last executing test programs: 3m59.727496997s ago: executing program 2 (id=1773): openat$ptmx(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000040)="31a0819ead65208bf66fff252198bb90f2993c32d89166151b338dae3a4c38ac843f1c", 0x0, 0x0, 0x0, 0x3}, 0x38) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x3, 0x2, 0x0, 0x2000, &(0x7f0000015000/0x2000)=nil}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) 3m59.61248611s ago: executing program 2 (id=1774): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x65]}}]}) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'ip6gretap0\x00', 0x4000}) bind$tipc(r3, 0x0, 0x0) (async) r5 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000002340), 0x80d01, 0x0) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x480941, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000a80)={0x20, r8, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc088}, 0x4) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90040000", @ANYRES16=r1, @ANYBLOB="010028bd7000f150ef9c1338fcdbdf252700", @ANYRES32=r7, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r9 = syz_open_dev$hidraw(&(0x7f0000000080), 0xfff, 0x0) read$hidraw(r9, &(0x7f00000000c0)=""/125, 0x7d) syz_emit_ethernet(0x105, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0011068ed186dbbdddcffaffffffece9bfd78413a09f0c75590f3a7eba805084a4da076c0fbcba852527cb7770c60c4c15010ec615405771250ff679d9c713ff54b180a11e1ad8d6b4eed877dde82cf9bbcd26b3b3149d239d2a7e865a4b18d1b7b81d153f49d1c889b1aef0303841762e2eb7f8cf65d5a3e176d22aec786294dcb72e95a956f764e2214048a182a1c57fd44a316252e475ce782e834e7487082caf3058c75ffd19b316dd75481fa69fcadd9d25d6f28efc02ec567cdf8f0a07151de9ca8b5659c56b76a0dd3831f0733b2881a4fd7192dcd96b44512bd91ced8f2976a62f88bcdc289ec0eb"], 0x0) (async) syz_io_uring_setup(0x73b4, &(0x7f0000000780)={0x0, 0x9502, 0x8, 0x3, 0x8c, 0x0, r0}, &(0x7f0000000800), &(0x7f0000000840)=0x0, &(0x7f0000000880)) (async) syz_io_uring_setup(0x5199, &(0x7f00000008c0)={0x0, 0x1ab6, 0x2000, 0x0, 0x28e}, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)=0x0) syz_io_uring_submit(0x0, r10, r11, &(0x7f0000000a40)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r0, 0x0, &(0x7f0000000a00)='./file0\x00', 0x40, 0x200100, 0x23456}) 3m59.597777861s ago: executing program 2 (id=1775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) sendmsg$inet(r2, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000ffffffffff02000000580001800d0001007564703a73797a31000000"], 0x6c}}, 0x0) 3m59.504489623s ago: executing program 2 (id=1776): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$HIDIOCSUSAGE(0xffffffffffffffff, 0x4018480c, &(0x7f0000000140)={0x80003, 0x1, 0x5, 0xfff, 0x2, 0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') lseek(r1, 0x2000, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f0000001000/0x4000)=nil, 0x4000}, 0x1}) r2 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000002c0)={{0xb000, 0xffffffff, 0x13, 0x3, 0x5, 0x0, 0x0, 0x40, 0x7f, 0xff, 0xff, 0x81}, {0x40000, 0x9000, 0xc, 0x9f, 0xb2, 0xd, 0x8a, 0x3, 0x5, 0x10, 0x7f, 0x47}, {0x3000, 0xa000, 0x10, 0x80, 0x1, 0x5, 0x2, 0xbf, 0x9, 0x1, 0x4, 0x2}, {0xf000, 0x50000, 0x10, 0x2, 0x2, 0x49, 0xe, 0x1, 0x7, 0x2, 0x4, 0x10}, {0x54000, 0xa000, 0xe, 0x4c, 0x9, 0x4, 0x3, 0x4f, 0x7, 0xf8, 0x5f, 0x7}, {0x54000, 0x58000, 0xa, 0x1, 0x6, 0xf2, 0x5, 0x5, 0x6, 0x4, 0x7b, 0x8}, {0xeeee8000, 0xdddd1000, 0x10, 0x3, 0xd, 0xf6, 0x7, 0xf, 0x7, 0x81, 0x3, 0x1}, {0x5000, 0x200000, 0xc, 0x55, 0x4, 0x8, 0x4, 0xc0, 0x2, 0x7f, 0xf6, 0x3c}, {0xc000, 0x2}, {0x50000, 0x9}, 0x20, 0x0, 0x8000000, 0x6, 0x2, 0x400, 0x9000, [0x4, 0x5, 0x9, 0x9]}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x6, 0x2, 0x6, 0x5, 0xcc7, 0x8, 0x7, 0x4, 0x7fff, 0x60, 0x1, 0x8, 0x40000004, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0xffffffc0, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x40000006, 0x6, 0x10080, 0xfffffff6]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x10000000000002, 0x9, 0xffbffffffffffffd, 0x77, 0x2, 0x2, 0x4002004c4, 0x1003, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x9, 0x2000000000000000, 0x5, 0x8000000008d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m59.345129372s ago: executing program 2 (id=1782): r0 = syz_usb_connect$uac1(0x0, 0x9e, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000083512128240000102030109028c00030100a00709040000000101"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_create(0x3, &(0x7f0000002680)={0x0, 0x3e, 0x1}, &(0x7f00000026c0)=0x0) timer_gettime(r1, &(0x7f0000002700)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00030400000204031008"]}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0xff}, [{}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x6}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0x3, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x78f}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x3, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x20000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x5}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x4ed}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000002640)={0xc000000000000000, 0xc000, 0x200, 0x4, 0xa}) 3m58.318761166s ago: executing program 2 (id=1790): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20001) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000030516"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) (async) write$qrtrtun(r6, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) (async) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) fcntl$setsig(r2, 0xa, 0xc) 3m42.277853714s ago: executing program 32 (id=1790): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000800000095"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20001) ioctl$BLKFRASET(r1, 0x1264, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880089064803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000030516"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) (async) write$qrtrtun(r6, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r5) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) (async) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) fcntl$setsig(r2, 0xa, 0xc) 1m13.218067931s ago: executing program 4 (id=3854): write$dsp(0xffffffffffffffff, &(0x7f0000000000)="2562cbea2171f7926b72b92754af39fb3e8e28071a0fe06a1cc0244a2616718b4daaa22a8b1736d274ca935f8737b6e9b7a0e084310dd46fa9bc15b4222099c47e497d5f589afbf73cb39b0816bc0b093647f42683a36b9f65576315d7232e64ba24beabfb42614a4cc5a97bc8a71dbfc2a5c59a15e3ff94617b7471cb32f7da95d84ebd14713b1b81a32de2694bcc8b3fc7055515fa3e6c9c047dc6e65161d4eb8d30624d0b5ad4b7bb62a73245943ce10a3a4ad494d7b441f00c320c8832cf1ef6bf48b896ea556aedf2b65f786a7acd91f09cac85ffd33b33b388", 0xdc) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000140)={0xffffffffffffffff, 0x10, [0x3, 0x101, 0x10, 0xfffffffffffffff7], &(0x7f0000000100)=[0x0, 0x0]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x3ff, 0x2, 0x0, 0x2, 0xc69, 0x7ff, 0x0, 0x1, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r1, 0xc3, "a942fa20d273423b42cedcd6aae3adfb5dd880dfc5dede071ba9b908beb40702f13a723b4a7bea76fcf5290ef483f33e84553c61c5ea79fd7311a54a8da25366ba9200e267d640284045203e666faf22591e47f549447a1a6beef9d6d500c491e9854af51f780d33ef050d550cde053f872e7f866e0f6c854826fd9e6bdc314cf2219a7644205040f50b1d43cf36a8a319488929bbc59b506e992d633aa0159cf979b0cc229911a0aa5763315250ca63c1bc6f878b4de6141c66a1203ee50de11e5f4c"}, &(0x7f0000000300)=0xcb) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f0000000380)={0x3, 0x6}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000003c0)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000400)={0x18, r4}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000440)={r1, @in={{0x2, 0x4e22, @remote}}, 0x6, 0x5, 0xfffffffc, 0xfffffff7, 0xafd}, &(0x7f0000000500)=0x98) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000540)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000580)={r2, 0x4, 0x1}, 0x8) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x3, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x40090) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f00000007c0)={0x3, @null, r6}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000a40)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x170, r7, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x14c, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3f, 0x0, "15aaeba06481d61ddf478862abcbc63da0d2d3553128e47c2a0f81b55307d677f2857fdc7f879389885f08dfc40870711aee1332501cf0454d3426"}, @NL80211_BAND_5GHZ={0x53, 0x1, "3d54ca9d9a97c49e3ab4c574f6f077cdc92c8922e03ba839fd66a51bec26ab0dfcff6c7d115ecaa2ea83af230a6413271bc3eec7dc1df74d5c9e28798decedf177b4c264ad94d431c32d018e967923"}, @NL80211_BAND_2GHZ={0xb4, 0x0, "ceb92b00c169497b83ffc81a4ae7cc58691f18412a6b8e3bce0835efafbfccd53aceaae86d6d6cb00793a7c21d31f5e01ff5e7242b2ffeffbc974c98a1318c2b991e8579fa5ddc15388e792873f6bfb50b884d35cc78523116b2d48b23fb4e87dbcb64c0308e11f9d4f55d8dce312b60d3baca8baa141d16bb2aa2224821869a1be0e52a4ce196b539c20f4362b64a5bc81ef8add27da50834628a1a7b6e96d35257da63e9f8132b8ed95667500ac0a0"}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8880}, 0xc000) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000a80), 0x20000, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r8, 0x40046103, &(0x7f0000000ac0)={0x4, 0x9, 0x8, 0xff, 0xf8, 0x8e, 0x3, 0xfd, 0x0, 0x3, 0xf, "a2b01ce4e235719343f48a03fa713bf1240c905c42ab65b4086a82a5dba1228f"}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000c00)=0xe8) setresuid(r9, r6, r6) mount$9p_unix(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0), 0x200000, &(0x7f0000000d00)={'trans=unix,', {[{@mmap}], [{@permit_directio}, {@smackfshat={'smackfshat', 0x3d, '/dev/qat_adf_ctl\x00'}}, {@permit_directio}, {@euid_gt={'euid>', r6}}, {@smackfshat={'smackfshat', 0x3d, '\\,/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x62, 0x33, 0x35, 0x37, 0x33, 0x61, 0x62], 0x2d, [0x32, 0x0, 0x32, 0x55], 0x2d, [0x61, 0x38, 0x5c, 0x32], 0x2d, [0x66, 0x36, 0x32, 0x65], 0x2d, [0x66, 0x31, 0x35, 0x37, 0x2, 0x30, 0x30, 0x64]}}}, {@uid_lt={'uid<', r9}}, {@uid_eq={'uid', 0x3d, r6}}, {@fowner_lt={'fowner<', r9}}]}}) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e40)='ns/time_for_children\x00') r11 = syz_clone(0x40028c00, &(0x7f0000000e80)="4a3ff544081bc99ec7baab34c2ea89b418013c11956e3dbcbce62e67d6872a4e75de46ac86c2054316302990590856fb97cbb2a57d32ffb16732a49d41298ae601035ce6288fc9bb9b68ae424db0fc8ce0ae4bd7221b318da2f12f09babe5db2993d38c6f415999927c6f2ed7f9b59be29d1ee8ff309af83335785a585ceacc90e7f0f5e72ecde850c2605f212f61e99f5eafd90fbdba22c7393b4c0035773fedf664461669a9cbbf182f872b22beab6e365844e50263c11acf793d249193d3ba3955d45cabc33baad9e2006f6c5e268cc6968ead712845730faa9ba649feff67d4a93da556c2e542e2d8914a67914de", 0xf0, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)="b342eabb8d2dea8572208468433cc09457efe6774fa99f7f5886be5bd9d980714b6877e10937b01f604260854c02bc3e5f3b340ef221cdb5cfde75267e4b9b739ed4ee7de3fa79b9a4862485d30c70a4fdd014a39b3608af440c2500e4b8e272161a22f8255806fb6fce4057b4e0b2351917f295b69121ede7d10abc52a5430d02eb87d6767f67ef020396a7b57f689aec967429024a547e41d3cb82d79cfb67ce48c0dd7c86940c9980eab8769c53c843680359b374d75b936638d149b3c1844ccc6a63220c1960e8fa591aeb777480a8143f82973cd2b2e06170a6d8de83ba8accaf91e4d68bf53ebd2ef4") ioctl$DVB_DEMUX_DMX_EXPBUF(r3, 0xc00c6f3e, &(0x7f0000001100)={0x7fffffff, 0x0, r5}) r13 = syz_open_procfs$userns(0x0, &(0x7f0000001140)) sendmsg$nl_route(r0, &(0x7f0000001240)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x76ec2ce422d5586}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)=@RTM_NEWNSID={0x54, 0x58, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NETNSA_FD={0x8, 0x3, r10}, @NETNSA_PID={0x8, 0x2, r11}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r12}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r13}, @NETNSA_NSID={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0xd4}, 0x4040080) sendmsg$nl_route(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)=@getaddr={0x14, 0x16, 0x400, 0x70bd2b, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) setxattr$incfs_metadata(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0), &(0x7f0000001400)="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", 0x1000, 0x3) 1m13.165830599s ago: executing program 4 (id=3855): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x2, 0x7fff, {{0x12, 0x4, 0x0, 0x3d, 0x48, 0x67, 0x0, 0xb, 0x2f, 0x0, @loopback, @loopback, {[@generic={0x89, 0x6, "ddeca0fd"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0xa, [{@remote, 0xffff8001}]}, @rr={0x7, 0x1b, 0x4d, [@broadcast, @rand_addr=0x64010100, @local, @private=0xa010100, @remote, @loopback]}]}}}}}) sendmsg$FOU_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc84df75fbf8917eb}, 0x24040804) ioprio_get$uid(0x3, 0xee00) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getresgid(&(0x7f0000004280), &(0x7f00000042c0)=0x0, &(0x7f0000004300)) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000004340)={0x130, 0xfffffffffffffff5, r2, {0xfffffffffffffff7, 0x1, 0x0, '\x00', {0x2, 0x7, 0x0, 0x6, r6, r7, 0x4000, '\x00', 0xd6, 0x2, 0x2, 0x40, {0x4e, 0xe1ac}, {0xfffffffffffffffe, 0x9}, {0xe, 0x80}, {0x0, 0x10}, 0x7, 0x5, 0x1000, 0x27}}}, 0x130) (async) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000004340)={0x130, 0xfffffffffffffff5, r2, {0xfffffffffffffff7, 0x1, 0x0, '\x00', {0x2, 0x7, 0x0, 0x6, r6, r7, 0x4000, '\x00', 0xd6, 0x2, 0x2, 0x40, {0x4e, 0xe1ac}, {0xfffffffffffffffe, 0x9}, {0xe, 0x80}, {0x0, 0x10}, 0x7, 0x5, 0x1000, 0x27}}}, 0x130) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000004500)={{r0}, 0x0, 0x2, @inherit={0x50, &(0x7f0000004480)={0x1, 0x1, 0x6, 0xfcce, {0x20, 0x9, 0x9, 0x1, 0x4}, [0x80000000]}}, @name="d6d187fbe126b8d59dac5de43f8605b072ec00d64f07f6afccef24cfb5cb455f5c0191b265b7af1e68fa1e3a9d2e4f932d3d2966f1173d10dc05c89f88ee908a7230802e3616947452a428953ee114d9a1e8280e49e83a136c256ded448b2e77260a1dc3e8dfb9965ffeefd2bc31d67b705435e5f6b8bafab85b467338909c071222864b66f70aacee95ee5c5db1f0eb1c057a44e5dadbf22f30065f05f6b41b1cfe76438ee8b6135356b6a29c8e20d36c66f73ace10f083284dca9e4cf45bb83e2703ccea7c2e41ee02a4546dedde09459cfa872c3b6a9cbffa3e23d1fc4d5a4931d88a58509d24b168f28a80c7d96c6c5e34d50ac2d624b82ddcec8ebe3a9870115a6bea304891229cc7fa123a531afe8a42c1399d8d8a3a9cd65d8bd5d6838799a38ce7b55bbb9facf10aa5c3096cf7bca176513681914ac4e98ff3d3d7310a4f6fba8769ce114aca03851999e60b7d1d5cd080414deb4700c3b8f85340677a112f3a45129e308f2d2ace60ad000a2a120e03a6186d52d77765df21ce9c6385abe3e29a48fa03545c1e7767c0beec3557b593221a5c488a49e37dc4c884c39e72c1b3a74c0116668d732ffeaf1b0463e61668aeab1f8f7eaca7e192302f4d16aceebec0ff2d73be446e71b093c833cb544677375f2b582d1476e8596baf2387b55774ab2baf4288cfa23d8a445cf0eea6447a97dec315eeb2076c2b493425608aa54607b87f7f9ae67723a2b36a78d093726b7c50981f18ef2e8681fedd0730fd4add232e2af91e23a568284dc38c39f8a05dfabd214ee42639f470351bc9421b9783f0556ddbd021554398accb195dff3f0769535907d9b6acdef49d2dbddc05193df63916ea97a5e5023efe03b2537ae77e423cc26b1fb4fde09aa50c5d0bbbc474ba5637d64df5b2020d7061caa0af12d4fad859d7091cfba766f74a301db685ecaab68faeecb2df225fd9a225acc6800b9ce2606d3bd37ab7bb2c26410e81aafe4867427e8d6e7e631368aca0a24b92e5767bf9e6ce05b7a7024d9ada5551a0ac6e410c1aee1b71d4994a56cc2902f93c4e871edf728e2fa8343e6078ef64ead3634ef2166ca554a3fa4b1da08b58c47357f73ca7cc6585c418fe6ca89fd35f5de8aa918721bd439c745f0722a42b8476198dcae9f35d47776475a70cbd1282f9ae97e2d2b7d6b1babb4aa2872877f0a145c77a2608ac0ee402d3453b2bb86b2a38b2e57ba3a0b1bf1847b72b471fc652db84c351876e0271d714828b4bf707cf349ef7611711bfa3a4a3120419ad3116aa3ce8829a3685a5d5e4a16c1910699a3ec9e9a4a20da115404c03c84e7987062df7a1d6afaf6ad8769f401c36db01c61d3b12f09b66a2db65bb3650531d845117b5b919f6f34d9f31b0cc324b862e2d2e717e4d42ec7c1f67c139d0310be5c2c7ca8a9664d299369d1e0ef43eebb6a089509d846de6be2d574f42c35f05cd987e82dd71c31386e7d42a99344d79168572846afaeb3bd73557e03137fce54b96bd1402be9c98a69d0724828fd7fb9f2fa2c9cf52b9969bd1bbc16695b3028c1ad872add085be42dd04f06f0212cdbdf759c446150d7fd0b0976c4b15ce9e23e77ad0d1fd6ad22732bdf54ee82891fce980057de2752dd62bbe9ba0bb83eb55018c55ecdb8850052fd8bf6d541fb130226b1817b8a4f07a1d52a1feff6b5918d3ee97d0c35b4eeb96b26e09dfcd67b77e4044e1397c94b2a8d77a5194971e5a4302dfa632a498473c807219420b18913ea84f8c070fa9f55a10937a6ce15e5a29058748876a3e94e217b2f25687b7f88f795679774843f4f80f3f43babbbff65283eabdd957e89e795a7d9151450a041500c0016bdf41779a5081ca3c80df5f8d006c6b39ffa3e2da83f2bb87899c92b9d8c92ef1d90d6d3fe85df0ab92d138eeb7c0a942e1e83ecf101c3a55fa9dd5f068ca891976da623d282191fa5ad64014ef966b127a9243e8ae0314eae92efc0c910c57f3baae6e9c91c418f214ac0716764bef7140bda43ba165a85ecd06e503986e28a3b13a0bc17a7b4795cc105375e9e63f1f65b2d47cf197dc2ab7d6845085d31274640c0d03dd6a9950ff93ba9202039669a87f058abd59059d8b9fed8fe1f941be43633bebdf937733ef3d2e3c7a90d2273d944ecb3fb2ff947d4af999f2ef2cea940c53d52f1a7a40d00ebe26861b2c2827b31c6b98505c7a96bc85148d95da5840f9c3043591cee46fc95b1ccbbadaf85e2de1a94a1cb316c2af0c8dfe7ebaad267cc34a9bbdc2ed936e5f5984625f93c372440a5ef6522f974872c13e544416299f16961e53e0995bc7365473453c4c2cfdc13768c255df74705bb3995a90574e52c79bc9e03b11d035c4b92094cbf38b604c76c01354f0eeb4dca9df469ea807db8f60fd07fb5b615a20bd76463fad62f4170fb2e97d59628907ad3a2ffb4c9f35636ce93cadabc8dbbdfe2056d07d468b3ecaf92c53c2e1fc7c3b987fe60b967faac4255d148989e0a07ae4ced4ca0e499314ab4de897e4205f9a5592487617b8b2a16c3db26bee951de730c3b2873980a2054338fa47a8878cfe6a6855a9bdd95cf3e5eae4f499f10087f433c77ff1873544764ed3dafd0007046c57c1e9a25487f23cc48994741dd81215470624ebba5edafc8d134aa48bfdd8affdd9a8d7b86b5449a1b10eee8d9af5abfc2e9cfec7197014afa425a45fdc361575b01b8ea39711b832fed6bfd3fe5b20049390fb302c4b8d8467c4ae62ee9c824f85a401f8a034d4b1bfe6c226a3936a8988809146aa9f7c375df6f9364a8988ff5fb587c432403043e3d830a39ef743a54276dee31d1270fe2797d9c5e84f0b77498b2cb528cf8f121f676fe912f38687f026c93bbb4b2acdbce28f6ee439e90d7286041a0b0d8ff2e2b4a73795498094b1ad29ec34a33849676a4272e5a2ba4337169346838070dd89f9db621a8e0201d1fd28c363194cea876f938680e18035f10be32d7215d7ed82c3172c3d82943e7fff7ef01fc7a43c5906de6db6cb0141329b313f8f8df476cee45863b183f3dc26005cf32304a4a61b47cb74a2278a86556e95c1cc4f01e29413eeff7ca7f0ef6d0f48704ce12e6b48c185cb60fcdadab2b90cbe7ac8085071fb320dbb73ffe2e249174503ff2b27e1562e34e8e2e8ae9fb21fa7ddc9f25cd1b8bd2f8bbdcfc44c8cb249fb9b03862358498b573751d3fd90c8a67ee6f2ac0ff7cc9e7e08e3d66ad5ec782be9e3e4020d1c4c93f2392530f801589bb85326291d3cb02c5a7f29bad47b1c29bdf60d4c453eafe4cf787ce151e38c591ddfe6f53046007105f98bc17ea2d1107dacc49f6af5589eb20ee80d687dd387887761731150330164af55ff005476421d62c08466e377c79214ddb597b730928c0557a7479bfc55e78eb4c96b1bd345d2c6eebe766ce5611ceb4985e3d9b8e708ee889ab438cbfb965b520546f5cb06429ed4bd9214f603e8ffb1d90f63d06389a6b7ffbdde5dde7644e1ff9e746b9877561c9a168630e66b71d88bb90183994da0dc35cfe4c92994de164b9e7a3918f179968275189a65a03280e0db304a5bb3cd015ce22b47e7773ce463f9c1f5f10b6b5a70be59bb3b0158687b6cce8dad009aa3cac434bfe0fe7bc2a5c23facf718efb01c22548739b45adfde4299ae5c5901dae57ce9dca62775baf2c034019eca1c077ecff62e4f7d7d4317ed34cba1a08fcb2b0e54084b253aff0fd6a3381eb1563344037f346cea7121dc041a6084d21045742c9d78c04827c68ade83ebd3cad66dc1eaba809e102ac5cb5cb19f54b5af4fe799d98674641dbd46aea63dd234f376f82d3bb8ad7ccb4d5de87468e1dd302098d4bf517998277eb05700829807c6ffbddd2b9428dfb7767c30dd03f98dee2500f27937b4da4898d9e7ad24873df3bc24014486f0b41a3385e16046881ad40eaa707594415690a08f294b7d2b891f16c3e1ae8c44c252ef9e70b73cbefa5bdd55a3cc152f3ae43ab193b1d18cd8277bfaf9f91ca1c8ac1b75c56a1c75ea75c069d952df450979a66c918c954960e024322e084014f7fb734bbb66b2e891762bfe4a6e74363253e818046660b4858492d9485ae8fb854a6af8102e3ff072d87f5181b3ac8fec142cf65721441e7bdf5c8ab3db824839c408176e6bdd09b3b1cb9d07ea2c86989beb446d2ec21c00794fbaddf17739824c2a26c4812ec54a95668749613d1d5cd2cb4eb25fb685439db5867b4c86e48e75dc156887920f9d5f6e4758d9817bb69480e1980422d6bf7bac9c6cd8db53a023ce7bb39f942d76c68e715dcc3f1d4c06207a7aac668926ef91a0be67797c410769b0f2faaf07d2401ed4a13f8c0288a3518d12db50b31516f5f3dbd3b280a0136ff4b3164b1e2db55d4bdfc222b17fdff8b9effe820eee81f7358173b780788959819cdbe74916623c075e76efb851dc5e6c0cb158be53ece7ea5706a9768f9bce54e79213604f284e570d073ae67748ef2c37bc2658e023f4a2a508ed61e9ccf26f8f067e9e1f56c5d8738f81a9bef4b7c94b6f09a825ba2f9b933539a904dcb3d97839cf62accca55e0ee53d9d73825b00c9fda0e01c7dd96a077dce288f7eaed06913e388968912e124f30dce0b5400bb99545b5de50a205802d97891a67c5fdd923858d8860f634575f34c3f705d6a7c22f072c821ecbfbcad167abce8996409eee28d43ba4687665f10e011a3bfb8c0b07592b7cdd2fdfc0036676cbafe20816b16d4dda13a16e86d13878dc839ec56a1d89e8912ead95e8f65b3d7ccb364d91935869ce2fd2b68ab16b50d10191882cd1a0770682d251eb5eabab20a407acf24486f521930418ab66d35e45bc94d6106b81fec88ca2248502aa8039392bdb497543210cda18ccdf4844ef6da903884fb244fde7e4488f4e0b4a478a4313f722ffe579b1e51b97a09086c6cfcecf5b83fd8ed54e63ea5edb8f7e1c2e7de7a6c2f09ee13b89ccf5a1db30dba3cbc7406f2ad315f68f213c5bca63c4693146c6e26775d0f0fb1a827422e60112d92c1cd0b55545952d6c94037ed2dcf8c9b832efe51b6bc5e8873081dea34d78eb4e81768a568d1e16fcc02b2e6f46e8680d5204843842f163b1956d581b11e003be0b9858ded94584dd683c0486627b096b4a0f63506144fa05b362bcf8300deed2edf867fbfad8b739eeacf2493f7157ac90a7c7c21d9b18601c65d42ed42555ccd8daa74fc84690f241d5d69edd6f7cabe017851d74da1e516010b73db28e28b4cacb319622191c4d70e41ac04c77f3411d560e36d6640bb4ce76ad06cf554039e4c2388bcaa87063c1181b27ffb08cb41dc4a53383c7d3596b3f5f3dd580ad70bb2295661ce36ac3f74630b14f6862f2b040c704b51b52ecb87553e50fa3b4addb8dd301f83c93e4c3b5d7cd864ede06b3906dbb70125f834d826748aa151e89c4d2c9f31d23a37f27b85eb12c3553c85512a4c2eff5af451f1f5c0b500c3873b6f74a4a1693936931c2f4e12589b5f1872f1de6674a3bb934c770c88d7851a13d79069fe27010e5c084ca58c6c9943f61cc214c379f312dafefab03537b7ce3b7a800f33efabae8202fcc5aea74176de38a47f529dbe7ff79131e5f6b60fe4215fd917daea377a44a667bf4aa7dc476466e23ab6451ebd2c8225f7ba15e098b6dfef6753d69465da01d124827736cfd2c294"}) syz_genetlink_get_family_id$SEG6(&(0x7f0000005540), r0) (async) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000005540), r0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000005600)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000055c0)={&(0x7f0000005580)={0x2c, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x400c800) (async) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000005600)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000055c0)={&(0x7f0000005580)={0x2c, r8, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x802}, 0x400c800) mount$afs(&(0x7f0000005640), &(0x7f0000005680)='./file0\x00', &(0x7f00000056c0), 0x1000000, &(0x7f0000005700)={[{@dyn}, {@flock_write}, {@dyn}, {@flock_openafs}, {@flock_local}, {@dyn}, {@flock_local}, {}, {@flock_write}], [{@fowner_gt={'fowner>', r3}}, {@euid_gt={'euid>', r6}}, {@uid_lt={'uid<', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@flag='posixacl'}]}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000057c0)={0x90, 0x0, r2, {0x3, 0x2, 0x95a2, 0x3, 0x0, 0x6dd, {0x100, 0x7ff, 0x9, 0x0, 0x4, 0x0, 0x6, 0x2, 0xffff, 0x6000, 0x3, r3, r7, 0x9, 0xe}}}, 0x90) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000005880), 0x4000, 0x0) write$tun(r9, &(0x7f00000058c0)={@void, @void, @mpls={[{}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x5}, {0x10d8}, {0x2, 0x0, 0x1}], @ipv4=@icmp={{0x1e, 0x4, 0x2, 0x7, 0x80, 0x66, 0x0, 0x8, 0x1, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@multicast1}, {@broadcast, 0x8}]}, @rr={0x7, 0x7, 0xb3, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x94, 0x10, "f265a94eb23c02fc892ed6c4dc90"}, @noop, @cipso={0x86, 0x20, 0x1, [{0x7, 0x11, "eac30948a560a321619d567972af9b"}, {0x1, 0x9, "591ada78847b5d"}]}, @ssrr={0x89, 0x7, 0xca, [@rand_addr=0x64010102]}, @end]}}, @info_request={0xf, 0x0, 0x0, 0x0, 0x3}}}}, 0x9c) (async) write$tun(r9, &(0x7f00000058c0)={@void, @void, @mpls={[{}, {0x4, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x1}, {0x5}, {0x10d8}, {0x2, 0x0, 0x1}], @ipv4=@icmp={{0x1e, 0x4, 0x2, 0x7, 0x80, 0x66, 0x0, 0x8, 0x1, 0x0, @local, @local, {[@timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x8, [{@rand_addr=0x64010102, 0x6}, {@multicast1}, {@broadcast, 0x8}]}, @rr={0x7, 0x7, 0xb3, [@rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x94, 0x10, "f265a94eb23c02fc892ed6c4dc90"}, @noop, @cipso={0x86, 0x20, 0x1, [{0x7, 0x11, "eac30948a560a321619d567972af9b"}, {0x1, 0x9, "591ada78847b5d"}]}, @ssrr={0x89, 0x7, 0xca, [@rand_addr=0x64010102]}, @end]}}, @info_request={0xf, 0x0, 0x0, 0x0, 0x3}}}}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000005980), r10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000005980), r10) setpgid(r4, 0x0) (async) setpgid(r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000059c0)={{0x1, 0x1, 0x18, r9, {0xfef6}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000005a40), r0) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000005a40), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r11, &(0x7f0000005b00)={&(0x7f0000005a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005ac0)={&(0x7f0000005a80)={0x2c, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x675}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$FUSE_DIRENT(r11, &(0x7f0000005b40)={0xa0, 0x0, r5, [{0x0, 0xaa, 0x2, 0x7, '($'}, {0x1, 0x3, 0x5, 0x996f, '\\%!