last executing test programs: 9m32.452527782s ago: executing program 1 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000700)="d80000001a0081044e81f782db4cb904021d08004f1e81f8d8150019001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aebfb0daa7b0cd39e4edbb57a5025ccca9e020000000000000040fad95667e006dcbd63951f215ce3bb9ad809d5e1cace81017f5b5cef443dc3ed0bffece0b42a9ecbee5de6ccd40dd6e4", 0xd8}], 0x1}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x257, 0x0, r9}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0xfffffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x20, 0x0, 0x346, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x2, 0xffffffff}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 9m30.949318674s ago: executing program 1 (id=943): mkdir(0x0, 0x63) r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="d100000000000180c20000000800450000200000e0000011907800000000000000004e210000000c907861040000c2324dd71db74204bc3de420c76e6c937ba615bf22e01942e812191c5c"], 0x0) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="01808aaa1f08004d5001fa1e2dfd24e5119078000000d2000000000003b3f3035420382a57941a97a3d5b409f3504510660c0dd28c00000000000000"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000006840)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f0000060003000100"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) 9m30.188475577s ago: executing program 1 (id=946): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x242, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100015000) modify_ldt$write2(0x11, &(0x7f0000000100)={0x81, 0x1000, 0x4000, 0x1}, 0x10) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000040)) modify_ldt$read(0x0, &(0x7f0000000140)=""/4106, 0xfffffffffffffec9) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 9m29.325427857s ago: executing program 1 (id=953): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') 9m28.287055759s ago: executing program 1 (id=957): syz_usb_connect(0x2, 0x46, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xcb, 0xc5, 0xef, 0x8, 0x110a, 0x1150, 0x559e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x6, 0x70, 0x8, "", [{{0x9, 0x4, 0x46, 0x5, 0x3, 0x4d, 0xbf, 0xc, 0x9, [], [{{0x9, 0x5, 0x6, 0x2, 0x10, 0x4, 0x9, 0x2b}}, {{0x9, 0x5, 0x6, 0x4, 0x20, 0x2, 0xcd, 0xff}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x8, 0xae, 0x5, [@generic={0x7, 0x5, "e35639a7a5"}]}}]}}]}}]}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x3, 0x3, {0xa, 0x4e20, 0x364, @mcast2, 0x6}}}, 0x32) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000540)={0x2, 0x0, {0x3, 0x0, 0x8, 0x3, 0x80}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x4, "5eee"}]}}}}}}}}, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_usb_connect$uac2(0x0, 0x10f, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfd, 0x3, 0x1, 0x8, 0xf0, 0x7, {0x8, 0xb, 0x2, 0x2, 0x1, 0x5, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x8, 0x4f, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x4, 0x400, 0x8, 0x4, 0x3d, 0xfffc, 0xbb}, @processing_unit={0xf, 0x24, 0x8, 0x1, 0x3, [0x3, 0x0, 0x2, 0x2, 0x3]}, @effect_unit={0x11, 0x24, 0x7, 0x3, 0x1, 0x6, [0x2, 0x2, 0x3, 0x0, 0x0]}, @mixer_unit={0x6, 0x24, 0x4, 0x3, 0xf7, "a2"}, @effect_unit={0xb, 0x24, 0x7, 0x2, 0x0, 0x1, [0x2, 0x0]}, @selector_unit={0x9, 0x24, 0xb, 0x5, 0x4, "d681d9df"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xac, 0xff}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x80, 0x3, 0x9, 0x5, "cdad", "be7d4a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe4, 0x5c, 0x5, {0x8, 0x25, 0x1, 0x3, 0xc, 0x6, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x3}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x80, 0x1, 0x0, "456abaec752e79"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7d, 0x5, 0xa, 0x1}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x584, 0x0, 0x1, "0cace7caef"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x5, 0xa}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x8, 0xff, {0x8, 0x25, 0x1, 0x0, 0x3, 0x9, 0x9}}}}}}}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x201, 0x13, 0x7, 0x1, 0xff, 0x3}, 0x10, &(0x7f0000000780)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4d, 0x0, 0x4, 0x6}]}, 0x4, [{0xf6, &(0x7f00000007c0)=@string={0xf6, 0x3, "ff26c9e3f3ad7a0ced24eb79a83a1ee57105718877518e7e097ee107e70afa3fd75b704472376314b28a434458f8203e3cb8bd2dc38c3766fdaca59da722ea1101fc47eeb8cb1a4fedb3a458e001fa35adca1e184941e01bc3bc929939ffbc086e85b702331b24073b9cb725985d1d55e443ae854e2790d6810e2bbaee2ea984f2cffd1fe0954283f6727cbb9f5bbc942dc7161e4d9da27a8c4ada5b9d6a8f22c7eca850b25b288c5f3aa49b25ca1625fa6f6cc64c98e4a329d4db3f9d7dc31e8eece428e980014e918b725953e7423f049306f5a4466826996ec8b89f2b956f9984135c967bb03290cf653d8ca83a8cbd54c0ba"}}, {0x55, &(0x7f00000008c0)=@string={0x55, 0x3, "5b41336732efdadf8a5944de67678dec8822f84dd5a4d23eb9f33a489e3387b6d43bc78a319764252f4886c6bfd23dcb32712cc9cf7247a85501f3e662bc1181d2039912064389aefa3508c4d74573d4d57d55"}}, {0x8c, &(0x7f0000000940)=@string={0x8c, 0x3, "d7db345154013521d2fbb0b349bb0b823046f43621c2dca318d91f788db3cf3df30dfa9c96c06a6eb089ee88ffde4483d140ae0b3ac0989930452b564f9f19e63679118ada743d25c5b8e6758cd0ea0e9394282a7470a255d1fca998d028f425f662980c3cebb697b4e7c28ec0d9651d03a368ca8912076e19c9874b4a658e0d96bbb42de22b85f05a14"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x80a}}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0x40103d0b, &(0x7f0000000500)={0x5, 0xa}) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xff, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xb, 0x63, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x87, 0xff, 0x6}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x10, 0x29, 0x8, 0x8, 0x3}, 0x3f, &(0x7f00000000c0)={0x5, 0xf, 0x3f, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "6360d48acb84935fd3668ec6a679dee9"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x4, 0x6, 0xc8c0}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xd, 0x31c}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0x3, 0x23, 0x5, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0x7, 0xe}]}, 0x3, [{0x1c, &(0x7f0000000240)=@string={0x1c, 0x3, "65452a359993e85427b196b16cf3b7e592d400e60aeee2d30f98"}}, {0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "d781fa65c3ea31ad2d625ac28878d1f47918438e6c01e5998b400cf4bc3e721c287b063fa98d6dceac2f2a163db28a40afcc59b1e4a09ccb10ccc7491b849cdd0c76696efb40"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40d}}]}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xeeee0000, 0x100000, 0xf, 0x1, 0x0, 0x3d}, {0x0, 0x2000, 0xf, 0xfe, 0x1, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x5, 0x2}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x62, 0x0, 0x3, 0x0, 0x4, 0x4}, {0x26000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0xffff1000, 0x3, 0x9, 0x3, 0x10, 0x0, 0x0, 0x41, 0x40, 0x4}, {0x8000000, 0x10000, 0xa, 0x0, 0xfe, 0xfd}, {0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xb, 0x3a, 0x81}, {0xb000, 0x3000, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5}, {0x0, 0x481}, {}, 0xbdf9ffc6, 0x0, 0x26000, 0x100, 0x8, 0x8000, 0x43000, [0x0, 0x0, 0x2]}) syz_usb_connect(0x3, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0xc9, 0xf1, 0x2d, 0x8, 0x4dd, 0x8005, 0xd9fa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0xc, 0x80, 0x80, "", [{{0x9, 0x4, 0x76, 0x9, 0x0, 0x2, 0xa, 0x0, 0xc2, [@hid_hid={0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0xc43}}]}}]}}]}}, 0x0) 9m27.462996347s ago: executing program 1 (id=962): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000740)={0x40000004}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x2, 0x5}, &(0x7f0000000200)=0x8) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = eventfd2(0x8001, 0x80800) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r11}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r11}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3, 0x0, 0x0, 0x80}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast2, {0xff, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x3506, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x20000000) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000180)={0x1, r9}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x48}}, 0x10) 9m26.837311114s ago: executing program 32 (id=962): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x14, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r2 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000740)={0x40000004}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r7, 0x2, 0x5}, &(0x7f0000000200)=0x8) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = eventfd2(0x8001, 0x80800) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r11}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r11}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3, 0x0, 0x0, 0x80}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast2, {0xff, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x3506, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x20000000) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f0000000180)={0x1, r9}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x2}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x48}}, 0x10) 8m50.798121829s ago: executing program 2 (id=1080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@can_delroute={0x34, 0x19, 0x10, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c18ab2c782fa073d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0xffffffffffffffff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0xc04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents64(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r6 = socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000b80)={0x0, 0x3, 0x5, &(0x7f0000000000)={0x1d, "bfffabae9ebef352f700f0231504fc48dbf72a9cba7b41c804c93c66b6318e83c2"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() 8m47.758719445s ago: executing program 2 (id=1084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x2, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom(r6, 0x0, 0xffffff52, 0x10000, 0x0, 0xffffffffffffff25) 8m46.537438671s ago: executing program 2 (id=1092): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = creat(&(0x7f0000000240)='./file1\x00', 0xb6) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xff010000, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 8m46.266966065s ago: executing program 2 (id=1093): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x396, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x80001006, 0x0, 0x0, 'queue1\x00', 0xfffffffc}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0x0, 0x2, {0xf61, 0x0, 0x0, '\x00', {0x7ff, 0x38, 0xadf, 0x10, 0x0, 0x0, 0x4000, '\x00', 0x8000000006, 0xffff, 0x1, 0x9, {0x4, 0x6}, {0x1, 0xb}, {0x2000001, 0x20000d}, {0x1000000000, 0xa00}, 0x2, 0x574, 0x9db, 0xbb4}}}}) r3 = geteuid() getresgid(0x0, 0x0, &(0x7f0000000240)=0x0) r5 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000019300)={{0x3, r3, 0xee00, r3, r4, 0x84, 0xd}, 0x0, 0x0, 0x4, 0xa000000000000000, 0x2, 0x9, 0x7, 0x101, 0x9, 0xa, r5, 0xffffffffffffffff}) lstat(&(0x7f0000001640)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002740)=0x0, 0x0, &(0x7f00000027c0)) fsetxattr$system_posix_acl(r1, &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="e1df990100000000000000d9b1de000000000000008861fff74e513350c8c14c1b691dbe6e686a6bab9959133840964419def70ba613248671b291986711206c5007a0c7ab92897ed19f11707fd9136874d7c5e1ae1eb945af0afcdd243c683e68302537c9419304f2f348ddbf259cd66bb5c797e10217772e8c68e191c404bd061bc5d6e45c8301ebce9cb68a82546b6ea2b8dc99621327a74b1e372a423fa2b8066b27602b965fc1a31daa201ed98e525641e27a7cb929191637c0fc7508496cd9e18774b49732e575b62f7682ce51c672ca188c134cbaaa9d8712242d89f4109f5261d2cf9b5ff78081dff37c0c842d79410407ce0457ae290a", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="020001006cc699b6381253ac4bb18498960b70d7ac68d273635d12417f1611635598c9bf5601b167ddf943c11b467b3179da591baf4c20f4d1d199f8980638856ead9508dd9e7dd0d77dac28361dd8a37fab607907c77f6a6cbbf376f843a4532129fe5bda662ddeee4d84209d9d0e4442ed52b118e7e29ae054431abb4389c9dcd04661836b6901d001a02c3f6ae7", @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYBLOB="02000c00", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000100", @ANYBLOB="10000600000000002000070000000000"], 