x1ca [ 633.450493][ T31] ? watchdog+0xd35/0x1050 [ 633.454905][ T31] watchdog.cold+0x1a9/0x1ca [ 633.459504][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.464171][ T31] ? __kthread_parkme+0x18c/0x230 [ 633.469202][ T31] ? kthread+0x13a/0x450 [ 633.473425][ T31] ? __pfx_watchdog+0x10/0x10 [ 633.478087][ T31] kthread+0x370/0x450 [ 633.482137][ T31] ? __pfx_kthread+0x10/0x10 [ 633.486714][ T31] ret_from_fork+0x754/0xd80 [ 633.491289][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 633.496386][ T31] ? __switch_to+0x7b4/0x1120 [ 633.501048][ T31] ? __pfx_kthread+0x10/0x10 [ 633.505618][ T31] ret_from_fork_asm+0x1a/0x30 [ 633.510385][ T31] [ 633.513598][ T31] Kernel Offset: disabled [ 633.517901][ T31] Rebooting in 86400 seconds..