%#'}, {0x5, 0x7, 0x0, 0x1}, {0x2, 0x1c, 0x1, 0x5, '\''}, {0x5, 0x8, 0x0, 0x1e}]}, 0xa0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r11, 0xc02054a5, &(0x7f0000005c00)={0x4, r0, 'id1\x00'}) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000005c80)=r13, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r13, &(0x7f0000006380)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006340)={&(0x7f0000005d40)={0x5f8, 0x0, 0x99c1d293a40d3ea3, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0x148, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0xff83, 0x6, 0x1, 0x2, 0xa23, 0x8, 0x16f]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0xa}, {0x7, 0x3}, {0x2, 0x9}, {0x7, 0x6}, {0x3, 0x4}, {0x3, 0x1}, {0x4, 0x5}, {0x6, 0x9}, {0x2, 0x9}, {0x7, 0xa}]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd7, 0x1000, 0x4, 0x4, 0x2, 0x2, 0x9, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x3}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x2, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x3}, {0x6, 0xa}, {0x2, 0x9}, {0x4, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {}, {0x4, 0x7}, {0x3, 0x4}, {0x3, 0xa}, {0x3, 0x3}, {0x3, 0x3}, {0x1}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x1}, {0x6, 0x4}, {0x1}, {}, {0x5, 0x9}, {0x3, 0x8}, {0x4, 0x2}, {0x2, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x4}, {0x4, 0x7}, {0x3}, {0x2}, {}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x2}, {0x3, 0x3}, {0x7}, {0x1, 0x7}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x7}, {0x3, 0x1}, {0x7, 0x10}, {0x1, 0xa}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x3}, {0x7, 0x8}, {0x6, 0x5}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x9}, {0x6, 0x7}, {0x6, 0x7}, {0x4, 0x6}, {0x3, 0x9}, {0x3, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x2, 0x2}, {0x5, 0x3}, {0x2, 0x3}, {0x3, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x1, 0x4}, {0x1, 0x18}, {0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x6}, {0x3, 0x7}, {}, {0x0, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x4}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x8}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0x6}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x4}, {0x1, 0x1}, {0x7, 0x5}, {0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x6, 0x7}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x3, 0x1}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0xa}, {0x2, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x224, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x0, 0x0, 0x800, 0x5, 0x200, 0x9, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x71b3, 0x26c4, 0x4, 0xfeff, 0x8, 0x8, 0x3, 0x7fff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x16, 0x18, 0x1, 0xb, 0x1, 0x18, 0x9, 0x33, 0x36]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x30, 0x6c, 0x3, 0x12, 0x48, 0x17bc0d540b964664, 0x30, 0x6c, 0x5, 0xc, 0x16, 0x16, 0x30]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x7, 0x1}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x1}, {0x7, 0x1}, {0x1}, {0x1}, {0x2, 0x5}, {0x4, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x3, 0x9}, {0x6, 0x4}, {0x7, 0x8}, {0x6, 0x9}, {0x3, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x6}, {0x3, 0x1}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x2, 0x7}, {0x1, 0x6}, {0x7, 0x1}, {0x5, 0x8}, {}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x1, 0x7}, {0x0, 0x1}, {0x7, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x4, 0xa}, {0x4, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0xa}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0xa}, {0x7, 0x1}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x1, 0x8}, {0x5}, {0x3, 0x7}, {}, {0x7, 0x4}, {}, {0x2, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x8001, 0x5, 0x9, 0x0, 0xd95d, 0xe, 0x10]}}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x3c, 0xc, 0x3, 0x48, 0x1b, 0x3, 0x30, 0xb, 0x1b, 0xb, 0x36, 0x9, 0x5, 0x6, 0x36, 0x30, 0x1, 0x16, 0xb, 0x5, 0x61, 0x16, 0x2, 0x3, 0x2cc3dce01c4f8ba8, 0x18, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x4, 0x2d0, 0x2, 0x1, 0x0, 0x81, 0x8]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2d, 0x16, 0x18, 0xb, 0x1b, 0x24, 0xb, 0x16, 0x36, 0x60, 0xb, 0x48, 0x5, 0x1b, 0x30, 0x0, 0x36, 0x60, 0x6c, 0x30, 0x5, 0x16, 0x60, 0x6c, 0x3, 0x16, 0x2, 0x36, 0x1b, 0x36]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x0, 0x11, 0x1, 0x1b, 0x6c, 0x18, 0x36, 0x1b, 0x9, 0x30, 0x2, 0x6c, 0x16, 0xc, 0x5, 0x68, 0x16, 0x48, 0x3, 0x16, 0x60, 0x9, 0xc, 0x6, 0x1, 0x3, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x8, 0xfffc, 0x0, 0xff, 0xbd57, 0x7f]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x3}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x6}, {0x1, 0x4}, {0x0, 0x3}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x2}, {0x2, 0x3}, {0x3, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x6}, {0x2, 0x4}, {0x3, 0xa}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0xa}, {0x1}, {0x7, 0x8}, {0x1, 0xa}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x3, 0x4}, {0x6, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {0x2, 0x5}, {0x6, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfffa, 0x2090, 0x6, 0x10, 0x3b1, 0x5, 0xa]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x270, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0xa}, {0x1, 0x3}, {0x3, 0x5}, {0x5, 0x7}, {0x1, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x7, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x3}, {0x1, 0x8}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x1}, {0x1, 0x9}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x6, 0x9}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x7}, {0x6, 0x2}, {0x7, 0xa}, {0x3}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x4, 0x7}, {0x5, 0x2}, {0x6, 0x7}, {0x2, 0x3}, {0x0, 0x9}, {0x7, 0x2}, {0x0, 0x6}, {0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x2, 0x9}, {0x2, 0x5}, {0x7, 0x3}, {0x2, 0x9}, {0x5, 0x2}, {0x6, 0x5}, {0x7, 0x9}, {0x2}, {0x4}, {0x7, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x8}, {0x2}, {0x3, 0x6}, {0x4, 0x7}, {0x2, 0x6}, {0x6, 0x3}, {0x1, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x4, 0x7}, {0x1, 0x2}, {0x4, 0xa}, {0x1, 0x3}, {0x6, 0x6}, {0x1, 0x9}, {0x2, 0x1}, {0x4, 0x9}, {0x5, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0xa}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x7}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x4}, {0x2, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x0, 0xa}, {0x7}, {0x5, 0x2}, {0x5, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x3, 0xa}, {0x2, 0x9}, {0x7, 0x7}, {0x1, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xf, 0x16, 0x5dc6, 0x7ff, 0x7, 0xf8b, 0xd00]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xb, 0xc, 0x44, 0xb, 0x6, 0xb, 0xf, 0x16, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x18, 0x9, 0x4, 0x5, 0x36, 0x12, 0x9, 0x9, 0x18, 0x6c, 0x9]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x3, 0x7}, {0x5, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x4}, {0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x3}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x8}, {}, {0x5, 0x8}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x2}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x2}, {0x4}, {0x0, 0x1}, {0x5, 0x3}, {0x2, 0x5}, {0x2, 0x6}, {0x4, 0x6}, {0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x8}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x8}, {0x6, 0x8}, {0x5, 0x4}, {0x6}, {0x7, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x4}, {0x1, 0xa}, {0x2}, {0x4, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x7, 0x9}, {0x2, 0xa}, {0x3, 0x3}, {0x6, 0x2}, {0x5, 0x5}]}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x2, 0x5, 0xc, 0xf21bf925540924ed, 0x4, 0x60, 0x2, 0x36, 0x1, 0xb, 0x6c, 0x18, 0x12, 0x1b, 0x24, 0x18, 0x48, 0x24, 0x1, 0x36]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2b, 0x18, 0x5, 0x24, 0x6]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x2, 0x4}, {0x4, 0x6}, {0x2, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0xa}, {0x3, 0x3}, {0x1, 0x3}, {0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x4, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x2, 0x6}, {0x5, 0x8}, {0x7, 0x7}, {0x3, 0x4}, {0x5, 0x4}, {0x5, 0x1}, {0x4}, {0x7, 0x7}, {0x0, 0x6}, {0x6, 0x4}, {0x2, 0x6}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x6}, {0x0, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x5, 0x3}, {0x6, 0x8}, {0x1, 0x3}, {0x4, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0x7}, {0x4}, {0x0, 0x2}, {0x1, 0x3}, {0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x5, 0x8, 0x800, 0x5, 0x5, 0x1, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x4, 0x8, 0x94, 0x2, 0x9, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3a, 0x40, 0x7ce3, 0x5, 0x0, 0x9, 0xc08, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x2, 0xee1, 0xba19, 0x8da7, 0xc3, 0x7fff]}}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x4, 0x1000, 0xb8, 0x9, 0x9, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x43b, 0x4, 0xfffe, 0x400, 0x100, 0x0, 0x1, 0xaac]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x30, 0x5, 0xc, 0x2, 0x4, 0x5, 0x1b, 0x6, 0x6, 0x72, 0x6, 0x2e51c1b1d163265d, 0x4, 0x5, 0x5, 0x16, 0x4, 0x5, 0x60, 0xb, 0x0, 0x9, 0x0, 0x9, 0x16, 0x18]}]}]}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x40040}, 0x20000004) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000006400), r11) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r13, &(0x7f00000064c0)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000006480)={&(0x7f0000006440)={0x18, r15, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x1) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006540), r10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000006600)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000065c0)={&(0x7f0000006580)={0x24, r16, 0x210, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x80) 1m13.165536072s ago: executing program 4 (id=3856): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r0, @ANYBLOB='.'], 0x20) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x12, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='westwood', 0xcfeab749528c43bd) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) r4 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r4, 0x4147, 0x0) sendmmsg$inet6(r3, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0xb00}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x5f5131cd, @local, 0xc}, 0x1c, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="180000000000000029000000390000013200010300000000"], 0x18}}], 0x2, 0x4000000) 1m13.083037402s ago: executing program 4 (id=3857): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001"], 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}, {0x7, 0x1, 0x1, 0x1, 0x624, 0x7, 0x8001}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x100001, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000380)=r1) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x841, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fdc10000c8b950020000b801000400b9a6080000b80800010066b87a000f00d8b93c0b00000f320f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x69}], 0x1, 0x14, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffe, 0x400, 0x3, 0x0, 0x4002004c4, 0x1004, 0x8080000000000000, 0x9, 0x0, 0x4, 0xffffffffffffffff, 0x7ff, 0xb3, 0x8d], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.5241436s ago: executing program 4 (id=3860): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x62f) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9}}}, 0x7) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)={0x30000004}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500190002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000001400)='mounts\x00') read$FUSE(r5, &(0x7f0000003ac0)={0x2020}, 0x2023) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000046c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5678c1", 0x0, 0x2b, 0x0, @empty, @local}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x40801}, 0x0) epoll_pwait(r3, &(0x7f0000000600)=[{}], 0x1, 0x7c0e, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 1m11.573477204s ago: executing program 4 (id=3865): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@noextend}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@noextend}]}}) 55.480150146s ago: executing program 33 (id=3865): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@noextend}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}, {@noextend}]}}) 1.998072647s ago: executing program 3 (id=4367): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905832ee2"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40f3) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 1.206730087s ago: executing program 5 (id=4375): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000004c0), 0x48, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff2, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(0x0, &(0x7f00000019c0)='.\x00', &(0x7f0000001a00), 0x10080, &(0x7f0000001a80)=ANY=[@ANYBLOB='noacl']) 1.058344734s ago: executing program 1 (id=4377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0xfff5, 0x0, @mcast2, 0x7}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x40800) 1.057891271s ago: executing program 1 (id=4378): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1000000, 0x20000}, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x3c9d, &(0x7f0000000040)={0x0, 0x7349, 0xf080, 0xc, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000000000)={&(0x7f0000000240)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r4) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)={0x14, r5, 0x1}, 0x14}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r7, 0x29, 0x4e, 0x0, &(0x7f0000000040)) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x6}, {0xffff, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000100)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x2}, {0x0}, {0x0}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x1}, {&(0x7f0000005000)='\f', 0x1, 0x3}, {0x0}]}, 0x8, 0x2}, 0x1) writev(r0, &(0x7f0000003340)=[{&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="f9d0561d7c5caef051ec3208890656a7dc0253971aea1ba77c960fc222fc860e878b8d4e9d60d77d44f58b2203a8bb37310a4260165366cd2f6b6fb273bf221ad1d646665859fa6d254f3d3cab0ca4b08d382c805e2fe96e43f4b5f091", 0x5d}, {&(0x7f0000003080)="b6d58ec30fd8093ff81d9c286ad65cf4e1f0e601d933cadc704e9d1c1faf7b59066c32648b530dc7546f154844c56131ff703031517cfe27ef978bb56f36ce933886a4f64c8361ccc7452e3bc1c3856609ed1b858fc4be25b9cfb7c2853ecc759defb445bf330fed347488d4a4a7d9fe45ab8011bb6ad3689545a3ba34b79a8cabe3d1bd51f7964083b8e9f93a741b91314d7d654567b3659ec280e37b924f6f40acb0cacf9f38b44b53bbef4d18f7ef47396ec6b839e23eab9044e0794a7586a87875748129b62956ba2df5e11768f212782a5642e18fa7", 0xd8}, {&(0x7f0000003180)="61a4c87f5afa6561954d5530ff6806dc04a087da52406c82ed6c7563ddcf", 0x1e}, {&(0x7f00000031c0)="7f91a96412b7eac80380268c390931c68f0332080cea7112cc649247b1930dcf78ab69cba55edeb91e8968bb187f2b3c38dfa26154922beb3a4493405aa98fe85a56c1776ee61225a24e67b7046a6c1feb477c3e6f2920d6dc8955d2fc526e6362c232f5885a5cfd049da050b5cf9a53bd802e841ee4a9edfb96c514def7e9835bcbd5399c4499bcfa30353f9e7d4a61f018a3e3eaa54482fcae", 0x9a}, {&(0x7f0000003280)="4b33de9ad36a23077544af5a49929abf8a932259321a1648a5887bd8ecaf43d2fff6da00c03d851a9354cdebf17ceca8547ab90d", 0x34}, {&(0x7f00000032c0)="b7d74fa4cd68cf6a593ab89a6b6fb3190a0237a39a6d22278543610401b316fef22e242f05c28473e22617836727e5d423968aff4a1a66b4c901019ca1d6388666654e04b31e27a32249cb53c31612ba9499390e73a3e1d73d3cb5117733e29bd6e7bff40d8557972688329efb5bfa73379bf8834434b1b98f97e53b", 0x7c}], 0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.004255552s ago: executing program 0 (id=4379): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = fanotify_init(0x200, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x161, 0x40000867, r6, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000000c0)={r7, 0x7, 0x9, 0x4, 0x428e, 0x2}, 0x14) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) fcntl$lock(r8, 0x5, &(0x7f00000031c0)={0x1, 0x1, 0x0, 0x4}) ioctl$VT_ACTIVATE(r4, 0x4b44, 0x10000000000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}]}}]}, 0x50}}, 0x4048000) 1.003695655s ago: executing program 5 (id=4380): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000c40)={&(0x7f0000000000)=0xcc1, 0x7, &(0x7f0000000840)=[{}, {}, {}, {}, {}], &(0x7f0000000c00)}) (async) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000c40)={&(0x7f0000000000)=0xcc1, 0x7, &(0x7f0000000840)=[{}, {}, {}, {}, {}], &(0x7f0000000c00)}) 1.00221158s ago: executing program 5 (id=4381): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) (async, rerun: 64) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (rerun: 64) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) close(r0) 898.192969ms ago: executing program 5 (id=4382): socket(0x400000000010, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair(0xa, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) memfd_create(0x0, 0x0) syz_clone3(&(0x7f00000001c0)={0x100001200, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 897.93799ms ago: executing program 0 (id=4383): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200ebff0000030600000000040004000000000010df05000000000020000000e85d3100000000"], 0x24, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x80, 0xebc4, 0x3447504d, 0x5, 0x9, [{0x400, 0xffff}, {0x7ff, 0x200000}, {0x5, 0x7ec1}, {0x7}, {0xd451, 0x1ff}, {0x6, 0xffff6a84}, {0x40, 0x9}, {0x5}], 0x60, 0x9, 0x12c3ebd226d963a, 0x0, 0x1}}) 769.556661ms ago: executing program 0 (id=4384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000bc0)=ANY=[], 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/vmcoreinfo', 0xc001, 0x7a) r4 = syz_open_procfs(0x0, &(0x7f00000008c0)='uid_map\x00') write$RDMA_USER_CM_CMD_LISTEN(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@deltclass={0x60, 0x29, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0xb, 0xf}, {0xfff2, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0x32}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x8c, 0xe}}, @TCA_RATE={0x6, 0x5, {0xa5, 0xc0}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x22}}}, @TCA_RATE={0x6, 0x5, {0x0, 0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3, 0x12) 768.598518ms ago: executing program 3 (id=4385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af4fe800000000000000000000000000010ff02000000000000000000200000000189"], 0x340a) 767.385325ms ago: executing program 0 (id=4386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0xffff, 0x0, @mcast2, 0x7}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x40800) 673.571415ms ago: executing program 0 (id=4387): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES8=r0, @ANYBLOB="06255f89ec2ccceb7aaa5ad8ee51ebea87ba009c7108d243c4f60e43a7d32217dc336db5cbb9dce5fdcdbf378700a806785c0b32ec3e52d2895c3aaf174437e3384ae0939401145ea629f20b9f4fa3df8942b5d2705dc28a675ef93d42ab1e33ac68cd53bebef9c353872559b7aa310f75761a93fdfe4a46dbba", @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map=r1, 0x5, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) syz_open_dev$vim2m(&(0x7f0000000140), 0xa39, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0xa39, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp={0x1, 0x3, 0x35303553, 0x8, 0x0, [{0x7f, 0x5}, {0x2, 0x200}, {0x3, 0x7}, {0xcb5, 0x8c}, {0x5, 0x80000000}, {0x8000, 0x4c1}, {0x1, 0x4}, {0x3, 0x3}], 0x5, 0x4f, 0x8, 0x1}}) (async) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000180)={0x1, @pix_mp={0x1, 0x3, 0x35303553, 0x8, 0x0, [{0x7f, 0x5}, {0x2, 0x200}, {0x3, 0x7}, {0xcb5, 0x8c}, {0x5, 0x80000000}, {0x8000, 0x4c1}, {0x1, 0x4}, {0x3, 0x3}], 0x5, 0x4f, 0x8, 0x1}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x110) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x110) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) sendfile(r3, r3, 0x0, 0xb) 673.413922ms ago: executing program 0 (id=4388): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905832ee2"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x4000) (fail_nth: 10) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 598.017328ms ago: executing program 3 (id=4389): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) chown(&(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0xee01) 597.880508ms ago: executing program 3 (id=4390): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x45, 0x0, &(0x7f0000cab000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0x4, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x34000}}}]}, 0x28}}, 0x0) 543.958661ms ago: executing program 3 (id=4391): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="640000001000030516"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r6, @ANYBLOB="010026bd7000fbdbdf2514000000080001000100000008000300", @ANYRES32, @ANYBLOB="0c00060001000000010000000c000600000000000000000008000300", @ANYRES32, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$qrtrtun(r0, &(0x7f0000000340)="66bb0b760dc0f4ff", 0x8) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x9}}, 0x40) (async) r10 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000540)=@IORING_OP_LINKAT={0x27, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1200}) r14 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r14, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, 0xff}, 0x1c) (async) setsockopt$inet6_udp_int(r14, 0x11, 0x67, &(0x7f0000000040)=0x7, 0x4) r15 = fcntl$dupfd(r14, 0x406, r14) write$cgroup_pid(r15, 0x0, 0x0) (async) io_uring_enter(r10, 0x1, 0xeed, 0x1, 0x0, 0x0) (async) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') sendmsg$nl_route(r16, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv4_getnetconf={0x34, 0x52, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x10000}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008801}, 0x4) 542.535885ms ago: executing program 3 (id=4392): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x2ab, &(0x7f0000001340)={{0x12, 0x1, 0x310, 0x9d, 0x7d, 0xa8, 0xff, 0x19d2, 0x1432, 0x77f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x299, 0x3, 0x5, 0x9, 0xa0, 0x0, "", [{{0x9, 0x4, 0x86, 0x7, 0x7, 0xd9, 0x16, 0x66, 0x5, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a8d2"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x719, 0x81, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0xd9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "9e"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x992, 0x3ff, 0x3}, {0x6, 0x24, 0x1a, 0x4, 0x10}, [@country_functional={0x6, 0x24, 0x7, 0x2, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x7, 0x36, 0x80}, @acm={0x4, 0x24, 0x2, 0x8}]}], [{{0x9, 0x5, 0xc, 0x8, 0x10, 0x0, 0xff, 0xb}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x96, 0x0, 0xa}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0x70, 0xd7, 0x2, [@generic={0xba, 0x5, "e8e5140a36f29c7a8272199e8a23fbb04c658be51cf473667e9ce8590a1c72341ef379a8f97aacf5f823bef57480d6d3a0b04ee4878a6baa6ad75ca6bd389ae94efdae451e0009d333de0ee4b19929c85cdc4cdff7be042d8018edbc878a3ba30048bcc328c08b685cfd52398569e251f8b972b6d006fa4053dc89baecb4c7e677f040e1ac483c4ba0842a0cb74feec6df51ae9217e8e934c4bf39b6464e3932bc396b70f9694e0c58c5c71d123758c8e2d1a707d2ba8359"}, @generic={0xc, 0x2, "ab456edc7936c71f0aa0"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x9, 0xfc, 0x1, [@generic={0xe7, 0x23, "7a5fce560a522bc7f5beec601b3725eda5a6442cc1c345f222182199cb60766fb9d5b308cf24637543183e1bb877a46006921011f6370b60e19d64f1fdc4e3a1e29c28a5227b27b65ace316bc8584820246e8dbb47a578e2d895f52eb4c763fa4da5f8cc9bc71b09a834c861c269dfe0acd3d315d8f196813a25292c9c9cea70a6ce7104e033a7a45563efdfc979389fafaba583ae9115a5024ebcf18ce2762712f60c186c5ee3a1e8448dd7c11de536d06d1131053b47305b61151bebb1c56857098a01ed094b7624e990c8a7c6ad368c66b44d329ccf79302d12ca397b6cc95ca8af3cad"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0x19, 0x83, 0xf4}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x10, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x633e}]}}, {{0x9, 0x5, 0xe, 0x3, 0x8, 0x3, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x64, 0xff}]}}]}}, {{0x9, 0x4, 0xb9, 0xfc, 0x0, 0xdd, 0x2, 0x6, 0x8}}, {{0x9, 0x4, 0x22, 0x7, 0x3, 0xff, 0x0, 0x0, 0x8, [], [{{0x9, 0x5, 0xa, 0x8, 0x10, 0x7, 0x81, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x7, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x554}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x20, 0x8, 0x2, 0x1}}]}}]}}]}}, &(0x7f00000019c0)={0xa, &(0x7f0000001600)={0xa, 0x6, 0x300, 0x7, 0x7f, 0x5, 0x20, 0x9}, 0x3f, &(0x7f0000001640)={0x5, 0xf, 0x3f, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x29, 0xf, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "7ebdbca78759f8949156a9075dea49d6"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "1e5ab09a963b89286703a6aecb3706de"}]}, 0x7, [{0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x2001}}, {0x100, &(0x7f00000016c0)=@string={0x100, 0x3, "63c80b471a59f1bbb73f6a9625113a6acee4ea3d9c6b747acd1a4130831bd55405085f2a12bfca046fdc4018537610eb9d2715da683bf48166c391e2bf457b9adaa0eb6e8de69336daa3a780d152eb16c201064287b158aad4c886fc33de9a5e89fd43af2d1555494d6655f0cd9782e20a809b344bbcc2b60593ab19493615da18a07ad401f0f7850e560df0876615e1a1d07658774e146020147e2cd61bde97483bc6fbf3581328107c61bb48cb165394f7dab7146dc751ee89f80ea171915352d212ea68ebd16366d0a4f640efba8e6e059ddafa466720d6b7b30eec4470f0b75827ac6b4650ef89daa1745bf599757f85402ed677fc4378b1944e0d7b"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x423}}, {0x90, &(0x7f0000001800)=@string={0x90, 0x3, "239d259089459a2efa873247080d67954192605d0eac33482b505341fd833202e04941b7818e57eee9b04a21d7a2fdbe72dfce7be9022b380413fa3ff86806df1ff45e47bc4552a95dd7a47dab752c7ef5a102606eef6438a755509293f1b7a55fd3bffaf2ee7408ebac072d8c8c65ee9f9dc157846c48357b09f67bfa4f706ff7bc6f59bee7892aea43efc16a59"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000001900)=@lang_id={0x4, 0x3, 0x44d}}, {0x51, &(0x7f0000001940)=@string={0x51, 0x3, "398b32b7c4e6e8ea4e15f2b43e469a6011a2655755e548bf2dab5d61a95d6129f7cc8bfec81a7516e2750f9a89e46f25824c0d94e63700c25dffd0b563f4b22e6c66be54bc5679e17e38deb663eba7"}}]}) ioctl$HIDIOCGUSAGE(r1, 0x40015b19, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x7, 0xff, 0x1}) write$char_usb(r1, &(0x7f0000002680)="e7", 0x1) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xc6}, &(0x7f0000000040)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000010c0)=@assoc_value={r3, 0x62}, 0x8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x20) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5, {0x2400}}, './file1\x00'}) setxattr$incfs_id(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140), &(0x7f0000001180)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 384.88823ms ago: executing program 5 (id=4393): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400000, 0x119) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) (async) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xe4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) utimensat(r1, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) (async) io_uring_enter(r0, 0x3bb4, 0x98ef, 0x50, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x7, 0xc, 0xffffffff, 0x0, r1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000635000/0x2000)=nil, &(0x7f00009e8000/0x3000)=nil, &(0x7f0000592000/0x4000)=nil, &(0x7f0000c93000/0x3000)=nil, &(0x7f0000c72000/0x3000)=nil, &(0x7f0000e28000/0x2000)=nil, &(0x7f0000c96000/0x2000)=nil, &(0x7f0000000180)="2c3a241f562b993de086b3c2efdd80842d0810d3c06dda8ad156eb0656c89e81d1ba0e2aeb11bd8e4da2303f2222e170cf902a915afd80d5f08bb7ab360c993f6e1ea309e05c7a11288614ccbc29572cbf8ecec4a4a9492100381abc5b80a3267f82e29b", 0x64, r0}, 0x68) 384.095909ms ago: executing program 5 (id=4394): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905832ee2"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x40f5) write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0) 222.367398ms ago: executing program 1 (id=4395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2c, @mcast2, 0x7}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x40800) 171.223083ms ago: executing program 1 (id=4396): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', &(0x7f00000004c0), 0x40004, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0]) (async, rerun: 32) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000a00), 0x40600, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000160000000003000000140001800d0001006574683a67726530"], 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x0) (async) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000d80)) (async) utime(&(0x7f0000000000)='./file0\x00', 0x0) 170.668059ms ago: executing program 1 (id=4397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43af4fe800000000000000000000000000010ff02000000000000000000270000000189"], 0x340a) 0s ago: executing program 1 (id=4398): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180006ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8, 0x5}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r6, 0x6f0}, 0x8) 0s ago: executing program 1 (id=4399): r0 = socket$inet6(0xa, 0x1, 0x0) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001680)=0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0xa, 0x0, 0x8c}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0xa, 0x0, 0x8c}, 0x20) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x17, '\x00', @data=0x4, 0xbd}]}) (async) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x17, '\x00', @data=0x4, 0xbd}]}) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000001700)={{r0}, 0x4, &(0x7f00000016c0)=[0x4, 0xfff, 0xffff, 0xfffffffffffff8f7], 0x9, 0x8}) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r3, &(0x7f0000003340)=""/4084, 0xff4, 0x73) (async) pread64(r3, &(0x7f0000003340)=""/4084, 0xff4, 0x73) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r4}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x20008041}}], 0x1, 0x4000090) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x20, 0x0) r7 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @mcast2}, 0x1c) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @mcast2}, 0x1c) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) (async) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x1, @private1, 0x5}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000100)='veth0_macvtap\x00', 0x10) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, 0x1c) connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000001640)={0x7, 0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/31, 0x1f}, {&(0x7f0000001200)=""/89, 0x59}, {&(0x7f0000001280)=""/59, 0x3b}, {&(0x7f00000012c0)=""/254, 0xfe}, {&(0x7f00000013c0)=""/118, 0x76}, {&(0x7f0000001440)=""/193, 0xc1}], &(0x7f00000015c0)=[0x5, 0x1, 0xf, 0xf, 0x8, 0x5, 0x401, 0x9, 0x1]}, 0x20) shutdown(r2, 0x0) readv(r2, &(0x7f0000003680)=[{&(0x7f0000003640)=""/16, 0x10}], 0x1) kernel console output (not intermixed with test programs): rer: syz [ 352.583650][ T6005] usb 6-1: SerialNumber: syz [ 352.595365][ T6005] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 352.622470][ T6128] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 352.833501][ T966] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 353.016823][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 353.020141][ T966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.023386][ T966] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.030825][ T966] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 353.034389][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.040299][ T966] usb 5-1: Product: syz [ 353.041990][ T966] usb 5-1: Manufacturer: syz [ 353.043872][ T966] usb 5-1: SerialNumber: syz [ 353.048995][ T966] usb 5-1: config 0 descriptor?? [ 353.055835][ T966] hub 5-1:0.0: bad descriptor, ignoring hub [ 353.059077][ T966] hub 5-1:0.0: probe with driver hub failed with error -5 [ 353.069688][T18544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.075383][T18544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.083296][T18544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.086960][T18544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.366112][T18544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.369144][T18544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.378074][ T24] usb 6-1: USB disconnect, device number 76 [ 353.400193][ T6017] usb 5-1: USB disconnect, device number 61 [ 353.410697][ T6005] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 353.571013][ T6005] usb 8-1: Using ep0 maxpacket: 16 [ 353.575053][ T6005] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.579245][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 353.584237][ T6005] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 353.587533][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.593109][ T6005] usb 8-1: config 0 descriptor?? [ 353.597654][ T6005] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 353.916299][ T966] usb 8-1: USB disconnect, device number 27 [ 353.926530][T18563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 353.954381][T18563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3901'. [ 354.288702][ T6128] usb 6-1: Service connection timeout for: 256 [ 354.291807][ T6128] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 354.307142][ T6128] ath9k_htc: Failed to initialize the device [ 354.319808][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 354.668612][T18590] netlink: 'syz.3.3912': attribute type 10 has an invalid length. [ 354.672019][T18590] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3912'. [ 354.757672][ T24] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 354.853912][ T6017] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 354.859050][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3914'. [ 354.866502][T18596] kAFS: unable to lookup cell '/,c¾ûL' [ 354.918513][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 354.924074][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.928217][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.935813][ T24] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 354.938744][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.941350][ T24] usb 6-1: Product: syz [ 354.942684][ T24] usb 6-1: Manufacturer: syz [ 354.944153][ T24] usb 6-1: SerialNumber: syz [ 354.952523][ T24] usb 6-1: config 0 descriptor?? [ 354.957258][ T24] hub 6-1:0.0: bad descriptor, ignoring hub [ 354.959860][ T24] hub 6-1:0.0: probe with driver hub failed with error -5 [ 355.018114][ T6017] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 355.021962][ T6017] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.025248][ T6017] usb 5-1: Product: syz [ 355.026817][ T6017] usb 5-1: Manufacturer: syz [ 355.028866][ T6017] usb 5-1: SerialNumber: syz [ 355.038444][ T6017] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 355.051945][ T6017] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 355.078904][T18602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3916'. [ 355.346194][ T24] usb 6-1: USB disconnect, device number 77 [ 355.490228][T18587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.496694][T18587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.504790][T18587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.507959][T18587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.800583][T18587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.804464][T18587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.813658][ T55] usb 5-1: USB disconnect, device number 62 [ 355.839799][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3917'. [ 355.847088][T18640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3917'. [ 356.043071][T18657] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3921'. [ 356.047743][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3921'. [ 356.054773][T18655] IPv6: sit1: Disabled Multicast RS [ 356.057004][T18655] sit1: entered allmulticast mode [ 356.068932][ T40] audit: type=1400 audit(1776522917.217:1334): avc: denied { read } for pid=18654 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 356.248544][T18656] cgroup: fork rejected by pids controller in /syz1 [ 356.434788][T18699] 9p: Bad value for 'rfdno' [ 356.440255][T18700] 9p: Bad value for 'rfdno' [ 356.473075][ T40] audit: type=1326 audit(1776522917.591:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.485185][ T40] audit: type=1326 audit(1776522917.591:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.499167][ T40] audit: type=1326 audit(1776522917.591:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.509026][ T40] audit: type=1326 audit(1776522917.591:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.518886][ T40] audit: type=1326 audit(1776522917.591:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.528585][ T40] audit: type=1326 audit(1776522917.591:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.538513][ T40] audit: type=1326 audit(1776522917.591:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.548348][ T40] audit: type=1326 audit(1776522917.591:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.558057][ T40] audit: type=1326 audit(1776522917.591:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18696 comm="syz.0.3924" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f79c819 code=0x7fc00000 [ 356.682056][ T6017] usb 5-1: Service connection timeout for: 256 [ 356.684711][ T6017] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 356.688524][ T6017] ath9k_htc: Failed to initialize the device [ 356.691384][ T55] usb 5-1: ath9k_htc: USB layer deinitialized [ 356.987478][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880204f1000: rx timeout, send abort [ 357.152662][ T6184] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 357.312775][ T6184] usb 8-1: Using ep0 maxpacket: 16 [ 357.317743][ T6184] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.322181][ T6184] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 357.328325][ T6184] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 357.332219][ T6184] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.345373][ T6184] usb 8-1: config 0 descriptor?? [ 357.352557][ T6184] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 357.522191][ C3] vcan0: j1939_tp_rxtimer: 0xffff888036750400: rx timeout, send abort [ 357.526835][ C3] vcan0: j1939_tp_rxtimer: 0xffff8880204f1000: abort rx timeout. Force session deactivation [ 357.651082][ T6184] usb 8-1: USB disconnect, device number 28 [ 358.059478][ C3] vcan0: j1939_tp_rxtimer: 0xffff888036750400: abort rx timeout. Force session deactivation [ 359.121036][ T6184] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 359.262771][T18770] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 359.301175][ T6184] usb 8-1: Using ep0 maxpacket: 16 [ 359.304599][ T6184] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.307757][ T6184] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 359.312940][ T6184] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.315764][ T6184] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.320155][ T6184] usb 8-1: config 0 descriptor?? [ 359.324241][ T6184] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 359.520217][T18777] netlink: 'syz.0.3951': attribute type 10 has an invalid length. [ 359.523134][T18777] veth1_macvtap: left promiscuous mode [ 359.539917][ T6128] usb 8-1: USB disconnect, device number 29 [ 360.212247][T18803] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 360.216312][T18803] block device autoloading is deprecated and will be removed. [ 360.299662][T18800] md: invalid raid superblock magic on ram0 [ 360.302504][T18800] md: ram0 does not have a valid v0.0 superblock, not importing! [ 360.304757][T18800] md: md_import_device returned -22 [ 360.330363][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3960'. [ 360.430244][T18816] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 360.433509][T18816] overlayfs: missing 'lowerdir' [ 361.268244][ T5892] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 361.435157][ T5892] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 361.439130][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.442803][ T5892] usb 8-1: Product: syz [ 361.444625][ T5892] usb 8-1: Manufacturer: syz [ 361.446651][ T5892] usb 8-1: SerialNumber: syz [ 361.456695][ T5892] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 361.478123][ T6184] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 361.802686][ T5892] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 361.922032][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.924878][T18845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3969'. [ 