0xa4, 0x2) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0xc, 0x0, 0x2, @tick=0x8, {}, {}, @raw32={[0x2600, 0xbb7e]}}], 0x1c) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x68) listen(r0, 0x5) r8 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = io_uring_setup(0x7, &(0x7f0000000600)={0x0, 0x790f, 0x100, 0x8000008, 0x40000c1}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) io_uring_enter(r9, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r8, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa608dcfa2609c06d94be4ee52626cb37fe800"], 0x0) 8m46.062903313s ago: executing program 2 (id=1094): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000380)={0x3, 0x0, [{0x40000001, 0xaf, 0x4, 0x8, 0x7, 0x5, 0x2}, {0x80000019, 0x5, 0x0, 0xfffffff7, 0x5, 0x1, 0x1}, {0x80000008, 0x4, 0x5, 0x5, 0xa1a, 0xa, 0x7}]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x24040081) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8054) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m44.901445552s ago: executing program 2 (id=1097): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) r1 = epoll_create(0xff9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001800010027bd7000fddbdf251d010600080005000600ff0715000300", @ANYRESOCT], 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x7, 0x3, 0x8001, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x7, 0x800, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0xb, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x4, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8000, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0x1, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9606, 0xa, 0x9, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0xa2802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x33, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504040050000000b4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be3619111469d1143cdca7ee724e649737adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b90300ee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212455318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b508310d8bd72d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c179901000000000000805e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abffff71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb4c62dded994e2d7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8m29.813387266s ago: executing program 33 (id=1097): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) r1 = epoll_create(0xff9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001800010027bd7000fddbdf251d010600080005000600ff0715000300", @ANYRESOCT], 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x6}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x49, [0x3, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0xa, 0x4d, 0xfffffbf2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0x51e, 0x4, 0x7, 0x3, 0x8001, 0x7, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x0, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x7, 0x800, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0x2, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x4, 0xea4, 0xa, 0x5, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x29, 0x6, 0x1000007, 0x9, 0x4, 0xb, 0x8, 0x9, 0x7, 0x5, 0xfffffffd, 0x3, 0x8080, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x4, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x4, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d5, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8000, 0x8, 0x86, 0xb, 0x1000000b, 0x3e7, 0x100005, 0x5, 0x4, 0x40002, 0x1, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x8, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x2], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000006, 0x5, 0x8, 0xff, 0x3, 0x2, 0xffff, 0x3, 0x8, 0x100, 0x9606, 0xa, 0x9, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0a, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x918) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0xa2802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="17"], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x33, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000f8000000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000035040000500000001d400200000000006504040050000000b4030000000000001d440000000000007a0a00fe000000000f03000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be3619111469d1143cdca7ee724e649737adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af2542ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2128c7e0ec82770c8204a1ddeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b90300ee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d3490dd97adab638cca595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8c83c3d8cbfedc038395342846e1b207974e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfcd7ad0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f9212455318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0000cf70a91c76e8b14de02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad8508f7550cad7ec93af7fb1b50c75ba1ee7baa19faf67256b56a355b6a686ba99d0a8950f0937f778af083e055f5138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b508310d8bd72d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c179901000000000000805e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003ebfbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca311a28ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1e1979e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a508460f2d0455cf79a43746979f99f60037e84fb478199dc1020f4beb98b8074bf7df8b5e783637da7418fd3aa81cff202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abffff71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adde305ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0d0274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc37f1eb4c62dded994e2d7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1ecbf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cbf5d6b6898335792747588d49df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d943622000000000000000000000000000000000000000000000000000000000000000000000000000000000000f112fc8a4942d7453cf29cbbef3a567ea0a2a8a0561dfb6cfe7f1812405e1a092b382adc0698c377b0a1f49afb6ba26f8e28cf68b0065857b36276931c318cb84f748a26c4d81a0322ce21e7d9c002006cf8ac6402e036cf9344a1cb1b8603276000144268a0aa584a92188f55318dde1d1b09319c00d0de3471ab4243ac0f49516a690c514ba6449f0a804fcac3f30bf4a933d32c889283aa092cca9aa349b624c5ed2b66fa0439f54f83c9ff8be083221609c8696433da46c91ac52e5b1d159daed1af0cda0ee05ae770a7ea467d5602b441e748b7f22496f8453fb6b7cc2dd3a8ce15fd76387fc02d4e2b7b4502a80000000000000000000000000000000000000000e046c0756c0955a81165e4212a1a58334fe51269f228ad32fba2bdae0172278d3bb48c370f6b59c0c7ba9b0aaae317d3f8104fd696bc76"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m4.155244471s ago: executing program 5 (id=2264): pipe(0x0) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioperm(0x0, 0x6, 0x8000000000004) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x14, 0xae, 0x0, 0x0, @ipv6=@local}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x6bee, 0x0, 0x1, 0xdbc, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)}, 0x20) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x408000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x11, 0x1e, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf5}}, @generic={0x4, 0x1, 0x8, 0x6, 0x109}, @alu={0x4, 0x1, 0xa, 0xb, 0xb, 0xc, 0x1}, @generic={0x7, 0xc, 0xc, 0x7, 0xfffff801}, @map_val={0x18, 0x2, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xd}, @call={0x85, 0x0, 0x0, 0xa1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x34, 0x20000, 0x0, 0x0, 0x8}, 0x1c) 2m2.067000634s ago: executing program 5 (id=2269): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x20002fb}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.623582344s ago: executing program 5 (id=2271): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_open_dev$audion(&(0x7f0000000240), 0x756e, 0x301080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="010029bd7000fddbdf25700000000800", @ANYRES32=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x804) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xf}, {}, {}, @time=@time={0x8, 0xa}}], 0x54) setsockopt$sock_int(r4, 0x1, 0x9, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_tgsigqueueinfo(r8, r8, 0xe, &(0x7f0000000240)={0x6, 0xffffffff, 0xa7}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r11, 0x3, 0x1}, 0x50) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x3a, 0x229, 0x8000, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 1m59.560761091s ago: executing program 5 (id=2273): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m58.72192335s ago: executing program 5 (id=2275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000500)={{0x70000, 0x996b3f46005b2508, 0x0, 0x5, 0x2, 0x0, 0xf1, 0x0, 0x75, 0xf4, 0x63, 0x6}, {0x2000, 0x1, 0xe, 0x4, 0x9, 0x7f, 0x8, 0x2, 0x3, 0x3, 0x9, 0x40}, {0xffffffff, 0x41000, 0x0, 0x9, 0x7, 0x7, 0x32, 0x0, 0x3, 0x0, 0x38, 0x7f}, {0x100000, 0xe000, 0x8, 0xd, 0xf2, 0x8f, 0xe0, 0x38, 0x6, 0xfc, 0x1, 0x6}, {0x5f000, 0x0, 0xc, 0x2, 0x1, 0x8, 0x9a, 0x6, 0x9, 0x7e, 0x56, 0x7}, {0x41000, 0xa000, 0x0, 0x1, 0x3, 0xc, 0xc3, 0x89, 0x3, 0x1, 0x2, 0x4}, {0x200000, 0x50000, 0xe, 0x2, 0x9, 0x1, 0x80, 0x9, 0x72, 0x4, 0x5, 0x1}, {0x0, 0x7000, 0xb, 0x81, 0x0, 0x6, 0x4, 0x3, 0x9, 0x3, 0x9}, {0x10000}, {0xe000, 0x4}, 0x80040000, 0x0, 0x7000, 0x100000, 0x0, 0xa000, 0x80a0000, 0x1, [0x4, 0xb0, 0x8, 0xb3]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x2, 0x10001, 0x8, 0xfff, 0xffffff73}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4f}]}, 0x34}}, 0x50) socket(0x10, 0x3, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x100, 0x80000003, 0x2, 0xc, 0xfffffffe, 0x5, 0x79, 0x1, 0x1, 0x0, 0x40, 0x1, 0x7, 0x1, 0x2, 0xfd, 0xfffffffb, 0xd, 0x5, 0x80000000, 0x8, 0x5, 0x0, 0x20001e58, 0xffffffff, 0xf3a2, 0x3, 0x80000008, 0xa6b5, 0x24a05ffd, 0xffffffff]}) 1m57.360693154s ago: executing program 5 (id=2280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000400), &(0x7f0000000200), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000080)=""/66, &(0x7f0000000100)=0x42) 1m56.72657404s ago: executing program 34 (id=2280): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x40) syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000400), &(0x7f0000000200), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000080)=""/66, &(0x7f0000000100)=0x42) 27.934068832s ago: executing program 7 (id=2515): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="d328", 0xfffffefd}], 0x1) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) 22.489405238s ago: executing program 7 (id=2526): getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000000275c6df6878", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x1, 