361.925930][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.928538][T18845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3969'. [ 361.940914][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.942167][ C2] blk_print_req_error: 54 callbacks suppressed [ 361.942178][ C2] invalid error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 7 prio class 2 [ 361.945011][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.946587][ C2] buffer_io_error: 54 callbacks suppressed [ 361.946596][ C2] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 361.958220][ C2] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 361.960951][ C2] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 361.963934][ C2] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 361.966996][ C2] Buffer I/O error on dev loop9, logical block 4, lost async page write [ 361.969667][ C2] Buffer I/O error on dev loop9, logical block 5, lost async page write [ 361.972332][ C2] Buffer I/O error on dev loop9, logical block 6, lost async page write [ 361.976860][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 361.984537][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 361.987829][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.991640][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 361.995829][ T5892] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.998726][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.004319][ T5892] usb 5-1: config 0 descriptor?? [ 362.011711][ T5892] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 362.043541][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.047673][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 362.051295][ C2] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.054643][ C2] Buffer I/O error on dev loop9, logical block 1, async page read [ 362.057390][ C2] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.061656][ C2] Buffer I/O error on dev loop9, logical block 2, async page read [ 362.064926][ C2] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.069005][ C2] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.073119][ C2] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.077359][ C2] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.082017][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 362.088295][ T5337] ldm_validate_partition_table(): Disk read failed. [ 362.093856][ T5337] Dev loop9: unable to read RDB block 0 [ 362.098046][ T5337] loop9: unable to read partition table [ 362.100089][ T5337] loop9: partition table beyond EOD, truncated [ 362.228556][ T6017] usb 5-1: USB disconnect, device number 63 [ 362.234186][T18828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.237101][T18828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.251808][ T6005] usb 8-1: USB disconnect, device number 30 [ 362.318328][T18853] xt_hashlimit: size too large, truncated to 1048576 [ 362.371355][T18855] nft_compat: unsupported protocol 0 [ 362.867903][T18866] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 363.108625][ T6184] usb 8-1: Service connection timeout for: 256 [ 363.111623][ T6184] ath9k_htc 8-1:1.0: ath9k_htc: Unable to initialize HTC services [ 363.115506][ T6184] ath9k_htc: Failed to initialize the device [ 363.148516][ T6005] usb 8-1: ath9k_htc: USB layer deinitialized [ 363.267767][ T40] kauditd_printk_skb: 666 callbacks suppressed [ 363.267816][ T40] audit: type=1400 audit(1776522923.952:2010): avc: denied { ioctl } for pid=18875 comm="syz.3.3981" path="socket:[87357]" dev="sockfs" ino=87357 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 363.281821][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3981'. [ 363.653079][ T6005] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 363.716870][T18891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3988'. [ 363.761026][ T5938] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.765247][ T5938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.770369][ T5938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.775871][ T5938] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.779526][ T5938] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.818617][T18892] lo speed is unknown, defaulting to 1000 [ 363.823719][ T6005] usb 8-1: Using ep0 maxpacket: 16 [ 363.829981][ T6005] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.833365][ T6005] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 363.838577][ T6005] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.841436][ T6005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.864503][ T6005] usb 8-1: config 0 descriptor?? [ 363.873894][ T6005] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 363.962334][T18892] chnl_net:caif_netlink_parms(): no params data found [ 364.060805][T18892] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.063901][T18892] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.066948][T18892] bridge_slave_0: entered allmulticast mode [ 364.071369][T18892] bridge_slave_0: entered promiscuous mode [ 364.076471][T18892] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.079520][T18892] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.083079][T18892] bridge_slave_1: entered allmulticast mode [ 364.087230][T18892] bridge_slave_1: entered promiscuous mode [ 364.106677][T18892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.110012][ T55] usb 8-1: USB disconnect, device number 31 [ 364.111183][T18892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.138481][T18892] team0: Port device team_slave_0 added [ 364.141789][T18892] team0: Port device team_slave_1 added [ 364.157854][T18892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.160146][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.168431][T18892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.172839][T18892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.175104][T18892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.183318][T18892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.210980][T18892] hsr_slave_0: entered promiscuous mode [ 364.213409][T18892] hsr_slave_1: entered promiscuous mode [ 364.215635][T18892] debugfs: 'hsr0' already exists in 'hsr' [ 364.217508][T18892] Cannot create hsr debugfs directory [ 364.334286][T18892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.338962][T18892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.343000][T18892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.348399][T18892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.416981][T18892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.434944][T18892] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.440942][ T7430] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.444193][ T7430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.455374][ T7430] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.458464][ T7430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.575406][T18892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.720792][T18892] veth0_vlan: entered promiscuous mode [ 364.736809][T18892] veth1_vlan: entered promiscuous mode [ 364.756175][T18892] veth0_macvtap: entered promiscuous mode [ 364.760191][T18892] veth1_macvtap: entered promiscuous mode [ 364.770658][T18892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.777757][T18892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.783112][T12977] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.786184][T12977] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.789557][T12977] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.792417][T12977] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.836860][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.840986][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.852695][ T7430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.856074][ T7430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.090020][T18943] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3997'. [ 365.154112][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3997'. [ 365.157845][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3997'. [ 365.193476][ T842] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 365.253885][T18948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3999'. [ 365.257361][T18948] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3999'. [ 365.261723][T18948] 9pnet_virtio: no channels available for device syz [ 365.363194][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 365.366971][ T842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.370566][ T842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 365.373941][ T842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.378177][ T842] usb 6-1: config 0 descriptor?? [ 365.405768][ T6017] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 365.565973][ T6017] usb 8-1: Using ep0 maxpacket: 16 [ 365.569228][ T6017] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 365.574450][ T6017] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 365.577502][ T6017] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.580086][ T6017] usb 8-1: Product: syz [ 365.581474][ T6017] usb 8-1: Manufacturer: syz [ 365.583001][ T6017] usb 8-1: SerialNumber: syz [ 365.586530][ T6017] usb 8-1: config 0 descriptor?? [ 365.592149][ T6017] hub 8-1:0.0: bad descriptor, ignoring hub [ 365.594317][ T6017] hub 8-1:0.0: probe with driver hub failed with error -5 [ 365.601908][ T842] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 365.607238][ T6017] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input65 [ 365.672899][ T6128] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 365.833466][ T6128] usb 5-1: Using ep0 maxpacket: 8 [ 365.837198][ T6128] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 365.839547][ T6128] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 365.843593][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.847781][ T6128] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.851812][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.855818][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.859607][ T6128] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 365.864472][ T6128] usb 5-1: config 168 interface 0 has no altsetting 0 [ 365.870261][ T6128] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 365.872839][ T6128] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 365.876837][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.880727][ T6128] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.884820][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.888941][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.892651][ T6128] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 365.897963][ T6128] usb 5-1: config 168 interface 0 has no altsetting 0 [ 365.900947][ T6128] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 365.903501][ T6128] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 365.907463][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.912332][ T6128] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 365.917042][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 365.920968][ T6128] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 365.925071][ T6128] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 365.930027][ T6128] usb 5-1: config 168 interface 0 has no altsetting 0 [ 365.935076][ T6128] usb 5-1: string descriptor 0 read error: -22 [ 365.937451][ T6128] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 365.940478][ T6128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.951347][ T6128] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 366.004409][ T5938] Bluetooth: hci0: command tx timeout [ 366.191677][ T10] usb 6-1: USB disconnect, device number 78 [ 366.879899][T18991] loop5: detected capacity change from 0 to 7 [ 366.892104][T18991] loop5: [POWERTEC] p1 p2 [ 366.894958][T18991] loop5: p1 start 125829120 is beyond EOD, truncated [ 366.897828][T18991] loop5: p2 size 268435456 extends beyond EOD, truncated [ 367.019868][T18993] __nla_validate_parse: 2 callbacks suppressed [ 367.019919][T18993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4008'. [ 367.077670][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 367.080644][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4008'. [ 367.284384][ T5337] loop5: [POWERTEC] p1 p2 [ 367.286158][ T5337] loop5: p1 start 125829120 is beyond EOD, truncated [ 367.291273][ T5337] loop5: p2 size 268435456 extends beyond EOD, truncated [ 367.535703][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4014'. [ 367.539143][T19020] netlink: 'syz.1.4014': attribute type 1 has an invalid length. [ 367.542254][T19020] nbd: error processing sock list [ 367.619756][ T6008] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 367.778870][ T6008] usb 10-1: Using ep0 maxpacket: 16 [ 367.783535][ T6008] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 367.788780][ T6008] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 367.792791][ T6008] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.795467][ T6008] usb 10-1: Product: syz [ 367.796877][ T6008] usb 10-1: Manufacturer: syz [ 367.798482][ T6008] usb 10-1: SerialNumber: syz [ 367.814694][ T6008] usb 10-1: config 0 descriptor?? [ 367.818137][ T6008] hub 10-1:0.0: bad descriptor, ignoring hub [ 367.821302][ T6008] hub 10-1:0.0: probe with driver hub failed with error -5 [ 367.829167][ T6008] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input67 [ 368.035438][ T5322] usb 8-1: reset high-speed USB device number 32 using dummy_hcd [ 368.209511][ T5322] usb 8-1: device firmware changed [ 368.214919][ T842] usb 8-1: USB disconnect, device number 32 [ 368.238663][ T5938] Bluetooth: hci0: command tx timeout [ 368.314287][ T6005] usb 10-1: USB disconnect, device number 2 [ 368.441636][ T842] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 368.602465][ T842] usb 8-1: Using ep0 maxpacket: 16 [ 368.697132][ T39] usb 5-1: USB disconnect, device number 64 [ 368.920934][T19043] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4018'. [ 368.982621][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4018'. [ 368.985452][T19048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4018'. [ 369.141074][T19060] netlink: 'syz.1.4025': attribute type 1 has an invalid length. [ 369.155618][T19060] smc: adding net device bond0 with user defined pnetid SYZ2 [ 369.161962][T19060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.174606][T19060] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19060 comm=syz.1.4025 [ 369.266786][T19068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4029'. [ 369.270924][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4029'. [ 369.404877][T19079] tmpfs: Bad value for 'mpol' [ 369.442075][T19082] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4033'. [ 369.448459][T19082] xfrm1: entered promiscuous mode [ 369.450204][T19082] xfrm1: entered allmulticast mode [ 369.467966][ T39] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 369.629302][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 369.633378][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 369.636477][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 369.642790][ T39] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 369.645692][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.648285][ T39] usb 6-1: Product: syz [ 369.649858][ T39] usb 6-1: Manufacturer: syz [ 369.651534][ T39] usb 6-1: SerialNumber: syz [ 369.662935][ T39] usb 6-1: config 0 descriptor?? [ 369.667325][ T39] hub 6-1:0.0: bad descriptor, ignoring hub [ 369.669698][ T39] hub 6-1:0.0: probe with driver hub failed with error -5 [ 369.675633][ T39] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input68 [ 369.701937][T19091] netlink: 'syz.5.4036': attribute type 3 has an invalid length. [ 369.705793][T19091] netlink: 'syz.5.4036': attribute type 3 has an invalid length. [ 370.221461][ T40] audit: type=1400 audit(1776522930.453:2011): avc: denied { rename } for pid=19104 comm="syz.5.4041" name="file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 370.307187][T19107] can0: slcan on ttyS3. [ 370.313842][T19109] binder: Bad value for 'max' [ 370.389647][T19101] can0 (unregistered): slcan off ttyS3. [ 370.452083][ T5945] Bluetooth: hci0: command tx timeout [ 371.032220][ T842] usb 8-1: unable to get BOS descriptor or descriptor too short [ 371.037901][ T842] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 371.041238][ T842] usb 8-1: can't read configurations, error -71 [ 371.916685][ T6128] usb 6-1: USB disconnect, device number 79 [ 372.675217][ T5945] Bluetooth: hci0: command 0x0419 tx timeout [ 374.909420][ T5938] Bluetooth: hci0: command 0x0419 tx timeout [ 383.540006][T19136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4045'. [ 383.674514][T19151] fuse: Bad value for 'user_id' [ 383.676222][T19151] fuse: Bad value for 'user_id' [ 383.992540][T19168] fuse: Bad value for 'user_id' [ 383.994478][T19168] fuse: Bad value for 'user_id' [ 384.007307][ T6184] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 384.103508][ T966] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 384.178194][ T6184] usb 6-1: Using ep0 maxpacket: 16 [ 384.190335][ T6184] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 384.193581][ T6184] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 384.198389][ T6184] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 384.201450][ T6184] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.204413][ T6184] usb 6-1: Product: syz [ 384.205816][ T6184] usb 6-1: Manufacturer: syz [ 384.207306][ T6184] usb 6-1: SerialNumber: syz [ 384.216385][ T6184] usb 6-1: config 0 descriptor?? [ 384.220377][ T6184] hub 6-1:0.0: bad descriptor, ignoring hub [ 384.222929][ T6184] hub 6-1:0.0: probe with driver hub failed with error -5 [ 384.227863][ T6184] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input70 [ 384.274556][ T966] usb 8-1: Using ep0 maxpacket: 16 [ 384.361053][ T40] audit: type=1400 audit(1776522943.679:2012): avc: denied { map } for pid=19191 comm="syz.0.4063" path="socket:[87812]" dev="sockfs" ino=87812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.400818][T19194] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4065'. [ 384.617424][ T55] usb 6-1: USB disconnect, device number 80 [ 384.745120][ T6005] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 384.905603][ T6005] usb 10-1: Using ep0 maxpacket: 16 [ 384.917109][ T6005] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.920582][ T6005] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 384.925009][ T6005] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 384.927755][ T6005] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.930127][ T6005] usb 10-1: Product: syz [ 384.931569][ T6005] usb 10-1: Manufacturer: syz [ 384.933161][ T6005] usb 10-1: SerialNumber: syz [ 384.938717][ T6005] r8152-cfgselector 10-1: Unknown version 0x0000 [ 384.940714][ T6005] r8152-cfgselector 10-1: config 0 descriptor?? [ 385.164837][ T6008] r8152-cfgselector 10-1: USB disconnect, device number 3 [ 385.297674][T19216] x_tables: duplicate underflow at hook 1 [ 385.429006][ T6184] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 385.590022][ T6184] usb 6-1: Using ep0 maxpacket: 16 [ 385.593906][ T6184] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.598240][ T6184] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 385.603768][ T6184] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 385.607589][ T6184] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.613237][ T6184] usb 6-1: config 0 descriptor?? [ 385.618863][ T6184] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 385.828892][T19223] 9pnet_virtio: no channels available for device syz [ 385.953895][ T6184] usb 6-1: USB disconnect, device number 81 [ 386.558454][T19231] futex_wake_op: syz.0.4076 tries to shift op by -1; fix this program [ 386.980094][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 386.995372][T19247] netlink: 'syz.1.4081': attribute type 1 has an invalid length. [ 386.997840][T19247] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4081'. [ 387.000857][T19247] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4081'. [ 387.004107][T19247] netlink: 'syz.1.4081': attribute type 1 has an invalid length. [ 387.007142][T19247] netlink: 634 bytes leftover after parsing attributes in process `syz.1.4081'. [ 387.118710][ T789] dvmrp0 (unregistering): left allmulticast mode [ 387.139661][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 387.150408][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 387.153705][ T10] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 387.158627][ T10] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 387.167356][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.170806][ T10] usb 10-1: Product: syz [ 387.172707][ T10] usb 10-1: Manufacturer: syz [ 387.174737][ T10] usb 10-1: SerialNumber: syz [ 387.195361][ T10] usb 10-1: config 0 descriptor?? [ 387.198789][ T10] hub 10-1:0.0: bad descriptor, ignoring hub [ 387.200816][ T10] hub 10-1:0.0: probe with driver hub failed with error -5 [ 387.205476][ T10] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input71 [ 387.267838][ T6005] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 387.320929][T19166] udevd[19166]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.5-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 387.406753][ T6005] usb 5-1: device descriptor read/64, error -71 [ 387.460584][ T789] bond0 (unregistering): Released all slaves [ 387.467088][ T966] usb 8-1: unable to get BOS descriptor or descriptor too short [ 387.476139][ T966] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 387.478619][ T966] usb 8-1: can't read configurations, error -71 [ 387.664848][ T6005] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 387.707292][ T6017] usb 10-1: USB disconnect, device number 4 [ 387.803219][ T6005] usb 5-1: device descriptor read/64, error -71 [ 387.851640][ T789] hsr_slave_0: left promiscuous