0x1015, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xf7fffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1a6c929e493a585d937d271e380d423c23064605758af6d2c1bfea9060bfebcc3b548f15dcac10cf2bab56e5e47ce8702fb098ae9d9f7d0f6e1dc8b64f4ce000dc9955c06d3c53a8e84750dd58ef12cdb39b6af737addc5389a46a95caf792870c4232870abab117c67b68d2a8626bb85678318bd1573c989115554db376c618b537b0ed3cc08e5756b1abaf0f0ad87f67072b292a4c0a3ce95572885017874662670bdab33ad26d23177c6726d9c926cf462d52ee1b05eeba83024ae7c423654cb92451260025ca884f8df679f68c271649adf52e6e5b4c672d47953271dab8b8a0be51be721f34c2a3352a620aa825849a79571315aa83b1dd3c879af2d221315beef40687cfc1f2a35505e0434baf976cc046593cbc5b85b3ea29ba70d7e377dcfb45fb429f58240bb9e52876d07c50109f866344fd92bddbb4775b67ff28a5881cd4f835b7f7636dd01112522458deac2a0bf5e40c2e6b43bc8a414d3b4b9990bd3e31def516400de193d83924ce3d4b28f3b45c01f5ac4053943bda67965f491a0fdf1550fc398b4b277d786968339fe98b63e5d147b23f58c9b4f42558592813a2969462d77e21629dadb0a7fd775a8544a73dd4557644ba3aeaa972fd9ddbf7a18efb9079a3a0d46eefa8ce919be7a1002ef4d6fcc28505b269de29d417205741d6ca175637fae9650ac3038c217de9fbb0ada775f932a785b14c2560de59f236be36e441dcc31b460f1c3f9fe16e78cb97ad2374249f44b8574f3a92938966c583aa6f70492a7febd6e37af1b6998ba9f957c52fd1bda5a70821915ac7f10b82b536d50df63c3e9e9bdddc54698465ee18442534a1fb95432f910b3fc5714a73454e41a0ac9362f49783895e51e09633c828b1b7d62b9e4152c4066022cd6104a0c42b2da102263711234a9746f8f7b7af5d24be1a02429a745d784501896056c7b78db98f021cb0b8c6c1d9f3c41f4a4f73e7eb7be8b62c953f37b340aae28fff58549ad0df17629d5661c976ce66c8f9ca94228ff9ed88e4b5c184c84bd4dec1bd4c2dad6e3514bd415d90db424a828de00601abaa823a7c910965f42c579c35831bca8d769acd5f7a73f5a60babe152c3259ec5df0e020a33818c5805bf9ecbbd78acc3b195beafe37750dc417e9434def7d69d90c0b15cb09c329275ea4a1c198b87d206e708b1b04616f440491f9760ba87eb32c4d9916eff0eb058786c76e80518d7f70075867a40a2ab85b7a4b001a9c75497bc1d656f67003b4d2591756880d6c29011c7b822415771c154c4499d56e9085579829f114cf01f62ccf0ed6655882cea1454ed99b657f12c94553bd4e6f9fd4b8c5efef3125b69b0025029458928f95c7c8f66b90e75fe699e96ec004e01db2374523d04ecc11390de46de49c7ceadda216b004d1ef423b1d738c39204fe6c0637e909e299b7b9efe5e016efb885220d482fea248f81c07971ffd90ad8910f47b08577d17810d09ead3adde23dc83f9a4dfdabd9c41c73fa06ed93a2b93b32c964ff9cd8b88e703382545e4b342ed087f6ca74603dbdaf7c719bf8c38e84ba798c9854d711256fe77707557ca1964b0678d3f5d00de17c28231019995c2ab81caf58c5c00cd42b124a3a4e1f71f2f2d3839200df611e99c7f61fe83b975193683819e84a7d08487d4409fb1fab4c2646f4155f7c66b6748551e534139af683c12d43e6f8d87cc83b9fd9a47d75938d5f4024e18752643bffe3ca79dafc5f53989ece536c1930435f6d3e5b182def03015b8576879b32b90a478ea40307e1d1f07595c979931f7e84089ff0514c940188b7efb0cabc8c7bd83a3453fedb336ed93add6f22d7d02ba20970582ea4a97126aa4edbd99beedf3767a6047204ccc22c2232b36c5d8c6848d8c7abdfd067a967dd2140f96994d1bab60f35654de0d953c1735c7ec531ea0719a61f138e1bfb5547eb13c7ccb8311bc8c9cb7b1b667559088306765c66e73cc7efcd924620db4eda5f3b3d11e815aaa77e1945f50f83b284e0439d12f3938411123874c369587a70e9ca2e617249929cdb69b5a6967eeb1f85835f8a160eedf1c7ce392b72ee8337b4be279b84017fe04fdb4d44c92a497ca69349878db161915933f9b0bff0655f56f195c38bf29724b7dbb20236447d83fb96c278bb9586fa35f4f98b33cce545632f7fd0844b12da4473d74a49e08de6b5e3c226253d7d29637add26d490ea69a0977d97d639c939f671a62f80cde579e853c89aae7ebe7e45efcc40b2a7e398227fd161813d3f819b5ab0de3c6de051e704dab12283b69bcdffedea70ee2283ab97ecff86ab5b06f3b0f7a59d63abdabebc8bd89d57de55a6ab08435a00c357b45dca93d060ed2a5b9287cd78ea404d7737f4cb821c97ff05ca4e74c6967a7df940805bc170042009d6c6f87de3e413c5c1dc54d059c099f2580b4cf29cf7bf15569140063f32fd0b612b63e48e9edbfc75cbfcc7964bba2e6f4c40379caddc7d86f4672154a7807a94ca4b4327287e47a16f9d0c0836a120d686ff287d3992e377fd78ec41e66b2f488ff00ff5fa292b5c08fb98c0ebec7ec1e96ad7a921b2c83c352662252048a23d773d796d2eb9bd0cb1aedb36a707940f9f953381286bef70effa54b9c64c2249f7ad11a31d79619b13f1df0546de71eca644dfc524d001b1c0672cfbbeebefcbda2159492900f2cd6fbc2b28b4cc5f2155a016c40efab697587ab7d4be845a18b0d5058722f50a20ba57fb1939b5d53b62ee76e0c8618e71a0889d3dd3a7356b182f4d1957eeda7806b245c989ab3f1d64e2f3d22acf278d8e9485ec2289656d7372c24ba57bc68bb3f727420622ca9da84b3f3269fd173a87b312713dcad374645cc4ea218e1f1b98e8faa665bab8ee5733a3be9812497602e1e79ea4120bd67d1d7d149dbf1642011386da33ae39687401de922caee753f78cfd18a03bc7cc06b2942125c74612c4c2d7c3b77a7b9cee362ddecc85aa52d03ca0725a5ee34611d5dab0042302b2e8aa90dab4fb401cd42a7af7e880a8e06b973df2e08a524837ef246dacdab3c4d8e5a4aa242166ccf1afb143b2c997706545f5f562aa3d0551d56dfc3ef64d7e3207f8755304742658637ce91f4575dc813c943a9ad40f85199f5c5731af656822c20c54d8a0a62256881e709c0386c6788c5da0d07c5b37c202469fade98cb2652beb6342c8356eb1cd7385a25ad8911e8458156d61b5526b21358080e0340c0509d0aa71439422e92af23f671bce9f765a58ffc66f917fe7d51788d25dd325cad33ba838966a16226fba75d3b216a7820852b9d73e1064cc58907c6e2924b24fbe2348d2cfaa140d3d4e42fda34d3b79e5177f43310f45e7325e555d142719efdd44d7137b356a453a531442e79bff2ad5ec7745e344d00ce31f742014dcb0dc045829de5e4c3bb20f98461f7516e9eb3a0bc5f2c75fdd096b1ce0fc70d6491e407b9cfcf6badc9b855696672e663c7986c0bec1754d6bd46a06996280e088cd6142db190cc1b5c9f8648127336026d04fbdca40c86b8143afd247708fd1f582a3b5116d2f9eb1d8d9c754996481e52d1c00aae89de0e643b754967aad7a93e81a9d91ca429c1740e101fde10e51d595a347a351a6afac5137444a2d4193d451bb23e2aa058cf662dba84158f9ea62b94fbf5d329e03de89e5bb60f1993ec99faa4b59dca2dcb8b00c8bf9798663ab6661306112a6440f70d12770d01dbee623748c7d3afc2067798bf0f668a78a29fbd77ce9e91e51b387c34ef0d3582a9c12b1af1f257f4cb9d2ea764b230867d33dda1cf964a52b52ee4730be0d6587dbacc3fdc23f6e634d13364ae966a7c2a785bfb3d6fbe03dcbb276355bba6ae04ee7096174ba029222964f62ef1a0b614c1f0b5322656c54f9a4ee65115bdbf8390c74f9e2eca6945c30f5f385100700373b789817bcaa35ef8646d6054ae7e2b3ec259254af5dc43949c0a074dbef89fcd07d553766d9c7b6b79c3933ad47777497a1f82044f8c905346fa7e14db3070b61af5cf35e063c4ff9a87b562ae5ac508ea5b30226670cb4abfc6a5ebaca2a5d4ef7bfb8ba91f447d9e68c0bdaae9269b5360ca2a4a7c92d3a62118f8b9fbd35407c7352eccc7c073c9014c2543bcc55fc367fb47f54357423413921a3ea00aca5656a865d36e418126267e57547bab7926022efc90fba38903d8a2e625ba000c1c34341f44eb44b7f718ca8fd8dc1b184ca96c651314a8305068a784355690a23d381a757ffd39e06b5c38203f6bb3e5178343181b2a707083d34858672c5e3731739eca94b839dc84cd5f0f5e7501e78b615950d7687d074dddc3e33b0235b3aace454cafdc898a4505a03f4bc77575d12586e43288e91ae1b1e60670e6e47c3556c38e8af790cb507b717711fa88aaf16c0c922fcb81429c0fc15baabcad96c8f4f9c9f074d4f6b0092e50b345d1277eb8989fa57a83529dae46e1a2b83270dfcda5d4954531a647ead3ed11e740ff1635e1e5779c2dee3e5d26cbb3f9e86a5bc94b1538332be59dea22abae1b49f57f0be46293aee94259d5ce16bd8f22119c3c135960d1f2a0ab8ad5b4b2142c4754d417d3d14b62dd67068f44f88b6bc8900b380e5a3e4d24653f65ed16df27cbbd2f2a726a4b8a5897c01e68b6bcaf8186e7199d7ac05964f39fc42eb0e4d71a671da785a0d9996d412363c97b78ed6de2b8d10764b423a47aa3997a814ff0a659b219f575c1f5ee7063f740e56099762b034beda9821337f142d793c5f477abbbc3858de7c0ca902a88cc71f7156e302482d7d7458ec3e5affc546fc9c5fb6feffe3fef9634097100c756dd495312d8fcc23f062c10d5fd2620e91b6919f1bc9051c1e561259888a0b5ffaf1d82ad5be4d57bd2594c9bc865e3bfd52688f2c2c59bfba195f38debac43c5cf4e53e029716a879d71d82c77bb2a8368ffe42a757256566dd5f3b598d1b4738fb08568241e89f2d4ab91cf2beeb33bc301cdeb3f208b533d51a17071480759948d21a97e1265950dd0bbdca07f161762d45235d593b5d3aa891e595d3da675f9e8b0f0f35eab2cfc70e58180861ba33c9596912a074f2df41c0ce4740d1237dec121e23dee642799e2afa2514ab89436ac9945a0f97e2b67082a02a71b499b4ec0243ba92f5a8e2a3611ad4f6d89881ae6f90ce9a17de3af4fb29611c373ef9f71ff89963e353adfcc2fce5e86a0f69294ced8e40e83b"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xd4) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1) ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 18.578811355s ago: executing program 4 (id=2532): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000640)="a381", 0x2, 0x40201, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000480)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002600)=[{&(0x7f00000000c0)="04", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="a9c2", 0x2}], 0x1}}], 0x2, 0x4050000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde0080045000028000000000002907800000000ffffffff11e0907800000000008100010000000000000000"], 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000003c0)={r6}, 0x8) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f00000000c0)={0xfc, 0xfff, 0x8200, 0x7f, 0x2, 0x7, 0x200, 0x2, r9}, &(0x7f0000000180)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000240)={r6, 0x3, 0x3, 0x200, 0x2, 0x8, 0x1, 0x5, {r9, @in={{0x2, 0x4e23, @private=0xa010102}}, 0xb0d, 0x3, 0x6d, 0x241, 0x83}}, &(0x7f0000000300)=0xb0) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000880)="2e660f38813dc74e01003e660f38821066b810000fc4d0c4e17d0d6e1936360f300f3250baf80cb89afd858a66bafc0c66ed672e660f3881790064660feb9bc42a0000c4e2f9db89f2ffffff"}], 0x1, 0x2, 0x0, 0x0) keyctl$join(0x1, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x201, 0x0) writev(r11, &(0x7f0000001440)=[{&(0x7f0000000080)='*$', 0x2}, {&(0x7f0000000440)="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", 0x1000}], 0x2) syz_kvm_setup_cpu$x86(r10, r10, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r10, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 14.891122331s ago: executing program 7 (id=2538): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0xae, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xce, 0x2d, 0xf, 0x8, 0x413c, 0x8185, 0x58bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x1, 0x7, 0x0, 0x90, 0x10, "", [{{0x9, 0x4, 0xea, 0x5, 0x2, 0xe6, 0xfb, 0x4d, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8d65, 0x200, 0xa3}, {0x6, 0x24, 0x1a, 0x4, 0x20}}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x8, 0xc, 0x3, [@generic={0x5b, 0xc, "1292333eb152ad509694231d1864229c60d8f3369c24dddb4a1699444ccbbe7ef134a14fa5db01a5036946fb0e583848fd4b4e11ba75ad0b89a93addb8d242c830b21c6929e673d2e85bc7b9f0f6534c4af90111218751ada7"}]}}, {{0x9, 0x5, 0xd6af1a302017dc65, 0x0, 0x20, 0x1, 0x81, 0x3}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$inet_udp(0x2, 0x2, 0x0) 13.874957381s ago: executing program 3 (id=2539): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xd000, 0x0, 0x0) 13.683631275s ago: executing program 4 (id=2540): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000040000924211ec000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r5 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x20, 0x40, 0x6, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0x2, 0xa8, 0xe8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x4, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 00'], 0x2d, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load trusted:'], 0x30, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) 13.458550113s ago: executing program 3 (id=2542): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="d328", 0xfffffefd}], 0x1) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0) 13.28255994s ago: executing program 0 (id=2543): syz_usb_connect$uac1(0x0, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000004035121582400001020301090269000301a6400109040000000101000805240102001300"], &(0x7f0000000500)={0x0, 0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="050f05a000", @ANYBLOB="cbae555fab8ee7efea2945eb7e4b86c889b61db922377cdd058e59352dbf3e88fd953ffc803c1176f5a4015515cbfcb0c69a7acd92ef04afcfaada6a4b67c18f7f8b672cc26a54bca5a577715fc3"]}) 11.916979165s ago: executing program 4 (id=2544): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x8, 0x3, {{0x22, 0x4, 0x0, 0x1, 0x88, 0x65, 0x0, 0x7, 0x39, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x2, [{@empty, 0xe}, {@multicast2, 0x4}, {@local, 0x7}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff800}, {@multicast1, 0x8000}]}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x1, 0xd, "77d9aa49cd0bc5e6cb229e"}, {0x7, 0x9, "35a7e38c9b032e"}, {0x7, 0x4, "e3db"}, {0x0, 0x10, "48084c6a1884f7cc19a5f345fb70"}, {0x1, 0x4, "8a5d"}, {0x5, 0xb, "a377beecd6deeb08f4"}]}]}}}}}) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, r0, 0x1, 0x71, 0x6, @random="000008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd2b, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x3e, 0x6, 0x0, 0x0, 0x7, 0x14}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004810}, 0xc001) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010ed000000000000000000000500000ab4000000060a010400000000000000000a0000010900010073797a310000000088000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240000000021800018008000100647570000c00028008000140000000033800018008000100666962002c000280080002400000000208000140000000030800024000000003080001400000001108000140000000020900020073797a3200000000140000001100010000000000000000000000000a"], 0xdc}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x325) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}]]}, 0x40}}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x18, 0x57}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x84}, 0x1, 0x0, 0x0, 0x400008c}, 0x20008050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xffffffffffffff7e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) 9.80320221s ago: executing program 0 (id=2545): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_pts(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x404c001) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x3, 0xa27, 0x0, 0x0}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x0, 0xfffffffc}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCRMFF(r4, 0x801c581f, 0x0) r5 = socket(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x125, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x5, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xf0}}, 0x0) 8.710598535s ago: executing program 7 (id=2547): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 8.667696651s ago: executing program 4 (id=2548): getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000000275c6df6878", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) fanotify_mark(0xffffffffffffffff, 0x1, 0x1015, r1, 0x0) read(0xffffffffffffffff, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0xf7fffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xd4) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x9, 0x1) ioctl$SG_BLKTRACESTART(r5, 0x1274, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 8.434507992s ago: executing program 6 (id=2549): socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1/file0\x00', 0x81) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) clock_gettime(0x0, &(0x7f0000001180)) pselect6(0x40, &(0x7f00000010c0)={0x5, 0x3ff, 0x9, 0x0, 0x4, 0x6, 0x765f, 0xb}, &(0x7f0000001100)={0x6, 0x1, 0x8000000000000001, 0x2, 0x10000, 0x8, 0x2, 0x5}, &(0x7f0000001140)={0x46d8, 0x2, 0x1, 0x7, 0x10000, 0x6b8, 0x3cde9d1d, 0x9c82}, &(0x7f00000011c0), &(0x7f0000001240)={&(0x7f0000001200)={[0x5]}, 0x8}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x14b041, 0x2) r0 = memfd_create(0x0, 0x1) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000040000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c900000014003100fc010000000000000000000000000001ef948c95c530"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) statx(r1, &(0x7f0000000f80)='./file0\x00', 0x400, 0x128, &(0x7f0000000fc0)) syz_usb_connect$uac1(0x0, 0x82, &(0x7f00000027c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x2, 0x0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x91, 0x40, {0x7, 0x25, 0x1, 0xc, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0x81, 0x1002}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x7fff, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x30, 0x8, 0x8, {0x7, 0x25, 0x1, 0x4, 0xe, 0x9a}}}}}}}}]}}, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) r8 = eventfd2(0x102, 0x80801) ioctl$VHOST_SET_VRING_KICK(r7, 0x4008af20, &(0x7f00000000c0)={0x0, r8}) 8.40030116s ago: executing program 0 (id=2550): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(0x0, 0x2, 0x862b01) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mount(&(0x7f0000000040)=@rnullb, 0x0, 0x0, 0x2202408, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(0x0, 0xf, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(r4, &(0x7f00000005c0)=""/147, 0x93) getdents64(r4, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x89, &(0x7f0000000340)=ANY=[], 0x0) 7.274958083s ago: executing program 3 (id=2551): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040840) 7.098758884s ago: executing program 3 (id=2552): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) socket(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x40000000, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x7, 0x0, 0x31}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 6.593740053s ago: executing program 3 (id=2553): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x2, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$inet(0xa, 0x2, 0x7) connect$inet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0xfffffffe, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) listen(r0, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xd0, 0x0, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r7 = userfaultfd(0x80001) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) 6.205883661s ago: executing program 7 (id=2554): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccde, 0xc000, 0x0, 0x20002fb}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.085577495s ago: executing program 6 (id=2555): r0 = syz_open_dev$media(&(0x7f0000000000), 0x400000000000002, 0x109000) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x50d, 0x48000) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) gettid() socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000200)=[{0x80000000}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000002ec0)={{0x80000000, 0x0, 0x2, [0x80000001, 0x200]}, {r5, r6, 0x1, [0x9, 0x5]}, 0x4, [0x1]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r5, 0x0, 0x6, [0x1, 0x8]}, {0x80000000, 0x0, 0x5, [0x3f800000, 0x4]}, 0x1, [0x7e, 0x6]}) 4.903797054s ago: executing program 6 (id=2556): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x8, 0x10, 0x8, 0x3, {{0x22, 0x4, 0x0, 0x1, 0x88, 0x65, 0x0, 0x7, 0x39, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x2, [{@empty, 0xe}, {@multicast2, 0x4}, {@local, 0x7}, {@private=0xa010100, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffff800}, {@multicast1, 0x8000}]}, @cipso={0x86, 0x3f, 0xffffffffffffffff, [{0x1, 0xd, "77d9aa49cd0bc5e6cb229e"}, {0x7, 0x9, "35a7e38c9b032e"}, {0x7, 0x4, "e3db"}, {0x0, 0x10, "48084c6a1884f7cc19a5f345fb70"}, {0x1, 0x4, "8a5d"}, {0x5, 0xb, "a377beecd6deeb08f4"}]}]}}}}}) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, r0, 0x1, 0x71, 0x6, @random="000008000001"}, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_getrule={0x1c, 0x22, 0x4, 0x70bd2b, 0x25dfdbfb, {0xa, 0x20, 0x80, 0x3e, 0x6, 0x0, 0x0, 0x7, 0x14}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004810}, 0xc001) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010ed000000000000000000000500000ab4000000060a010400000000000000000a0000010900010073797a310000000088000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240000000021800018008000100647570000c00028008000140000000033800018008000100666962002c000280080002400000000208000140000000030800024000000003080001400000001108000140000000020900020073797a3200000000140000001100010000000000000000000000000a"], 0xdc}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x325) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}]]}, 0x40}}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r8, @ANYBLOB="60005e80080006000002000008000700f605000008000900000000000c0001000500000002000000080005"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x84, r6, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x18, 0x57}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x84}, 0x1, 0x0, 0x0, 0x400008c}, 0x20008050) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0x19, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0xffffffffffffff7e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x7, 0x0, &(0x7f0000000100)="e0b9547ed387db", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) 4.656716798s ago: executing program 4 (id=2557): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0xae, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xce, 0x2d, 0xf, 0x8, 0x413c, 0x8185, 0x58bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x1, 0x7, 0x0, 0x90, 0x10, "", [{{0x9, 0x4, 0xea, 0x5, 0x2, 0xe6, 0xfb, 0x4d, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8d65, 0x200, 0xa3}, {0x6, 0x24, 0x1a, 0x4, 0x20}}], [{{0x9, 0x5, 0x6, 0x0, 0x20, 0x8, 0xc, 0x3, [@generic={0x5b, 0xc, "1292333eb152ad509694231d1864229c60d8f3369c24dddb4a1699444ccbbe7ef134a14fa5db01a5036946fb0e583848fd4b4e11ba75ad0b89a93addb8d242c830b21c6929e673d2e85bc7b9f0f6534c4af90111218751ada7"}]}}, {{0x9, 0x5, 0xd6af1a302017dc65, 0x0, 0x20, 0x1, 0x81, 0x3}}]}}]}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vbi(0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$inet_udp(0x2, 0x2, 0x0) 4.605735006s ago: executing program 0 (id=2558): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000003580)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x5, '\x00', @dev={0xfe, 0x80, '\x00', 0x2a}, [{0x2, 0x3, "21c1e05659ae3f48e9296b2beda7add700385601f891"}]}}}}}}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7e, 0x20203843, 0x3, [0x2], [0x800, 0x800, 0xfffffffe, 0x3], [0x101, 0x0, 0x0, 0x5], [0x0, 0x0, 0x1]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 4.417806704s ago: executing program 6 (id=2559): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 4.326802221s ago: executing program 6 (id=2560): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) syz_emit_ethernet(0xd8, &(0x7f0000000540)={@local, @random="00087e04b100", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0xca, 0xfffd, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xf}, {[@lsrr={0x83, 0x7, 0xfd, [@multicast2]}, @timestamp={0x44, 0xc, 0xb9, 0x3, 0x0, [0x7, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x4e22, 0x4000, 0x41424344, 0x41424344, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, {[@nop, @nop, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0xe, 0xf989, "a8c6e5e902146bd167a2"}, @fastopen={0x22, 0x12, "61b6f0d98400"/16}]}}, {"9ecb644b40b665b77b05fd80017bb668800bd8730787326b2e11130c4c93699ce276055f2668cc1ea4c6cd2fe7af90364352e853d6670456bc859f033216d42af2a0f477e787e19df3c7f57a3a3e583c46b00269eb11fcf19a007fa24c03"}}}}}}, 0x0) landlock_restrict_self(r1, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x5df801, 0x24) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000900)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e1f, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0x10, 0x7, 0x0, 0x3, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r4, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.954564178s ago: executing program 6 (id=2561): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24040081) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8054) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.458029682s ago: executing program 7 (id=2562): prlimit64(0x0, 0x4, &(0x7f0000000140)={0x2, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() r0 = socket$inet(0xa, 0x2, 0x7) connect$inet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0xfffffffe, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) listen(r0, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fanotify_init(0x200, 0x0) syz_io_uring_setup(0xd0, 0x0, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r7 = userfaultfd(0x80001) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x70) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11", 0x1}], 0x2}}], 0x4, 0x4000000) 1.30680284s ago: executing program 0 (id=2563): r0 = syz_open_dev$media(&(0x7f0000000000), 0x400000000000002, 0x109000) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x50d, 0x48000) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x80}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) gettid() socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, &(0x7f0000000200)=[{0x80000000}, {0x80000000, 0x0}], 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000002ec0)={{0x80000000, 0x0, 0x2, [0x80000001, 0x200]}, {r5, r6, 0x1, [0x9, 0x5]}, 0x4, [0x1]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r5, 0x0, 0x6, [0x1, 0x8]}, {0x80000000, 0x0, 0x5, [0x3f800000, 0x4]}, 0x1, [0x7e, 0x6]}) 761.048168ms ago: executing program 3 (id=2564): prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0xce) r1 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="020000000000000006000000001600000000000006775905884f0e9c2a36fa29c8fdf1997c51029da741e23c09ce555d9411b66338f925f40a330b475fd79fd8ad5e200475d1e692678808fcc02b004537f17a4e1d22b528f0ad062f206658c458841a438967ad0d53237c432987f666cabb154dab6c47ab54abec4a26b78c36f04c9db619cec380ebd49383971a94e13e6d9d7df1f29f6f6d82b4216b864a5e37cb6d7a29b7d53bb21a04b0ac1c0063621d624c75130ee642e33a1a1ff3fa5528d07f2615e50fe666d49b4b847b292ab69c287f3b057d9f0ed3d6ecf2e7264026ad4acd653ec59c2903", @ANYRES32=r2, @ANYRESDEC=r1, @ANYBLOB="000000000100000000000000000000000000000049301fd200b642449cde0912"], 0x50) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r4, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') open_tree(r8, &(0x7f0000000300)='./cgroup\x00', 