mode [ 387.854835][ T789] hsr_slave_1: left promiscuous mode [ 387.866770][ T789] veth1_macvtap: left promiscuous mode [ 387.869276][ T789] veth0_macvtap: left allmulticast mode [ 387.871064][ T789] veth0_macvtap: left promiscuous mode [ 387.874187][ T789] veth1_vlan: left promiscuous mode [ 387.875907][ T789] veth0_vlan: left promiscuous mode [ 387.924555][ T6005] usb usb5-port1: attempt power cycle [ 388.083948][T19279] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 388.086654][T19279] overlayfs: missing 'lowerdir' [ 388.122669][T19281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19281 comm=syz.3.4093 [ 388.127565][T19281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4093'. [ 388.187734][T19281] 8021q: adding VLAN 0 to HW filter on device bond2 [ 388.195814][T19281] bond1: (slave bond2): Enslaving as an active interface with an up link [ 388.215021][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4096'. [ 388.233903][ T40] audit: type=1400 audit(1776522947.299:2013): avc: denied { unmount } for pid=14139 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 388.283385][ T6005] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 388.310515][ T6005] usb 5-1: device descriptor read/8, error -71 [ 388.409226][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4102'. [ 388.418114][T19303] ip6gre1: entered promiscuous mode [ 388.419931][T19303] ip6gre1: entered allmulticast mode [ 388.436031][T19303] netlink: 'syz.1.4102': attribute type 6 has an invalid length. [ 388.439451][T19303] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4102'. [ 388.453124][T19293] FAT-fs (loop3): unable to read boot sector [ 388.561361][ T6005] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 388.583676][ T6005] usb 5-1: device descriptor read/8, error -71 [ 388.711393][ T6005] usb usb5-port1: unable to enumerate USB device [ 388.892736][ T842] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 388.957485][T19331] fuse: Unknown parameter 'grou]µ%î €g›ped37ÄUÏ™•h4Úvú/Q¥1 [ 388.957485][T19331] $‘Ú怲Jnk°ÇZfŠÁ«w©±ÅÝ\gÐÎ{¢Y;8¾|ø8–Æ­j^yè4ZšSiNzòS;ØÄ¥ 0#Ì«a´ï3“Õ[D³w“n/ZIZisB [ 388.957485][T19331] ‹Oý)l«û]l3ú?KaO°b·A<Ù?k*‘E›S³Hîþ#ñrÁ;÷¹žþ¸È©£ˆ–5£s+Ô(”Y ­Ê½¶#1dV00000000000000000000ÿ' [ 388.970792][T19331] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4112'. [ 388.975120][T19331] netlink: 'syz.3.4112': attribute type 17 has an invalid length. [ 388.980870][T19331] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4112'. [ 388.984645][T19331] macvtap0: entered allmulticast mode [ 388.986950][T19331] veth0_macvtap: entered allmulticast mode [ 388.993411][T19331] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 389.063849][ T842] usb 10-1: Using ep0 maxpacket: 8 [ 389.067142][ T842] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 389.070039][ T842] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.074105][ T842] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.077477][ T842] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.081305][ T842] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.085914][ T842] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.088810][ T842] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.089430][T19336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4114'. [ 389.095869][T19336] gre0: entered promiscuous mode [ 389.275799][T19343] netlink: 'syz.3.4117': attribute type 13 has an invalid length. [ 389.315642][ T842] usb 10-1: usb_control_msg returned -32 [ 389.317496][ T842] usbtmc 10-1:16.0: can't read capabilities [ 389.410377][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 389.414646][T19345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 389.424517][T19345] macsec1: entered promiscuous mode [ 389.566651][T19359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4123'. [ 389.699753][ T40] audit: type=1326 audit(1776522948.674:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.5.4106" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f4af9c819 code=0xffff0000 [ 389.950032][T19366] netlink: 'syz.3.4124': attribute type 9 has an invalid length. [ 390.252522][ T6008] usb 10-1: USB disconnect, device number 5 [ 390.416596][T19379] netlink: 'syz.0.4129': attribute type 5 has an invalid length. [ 390.613242][T19386] erofs: block size(16384) > page size(4096) not supported by filesystem [ 390.619909][T19386] erofs (device nullb0): cannot find valid erofs superblock [ 390.635471][ T966] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 390.828263][ T966] usb 8-1: Using ep0 maxpacket: 16 [ 391.666044][T19411] batman_adv: batadv0: Adding interface: gretap1 [ 391.667915][T19411] batman_adv: batadv0: Interface activated: gretap1 [ 391.672025][T19408] No source specified [ 391.672314][ T40] audit: type=1400 audit(1776522950.517:2015): avc: denied { ioctl } for pid=19403 comm="syz.5.4137" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0x7c04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 391.683574][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4137'. [ 391.687335][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 391.705558][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4137'. [ 391.706063][ T789] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.709331][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4137'. [ 391.717654][ T789] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.720527][ T789] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.727047][ T789] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.823066][T19414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19414 comm=syz.0.4140 [ 392.003495][T19418] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 392.344971][T19422] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 393.105199][ T842] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 393.265316][ T842] usb 5-1: Using ep0 maxpacket: 8 [ 393.269379][ T842] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 393.272564][ T842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 393.277069][ T842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.280651][ T842] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 393.284804][ T842] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 393.288618][ T842] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.292689][ T842] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.295993][ T842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.329403][ T34] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 393.333439][T19455] input: syz0 as /devices/virtual/input/input73 [ 393.500762][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 393.503901][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 393.512143][ T34] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 393.515500][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.518020][ T34] usb 6-1: Product: syz [ 393.519417][ T34] usb 6-1: Manufacturer: syz [ 393.520908][ T34] usb 6-1: SerialNumber: syz [ 393.526574][ T34] usb 6-1: config 0 descriptor?? [ 393.529335][T19452] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 393.534537][ T34] hub 6-1:0.0: bad descriptor, ignoring hub [ 393.536486][ T34] hub 6-1:0.0: probe with driver hub failed with error -5 [ 393.541839][ T34] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input74 [ 393.558014][ T966] usb 8-1: unable to get BOS descriptor or descriptor too short [ 393.562071][ T966] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 393.564793][ T966] usb 8-1: can't read configurations, error -71 [ 393.658783][ T40] audit: type=1326 audit(1776522952.369:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19472 comm="syz.3.4159" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff457f9c819 code=0x0 [ 393.776153][T19478] Bluetooth: MGMT ver 1.23 [ 393.788133][ T842] usb 5-1: usb_control_msg returned -32 [ 393.790240][ T842] usbtmc 5-1:16.0: can't read capabilities [ 393.874802][ T55] usb 6-1: USB disconnect, device number 82 [ 394.460419][T19494] sp0: Synchronizing with TNC [ 394.730042][ T40] audit: type=1326 audit(1776522953.370:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.740762][ T40] audit: type=1326 audit(1776522953.379:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.750489][ T40] audit: type=1326 audit(1776522953.379:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.762359][ T40] audit: type=1326 audit(1776522953.379:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.770369][ T40] audit: type=1326 audit(1776522953.379:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.777769][ T40] audit: type=1326 audit(1776522953.379:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.786004][ T40] audit: type=1326 audit(1776522953.379:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 394.795663][ T40] audit: type=1326 audit(1776522953.379:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19505 comm="syz.1.4168" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bebd9c819 code=0x7fc00000 [ 395.170263][ T34] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 395.328515][ T34] usb 8-1: Using ep0 maxpacket: 16 [ 395.332838][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 395.341036][ T34] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 395.344427][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.346941][ T34] usb 8-1: Product: syz [ 395.348334][ T34] usb 8-1: Manufacturer: syz [ 395.349876][ T34] usb 8-1: SerialNumber: syz [ 395.359658][ T34] usb 8-1: config 0 descriptor?? [ 395.362761][T19514] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.367205][ T34] hub 8-1:0.0: bad descriptor, ignoring hub [ 395.369117][ T34] hub 8-1:0.0: probe with driver hub failed with error -5 [ 395.374208][ T34] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input75 [ 395.510084][T19166] udevd[19166]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.3-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 395.624332][T19535] netlink: 'syz.5.4177': attribute type 1 has an invalid length. [ 395.626920][T19535] netlink: 'syz.5.4177': attribute type 2 has an invalid length. [ 395.790649][ T39] usb 8-1: USB disconnect, device number 39 [ 395.904684][T19550] __nla_validate_parse: 1 callbacks suppressed [ 395.904698][T19550] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4182'. [ 396.090135][ T39] usb 5-1: USB disconnect, device number 69 [ 396.519910][T19580] bond1: option xmit_hash_policy: invalid value (6) [ 396.524371][T19580] bond1 (unregistering): Released all slaves [ 396.556735][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4191'. [ 396.562286][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4191'. [ 396.587053][T19586] hpfs: Bad magic ... probably not HPFS [ 396.590312][T19586] hpfs: Bad magic ... probably not HPFS [ 396.630029][T19586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 396.653725][T19591] FAULT_INJECTION: forcing a failure. [ 396.653725][T19591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.658891][T19591] CPU: 0 UID: 0 PID: 19591 Comm: syz.1.4192 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.658916][T19591] Tainted: [L]=SOFTLOCKUP [ 396.658922][T19591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.658933][T19591] Call Trace: [ 396.658940][T19591] [ 396.658948][T19591] dump_stack_lvl+0x100/0x190 [ 396.659040][T19591] should_fail_ex.cold+0x5/0xa [ 396.659108][T19591] _copy_from_user+0x2e/0xd0 [ 396.659137][T19591] copy_msghdr_from_user+0x9f/0x4f0 [ 396.659164][T19591] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 396.659194][T19591] ___sys_sendmsg+0x106/0x1e0 [ 396.659215][T19591] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.659261][T19591] __sys_sendmsg+0x170/0x220 [ 396.659286][T19591] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.659324][T19591] do_syscall_64+0x106/0xf80 [ 396.659340][T19591] ? clear_bhb_loop+0x40/0x90 [ 396.659361][T19591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.659378][T19591] RIP: 0033:0x7f7bebd9c819 [ 396.659392][T19591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.659408][T19591] RSP: 002b:00007f7becc0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.659425][T19591] RAX: ffffffffffffffda RBX: 00007f7bec016180 RCX: 00007f7bebd9c819 [ 396.659436][T19591] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 0000000000000004 [ 396.659446][T19591] RBP: 00007f7becc0b090 R08: 0000000000000000 R09: 0000000000000000 [ 396.659456][T19591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.659465][T19591] R13: 00007f7bec016218 R14: 00007f7bec016180 R15: 00007fff1404fd68 [ 396.659488][T19591] [ 396.664951][ T39] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 396.740252][T19598] /dev/sg0: Can't lookup blockdev [ 396.833029][T19601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=19601 comm=syz.3.4197 [ 396.910704][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 397.172390][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 397.180187][ T39] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 397.183867][ T39] usb 5-1: can't read configurations, error -71 [ 397.648582][ T10] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 397.758182][T19621] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4204'. [ 397.830101][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 397.837300][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 397.844488][ T10] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 397.848443][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.852035][ T10] usb 8-1: Product: syz [ 397.853854][ T10] usb 8-1: Manufacturer: syz [ 397.855895][ T10] usb 8-1: SerialNumber: syz [ 397.862164][ T6017] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 397.865728][ T10] usb 8-1: config 0 descriptor?? [ 397.868842][T19612] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.873867][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 397.876485][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 397.883745][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input77 [ 397.912901][ T966] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 398.014671][T19166] udevd[19166]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.3-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 398.035471][ T6017] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 398.039601][ T6017] usb 6-1: config 0 interface 0 has no altsetting 0 [ 398.045468][ T6017] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 398.049267][ T6017] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 398.053889][ T6017] usb 6-1: Product: syz [ 398.055858][ T6017] usb 6-1: Manufacturer: syz [ 398.057827][ T6017] usb 6-1: SerialNumber: syz [ 398.062616][ T6017] usb 6-1: config 0 descriptor?? [ 398.071597][ T6017] usb 6-1: selecting invalid altsetting 0 [ 398.086632][ T966] usb 10-1: Using ep0 maxpacket: 16 [ 398.094202][ T966] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 398.099175][ T966] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 398.101998][ T966] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.104672][ T966] usb 10-1: Product: syz [ 398.106025][ T966] usb 10-1: Manufacturer: syz [ 398.107492][ T966] usb 10-1: SerialNumber: syz [ 398.108140][ T39] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 398.110769][ T966] usb 10-1: config 0 descriptor?? [ 398.114654][T19619] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 398.117733][ T966] hub 10-1:0.0: bad descriptor, ignoring hub [ 398.119875][ T966] hub 10-1:0.0: probe with driver hub failed with error -5 [ 398.123913][ T966] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input78 [ 398.250898][ C1] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 398.255215][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 398.279173][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 398.279405][ T6128] usb 8-1: USB disconnect, device number 40 [ 398.283196][ T39] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 398.286276][ T10] usb 6-1: USB disconnect, device number 83 [ 398.290666][ T39] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 398.294274][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.296925][ T39] usb 5-1: Product: syz [ 398.298550][ T39] usb 5-1: Manufacturer: syz [ 398.300937][ T39] usb 5-1: SerialNumber: syz [ 398.325360][ T39] usb 5-1: config 0 descriptor?? [ 398.328206][T19621] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 398.333915][ T39] hub 5-1:0.0: bad descriptor, ignoring hub [ 398.336242][ T39] hub 5-1:0.0: probe with driver hub failed with error -5 [ 398.339440][T19619] FAULT_INJECTION: forcing a failure. [ 398.339440][T19619] name failslab, interval 1, probability 0, space 0, times 0 [ 398.343685][T19619] CPU: 0 UID: 0 PID: 19619 Comm: syz.5.4203 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.343702][T19619] Tainted: [L]=SOFTLOCKUP [ 398.343706][T19619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 398.343713][T19619] Call Trace: [ 398.343717][T19619] [ 398.343722][T19619] dump_stack_lvl+0x100/0x190 [ 398.343798][T19619] should_fail_ex.cold+0x5/0xa [ 398.343860][T19619] should_failslab+0xc2/0x120 [ 398.343910][T19619] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 398.343970][T19619] ? do_getname+0x35/0x390 [ 398.344030][T19619] ? find_held_lock+0x2b/0x80 [ 398.344086][T19619] do_getname+0x35/0x390 [ 398.344102][T19619] do_sys_openat2+0xc5/0x1e0 [ 398.344117][T19619] ? __pfx_do_sys_openat2+0x10/0x10 [ 398.344131][T19619] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.344150][T19619] ? __fget_files+0x21f/0x3d0 [ 398.344166][T19619] __x64_sys_openat+0x12d/0x210 [ 398.344185][T19619] ? __pfx___x64_sys_openat+0x10/0x10 [ 398.344203][T19619] ? ksys_write+0x1ac/0x250 [ 398.344225][T19619] do_syscall_64+0x106/0xf80 [ 398.344240][T19619] ? clear_bhb_loop+0x40/0x90 [ 398.344262][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.344280][T19619] RIP: 0033:0x7f1f4af9c819 [ 398.344296][T19619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.344314][T19619] RSP: 002b:00007f1f4beac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 398.344332][T19619] RAX: ffffffffffffffda RBX: 00007f1f4b215fa0 RCX: 00007f1f4af9c819 [ 398.344343][T19619] RDX: 0000000000004000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 398.344355][T19619] RBP: 00007f1f4beac090 R08: 0000000000000000 R09: 0000000000000000 [ 398.344365][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.344375][T19619] R13: 00007f1f4b216038 R14: 00007f1f4b215fa0 R15: 00007fff05e99118 [ 398.344400][T19619] [ 398.425412][ T39] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input79 [ 398.518749][ T40] kauditd_printk_skb: 1465 callbacks suppressed [ 398.518769][ T40] audit: type=1400 audit(1776522956.924:3490): avc: denied { bind } for pid=19616 comm="syz.1.4202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 398.576722][T19622] udevd[19622]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.0-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 399.038270][T19641] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 399.044485][ T40] audit: type=1400 audit(1776522957.411:3491): avc: denied { relabelto } for pid=19640 comm="syz.5.4209" name="cpu.stat" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 399.054237][ T40] audit: type=1400 audit(1776522957.411:3492): avc: denied { associate } for pid=19640 comm="syz.5.4209" name="cpu.stat" dev="tmpfs" ino=370 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 399.063447][ T40] audit: type=1400 audit(1776522957.420:3493): avc: denied { append } for pid=19640 comm="syz.5.4209" path="/66/cpu.stat" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 399.744484][ T6184] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 399.925542][ T6184] usb 8-1: Using ep0 maxpacket: 16 [ 399.966621][ T40] audit: type=1400 audit(1776522958.271:3494): avc: denied { unlink } for pid=18892 comm="syz-executor" name="cpu.stat" dev="tmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 400.028868][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4214'. [ 400.044465][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4214'. [ 400.047355][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4214'. [ 400.133979][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4216'. [ 400.374469][ T39] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 400.406558][T19670] QAT: Invalid ioctl -2110754303 [ 400.556400][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 400.560583][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 400.567030][ T39] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 400.572443][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.575825][ T39] usb 6-1: Product: syz [ 400.577867][ T39] usb 6-1: Manufacturer: syz [ 400.579856][ T39] usb 6-1: SerialNumber: syz [ 400.589795][ T39] usb 6-1: config 0 descriptor?? [ 400.592837][T19662] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 400.596634][ T39] hub 6-1:0.0: bad descriptor, ignoring hub [ 400.599343][ T39] hub 6-1:0.0: probe with driver hub failed with error -5 [ 400.605842][ T39] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input81 [ 400.651481][T19674] netlink: 'syz.5.4221': attribute type 1 has an invalid length. [ 400.688570][ T40] audit: type=1400 audit(1776522958.954:3495): avc: denied { accept } for pid=19673 comm="syz.5.4221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 400.986952][T19680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=19680 comm=syz.5.4222 [ 401.041251][T19621] Process accounting resumed [ 401.048375][ T6128] usb 5-1: USB disconnect, device number 71 [ 401.530454][T19691] overlay: ./file0 is not a directory [ 401.985875][ T966] usb 10-1: USB disconnect, device number 6 [ 402.006737][T19623] udevd[19623]: symlink '../event5' '/dev/input/by-path/platform-dummy_hcd.5-usb-0:1-event.tmp-c13:69' failed: Read-only file system [ 402.055962][T19701] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 402.072916][T19701] ftl_cs: FTL header not found. [ 402.117598][ T5892] usb 6-1: USB disconnect, device number 84 [ 402.416359][ T6128] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 