0x89801) 145.755166ms ago: executing program 0 (id=2565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x24000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc)=0x7, 0x4) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) sendto(r2, &(0x7f0000000200)="120000001a00e7efa8ff1b3fc329c94a41bc", 0x12, 0x24008000, 0x0, 0x0) r3 = userfaultfd(0x801) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x28, r4, 0x62c21a4ade68aba1, 0xf0bd23, 0xfffffffd, {{0x32}, {@void, @val={0x8}, @val={0xc, 0x99, {0x4, 0x1000076}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x2400c880) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x154, r4, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x75}}}}, [@NL80211_ATTR_IE={0x12b, 0x2a, [@perr={0x84, 0x95, {0xa6, 0x9, [{{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x2}, {{0x0, 0x1}, @device_b, 0x100, @value=@broadcast, 0x29}, {{}, @device_b, 0x827, @void, 0x30}, {{0x0, 0x1}, @device_b, 0x3, @value=@broadcast, 0x2f}, {{}, @broadcast, 0x5, @void, 0x39}, {{0x0, 0x1}, @device_a, 0xb, @value, 0xd}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x2a}, {{}, @device_b, 0x5, @void, 0x19}, {{}, @device_a, 0x80, @void, 0x23}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1d, 0x41}}, @fast_bss_trans={0x37, 0x6d, {0x0, 0x2, "b4a784227acca11e188a7795b19605fd", "84d4c4ce9369d893c17e817e383d35575aac71b5feab2a2deb18b4f9e83fb4b9", "00400fd9421a56515949a3f5d0dec2c59351e3dce7a5968427bdbb1733003afc", [{0x1, 0x5, "aa5321f9dc"}, {0x3, 0x12, "23fef07d612f0135b064866854e355bd2efd"}]}}, @ssid={0x0, 0x16, @random="ddb931f6a2688812b689ed1ff70ced03d32a6be00f4d"}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040004}, 0x44) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00009f4000/0x4000)=nil, 0x4000}, 0x926f8ff66f2344}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x12142, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 0s ago: executing program 4 (id=2566): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000380)={0x3, 0x0, [{0x40000001, 0xaf, 0x4, 0x8, 0x7, 0x5, 0x2}, {0x80000019, 0x5, 0x0, 0xfffffff7, 0x5, 0x1, 0x1}, {0x80000008, 0x4, 0x5, 0x5, 0xa1a, 0xa, 0x7}]}) sendmsg$key(0xffffffffffffffff, 0x0, 0x24040081) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x8054) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x169140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 96 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 809.765191][ T29] audit: type=1400 audit(1784017859.281:1219): avc: denied { bind } for pid=14388 comm="syz.6.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 809.882124][ T29] audit: type=1400 audit(1784017859.281:1220): avc: denied { name_bind } for pid=14388 comm="syz.6.2063" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 810.079252][ T29] audit: type=1400 audit(1784017859.281:1221): avc: denied { node_bind } for pid=14388 comm="syz.6.2063" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 810.211010][ T29] audit: type=1400 audit(1784017859.731:1222): avc: denied { write } for pid=14404 comm="syz.4.2068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 811.115438][T14418] xt_hashlimit: size too large, truncated to 1048576 [ 811.541046][T14422] No control pipe specified [ 813.926855][ T29] audit: type=1400 audit(1784017863.451:1223): avc: denied { setopt } for pid=14440 comm="syz.5.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 814.332995][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2080'. [ 814.367838][ T5725] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 814.586240][ T5725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 814.637029][ T5725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 814.662463][ T5725] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 814.681293][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.712370][ T5725] usb 1-1: Product: syz [ 814.726395][ T5725] usb 1-1: Manufacturer: syz [ 814.743861][ T5725] usb 1-1: SerialNumber: syz [ 814.932264][ T24] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 814.945385][T14471] xt_hashlimit: size too large, truncated to 1048576 [ 814.981668][ T29] audit: type=1400 audit(1784017864.501:1224): avc: denied { ioctl } for pid=14453 comm="syz.0.2079" path="socket:[58933]" dev="sockfs" ino=58933 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 815.007782][T14454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14454 comm=syz.0.2079 [ 815.134401][ T24] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 815.217793][ T24] usb 7-1: config 0 has no interface number 0 [ 815.236761][ T24] usb 7-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 815.280421][ T24] usb 7-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 815.295584][ T24] usb 7-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 815.311126][ T24] usb 7-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 815.355419][ T24] usb 7-1: config 0 interface 70 has no altsetting 0 [ 815.393504][ T24] usb 7-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 815.398434][ T5725] usb 1-1: USB disconnect, device number 59 [ 815.436750][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.439167][ T29] audit: type=1400 audit(1784017864.961:1225): avc: denied { create } for pid=14479 comm="syz.4.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 815.470056][ T24] usb 7-1: Product: syz [ 815.527596][ T24] usb 7-1: Manufacturer: syz [ 815.603129][ T24] usb 7-1: SerialNumber: syz [ 815.627787][ T29] audit: type=1400 audit(1784017864.991:1226): avc: denied { write } for pid=14479 comm="syz.4.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 816.038562][ T24] usb 7-1: config 0 descriptor?? [ 816.046168][ T29] audit: type=1400 audit(1784017865.001:1227): avc: denied { connect } for pid=14479 comm="syz.4.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 816.116012][T14468] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 816.223969][ T29] audit: type=1400 audit(1784017865.751:1228): avc: denied { ioctl } for pid=14486 comm="syz.4.2087" path="/dev/uinput" dev="devtmpfs" ino=921 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 816.312313][ T29] audit: type=1400 audit(1784017865.831:1229): avc: denied { read write } for pid=14486 comm="syz.4.2087" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 816.394186][T14487] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 816.475127][ T29] audit: type=1400 audit(1784017865.841:1230): avc: denied { open } for pid=14486 comm="syz.4.2087" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 817.116358][T14496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.236084][T14496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.367665][T14496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.415975][T14496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.491053][T14468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.544699][T14468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.636429][T14502] ip6t_srh: unknown srh match flags 4000 [ 817.652264][T14505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.149572][ T24] ti_usb_3410_5052 7-1:0.70: TI USB 3410 1 port adapter converter detected [ 818.168297][T14505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.188761][ T24] usb 7-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 818.231754][ T5612] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 818.281304][ T24] usb 7-1: USB disconnect, device number 28 [ 818.295411][ T29] audit: type=1400 audit(1784017867.821:1231): avc: denied { append } for pid=14509 comm="syz.3.2093" name="sg0" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 818.324401][T14510] program syz.3.2093 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 818.353165][T14510] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 818.422373][ T24] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 818.423614][ T5612] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.500600][ T24] ti_usb_3410_5052 7-1:0.70: device disconnected [ 818.528414][ T5612] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=35.bc [ 818.545089][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.566259][ T5612] usb 5-1: Product: syz [ 818.594508][ T5612] usb 5-1: Manufacturer: syz [ 818.611450][ T29] audit: type=1400 audit(1784017868.131:1232): avc: denied { mounton } for pid=14513 comm="syz.3.2095" path="/syzcgroup/unified/syz3" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 818.644235][ T5612] usb 5-1: SerialNumber: syz [ 818.655985][ T5612] usb 5-1: config 0 descriptor?? [ 818.784211][T14522] xt_hashlimit: size too large, truncated to 1048576 [ 821.530056][ T5612] ttusbir 5-1:0.0: cannot find expected altsetting [ 821.590716][ T5612] usb 5-1: USB disconnect, device number 48 [ 822.442191][T14544] xt_hashlimit: size too large, truncated to 1048576 [ 823.226470][ T29] audit: type=1400 audit(1784017872.751:1233): avc: denied { execute } for pid=14548 comm="syz.5.2101" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=59992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 823.495470][ T29] audit: type=1400 audit(1784017872.981:1234): avc: denied { ioctl } for pid=14552 comm="syz.6.2102" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 824.712658][T14568] openvswitch: netlink: Missing valid actions attribute. [ 824.719796][T14568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 824.846303][ T29] audit: type=1400 audit(1784017874.341:1235): avc: denied { setopt } for pid=14567 comm="syz.0.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 825.176359][ T29] audit: type=1400 audit(1784017874.501:1236): avc: denied { mount } for pid=14567 comm="syz.0.2107" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 825.202691][ T5612] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 825.592979][ T29] audit: type=1400 audit(1784017874.511:1237): avc: denied { mounton } for pid=14567 comm="syz.0.2107" path="/399/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 825.654258][T14564] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 825.828723][ T29] audit: type=1400 audit(1784017874.571:1238): avc: denied { remount } for pid=14567 comm="syz.0.2107" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 826.332856][T14573] xt_hashlimit: size too large, truncated to 1048576 [ 826.841186][ T5612] usb 5-1: unable to get BOS descriptor or descriptor too short [ 826.905166][ T5612] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.939690][ T5612] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 826.977103][ T5612] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 827.000294][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.010707][ T5612] usb 5-1: Product: syz [ 827.018815][ T5612] usb 5-1: Manufacturer: syz [ 827.031139][ T5612] usb 5-1: SerialNumber: syz [ 827.215562][ T5612] usb 5-1: selecting invalid altsetting 1 [ 827.545515][ T5612] usb 5-1: unit 6 not found! [ 827.575337][ T29] audit: type=1400 audit(1784017877.101:1239): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 827.842933][ T29] audit: type=1400 audit(1784017877.321:1240): avc: denied { name_bind } for pid=14587 comm="syz.0.2113" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 828.005836][ T29] audit: type=1400 audit(1784017877.531:1241): avc: denied { name_bind } for pid=14587 comm="syz.0.2113" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 828.496354][ T5612] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 828.587498][ T5612] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 828.607467][ T5612] usb 5-1: USB disconnect, device number 49 [ 828.779731][T13912] udevd[13912]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.804590][ T8876] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 828.984002][ T8876] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.357261][ T8876] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 829.460273][ T8876] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 829.475944][ T8876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.488709][ T8876] usb 7-1: Product: syz [ 829.505508][ T8876] usb 7-1: Manufacturer: syz [ 829.522830][ T8876] usb 7-1: SerialNumber: syz [ 829.582658][T14612] misc userio: The device must be registered before sending interrupts [ 829.872318][ T42] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 829.890601][T14618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 830.160610][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 830.176840][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.228846][ T42] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 830.254205][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.462650][ T42] usb 5-1: config 0 descriptor?? [ 830.770923][T14629] openvswitch: netlink: Missing valid actions attribute. [ 830.778430][T14629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 831.439133][ T42] hid (null): invalid report_size 1270 [ 831.477455][ T29] audit: type=1400 audit(1784017880.971:1242): avc: denied { write } for pid=14611 comm="syz.4.2120" path="socket:[60111]" dev="sockfs" ino=60111 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 831.502229][ T5725] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 831.824337][ T8876] usb 7-1: USB disconnect, device number 29 [ 831.834324][ T42] hid (null): unknown global tag 0xd [ 831.839383][ T29] audit: type=1400 audit(1784017881.091:1243): avc: denied { accept } for pid=14611 comm="syz.4.2120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 831.844380][ T42] hid (null): unknown global tag 0xd [ 831.896486][ T42] kye 0003:0458:5016.0012: control desc unexpectedly large [ 831.967335][ T42] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0012/input/input26 [ 832.185260][ T5725] usb 1-1: config 0 has an invalid interface number: 70 but max is 0 [ 832.193797][ T5725] usb 1-1: config 0 has no interface number 0 [ 832.199966][ T5725] usb 1-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 832.212368][ T5725] usb 1-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 832.225040][ T5725] usb 1-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 832.237158][ T5725] usb 1-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.250686][ T5725] usb 1-1: config 0 interface 70 has no altsetting 0 [ 832.271107][ T5725] usb 1-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 832.297548][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.318252][ T5725] usb 1-1: Product: syz [ 832.383139][ T5725] usb 1-1: Manufacturer: syz [ 832.524166][ T5725] usb 1-1: SerialNumber: syz [ 832.585719][ T42] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0012/input/input27 [ 832.655448][ T5725] usb 1-1: config 0 descriptor?? [ 832.729869][T14633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 832.932352][ T42] kye 0003:0458:5016.0012: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 833.176275][ T42] usb 5-1: USB disconnect, device number 50 [ 833.261605][T14650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.281138][T14647] fido_id[14647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 833.312638][T14650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.589269][T14661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.750220][T14667] xt_hashlimit: size too large, truncated to 1048576 [ 834.145471][T14661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.262147][ T5730] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 834.380780][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.465538][ T5730] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 834.493458][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.537929][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.574597][ T5725] ti_usb_3410_5052 1-1:0.70: TI USB 3410 1 port adapter converter detected [ 834.598483][ T5730] usb 4-1: Product: syz [ 834.616316][ T5730] usb 4-1: Manufacturer: syz [ 834.640601][ T5730] usb 4-1: SerialNumber: syz [ 834.641298][ T5725] usb 1-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 834.684928][ T5730] usb 4-1: config 0 descriptor?? [ 834.717617][ T5725] usb 1-1: USB disconnect, device number 60 [ 834.799028][ T5725] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 834.855512][ T5725] ti_usb_3410_5052 1-1:0.70: device disconnected [ 835.188414][T14681] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.197314][T14681] bridge0: port 1(1x9) entered disabled state [ 835.483387][T14681] netlink: 'syz.6.2135': attribute type 12 has an invalid length. [ 836.305575][ T5730] peak_usb 4-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 836.455366][ T5730] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -71 [ 836.476477][ T5730] usb 4-1: USB disconnect, device number 74 [ 836.994593][T14687] xt_hashlimit: size too large, truncated to 1048576 [ 838.945015][T14705] openvswitch: netlink: IP tunnel dst address not specified [ 840.109769][T14710] fuse: Bad value for 'user_id' [ 840.114803][T14710] fuse: Bad value for 'user_id' [ 840.319953][ T29] audit: type=1400 audit(1784017889.841:1244): avc: denied { ioctl } for pid=14714 comm="syz.0.2145" path="socket:[60692]" dev="sockfs" ino=60692 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 840.396790][ T29] audit: type=1400 audit(1784017889.881:1245): avc: denied { setopt } for pid=14714 comm="syz.0.2145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 840.441787][ T5741] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 840.499974][ T29] audit: type=1400 audit(1784017889.901:1246): avc: denied { watch_mount watch_reads } for pid=14714 comm="syz.0.2145" path="/407" dev="tmpfs" ino=2200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 840.571058][T14716] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2143'. [ 840.633595][ T5741] usb 6-1: config 0 has an invalid interface number: 70 but max is 0 [ 840.651105][ T5741] usb 6-1: config 0 has no interface number 0 [ 840.683059][ T5741] usb 6-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 840.767309][ T5741] usb 6-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 840.817381][ T5741] usb 6-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 840.959609][ T5741] usb 6-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.973436][ T5741] usb 6-1: config 0 interface 70 has no altsetting 0 [ 840.985592][ T5741] usb 6-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 841.013297][ T5741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.021497][ T5741] usb 6-1: Product: syz [ 841.335152][ T5741] usb 6-1: Manufacturer: syz [ 841.339815][ T5741] usb 6-1: SerialNumber: syz [ 841.362234][ T5741] usb 6-1: config 0 descriptor?? [ 841.891492][T14711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 842.175224][ T29] audit: type=1400 audit(1784017891.701:1247): avc: denied { bind } for pid=14732 comm="syz.0.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 842.574700][ T29] audit: type=1400 audit(1784017891.701:1248): avc: denied { listen } for pid=14732 comm="syz.0.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 842.719202][ T5741] ti_usb_3410_5052 6-1:0.70: TI USB 3410 1 port adapter converter detected [ 842.885152][ T5741] usb 6-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 843.061132][T14741] xt_hashlimit: size too large, truncated to 1048576 [ 843.081319][ T5741] usb 6-1: USB disconnect, device number 32 [ 843.423413][ T5741] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 843.486277][ T5741] ti_usb_3410_5052 6-1:0.70: device disconnected [ 843.801721][ T5612] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 843.984431][ T5612] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 843.984465][ T5612] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 843.984496][ T5612] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 843.984517][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.990051][T14749] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 844.031288][ T5612] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 844.331005][ T5612] usb 4-1: USB disconnect, device number 75 [ 844.443777][ T5798] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 844.646517][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 844.697851][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 844.739565][ T5798] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 844.767260][ T5798] usb 1-1: can't read configurations, error -22 [ 844.923271][ T5798] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 845.111766][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 845.134798][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 845.167410][ T5798] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 845.197161][ T5798] usb 1-1: can't read configurations, error -22 [ 845.673583][ T5798] usb usb1-port1: attempt power cycle [ 846.205191][ T5798] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 846.254354][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 846.593275][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 846.623847][ T5798] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 846.646926][ T5798] usb 1-1: can't read configurations, error -22 [ 846.921989][ T5798] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 847.093700][ T5741] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 847.153473][ T5798] usb 1-1: device not accepting address 64, error -71 [ 847.244539][ T5798] usb usb1-port1: unable to enumerate USB device [ 847.251981][ T5741] usb 6-1: Using ep0 maxpacket: 8 [ 847.262117][ T5741] usb 6-1: unable to get BOS descriptor or descriptor too short [ 847.273704][ T5741] usb 6-1: config 4 interface 0 has no altsetting 0 [ 847.287287][ T5741] usb 6-1: string descriptor 0 read error: -22 [ 847.294823][ T5741] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 847.310629][ T5741] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 847.356003][ T5741] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 847.408376][ T5741] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 847.443947][ T5741] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 847.452579][ T5741] usb 6-1: media controller created [ 847.479741][ T5741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 847.591809][ T5798] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 847.824075][T14792] ntfs3(loop3): try to read out of volume at offset 0x0 [ 848.161830][ T5612] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 848.326471][ T5612] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 848.335483][ T5612] usb 7-1: config 0 has no interface number 0 [ 848.345805][ T5612] usb 7-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 848.357491][ T5612] usb 7-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 848.371519][ T5612] usb 7-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 848.385425][ T5612] usb 7-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 848.388621][ T5798] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 848.399029][ T5612] usb 7-1: config 0 interface 70 has no altsetting 0 [ 848.432048][ T5612] usb 7-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 848.441990][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.453464][ T5612] usb 7-1: Product: syz [ 848.457831][ T5612] usb 7-1: Manufacturer: syz [ 848.467330][ T5612] usb 7-1: SerialNumber: syz [ 848.545700][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.555334][ T5798] usb 1-1: Product: syz [ 848.560411][ T5798] usb 1-1: Manufacturer: syz [ 848.565621][ T5798] usb 1-1: SerialNumber: syz [ 848.626853][ T5798] usb 1-1: config 0 descriptor?? [ 848.627071][ T5612] usb 7-1: config 0 descriptor?? [ 848.658740][ T5741] zl10353_read_register: readreg error (reg=127, ret==0) [ 848.683630][T14794] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 848.813230][ T5741] usb 6-1: USB disconnect, device number 33 [ 848.839847][ T5798] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 848.965691][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.977388][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.009128][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.023324][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.040411][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.052898][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.165232][ T5612] ti_usb_3410_5052 7-1:0.70: TI USB 3410 1 port adapter