402.588970][ T6128] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 402.592640][ T6128] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.596273][ T6128] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.601106][ T6128] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.604056][ T6128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.612889][ T6128] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.615689][ T6128] usb 5-1: invalid MIDI out EP 0 [ 402.644757][ T6184] usb 8-1: unable to get BOS descriptor or descriptor too short [ 402.657109][ T6184] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 402.659532][ T6184] usb 8-1: can't read configurations, error -71 [ 402.700566][ T6128] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 402.726457][T19713] hfsplus: unable to find HFS+ superblock [ 402.729777][T19711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=19711 comm=syz.1.4233 [ 402.829476][ T40] audit: type=1400 audit(1776522960.956:3496): avc: denied { read append } for pid=19682 comm="syz.0.4223" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 402.839428][T19683] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 402.845954][T19722] FAULT_INJECTION: forcing a failure. [ 402.845954][T19722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.850485][T19722] CPU: 2 UID: 0 PID: 19722 Comm: syz.5.4236 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.850503][T19722] Tainted: [L]=SOFTLOCKUP [ 402.850507][T19722] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.850514][T19722] Call Trace: [ 402.850521][T19722] [ 402.850528][T19722] dump_stack_lvl+0x100/0x190 [ 402.850699][T19722] should_fail_ex.cold+0x5/0xa [ 402.850774][T19722] _copy_to_user+0x32/0xd0 [ 402.850804][T19722] simple_read_from_buffer+0xcb/0x170 [ 402.850861][T19722] proc_fail_nth_read+0x1af/0x230 [ 402.850923][T19722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.850940][T19722] ? rw_verify_area+0xce/0x6d0 [ 402.851006][T19722] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.851022][T19722] vfs_read+0x1e4/0xb30 [ 402.851034][T19722] ? __pfx_vfs_read+0x10/0x10 [ 402.851044][T19722] ? __fget_files+0x215/0x3d0 [ 402.851059][T19722] ? __fget_files+0x21f/0x3d0 [ 402.851075][T19722] ksys_read+0x12a/0x250 [ 402.851085][T19722] ? __pfx_ksys_read+0x10/0x10 [ 402.851100][T19722] do_syscall_64+0x106/0xf80 [ 402.851116][T19722] ? clear_bhb_loop+0x40/0x90 [ 402.851131][T19722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.851143][T19722] RIP: 0033:0x7f1f4af5d04e [ 402.851152][T19722] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 402.851163][T19722] RSP: 002b:00007f1f4beabfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 402.851174][T19722] RAX: ffffffffffffffda RBX: 00007f1f4beac6c0 RCX: 00007f1f4af5d04e [ 402.851181][T19722] RDX: 000000000000000f RSI: 00007f1f4beac0a0 RDI: 0000000000000006 [ 402.851187][T19722] RBP: 00007f1f4beac090 R08: 0000000000000000 R09: 0000000000000000 [ 402.851194][T19722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.851200][T19722] R13: 00007f1f4b216038 R14: 00007f1f4b215fa0 R15: 00007fff05e99118 [ 402.851215][T19722] [ 402.887977][T19683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4223'. [ 402.939861][T19683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4223'. [ 402.954740][T19719] FAULT_INJECTION: forcing a failure. [ 402.954740][T19719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.958777][T19719] CPU: 1 UID: 0 PID: 19719 Comm: syz.3.4235 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.958795][T19719] Tainted: [L]=SOFTLOCKUP [ 402.958799][T19719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 402.958806][T19719] Call Trace: [ 402.958811][T19719] [ 402.958816][T19719] dump_stack_lvl+0x100/0x190 [ 402.958825][ T789] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.958838][T19719] should_fail_ex.cold+0x5/0xa [ 402.958853][T19719] _copy_to_user+0x32/0xd0 [ 402.958868][T19719] simple_read_from_buffer+0xcb/0x170 [ 402.958882][T19719] proc_fail_nth_read+0x1af/0x230 [ 402.958901][T19719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.958918][T19719] ? rw_verify_area+0xce/0x6d0 [ 402.958935][T19719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 402.958951][T19719] vfs_read+0x1e4/0xb30 [ 402.958963][T19719] ? __pfx_vfs_read+0x10/0x10 [ 402.958972][T19719] ? __fget_files+0x215/0x3d0 [ 402.958988][T19719] ? __fget_files+0x21f/0x3d0 [ 402.959003][T19719] ksys_read+0x12a/0x250 [ 402.959014][T19719] ? __pfx_ksys_read+0x10/0x10 [ 402.959028][T19719] do_syscall_64+0x106/0xf80 [ 402.959038][T19719] ? clear_bhb_loop+0x40/0x90 [ 402.959052][T19719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.959063][T19719] RIP: 0033:0x7ff457f5d04e [ 402.959073][T19719] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 402.959084][T19719] RSP: 002b:00007ff458ec6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 402.959095][T19719] RAX: ffffffffffffffda RBX: 00007ff458ec76c0 RCX: 00007ff457f5d04e [ 402.959102][T19719] RDX: 000000000000000f RSI: 00007ff458ec70a0 RDI: 0000000000000005 [ 402.959108][T19719] RBP: 00007ff458ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 402.959115][T19719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.959121][T19719] R13: 00007ff458216038 R14: 00007ff458215fa0 R15: 00007ffe807a5778 [ 402.959135][T19719] [ 403.038973][ T5892] usb 5-1: USB disconnect, device number 72 [ 403.045914][ T789] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.081295][ T789] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.089238][T19730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4238'. [ 403.089697][ T789] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.094412][T19730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4238'. [ 403.117532][T19730] geneve2: entered promiscuous mode [ 403.119508][T19730] geneve2: entered allmulticast mode [ 403.136651][T19730] sp0: Synchronizing with TNC [ 403.144682][T19729] [U] è [ 403.385950][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.388246][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.485501][ T34] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 403.600882][T19751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4244'. [ 403.645808][ T39] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 403.647234][ T34] usb 10-1: Using ep0 maxpacket: 16 [ 403.816999][ T39] usb 6-1: Using ep0 maxpacket: 16 [ 403.839556][ T39] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 403.844598][ T39] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 403.847420][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.853094][ T39] usb 6-1: Product: syz [ 403.854516][ T39] usb 6-1: Manufacturer: syz [ 403.855984][ T39] usb 6-1: SerialNumber: syz [ 403.865020][ T39] usb 6-1: config 0 descriptor?? [ 403.867366][T19749] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 403.871068][ T39] hub 6-1:0.0: bad descriptor, ignoring hub [ 403.872972][ T39] hub 6-1:0.0: probe with driver hub failed with error -5 [ 403.877765][ T39] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input83 [ 403.895809][ T34] usb 10-1: unable to get BOS descriptor or descriptor too short [ 403.899046][ T34] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 403.901458][ T34] usb 10-1: can't read configurations, error -71 [ 404.244780][ T6128] usb 6-1: USB disconnect, device number 85 [ 404.298356][ T6005] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 404.458441][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 404.459132][T19784] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4249'. [ 404.461349][ T6005] usb 5-1: too many configurations: 120, using maximum allowed: 8 [ 404.468067][ T6005] usb 5-1: config index 0 descriptor too short (expected 40711, got 36) [ 404.471768][ T6005] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 404.475349][ T6005] usb 5-1: can't read configurations, error -22 [ 404.478671][T19784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.484939][T19784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.489512][T19784] bond0 (unregistering): Released all slaves [ 404.618888][ T6005] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 404.755806][ T40] audit: type=1400 audit(1776522962.752:3497): avc: denied { connect } for pid=19785 comm="syz.5.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 404.779441][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 404.783109][ T6005] usb 5-1: too many configurations: 120, using maximum allowed: 8 [ 404.787882][ T6005] usb 5-1: config index 0 descriptor too short (expected 40711, got 36) [ 404.791772][ T6005] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 404.795796][ T6005] usb 5-1: can't read configurations, error -22 [ 404.799058][ T6005] usb usb5-port1: attempt power cycle [ 405.164031][ T6005] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 405.186101][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 405.189090][ T6005] usb 5-1: too many configurations: 120, using maximum allowed: 8 [ 405.193869][ T6005] usb 5-1: config index 0 descriptor too short (expected 40711, got 36) [ 405.197938][ T6005] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 405.201561][ T6005] usb 5-1: can't read configurations, error -22 [ 405.220334][T19807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4253'. [ 405.335076][ T6005] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 405.355115][T19813] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4255'. [ 405.367908][ T6005] usb 5-1: Using ep0 maxpacket: 16 [ 405.370070][ T6005] usb 5-1: too many configurations: 120, using maximum allowed: 8 [ 405.373384][ T6005] usb 5-1: config index 0 descriptor too short (expected 40711, got 36) [ 405.376051][ T6005] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 187 [ 405.379004][ T6005] usb 5-1: can't read configurations, error -22 [ 405.381194][ T6005] usb usb5-port1: unable to enumerate USB device [ 405.880278][ T6005] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 406.040495][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 406.141367][ T6005] usb 6-1: unable to get BOS descriptor or descriptor too short [ 406.144621][ T6005] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 406.147153][ T6005] usb 6-1: can't read configurations, error -71 [ 406.714726][ T40] audit: type=1400 audit(1776522964.595:3498): avc: denied { execute } for pid=19820 comm="syz.1.4258" path="/dev/comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 406.756920][T19824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4259'. [ 406.763209][T19824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4259'. [ 407.027898][T19761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.300630][T19843] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 407.304496][T19843] Dead loop on virtual device ip6_vti0, fix it urgently! [ 407.356501][ T842] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 407.526504][ T842] usb 8-1: Using ep0 maxpacket: 16 [ 407.529502][ T842] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 407.534336][ T842] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 407.537797][ T842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.540736][ T842] usb 8-1: Product: syz [ 407.542142][ T842] usb 8-1: Manufacturer: syz [ 407.543714][ T842] usb 8-1: SerialNumber: syz [ 407.549235][ T842] usb 8-1: config 0 descriptor?? [ 407.554366][T19827] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 407.557459][ T842] hub 8-1:0.0: bad descriptor, ignoring hub [ 407.559910][ T842] hub 8-1:0.0: probe with driver hub failed with error -5 [ 407.563791][ T842] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input86 [ 407.676292][ T6005] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 407.687883][T19623] udevd[19623]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.3-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 407.836591][ T6005] usb 10-1: Using ep0 maxpacket: 16 [ 407.943810][ T6184] usb 8-1: USB disconnect, device number 43 [ 407.947578][ T6005] usb 10-1: unable to get BOS descriptor or descriptor too short [ 407.953067][ T6005] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 407.958141][ T6005] usb 10-1: can't read configurations, error -71 [ 408.078102][T19862] 9pnet_virtio: no channels available for device syz [ 408.078101][ T40] audit: type=1400 audit(1776522965.867:3499): avc: denied { mounton } for pid=19861 comm="syz.0.4272" path="/316/file0" dev="tmpfs" ino=1706 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 408.091785][T19862] xt_hashlimit: size too large, truncated to 1048576 [ 408.155617][T19862] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 408.316635][ T40] audit: type=1400 audit(1776522966.082:3500): avc: denied { write } for pid=19867 comm="syz.0.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 408.436130][T19877] FAULT_INJECTION: forcing a failure. [ 408.436130][T19877] name failslab, interval 1, probability 0, space 0, times 0 [ 408.440095][T19877] CPU: 2 UID: 0 PID: 19877 Comm: syz.0.4277 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.440113][T19877] Tainted: [L]=SOFTLOCKUP [ 408.440117][T19877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 408.440125][T19877] Call Trace: [ 408.440129][T19877] [ 408.440135][T19877] dump_stack_lvl+0x100/0x190 [ 408.440253][T19877] should_fail_ex.cold+0x5/0xa [ 408.440304][T19877] should_failslab+0xc2/0x120 [ 408.440351][T19877] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 408.440461][T19877] ? __alloc_skb+0x140/0x710 [ 408.440536][T19877] __alloc_skb+0x140/0x710 [ 408.440551][T19877] ? __alloc_skb+0x5b7/0x710 [ 408.440565][T19877] ? __pfx___alloc_skb+0x10/0x10 [ 408.440581][T19877] ? ip6_dst_lookup_tail.constprop.0+0x8ef/0x2110 [ 408.440599][T19877] ? xfrm_lookup_with_ifid+0xa70/0x1ce0 [ 408.440615][T19877] alloc_skb_with_frags+0xe0/0x810 [ 408.440632][T19877] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 408.440647][T19877] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 408.440663][T19877] sock_alloc_send_pskb+0x801/0x980 [ 408.440678][T19877] ? snprintf+0xc7/0x100 [ 408.440697][T19877] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 408.440711][T19877] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 408.440724][T19877] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 408.440736][T19877] ? find_held_lock+0x2b/0x80 [ 408.440778][T19877] ? rawv6_sendmsg+0xb3c/0x4420 [ 408.440788][T19877] ? rawv6_sendmsg+0xb3c/0x4420 [ 408.440801][T19877] rawv6_sendmsg+0x1a8b/0x4420 [ 408.440816][T19877] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 408.440829][T19877] ? avc_has_perm+0x135/0x1e0 [ 408.440851][T19877] ? __pfx_avc_has_perm+0x10/0x10 [ 408.440877][T19877] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 408.440889][T19877] ? inet_sendmsg+0x11c/0x140 [ 408.440901][T19877] inet_sendmsg+0x11c/0x140 [ 408.440914][T19877] ____sys_sendmsg+0x98d/0xb70 [ 408.440925][T19877] ? __pfx_inet_sendmsg+0x10/0x10 [ 408.440939][T19877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.440957][T19877] ___sys_sendmsg+0x190/0x1e0 [ 408.440971][T19877] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.440999][T19877] __sys_sendmsg+0x170/0x220 [ 408.441015][T19877] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.441040][T19877] do_syscall_64+0x106/0xf80 [ 408.441050][T19877] ? clear_bhb_loop+0x40/0x90 [ 408.441064][T19877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.441075][T19877] RIP: 0033:0x7f5e0f79c819 [ 408.441085][T19877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.441096][T19877] RSP: 002b:00007f5e10596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.441107][T19877] RAX: ffffffffffffffda RBX: 00007f5e0fa15fa0 RCX: 00007f5e0f79c819 [ 408.441115][T19877] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000004 [ 408.441122][T19877] RBP: 00007f5e10596090 R08: 0000000000000000 R09: 0000000000000000 [ 408.441128][T19877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.441135][T19877] R13: 00007f5e0fa16038 R14: 00007f5e0fa15fa0 R15: 00007ffc27ad3928 [ 408.441149][T19877] [ 408.683667][T19896] new mount options do not match the existing superblock, will be ignored [ 408.820056][ T6128] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 408.959036][ T6128] usb 8-1: device descriptor read/64, error -71 [ 409.108765][ T55] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 409.215901][ T6128] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 409.290431][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 409.294140][ T55] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 409.299997][ T55] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 409.303184][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.305876][ T55] usb 5-1: Product: syz [ 409.307280][ T55] usb 5-1: Manufacturer: syz [ 409.309009][ T55] usb 5-1: SerialNumber: syz [ 409.312206][ T55] usb 5-1: config 0 descriptor?? [ 409.315291][T19904] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.318761][ T55] hub 5-1:0.0: bad descriptor, ignoring hub [ 409.320724][ T55] hub 5-1:0.0: probe with driver hub failed with error -5 [ 409.327569][ T55] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input88 [ 409.333365][ T842] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 409.354997][ T6128] usb 8-1: device descriptor read/64, error -71 [ 409.456490][T19623] udevd[19623]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.0-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 409.472508][ T6128] usb usb8-port1: attempt power cycle [ 409.514887][ T842] usb 10-1: Using ep0 maxpacket: 16 [ 409.601909][ T842] usb 10-1: unable to get BOS descriptor or descriptor too short [ 409.605427][ T842] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 409.607953][ T842] usb 10-1: can't read configurations, error -71 [ 409.686434][ T39] usb 5-1: USB disconnect, device number 77 [ 409.857236][ T6128] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 409.891660][ T6128] usb 8-1: device descriptor read/8, error -71 [ 410.167382][ T6128] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 410.191024][ T6128] usb 8-1: device descriptor read/8, error -71 [ 410.258572][ T40] audit: type=1400 audit(1776522967.906:3501): avc: denied { accept } for pid=19920 comm="syz.1.4293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 410.306349][ T6128] usb usb8-port1: unable to enumerate USB device [ 410.394137][T19940] FAULT_INJECTION: forcing a failure. [ 410.394137][T19940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.398386][T19940] CPU: 2 UID: 0 PID: 19940 Comm: syz.0.4300 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.398412][T19940] Tainted: [L]=SOFTLOCKUP [ 410.398418][T19940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 410.398427][T19940] Call Trace: [ 410.398434][T19940] [ 410.398441][T19940] dump_stack_lvl+0x100/0x190 [ 410.398472][T19940] should_fail_ex.cold+0x5/0xa [ 410.398495][T19940] _copy_from_iter+0x1f4/0x1690 [ 410.398520][T19940] ? __pfx__copy_from_iter+0x10/0x10 [ 410.398538][T19940] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 410.398559][T19940] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 410.398575][T19940] ? find_held_lock+0x2b/0x80 [ 410.398596][T19940] ? rawv6_sendmsg+0xb3c/0x4420 [ 410.398611][T19940] ? rawv6_sendmsg+0xb3c/0x4420 [ 410.398629][T19940] rawv6_sendmsg+0x1ebc/0x4420 [ 410.398653][T19940] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 410.398674][T19940] ? avc_has_perm+0x135/0x1e0 [ 410.398693][T19940] ? __pfx_avc_has_perm+0x10/0x10 [ 410.398733][T19940] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 410.398750][T19940] ? inet_sendmsg+0x11c/0x140 [ 410.398767][T19940] inet_sendmsg+0x11c/0x140 [ 410.398787][T19940] ____sys_sendmsg+0x98d/0xb70 [ 410.398804][T19940] ? __pfx_inet_sendmsg+0x10/0x10 [ 410.398830][T19940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 410.398858][T19940] ___sys_sendmsg+0x190/0x1e0 [ 410.398878][T19940] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.398924][T19940] __sys_sendmsg+0x170/0x220 [ 410.398948][T19940] ? __pfx___sys_sendmsg+0x10/0x10 [ 410.398985][T19940] do_syscall_64+0x106/0xf80 [ 410.399000][T19940] ? clear_bhb_loop+0x40/0x90 [ 410.399020][T19940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.399036][T19940] RIP: 0033:0x7f5e0f79c819 [ 410.399050][T19940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.399065][T19940] RSP: 002b:00007f5e10596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.399082][T19940] RAX: ffffffffffffffda RBX: 00007f5e0fa15fa0 RCX: 00007f5e0f79c819 [ 410.399092][T19940] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000004 [ 410.399102][T19940] RBP: 00007f5e10596090 R08: 0000000000000000 R09: 0000000000000000 [ 410.399112][T19940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.399121][T19940] R13: 00007f5e0fa16038 R14: 00007f5e0fa15fa0 R15: 00007ffc27ad3928 [ 410.399144][T19940] [ 410.830170][ T6128] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 410.990373][ T6128] usb 5-1: Using ep0 maxpacket: 16 [ 411.227560][ T6128] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.232881][ T6128] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 411.235343][ T6128] usb 5-1: can't read configurations, error -71 [ 411.297480][T19955] __nla_validate_parse: 6 callbacks suppressed [ 411.297492][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4303'. [ 411.428561][ T6005] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 411.610477][ T6005] usb 6-1: Using ep0 maxpacket: 16 [ 411.613408][ T6005] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 411.618195][ T6005] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 411.621359][ T6005] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.623898][ T6005] usb 6-1: Product: syz [ 411.625419][ T6005] usb 6-1: Manufacturer: syz [ 411.626839][ T6005] usb 6-1: SerialNumber: syz [ 411.637795][ T6005] usb 6-1: config 0 descriptor?? [ 411.645185][T19953] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 411.653952][ T6005] hub 6-1:0.0: bad descriptor, ignoring hub [ 411.655842][ T6005] hub 6-1:0.0: probe with driver hub failed with error -5 [ 411.660313][ T6005] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input90 [ 411.736441][T19967] Dead loop on virtual device ip6_vti0, fix it urgently! [ 411.909223][T19975] bond3: (slave vlan0): Enslaving as a backup interface with an up link [ 411.923544][T19983] ip6gretap0: entered promiscuous mode [ 411.996366][ T6184] usb 6-1: USB disconnect, device number 88 [ 412.131152][T19993] loop5: detected capacity change from 0 to 7 [ 412.140027][T19137] Dev loop5: unable to read RDB block 7 [ 412.141953][T19137] loop5: unable to read partition table [ 412.143931][T19137] loop5: partition table beyond EOD, truncated [ 412.148901][T19993] Dev loop5: unable to read RDB block 7 [ 412.151244][T19993] loop5: unable to read partition table [ 412.153780][T19993] loop5: partition table beyond EOD, truncated [ 412.157941][T19993] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 412.164037][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 412.517365][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 412.526821][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/107.tmp-b7:5' failed: Read-only file system [ 412.538578][T20007] Dead loop on virtual device ip6_vti0, fix it urgently! [ 412.564974][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 412.593866][ T6184] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 412.606936][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 412.658510][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 412.754205][ T39] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 412.775583][ T6184] usb 8-1: Using ep0 maxpacket: 16 [ 412.875153][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 412.926521][ T39] usb 6-1: device descriptor read/64, error -71 [ 413.084122][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 413.203221][ T39] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 413.333441][T20041] FAULT_INJECTION: forcing a failure. [ 413.333441][T20041] name failslab, interval 1, probability 0, space 0, times 0 [ 413.338456][T20041] CPU: 3 UID: 0 PID: 20041 Comm: syz.0.4332 Tainted: G L syzkaller #0 PREEMPT(full) [ 413.338475][T20041] Tainted: [L]=SOFTLOCKUP [ 413.338479][T20041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 413.338486][T20041] Call Trace: [ 413.338503][T20041] [ 413.338509][T20041] dump_stack_lvl+0x100/0x190 [ 413.338645][T20041] should_fail_ex.cold+0x5/0xa [ 413.338708][T20041] should_failslab+0xc2/0x120 [ 413.338775][T20041] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 413.338850][T20041] ? dst_alloc+0x99/0x1a0 [ 413.338883][T20041] ? __pfx_ip6_dst_gc+0x10/0x10 [ 413.338899][T20041] dst_alloc+0x99/0x1a0 [ 413.338915][T20041] ip6_pol_route+0x948/0x1230 [ 413.338929][T20041] ? __pfx_ip6_pol_route+0x10/0x10 [ 413.338943][T20041] ? skb_flow_get_ports+0x10a/0x330 [ 413.338959][T20041] ? lock_acquire+0x1cf/0x380 [ 413.339039][T20041] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 413.339052][T20041] fib6_rule_action+0x2e9/0x910 [ 413.339065][T20041] ? __pfx_fib6_rule_action+0x10/0x10 [ 413.339076][T20041] fib_rules_lookup+0x418/0x1060 [ 413.339096][T20041] ? __pfx_fib_rules_lookup+0x10/0x10 [ 413.339115][T20041] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 413.339130][T20041] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 413.339143][T20041] fib6_rule_lookup+0x18b/0x720 [ 413.339154][T20041] ? __lock_acquire+0x4a5/0x2630 [ 413.339166][T20041] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 413.339180][T20041] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 413.339200][T20041] ip6_route_output_flags+0x1d0/0x650 [ 413.339220][T20041] icmp6_send+0x23de/0x3c60 [ 413.339240][T20041] ? __pfx_icmp6_send+0x10/0x10 [ 413.339251][T20041] ? find_held_lock+0x48/0x80 [ 413.339266][T20041] ? is_bpf_text_address+0x8a/0x1a0 [ 413.339317][T20041] ? trace_event_raw_event_xdp_exception+0x1a0/0x320 [ 413.339333][T20041] ? bpf_ksym_find+0x128/0x1c0 [ 413.339344][T20041] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 413.339430][T20041] ? selinux_xfrm_decode_session+0x35/0x90 [ 413.339474][T20041] ? ip6_link_failure+0x31/0x580 [ 413.339484][T20041] ? xfrm_lookup_route+0x6a/0x200 [ 413.339497][T20041] ip6_link_failure+0x31/0x580 [ 413.339508][T20041] ? __pfx_ip6_link_failure+0x10/0x10 [ 413.339518][T20041] vti6_tnl_xmit+0xd3f/0x1fe0 [ 413.339537][T20041] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 413.339558][T20041] dev_hard_start_xmit+0x121/0x7d0 [ 413.339576][T20041] __dev_queue_xmit+0x32c1/0x4800 [ 413.339595][T20041] ? __pfx___dev_queue_xmit+0x10/0x10 [ 413.339613][T20041] ? __lock_acquire+0x4a5/0x2630 [ 413.339625][T20041] ? do_raw_spin_lock+0x128/0x260 [ 413.339637][T20041] ? find_held_lock+0x2b/0x80 [ 413.339651][T20041] ? ___neigh_create+0x1877/0x2970 [ 413.339663][T20041] ? ___neigh_create+0x1877/0x2970 [ 413.339679][T20041] ? ip6_finish_output2+0xb0f/0x1ce0 [ 413.339696][T20041] neigh_connected_output+0x3b7/0x5d0 [ 413.339718][T20041] ip6_finish_output2+0xb0f/0x1ce0 [ 413.339736][T20041] __ip6_finish_output+0x357/0xdf0 [ 413.339751][T20041] ip6_output+0x2aa/0xa60 [ 413.339765][T20041] ? __pfx_ip6_output+0x10/0x10 [ 413.339779][T20041] ? __pfx_ip6_finish_output+0x10/0x10 [ 413.339792][T20041] ? ip6t_do_table+0xc1d/0x1c90 [ 413.339808][T20041] ip6_mr_output+0x233/0x1180 [ 413.339826][T20041] ? __pfx_ip6_mr_output+0x10/0x10 [ 413.339845][T20041] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 413.339859][T20041] ? ip6table_mangle_hook+0xcb/0x770 [ 413.339871][T20041] ? _copy_from_iter+0x270/0x1690 [ 413.339884][T20041] ? __pfx_ip6t_do_table+0x10/0x10 [ 413.339901][T20041] ? netlbl_enabled+0x54/0x70 [ 413.339915][T20041] ? find_held_lock+0x2b/0x80 [ 413.339929][T20041] ? rawv6_sendmsg+0x3287/0x4420 [ 413.339939][T20041] ? rawv6_sendmsg+0x3287/0x4420 [ 413.339950][T20041] ? __pfx_ip6_mr_output+0x10/0x10 [ 413.339965][T20041] ? rawv6_sendmsg+0x4047/0x4420 [ 413.339978][T20041] rawv6_sendmsg+0x4047/0x4420 [ 413.340002][T20041] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 413.340024][T20041] ? avc_has_perm+0x135/0x1e0 [ 413.340044][T20041] ? __pfx_dst_output+0x10/0x10 [ 413.340084][T20041] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 413.340096][T20041] ? inet_sendmsg+0x11c/0x140 [ 413.340108][T20041] inet_sendmsg+0x11c/0x140 [ 413.340122][T20041] ____sys_sendmsg+0x98d/0xb70 [ 413.340134][T20041] ? __pfx_inet_sendmsg+0x10/0x10 [ 413.340148][T20041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.340167][T20041] ___sys_sendmsg+0x190/0x1e0 [ 413.340181][T20041] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.340213][T20041] __sys_sendmsg+0x170/0x220 [ 413.340229][T20041] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.340255][T20041] do_syscall_64+0x106/0xf80 [ 413.340265][T20041] ? clear_bhb_loop+0x40/0x90 [ 413.340279][T20041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.340291][T20041] RIP: 0033:0x7f5e0f79c819 [ 413.340301][T20041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.340313][T20041] RSP: 002b:00007f5e10596028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.340325][T20041] RAX: ffffffffffffffda RBX: 00007f5e0fa15fa0 RCX: 00007f5e0f79c819 [ 413.340332][T20041] RDX: 0000000000040800 RSI: 00002000000002c0 RDI: 0000000000000004 [ 413.340339][T20041] RBP: 00007f5e10596090 R08: 0000000000000000 R09: 0000000000000000 [ 413.340345][T20041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.340351][T20041] R13: 00007f5e0fa16038 R14: 00007f5e0fa15fa0 R15: 00007ffc27ad3928 [ 413.340366][T20041] [ 413.340820][T20041] Dead loop on virtual device ip6_vti0, fix it urgently! [ 413.353008][ T39] usb 6-1: device descriptor read/64, error -71 [ 413.354725][ T6128] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 413.481675][ T39] usb usb6-port1: attempt power cycle [ 413.644120][ T6128] usb 10-1: Using ep0 maxpacket: 16 [ 413.647769][ T6128] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 413.655700][ T6128] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 413.659542][ T6128] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.663001][ T6128] usb 10-1: Product: syz [ 413.664848][ T6128] usb 10-1: Manufacturer: syz [ 413.666848][ T6128] usb 10-1: SerialNumber: syz [ 413.675656][ T6128] usb 10-1: config 0 descriptor?? [ 413.678506][T20027] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 413.682095][ T6128] hub 10-1:0.0: bad descriptor, ignoring hub [ 413.684871][ T6128] hub 10-1:0.0: probe with driver hub failed with error -5 [ 413.691436][ T6128] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input92 [ 413.839069][T19623] udevd[19623]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.5-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 413.845052][ T6008] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 413.908822][ T39] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 413.930821][ T39] usb 6-1: device descriptor read/8, error -71 [ 414.004978][ T6008] usb 5-1: Using ep0 maxpacket: 16 [ 414.009076][ T6008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 414.015507][ T6008] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 414.015907][ T6128] usb 10-1: USB disconnect, device number 13 [ 414.019344][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.025275][ T6008] usb 5-1: Product: syz [ 414.028436][ T6008] usb 5-1: Manufacturer: syz [ 414.030506][ T6008] usb 5-1: SerialNumber: syz [ 414.039151][ T6008] usb 5-1: config 0 descriptor?? [ 414.041891][T20045] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 414.049226][ T6008] hub 5-1:0.0: bad descriptor, ignoring hub [ 414.051809][ T6008] hub 5-1:0.0: probe with driver hub failed with error -5 [ 414.057588][ T6008] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input93 [ 414.188238][T19623] udevd[19623]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.0-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 414.208128][ T39] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 414.242598][ T39] usb 6-1: device descriptor read/8, error -71 [ 414.369195][ T39] usb usb6-port1: unable to enumerate USB device [ 414.422194][ T10] usb 5-1: USB disconnect, device number 80 [ 414.466783][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 414.711380][T20050] tmpfs: Bad value for 'mpol' [ 414.714296][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 414.743333][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 414.864351][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 415.075533][T20065] Dead loop on virtual device ip6_vti0, fix it urgently! [ 415.078370][T20065] FAULT_INJECTION: forcing a failure. [ 415.078370][T20065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.082378][T20065] CPU: 3 UID: 0 PID: 20065 Comm: syz.0.4342 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.082394][T20065] Tainted: [L]=SOFTLOCKUP [ 415.082398][T20065] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 415.082406][T20065] Call Trace: [ 415.082410][T20065] [ 415.082414][T20065] dump_stack_lvl+0x100/0x190 [ 415.082436][T20065] should_fail_ex.cold+0x5/0xa [ 415.082452][T20065] _copy_from_user+0x2e/0xd0 [ 415.082466][T20065] kstrtouint_from_user+0xd6/0x1d0 [ 415.082483][T20065] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 415.082498][T20065] ? __lock_acquire+0x4a5/0x2630 [ 415.082512][T20065] ? lock_acquire+0x1cf/0x380 [ 415.082526][T20065] proc_fail_nth_write+0x83/0x220 [ 415.082698][T20065] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.082719][T20065] vfs_write+0x2aa/0x1070 [ 415.082830][T20065] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.082848][T20065] ? __pfx_vfs_write+0x10/0x10 [ 415.082858][T20065] ? __fget_files+0x215/0x3d0 [ 415.082874][T20065] ? __fget_files+0x21f/0x3d0 [ 415.082890][T20065] ksys_write+0x12a/0x250 [ 415.082901][T20065] ? __pfx_ksys_write+0x10/0x10 [ 415.082915][T20065] do_syscall_64+0x106/0xf80 [ 415.082926][T20065] ? clear_bhb_loop+0x40/0x90 [ 415.082941][T20065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.082952][T20065] RIP: 0033:0x7f5e0f75d04e [ 415.082962][T20065] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.082972][T20065] RSP: 002b:00007f5e10595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.082983][T20065] RAX: ffffffffffffffda RBX: 00007f5e105966c0 RCX: 00007f5e0f75d04e [ 415.082990][T20065] RDX: 0000000000000001 RSI: 00007f5e105960a0 RDI: 0000000000000005 [ 415.082997][T20065] RBP: 00007f5e10596090 R08: 0000000000000000 R09: 0000000000000000 [ 415.083003][T20065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.083010][T20065] R13: 00007f5e0fa16038 R14: 00007f5e0fa15fa0 R15: 00007ffc27ad3928 [ 415.083024][T20065] [ 415.184219][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 415.218328][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 415.323173][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 415.480705][ T6008] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 415.496867][ T6184] usb 8-1: unable to get BOS descriptor or descriptor too short [ 415.512765][ T6184] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 415.515241][ T6184] usb 8-1: can't read configurations, error -71 [ 415.663846][ T6008] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 415.666498][ T6008] usb 5-1: config 0 has no interface number 0 [ 415.668445][ T6008] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 415.671815][ T6008] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 415.676481][ T6008] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 415.679967][ T6008] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 415.683429][ T6008] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.687910][ T6008] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 415.690761][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.701925][ T6008] usb 5-1: config 0 descriptor?? [ 415.704270][T20071] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 415.713016][ T6008] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 415.782554][T20091] overlayfs: cannot append lower layer [ 415.832528][T20091] bond0: Removing last arp target with arp_interval on [ 415.887864][ T6184] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 415.889848][T20094] IPVS: Scheduler module ip_vs_sip not found [ 415.892878][T20094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4353'. [ 415.932330][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4345'. [ 415.941482][T20071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.944500][T20071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.948260][ T6008] usb 5-1: USB disconnect, device number 81 [ 415.963042][ T6008] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 416.070018][ T6184] usb 8-1: Using ep0 maxpacket: 16 [ 416.074146][ T6184] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 416.079204][ T6184] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 416.082118][ T6184] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.084790][ T6184] usb 8-1: Product: syz [ 416.086118][ T6184] usb 8-1: Manufacturer: syz [ 416.087621][ T6184] usb 8-1: SerialNumber: syz [ 416.091402][ T6184] usb 8-1: config 0 descriptor?? [ 416.093615][T20078] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 416.096827][ T6184] hub 8-1:0.0: bad descriptor, ignoring hub [ 416.098732][ T6184] hub 8-1:0.0: probe with driver hub failed with error -5 [ 416.103956][ T6184] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input95 [ 416.127796][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4358'. [ 416.193164][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 416.378815][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 416.468514][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 416.472660][ T10] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 416.480094][ T10] usb 10-1: can't read configurations, error -71 [ 416.497444][ T39] usb 8-1: USB disconnect, device number 49 [ 416.713114][ T40] audit: type=1400 audit(1776522973.939:3502): avc: denied { create } for pid=20124 comm="syz.1.4364" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.719687][ T40] audit: type=1400 audit(1776522973.939:3503): avc: denied { read write } for pid=20124 comm="syz.1.4364" name="file0" dev="tmpfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.727747][ T40] audit: type=1400 audit(1776522973.939:3504): avc: denied { open } for pid=20124 comm="syz.1.4364" path="/398/file0" dev="tmpfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.816813][ T6128] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 416.873316][ T40] audit: type=1400 audit(1776522974.089:3505): avc: denied { unlink } for pid=14139 comm="syz-executor" name="file0" dev="tmpfs" ino=2115 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 416.977009][ T6128] usb 5-1: Using ep0 maxpacket: 16 [ 416.980910][ T6128] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 416.986948][ T6128] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 416.991378][ T6128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.994778][ T6128] usb 5-1: Product: syz [ 416.996560][ T6128] usb 5-1: Manufacturer: syz [ 416.998748][ T6128] usb 5-1: SerialNumber: syz [ 417.003006][ T6128] usb 5-1: config 0 descriptor?? [ 417.005696][T20121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 417.016223][ T6128] hub 5-1:0.0: bad descriptor, ignoring hub [ 417.018799][ T6128] hub 5-1:0.0: probe with driver hub failed with error -5 [ 417.032389][ T6128] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input96 [ 417.287423][T20121] FAULT_INJECTION: forcing a failure. [ 417.287423][T20121] name failslab, interval 1, probability 0, space 0, times 0 [ 417.292696][T20121] CPU: 2 UID: 0 PID: 20121 Comm: syz.0.4362 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.292714][T20121] Tainted: [L]=SOFTLOCKUP [ 417.292718][T20121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.292726][T20121] Call Trace: [ 417.292740][T20121] [ 417.292755][T20121] dump_stack_lvl+0x100/0x190 [ 417.292837][T20121] should_fail_ex.cold+0x5/0xa [ 417.292894][T20121] ? usb_alloc_urb+0x66/0xa0 [ 417.292913][T20121] should_failslab+0xc2/0x120 [ 417.292957][T20121] __kmalloc_noprof+0xe0/0x850 [ 417.293008][T20121] usb_alloc_urb+0x66/0xa0 [ 417.293020][T20121] usb_control_msg+0x1d3/0x4b0 [ 417.293036][T20121] ? __pfx_usb_control_msg+0x10/0x10 [ 417.293054][T20121] hub_ext_port_status+0x152/0x600 [ 417.293073][T20121] hub_activate+0x6d8/0x1d50 [ 417.293091][T20121] ? __pfx_hub_activate+0x10/0x10 [ 417.293105][T20121] ? find_held_lock+0x2b/0x80 [ 417.293156][T20121] ? usb_generic_driver_resume+0x70/0xa0 [ 417.293170][T20121] ? usb_generic_driver_resume+0x70/0xa0 [ 417.293188][T20121] hub_resume+0xb0/0x400 [ 417.293202][T20121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.293220][T20121] ? __pfx_hub_resume+0x10/0x10 [ 417.293235][T20121] ? __pfx_hcd_bus_resume+0x10/0x10 [ 417.293250][T20121] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 417.293269][T20121] usb_resume_both+0x53a/0x7f0 [ 417.293288][T20121] ? __pfx_usb_resume_both+0x10/0x10 [ 417.293306][T20121] ? mark_held_locks+0x40/0x70 [ 417.293318][T20121] ? __pfx_usb_runtime_resume+0x10/0x10 [ 417.293331][T20121] __rpm_callback+0xc8/0x620 [ 417.293341][T20121] ? read_tsc+0x9/0x20 [ 417.293396][T20121] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 417.293452][T20121] ? __pfx_usb_runtime_resume+0x10/0x10 [ 417.293464][T20121] rpm_callback+0x16a/0x1b0 [ 417.293473][T20121] ? __pfx_usb_runtime_resume+0x10/0x10 [ 417.293486][T20121] rpm_resume+0xd3e/0x1350 [ 417.293500][T20121] ? __pfx_rpm_resume+0x10/0x10 [ 417.293510][T20121] ? do_raw_spin_lock+0x128/0x260 [ 417.293524][T20121] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.293541][T20121] rpm_resume+0x721/0x1350 [ 417.293550][T20121] ? __lock_acquire+0x3c8/0x2630 [ 417.293564][T20121] ? __pfx_rpm_resume+0x10/0x10 [ 417.293575][T20121] ? do_raw_spin_lock+0x128/0x260 [ 417.293588][T20121] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.293605][T20121] rpm_resume+0x721/0x1350 [ 417.293619][T20121] ? __pfx_rpm_resume+0x10/0x10 [ 417.293628][T20121] ? do_raw_spin_lock+0x128/0x260 [ 417.293641][T20121] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.293655][T20121] ? _raw_spin_lock_irqsave+0x52/0x60 [ 417.293674][T20121] __pm_runtime_resume+0xb6/0x170 [ 417.293686][T20121] usb_autopm_get_interface+0x20/0xe0 [ 417.293705][T20121] usbtouch_open+0xe1/0x340 [ 417.293719][T20121] ? __pfx_usbtouch_open+0x10/0x10 [ 417.293746][T20121] input_open_device+0x24c/0x3d0 [ 417.293766][T20121] mousedev_open_device+0xe2/0x140 [ 417.293783][T20121] mixdev_open_devices+0x11d/0x1b0 [ 417.293800][T20121] mousedev_open+0x2fd/0x580 [ 417.293817][T20121] ? __pfx_mousedev_open+0x10/0x10 [ 417.293832][T20121] chrdev_open+0x234/0x6a0 [ 417.293887][T20121] ? __pfx_chrdev_open+0x10/0x10 [ 417.293901][T20121] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 417.293952][T20121] do_dentry_open+0x6d8/0x1660 [ 417.293964][T20121] ? __pfx_chrdev_open+0x10/0x10 [ 417.293980][T20121] vfs_open+0x82/0x3f0 [ 417.293995][T20121] path_openat+0x208c/0x31a0 [ 417.294014][T20121] ? __pfx_path_openat+0x10/0x10 [ 417.294032][T20121] do_file_open+0x20e/0x430 [ 417.294046][T20121] ? __pfx_do_file_open+0x10/0x10 [ 417.294070][T20121] ? alloc_fd+0x476/0x790 [ 417.294084][T20121] ? do_getname+0x191/0x390 [ 417.294101][T20121] do_sys_openat2+0x10d/0x1e0 [ 417.294115][T20121] ? __pfx_do_sys_openat2+0x10/0x10 [ 417.294128][T20121] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.294142][T20121] ? __fget_files+0x21f/0x3d0 [ 417.294156][T20121] __x64_sys_openat+0x12d/0x210 [ 417.294171][T20121] ? __pfx___x64_sys_openat+0x10/0x10 [ 417.294185][T20121] ? ksys_write+0x1ac/0x250 [ 417.294224][T20121] do_syscall_64+0x106/0xf80 [ 417.294240][T20121] ? clear_bhb_loop+0x40/0x90 [ 417.294254][T20121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.294266][T20121] RIP: 0033:0x7f5e0f79c819 [ 417.294277][T20121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.294287][T20121] RSP: 002b:00007f5e10596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 