converter detected [ 849.205757][ T5612] usb 7-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 849.250608][ T5612] usb 7-1: USB disconnect, device number 30 [ 849.387879][ T5612] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 849.441455][ T5612] ti_usb_3410_5052 7-1:0.70: device disconnected [ 849.881817][ T5705] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 849.994277][T14803] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2168'. [ 850.064834][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 850.531977][ T5705] usb 4-1: unable to get BOS descriptor or descriptor too short [ 850.545144][ T5705] usb 4-1: config 7 has an invalid interface number: 234 but max is 0 [ 850.555446][ T5705] usb 4-1: config 7 has no interface number 0 [ 850.563446][ T5705] usb 4-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 850.576588][ T5705] usb 4-1: config 7 interface 234 has no altsetting 0 [ 850.589596][ T5705] usb 4-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 850.601478][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.611601][ T5705] usb 4-1: Product: syz [ 850.620132][ T5705] usb 4-1: Manufacturer: syz [ 850.634374][ T5705] usb 4-1: SerialNumber: syz [ 850.742970][T14816] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 851.181914][ T5798] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 851.207976][T14819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2172'. [ 851.247531][T14819] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2172'. [ 851.247619][ T5798] usb 1-1: USB disconnect, device number 65 [ 855.011128][T14834] netlink: 'syz.4.2175': attribute type 12 has an invalid length. [ 855.472446][T14835] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2175'. [ 855.561520][ T5798] usb 4-1: USB disconnect, device number 76 [ 857.795378][T14855] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2181'. [ 857.990930][T14851] fuse: Bad value for 'fd' [ 858.376080][T14867] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 858.849654][T14869] ntfs3(loop4): try to read out of volume at offset 0x0 [ 859.806365][ T29] audit: type=1400 audit(1784017909.331:1249): avc: denied { connect } for pid=14874 comm="syz.6.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 859.882428][ T29] audit: type=1400 audit(1784017909.361:1250): avc: denied { read } for pid=14874 comm="syz.6.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 859.930897][T14879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2186'. [ 859.955132][ T29] audit: type=1400 audit(1784017909.481:1251): avc: denied { read } for pid=14880 comm="syz.3.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 860.072110][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 860.233805][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 860.284622][ T24] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 860.364816][ T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 860.402304][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.423311][ T24] usb 6-1: Product: syz [ 860.442797][ T24] usb 6-1: Manufacturer: syz [ 860.459915][ T24] usb 6-1: SerialNumber: syz [ 860.896476][T14893] ntfs3(loop3): try to read out of volume at offset 0x0 [ 862.828610][ T24] usb 6-1: USB disconnect, device number 34 [ 864.965554][T14903] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 867.308427][ T29] audit: type=1400 audit(1784017916.831:1252): avc: denied { getopt } for pid=14921 comm="syz.5.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 867.473670][T14925] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 867.774487][ T5725] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 868.054161][ T5725] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 868.071283][ T5725] usb 6-1: config 4 has no interface number 0 [ 868.108207][ T5725] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 868.140729][ T5725] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.170606][ T5725] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 868.192411][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.293385][ T5725] hub 6-1:4.128: USB hub found [ 868.479528][ T5725] hub 6-1:4.128: 2 ports detected [ 868.501711][ T5725] hub 6-1:4.128: Using single TT (err -22) [ 869.320600][T14943] IPVS: sh: FWM 3 0x00000003 - no destination available [ 869.472213][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 869.583188][ T5725] usb 6-1: USB disconnect, device number 35 [ 869.738410][T14946] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 869.783270][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.232596][T14954] fuse: Bad value for 'fd' [ 870.970424][T14955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14955 comm=syz.6.2208 [ 871.920393][T14969] xt_hashlimit: size too large, truncated to 1048576 [ 873.408372][T14989] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 874.813865][T14993] xt_hashlimit: size too large, truncated to 1048576 [ 875.091778][ T9543] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 875.269806][T15006] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2219'. [ 875.452474][ T9543] usb 4-1: Using ep0 maxpacket: 8 [ 876.033184][ T9543] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.042596][ T9543] usb 4-1: config 7 has an invalid interface number: 234 but max is 0 [ 876.051440][ T9543] usb 4-1: config 7 has no interface number 0 [ 876.057640][ T9543] usb 4-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 876.069552][ T9543] usb 4-1: config 7 interface 234 has no altsetting 0 [ 876.079808][ T9543] usb 4-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 876.088906][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.097284][ T9543] usb 4-1: Product: syz [ 876.101470][ T9543] usb 4-1: Manufacturer: syz [ 876.106117][ T9543] usb 4-1: SerialNumber: syz [ 876.907559][ T5613] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 877.805143][T15015] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2221'. [ 877.935830][T15026] ntfs3(loop4): try to read out of volume at offset 0x0 [ 879.109337][ T9543] usb 4-1: USB disconnect, device number 77 [ 879.293525][T15036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 879.865599][T15048] input: syz0 as /devices/virtual/input/input30 [ 880.452185][T15053] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 881.132219][T15064] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2234'. [ 881.324691][T15070] : renamed from vlan0 [ 881.450146][T15064] netlink: 'syz.5.2234': attribute type 5 has an invalid length. [ 881.501696][ T5725] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 881.550292][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2234'. [ 881.701782][ T5725] usb 4-1: Using ep0 maxpacket: 8 [ 881.713433][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 881.848799][ T5725] usb 4-1: config 7 has an invalid interface number: 234 but max is 0 [ 881.857812][ T5725] usb 4-1: config 7 has no interface number 0 [ 881.864242][ T5725] usb 4-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 881.876902][ T5725] usb 4-1: config 7 interface 234 has no altsetting 0 [ 881.888022][ T5725] usb 4-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 881.897934][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.907281][ T5725] usb 4-1: Product: syz [ 881.911573][ T5725] usb 4-1: Manufacturer: syz [ 881.916569][ T5725] usb 4-1: SerialNumber: syz [ 882.262489][T15076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.291385][T15076] batadv_slave_1: entered promiscuous mode [ 884.044999][T15093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.157259][ T5725] usb 4-1: USB disconnect, device number 78 [ 884.361859][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 884.602022][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 884.974155][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 884.985105][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.994012][ T24] usb 5-1: Product: syz [ 885.015798][ T24] usb 5-1: Manufacturer: syz [ 885.032355][ T24] usb 5-1: SerialNumber: syz [ 885.069977][ T24] usb 5-1: config 0 descriptor?? [ 885.093887][ T24] gspca_main: spca508-2.14.0 probing 041e:4018 [ 885.204184][ T29] audit: type=1400 audit(1784017934.731:1253): avc: denied { mount } for pid=15115 comm="syz.6.2248" name="/" dev="autofs" ino=62846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 885.270901][T15118] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 885.528849][T15096] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 885.569901][ T29] audit: type=1400 audit(1784017935.091:1254): avc: denied { relabelto } for pid=15095 comm="syz.4.2243" name="file0" dev="tmpfs" ino=2633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 885.661989][ T29] audit: type=1400 audit(1784017935.091:1255): avc: denied { associate } for pid=15095 comm="syz.4.2243" name="file0" dev="tmpfs" ino=2633 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0" [ 885.752287][T15114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2247'. [ 885.804033][ T24] gspca_spca508: reg_read err -71 [ 885.861053][ T24] gspca_spca508: reg_read err -71 [ 885.974636][ T24] gspca_spca508: reg_read err -71 [ 886.273932][ T24] gspca_spca508: reg_read err -71 [ 886.291001][ T24] gspca_spca508: reg write: error -71 [ 886.306601][ T24] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 886.341893][ T24] usb 5-1: USB disconnect, device number 51 [ 887.575020][ T9543] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 887.626035][ T29] audit: type=1400 audit(1784017937.151:1256): avc: denied { execute } for pid=15138 comm="syz.6.2255" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 887.694097][ T29] audit: type=1400 audit(1784017937.201:1257): avc: denied { ioctl } for pid=15138 comm="syz.6.2255" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0xaecb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 887.910287][ T9543] usb 6-1: config 0 has no interfaces? [ 888.005438][ T9543] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 888.117550][ T9543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.342510][ T9543] usb 6-1: config 0 descriptor?? [ 888.583178][ T5741] usb 6-1: USB disconnect, device number 36 [ 888.654042][ T5730] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 888.833298][ T24] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 888.882199][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 888.960444][ T5730] usb 4-1: unable to get BOS descriptor or descriptor too short [ 888.981447][ T5730] usb 4-1: config 7 has an invalid interface number: 234 but max is 0 [ 888.999600][ T5730] usb 4-1: config 7 has no interface number 0 [ 889.006732][ T5730] usb 4-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 889.059799][ T5730] usb 4-1: config 7 interface 234 has no altsetting 0 [ 889.141461][ T5730] usb 4-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 889.160372][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.223742][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 889.236982][ T5730] usb 4-1: Product: syz [ 889.242025][ T5730] usb 4-1: Manufacturer: syz [ 889.274699][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 889.288490][ T5730] usb 4-1: SerialNumber: syz [ 889.291700][ T5741] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 889.293929][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 889.385949][ T24] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 889.396369][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.405308][ T24] usb 7-1: Product: syz [ 889.432766][ T24] usb 7-1: Manufacturer: syz [ 889.443722][ T24] usb 7-1: SerialNumber: syz [ 889.463239][ T24] usb 7-1: config 0 descriptor?? [ 889.470689][T15149] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 889.518931][ T5741] usb 1-1: not running at top speed; connect to a high speed hub [ 889.548545][ T5741] usb 1-1: config 1 interface 0 altsetting 49 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.580265][ T5741] usb 1-1: config 1 interface 0 has no altsetting 0 [ 889.615074][ T24] rc_core: IR keymap rc-streamzap not found [ 889.747981][ T24] Registered IR keymap rc-empty [ 890.268509][ T24] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 890.710632][ T24] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input33 [ 891.355442][ T5741] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 891.829387][ T5741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.837671][ T5741] usb 1-1: Product: syz [ 891.842180][ T5741] usb 1-1: Manufacturer: syz [ 891.846791][ T5741] usb 1-1: SerialNumber: syz [ 891.900767][ T24] usb 7-1: USB disconnect, device number 31 [ 892.016477][ T5741] usb 1-1: can't set config #1, error -71 [ 892.044867][ T5741] usb 1-1: USB disconnect, device number 66 [ 892.800406][ T5741] usb 4-1: USB disconnect, device number 79 [ 893.941027][T15210] FAULT_INJECTION: forcing a failure. [ 893.941027][T15210] name failslab, interval 1, probability 0, space 0, times 0 [ 893.955251][T15210] CPU: 0 UID: 0 PID: 15210 Comm: syz.6.