417.294298][T20121] RAX: ffffffffffffffda RBX: 00007f5e0fa15fa0 RCX: 00007f5e0f79c819 [ 417.294305][T20121] RDX: 0000000000004000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 417.294311][T20121] RBP: 00007f5e10596090 R08: 0000000000000000 R09: 0000000000000000 [ 417.294317][T20121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.294323][T20121] R13: 00007f5e0fa16038 R14: 00007f5e0fa15fa0 R15: 00007ffc27ad3928 [ 417.294339][T20121] [ 417.297930][T20121] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 417.449730][ T6008] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 417.544805][T20148] netlink: 'syz.5.4371': attribute type 13 has an invalid length. [ 417.578360][T20148] gretap0: refused to change device tx_queue_len [ 417.580462][T20148] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 417.618542][ T6008] usb 8-1: Using ep0 maxpacket: 16 [ 417.622416][ T6008] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 417.627774][ T6008] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 417.631170][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.633691][ T6008] usb 8-1: Product: syz [ 417.635043][ T6008] usb 8-1: Manufacturer: syz [ 417.636540][ T6008] usb 8-1: SerialNumber: syz [ 417.643397][ T6008] usb 8-1: config 0 descriptor?? [ 417.646043][T20136] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 417.653078][ T6008] hub 8-1:0.0: bad descriptor, ignoring hub [ 417.654965][ T6008] hub 8-1:0.0: probe with driver hub failed with error -5 [ 417.659603][ T6008] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input97 [ 417.717347][ T10] usb 5-1: USB disconnect, device number 82 [ 417.983214][ T10] usb 8-1: USB disconnect, device number 50 [ 418.206232][ T40] audit: type=1400 audit(1776522975.333:3506): avc: denied { watch } for pid=20171 comm="syz.0.4379" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 418.214998][ T40] audit: type=1400 audit(1776522975.333:3507): avc: denied { watch_sb watch_reads } for pid=20171 comm="syz.0.4379" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 418.344164][T20187] vim2m vim2m.0: vidioc_s_fmt queue busy [ 418.776529][T20216] netlink: 'syz.5.4393': attribute type 4 has an invalid length. [ 418.783961][ T6008] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 418.786659][T19137] udevd[19137]: symlink '../../loop5' '/dev/disk/by-diskseq/108.tmp-b7:5' failed: Read-only file system [ 418.879963][ T10] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 418.944017][ T6008] usb 5-1: Using ep0 maxpacket: 16 [ 418.945042][T20223] Dead loop on virtual device ip6_vti0, fix it urgently! [ 418.947671][ T6008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 418.955374][ T6008] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 418.958188][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.960881][ T6008] usb 5-1: Product: syz [ 418.962214][ T6008] usb 5-1: Manufacturer: syz [ 418.963681][ T6008] usb 5-1: SerialNumber: syz [ 418.982384][ T6008] usb 5-1: config 0 descriptor?? [ 418.984505][T20201] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 418.987589][ T6008] hub 5-1:0.0: bad descriptor, ignoring hub [ 418.989500][ T6008] hub 5-1:0.0: probe with driver hub failed with error -5 [ 418.993226][ T6008] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input98 [ 419.051307][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 419.061663][ T966] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 419.065211][ T10] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 419.068894][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 419.074347][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 419.078723][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 419.083420][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 419.087699][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 419.092466][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 419.096280][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.126399][T19623] udevd[19623]: symlink '../event4' '/dev/input/by-path/platform-dummy_hcd.0-usb-0:1:0.0-event.tmp-c13:68' failed: Read-only file system [ 419.243459][ T966] usb 10-1: Using ep0 maxpacket: 16 [ 419.246442][ T966] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 226 [ 419.252001][ T966] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 419.255643][ T966] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.258330][ T966] usb 10-1: Product: syz [ 419.259680][ T966] usb 10-1: Manufacturer: syz [ 419.261174][ T966] usb 10-1: SerialNumber: syz [ 419.264249][ T966] usb 10-1: config 0 descriptor?? [ 419.266455][T20221] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 419.269312][ T966] hub 10-1:0.0: bad descriptor, ignoring hub [ 419.271242][ T966] hub 10-1:0.0: probe with driver hub failed with error -5 [ 419.275080][ T966] input: syz syz as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input99 [ 419.276979][T20201] FAULT_INJECTION: forcing a failure. [ 419.276979][T20201] name failslab, interval 1, probability 0, space 0, times 0 [ 419.282311][T20201] CPU: 0 UID: 0 PID: 20201 Comm: syz.0.4388 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.282328][T20201] Tainted: [L]=SOFTLOCKUP [ 419.282333][T20201] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.282340][T20201] Call Trace: [ 419.282345][T20201] [ 419.282349][T20201] dump_stack_lvl+0x100/0x190 [ 419.282372][T20201] should_fail_ex.cold+0x5/0xa [ 419.282402][T20201] ? usb_hcd_submit_urb+0x601/0x2150 [ 419.282413][T20201] should_failslab+0xc2/0x120 [ 419.282426][T20201] __kmalloc_noprof+0xe0/0x850 [ 419.282442][T20201] ? mark_held_locks+0x40/0x70 [ 419.282456][T20201] usb_hcd_submit_urb+0x601/0x2150 [ 419.282469][T20201] ? do_file_open+0x20e/0x430 [ 419.282482][T20201] ? vfs_open+0x31/0x3f0 [ 419.282495][T20201] ? do_syscall_64+0x106/0xf80 [ 419.282505][T20201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.282519][T20201] usb_submit_urb+0x8aa/0x1910 [ 419.282540][T20201] ? __init_swait_queue_head+0xca/0x150 [ 419.282556][T20201] usb_start_wait_urb+0x10e/0x580 [ 419.282572][T20201] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 419.282591][T20201] ? __asan_memset+0x23/0x50 [ 419.282609][T20201] usb_control_msg+0x328/0x4b0 [ 419.282624][T20201] ? __pfx_usb_control_msg+0x10/0x10 [ 419.282642][T20201] hub_ext_port_status+0x152/0x600 [ 419.282661][T20201] hub_activate+0x6d8/0x1d50 [ 419.282680][T20201] ? __pfx_hub_activate+0x10/0x10 [ 419.282693][T20201] ? find_held_lock+0x2b/0x80 [ 419.282707][T20201] ? usb_generic_driver_resume+0x70/0xa0 [ 419.282721][T20201] ? usb_generic_driver_resume+0x70/0xa0 [ 419.282739][T20201] hub_resume+0xb0/0x400 [ 419.282753][T20201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.282766][T20201] ? __pfx_hub_resume+0x10/0x10 [ 419.282783][T20201] ? __pfx_hcd_bus_resume+0x10/0x10 [ 419.282797][T20201] usb_resume_interface.isra.0+0x2ce/0x3d0 [ 419.282817][T20201] usb_resume_both+0x53a/0x7f0 [ 419.282836][T20201] ? __pfx_usb_resume_both+0x10/0x10 [ 419.282853][T20201] ? mark_held_locks+0x40/0x70 [ 419.282865][T20201] ? __pfx_usb_runtime_resume+0x10/0x10 [ 419.282877][T20201] __rpm_callback+0xc8/0x620 [ 419.282886][T20201] ? read_tsc+0x9/0x20 [ 419.282902][T20201] ? ktime_get_mono_fast_ns+0x1be/0x3c0 [ 419.282919][T20201] ? __pfx_usb_runtime_resume+0x10/0x10 [ 419.282930][T20201] rpm_callback+0x16a/0x1b0 [ 419.282940][T20201] ? __pfx_usb_runtime_resume+0x10/0x10 [ 419.282953][T20201] rpm_resume+0xd3e/0x1350 [ 419.282968][T20201] ? __pfx_rpm_resume+0x10/0x10 [ 419.282983][T20201] ? do_raw_spin_lock+0x128/0x260 [ 419.283002][T20201] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.283027][T20201] rpm_resume+0x721/0x1350 [ 419.283041][T20201] ? __lock_acquire+0x3c8/0x2630 [ 419.283061][T20201] ? __pfx_rpm_resume+0x10/0x10 [ 419.283077][T20201] ? do_raw_spin_lock+0x128/0x260 [ 419.283093][T20201] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.283110][T20201] rpm_resume+0x721/0x1350 [ 419.283123][T20201] ? __pfx_rpm_resume+0x10/0x10 [ 419.283132][T20201] ? do_raw_spin_lock+0x128/0x260 [ 419.283145][T20201] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 419.283159][T20201] ? _raw_spin_lock_irqsave+0x52/0x60 [ 419.283178][T20201] __pm_runtime_resume+0xb6/0x170 [ 419.283190][T20201] usb_autopm_get_interface+0x20/0xe0 [ 419.283209][T20201] usbtouch_open+0xe1/0x340 [ 419.283222][T20201] ? __pfx_usbtouch_open+0x10/0x10 [ 419.283235][T20201] input_open_device+0x24c/0x3d0 [ 419.283250][T20201] mousedev_open_device+0xe2/0x140 [ 419.283267][T20201] mixdev_open_devices+0x11d/0x1b0 [ 419.283283][T20201] mousedev_open+0x2fd/0x580 [ 419.283300][T20201] ? __pfx_mousedev_open+0x10/0x10 [ 419.283315][T20201] chrdev_open+0x234/0x6a0 [ 419.283328][T20201] ? __pfx_chrdev_open+0x10/0x10 [ 419.283341][T20201] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 419.283358][T20201] do_dentry_open+0x6d8/0x1660 [ 419.283369][T20201] ? __pfx_chrdev_open+0x10/0x10 [ 419.283385][T20201] vfs_open+0x82/0x3f0 [ 419.283400][T20201] path_openat+0x208c/0x31a0 [ 419.283423][T20201] ? __pfx_path_openat+0x10/0x10 [ 419.283447][T20201] do_file_open+0x20e/0x430 [ 419.283468][T20201] ? __pfx_do_file_open+0x10/0x10 [ 419.283492][T20201] ? alloc_fd+0x476/0x790 [ 419.283507][T20201] ? do_getname+0x191/0x390 [ 419.283528][T20201] do_sys_openat2+0x10d/0x1e0 [ 419.283542][T20201] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.283556][T20201] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 419.283570][T20201] ? __fget_files+0x21f/0x3d0 [ 419.283584][T20201] __x64_sys_openat+0x12d/0x210 [ 419.283599][T20201] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.283613][T20201] ? ksys_write+0x1ac/0x250 [ 419.283629][T20201] do_syscall_64+0x106/0xf80 [ 419.283639][T20201] ? clear_bhb_loop+0x40/0x90 [ 419.283653][T20201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.283665][T20201] RIP: 0033:0x7f5e0f79c819 [ 419.283675][T20201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.283686][T20201] RSP: 002b:00007f5e10596028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.283697][T20201] RAX: ffffffffffffffda RBX: 00007f5e0fa15fa0 RCX: 00007f5e0f79c819 [ 419.283703][T20201] RDX: 0000000000004000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 419.283710][T20201] RBP: 00007f5e10596090 R08: 0000000000000000 R09: 0000000000000000 [ 419.283716][T20201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.283723][T20201] R13: 00007f5e0fa16038 R14: 00007f5e0fa15fa0 R15: 00007ffc27ad3928 [ 419.283738][T20201] [ 419.283878][T20201] hub 5-0:1.0: hub_ext_port_status failed (err = -12) [ 419.455870][T20236] BUG: unable to handle page fault for address: ffffffffffffffea [ 419.457768][ T10] usb 8-1: usb_control_msg returned -32 [ 419.459975][T20236] #PF: supervisor read access in kernel mode [ 419.461030][ T10] usbtmc 8-1:16.0: can't read capabilities [ 419.463124][T20236] #PF: error_code(0x0000) - not-present page [ 419.474910][T20236] PGD e59b067 P4D e59b067 PUD e59d067 PMD 0 [ 419.476808][T20236] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 419.478791][T20236] CPU: 3 UID: 0 PID: 20236 Comm: syz.1.4399 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.482159][T20236] Tainted: [L]=SOFTLOCKUP [ 419.483536][T20236] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 419.486828][T20236] RIP: 0010:dvb_device_open+0x11b/0x3b0 [ 419.488635][T20236] Code: 18 4d 85 ed 0f 84 0e 02 00 00 e8 c0 6e 1b fa 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 75 02 00 00 <49> 8b 7d 00 e8 4c 2c 04 fa 31 ff 89 c3 89 c6 e8 e1 68 1b fa 84 db [ 419.489246][ T40] audit: type=1400 audit(1776522976.502:3508): avc: denied { write } for pid=5916 comm="syz-executor" path="pipe:[6369]" dev="pipefs" ino=6369 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.494624][T20236] RSP: 0018:ffffc900049278d0 EFLAGS: 00010246 [ 419.494637][T20236] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 419.494644][T20236] RDX: 1ffffffffffffffd RSI: ffffffff87ed88e0 RDI: ffff88802eaeec18 [ 419.494650][T20236] RBP: ffff88802eaeec00 R08: 0000000000000001 R09: fffffbfff1fda29d [ 419.494657][T20236] R10: ffffffff8fed14ef R11: 0000000000000000 R12: ffff88802b071dc0 [ 419.513968][T20236] R13: ffffffffffffffea R14: ffff88802fee4f20 R15: ffff88802b071e08 [ 419.516449][T20236] FS: 00007f7becc4d6c0(0000) GS:ffff8880d6638000(0000) knlGS:0000000000000000 [ 419.519261][T20236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.521334][T20236] CR2: ffffffffffffffea CR3: 00000000391d8000 CR4: 0000000000352ef0 [ 419.523831][T20236] Call Trace: [ 419.524901][T20236] [ 419.525856][T20236] ? __pfx_dvb_device_open+0x10/0x10 [ 419.527880][T20236] chrdev_open+0x234/0x6a0 [ 419.529297][T20236] ? __pfx_chrdev_open+0x10/0x10 [ 419.530878][T20236] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 419.532864][T20236] do_dentry_open+0x6d8/0x1660 [ 419.534392][T20236] ? __pfx_chrdev_open+0x10/0x10 [ 419.535971][T20236] vfs_open+0x82/0x3f0 [ 419.537280][T20236] path_openat+0x208c/0x31a0 [ 419.538796][T20236] ? __pfx_path_openat+0x10/0x10 [ 419.540368][T20236] do_file_open+0x20e/0x430 [ 419.541851][T20236] ? __pfx_do_file_open+0x10/0x10 [ 419.543594][T20236] ? alloc_fd+0x476/0x790 [ 419.545162][T20236] ? do_getname+0x191/0x390 [ 419.546737][T20236] do_sys_openat2+0x10d/0x1e0 [ 419.548434][T20236] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.550099][T20236] __x64_sys_openat+0x12d/0x210 [ 419.551664][T20236] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.553560][T20236] ? do_user_addr_fault+0x8d6/0x12f0 [ 419.555395][T20236] do_syscall_64+0x106/0xf80 [ 419.556864][T20236] ? clear_bhb_loop+0x40/0x90 [ 419.558386][T20236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.558551][ T966] usb 10-1: USB disconnect, device number 16 [ 419.558640][ C1] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 419.560242][T20236] RIP: 0033:0x7f7bebd5d04e [ 419.564960][T20236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.564973][T20236] RSP: 002b:00007f7becc4cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.564985][T20236] RAX: ffffffffffffffda RBX: 00007f7becc4d6c0 RCX: 00007f7bebd5d04e [ 419.564992][T20236] RDX: 0000000000000002 RSI: 00007f7becc4cc00 RDI: ffffffffffffff9c [ 419.564999][T20236] RBP: 00007f7becc4cc00 R08: 0000000000000000 R09: 0000000000000000 [ 419.565005][T20236] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 419.565012][T20236] R13: 00007f7bec016038 R14: 00007f7bec015fa0 R15: 00007fff1404fd68 [ 419.565022][T20236] [ 419.565026][T20236] Modules linked in: [ 419.565035][T20236] CR2: ffffffffffffffea [ 419.565042][T20236] ---[ end trace 0000000000000000 ]--- [ 419.592896][T20236] RIP: 0010:dvb_device_open+0x11b/0x3b0 [ 419.594660][T20236] Code: 18 4d 85 ed 0f 84 0e 02 00 00 e8 c0 6e 1b fa 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 75 02 00 00 <49> 8b 7d 00 e8 4c 2c 04 fa 31 ff 89 c3 89 c6 e8 e1 68 1b fa 84 db [ 419.600648][T20236] RSP: 0018:ffffc900049278d0 EFLAGS: 00010246 [ 419.602563][T20236] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 419.605028][T20236] RDX: 1ffffffffffffffd RSI: ffffffff87ed88e0 RDI: ffff88802eaeec18 [ 419.607538][T20236] RBP: ffff88802eaeec00 R08: 0000000000000001 R09: fffffbfff1fda29d [ 419.610297][T20236] R10: ffffffff8fed14ef R11: 0000000000000000 R12: ffff88802b071dc0 [ 419.612804][T20236] R13: ffffffffffffffea R14: ffff88802fee4f20 R15: ffff88802b071e08 [ 419.615302][T20236] FS: 00007f7becc4d6c0(0000) GS:ffff8880d6638000(0000) knlGS:0000000000000000 [ 419.618084][T20236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.620180][T20236] CR2: ffffffffffffffea CR3: 00000000391d8000 CR4: 0000000000352ef0 [ 419.622682][T20236] Kernel panic - not syncing: Fatal exception [ 419.625400][T20236] Kernel Offset: disabled [ 419.626802][T20236] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:58:29 Registers: info registers vcpu 0 CPU#0 RAX=00000004000008fb RBX=ffff88801ce8b588 RCX=0000000000000830 RDX=0000000000000004 RSI=00000000000000fb RDI=0000000000000002 RBP=ffff88802d440038 RSP=ffffc90000007a10 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=000000000000dc91 R12=0000000000000002 R13=1ffff92000000f47 R14=1ffff11005a88001 R15=0000000000000000 RIP=ffffffff81b6b6da RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6338000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3a65b0 CR3=0000000030441000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0fef8 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000002082001 Opmask04=00000000ffffffbf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc0c40 0000563914f3c040 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc0c40 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc5110 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc5210 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2c6dbf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff00ffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373254a5b934923 7373254a6780c6c3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737273737326 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737365636f727020 756c6c2520716573 006e6f6974697472 6170006b636f6c62 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e36313a312d38 2f312d382f386273 752f332e6463685f 796d6d75642f6d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc85c8 0000563928dc85c8 0000000000000041 0000000000302e36 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f12819820e853426 0000563c4b491676 0000000000000241 0000003100797400 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000753f0 ffffa9c6d723cb1c 000029154570fd4a 000029c69f664658 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f1287fae6faffff7 fffffffffffffffd 00007f3d7dfbff7b fffffffffffffffe ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000334f6368 0000000000000021 0000000000000020 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003468 0000000000000000 0000000000000002 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000005 RBX=0000000000000001 RCX=ffffffff91af4c2e RDX=ffffc9000cea7a01 RSI=ffffc9000cea7a20 RDI=ffffc9000cea7a20 RBP=ffffc9000cea7a20 RSP=ffffc9000cea7598 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc9000cea7608 R11=000000000003b6e0 R12=ffffc9000cea7658 R13=ffffc9000cea7608 R14=ffffc9000cea7a50 R15=ffffc9000cea763c RIP=ffffffff81b83180 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f2c6e1c5880 ffffffff 00c00000 GS =0000 ffff8880d6438000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555568297a28 CR3=000000005032b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000042 Opmask02=00000000ffffffff Opmask03=0000000002082001 Opmask04=00000000ffffffbf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc02b0 0000563928b7b818 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffb7d20260 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc7218 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc02b0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1e4c025f425b015b 414a594a021f011f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 151e151f024d5c5a 021f014b4c477056 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d382f38627375 2f332e6463685f79 6d6d75642f6d726f 6674616c702f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7462737500637369 6d62737500302e36 313a312d3800312d 382f386273752f33 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73736963637c2a65 68636163627c2a64 76787c2a64767c2a 72737c2a0030636d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928ea9570 0000563928dc1c80 0000563928db5580 0000563928ea95b0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dbdc80 0000563928db6c70 0000563928db6c10 0000563928dc2600 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928dc8750 0000563928fb5700 0000563928dc87d0 0000563928fb5600 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563928daf100 0000563928daf080 0000563928daf020 0000563928dc69b0 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000334f6368 0000000000000021 0000000000000020 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003468 0000000000000000 0000000000000002 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000376edc RBX=ffff88801eaf4980 RCX=ffffffff8b915c75 RDX=0000000000000001 RSI=ffffffff8c1b1e20 RDI=ffffffff81dea134 RBP=0000000000000000 RSP=ffffc90000187df0 R8 =0000000000000000 R9 =ffffed100d4c679d R10=ffff88806a633ceb R11=0000000000000002 R12=0000000000000002 R13=ffffed1003d5e930 R14=0000000000000002 R15=ffffffff90d9db10 RIP=ffffffff8b9145df RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6538000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7becc2bff8 CR3=0000000038f97000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000f0400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005561d659d600 00005561d659d600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3150dac0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 726f727265203a46 5023205d36333230 32545b5d34323133 36342e3931342020 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203865203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000063 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff857aaff5 RDI=ffffffff9b4ae040 RBP=ffffffff9b4ae000 RSP=ffffc90004927128 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=707573203a465023 R12=0000000000000000 R13=0000000000000063 R14=0000000000000010 R15=ffffffff857aaf90 RIP=ffffffff857ab01f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7becc4d6c0 ffffffff 00c00000 GS =0000 ffff8880d6638000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffffffffea CR3=00000000391d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff14050256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff14050256 00007fff1405025c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7bebe33274 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7bebe332b4 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7bebe33418 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7bebe332a6 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7bebfec5f8 00007f7bebfec5c8 00007f7bebfec600 00007f7bebfec5e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000