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.955278][T15210] Tainted: [L]=SOFTLOCKUP [ 893.955284][T15210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 893.955294][T15210] Call Trace: [ 893.955300][T15210] [ 893.955307][T15210] dump_stack_lvl+0x100/0x190 [ 893.955334][T15210] should_fail_ex.cold+0x5/0xa [ 893.955357][T15210] should_failslab+0xc2/0x120 [ 893.955377][T15210] kmem_cache_alloc_noprof+0x91/0x6a0 [ 893.955394][T15210] ? dst_alloc+0x99/0x1a0 [ 893.955422][T15210] dst_alloc+0x99/0x1a0 [ 893.955449][T15210] rt_dst_alloc+0x35/0x3a0 [ 893.955476][T15210] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 893.955502][T15210] ip_route_output_key_hash+0x118/0x2b0 [ 893.955522][T15210] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 893.955549][T15210] ? find_held_lock+0x2b/0x80 [ 893.955577][T15210] ip_route_output_flow+0x27/0x150 [ 893.955599][T15210] udp_sendmsg+0x198a/0x2720 [ 893.955630][T15210] ? __pfx_udp_sendmsg+0x10/0x10 [ 893.955655][T15210] ? __pfx_avc_has_perm+0x10/0x10 [ 893.955672][T15210] ? rcu_is_watching+0x12/0xc0 [ 893.955700][T15210] ? do_user_addr_fault+0x7de/0x12f0 [ 893.955725][T15210] ? do_user_addr_fault+0x7de/0x12f0 [ 893.955754][T15210] ? __pfx_sock_has_perm+0x10/0x10 [ 893.955791][T15210] ? __pfx_udp_sendmsg+0x10/0x10 [ 893.955817][T15210] inet_sendmsg+0x105/0x140 [ 893.955836][T15210] ____sys_sendmsg+0x9c9/0xbe0 [ 893.955858][T15210] ? __pfx_inet_sendmsg+0x10/0x10 [ 893.955878][T15210] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.955904][T15210] ? __pfx__kstrtoull+0x10/0x10 [ 893.955936][T15210] ___sys_sendmsg+0x190/0x1e0 [ 893.955962][T15210] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.955997][T15210] ? find_held_lock+0x2b/0x80 [ 893.956038][T15210] __sys_sendmmsg+0x20c/0x440 [ 893.956060][T15210] ? __pfx___sys_sendmmsg+0x10/0x10 [ 893.956078][T15210] ? ksys_write+0x190/0x250 [ 893.956121][T15210] ? fput+0x79/0x100 [ 893.956144][T15210] ? ksys_write+0x1ac/0x250 [ 893.956168][T15210] ? __pfx_ksys_write+0x10/0x10 [ 893.956197][T15210] __x64_sys_sendmmsg+0x9c/0x100 [ 893.956215][T15210] ? lockdep_hardirqs_on+0x78/0x100 [ 893.956242][T15210] do_syscall_64+0x115/0x870 [ 893.956267][T15210] ? clear_bhb_loop+0x40/0x90 [ 893.956289][T15210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.956308][T15210] RIP: 0033:0x7f0f04f9de59 [ 893.956324][T15210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.956342][T15210] RSP: 002b:00007f0f05e5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 893.956359][T15210] RAX: ffffffffffffffda RBX: 00007f0f05226180 RCX: 00007f0f04f9de59 [ 893.956371][T15210] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 000000000000000b [ 893.956381][T15210] RBP: 00007f0f05e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 893.956392][T15210] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 893.956402][T15210] R13: 00007f0f05226218 R14: 00007f0f05226180 R15: 00007fff11a8d468 [ 893.956425][T15210] [ 895.030757][T15216] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 895.786868][T15227] xt_hashlimit: size too large, truncated to 1048576 [ 898.158296][ T29] audit: type=1400 audit(1784017947.681:1258): avc: denied { mounton } for pid=15249 comm="syz.5.2273" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 898.322044][T15253] ntfs3(loop0): try to read out of volume at offset 0x0 [ 899.554718][T15261] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 899.952501][T15269] xt_hashlimit: size too large, truncated to 1048576 [ 900.107946][T15186] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.301922][ T5730] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 901.371823][ T5705] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 901.397269][T15186] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.416106][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 901.439657][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 901.455586][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 901.471136][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 901.480124][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 901.510247][ T29] audit: type=1400 audit(1784017951.031:1259): avc: denied { mounton } for pid=15280 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 901.541178][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.555039][ T5730] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.566041][ T5730] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 901.576627][ T5730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.597510][ T5730] usb 5-1: config 0 descriptor?? [ 901.608255][ T5705] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 901.624208][ T5705] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.633344][ T5705] usb 7-1: Product: syz [ 901.639847][ T5705] usb 7-1: Manufacturer: syz [ 901.647442][ T5705] usb 7-1: SerialNumber: syz [ 901.658316][ T5705] usb 7-1: config 0 descriptor?? [ 901.761317][T15186] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.841668][ T9543] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 902.011175][T15186] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.037887][ T9543] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 902.048055][ T9543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.071406][ T9543] usb 1-1: Product: syz [ 902.076043][ T9543] usb 1-1: Manufacturer: syz [ 902.080659][ T9543] usb 1-1: SerialNumber: syz [ 902.094580][ T9543] usb 1-1: config 0 descriptor?? [ 902.163087][ T5725] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 902.301898][ T5730] usb 5-1: string descriptor 0 read error: -22 [ 902.313077][ T5705] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 902.338584][ T5725] usb 4-1: config 0 has an invalid interface number: 70 but max is 0 [ 902.360430][ T5725] usb 4-1: config 0 has no interface number 0 [ 902.384543][ T5725] usb 4-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 902.441301][ T5725] usb 4-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 902.455054][ T5725] usb 4-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 902.466463][ T5725] usb 4-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 902.482036][ T5725] usb 4-1: config 0 interface 70 has no altsetting 0 [ 902.491322][ T5725] usb 4-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 902.504819][ T29] audit: type=1400 audit(1784017952.031:1260): avc: denied { ioctl } for pid=15263 comm="syz.4.2279" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 902.531196][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.531226][ T5725] usb 4-1: Product: syz [ 902.531242][ T5725] usb 4-1: Manufacturer: syz [ 902.531258][ T5725] usb 4-1: SerialNumber: syz [ 902.533564][ T5725] usb 4-1: config 0 descriptor?? [ 902.564891][T15291] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 902.653969][ T5705] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 902.688519][ T5705] usb 7-1: USB disconnect, device number 32 [ 902.758396][ T9543] peak_usb 1-1:0.0 can1: unable to request usb[type=2 value=5] err=-71 [ 902.828248][ T5730] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #100: -71 [ 902.840174][ T5730] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 902.864931][T15186] erspan0: left allmulticast mode [ 902.871861][ T5730] uclogic 0003:256C:006D.0013: failed probing pen v1 parameters: -71 [ 902.879201][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.880560][T15186] erspan0: left promiscuous mode [ 902.891001][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.896094][ T5730] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 902.913069][T15186] bridge0: port 3(erspan0) entered disabled state [ 902.925390][ T5730] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 902.930337][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.939662][ T5730] usb 5-1: USB disconnect, device number 52 [ 902.955918][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.971993][T15186] bridge_slave_1: left allmulticast mode [ 902.978192][T15186] bridge_slave_1: left promiscuous mode [ 902.986154][T15186] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.014892][T15297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.040246][T15186] bridge_slave_0: left allmulticast mode [ 903.047947][T15186] bridge_slave_0: left promiscuous mode [ 903.052206][T15297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.057594][T15186] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.184546][ T29] audit: type=1400 audit(1784017952.691:1261): avc: denied { mounton } for pid=15298 comm="syz.6.2288" path="/proc/775/task" dev="proc" ino=64520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 903.472995][ T5612] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 903.544644][ T5626] Bluetooth: hci0: command tx timeout [ 903.711909][ T5612] usb 7-1: device descriptor read/64, error -71 [ 903.995073][ T5612] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 904.137260][T15186] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 904.154192][T15186] bridge1 (unregistering): left promiscuous mode [ 904.161727][ T5612] usb 7-1: device descriptor read/64, error -71 [ 904.205362][T15186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.219798][T15186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.231497][T15186] bond0 (unregistering): Released all slaves [ 904.250996][T15186] bond1 (unregistering): Released all slaves [ 904.268021][T15186] bond2 (unregistering): Released all slaves [ 904.274716][ T5612] usb usb7-port1: attempt power cycle [ 904.290474][T15186] bond3 (unregistering): Released all slaves [ 904.388496][ T9543] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 904.431551][ T29] audit: type=1400 audit(1784017953.951:1262): avc: denied { search } for pid=5273 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.450838][ T9543] usb 1-1: USB disconnect, device number 67 [ 904.489010][ T29] audit: type=1400 audit(1784017953.951:1263): avc: denied { search } for pid=5273 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.532288][ T29] audit: type=1400 audit(1784017953.951:1264): avc: denied { search } for pid=5273 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.615062][ T5725] ti_usb_3410_5052 4-1:0.70: TI USB 3410 1 port adapter converter detected [ 904.642500][ T29] audit: type=1400 audit(1784017953.961:1265): avc: denied { read } for pid=5273 comm="dhcpcd" name="n54" dev="tmpfs" ino=10649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 904.664802][ T5612] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 904.687789][ T5725] usb 4-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 904.721740][ T5612] usb 7-1: device descriptor read/8, error -71 [ 904.766056][ T5725] usb 4-1: USB disconnect, device number 80 [ 904.820522][ T29] audit: type=1400 audit(1784017953.961:1266): avc: denied { open } for pid=5273 comm="dhcpcd" path="/run/udev/data/n54" dev="tmpfs" ino=10649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 904.934233][ T5725] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 904.972110][ T29] audit: type=1400 audit(1784017953.961:1267): avc: denied { getattr } for pid=5273 comm="dhcpcd" path="/run/udev/data/n54" dev="tmpfs" ino=10649 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 904.995917][ T5612] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 905.033982][ T5725] ti_usb_3410_5052 4-1:0.70: device disconnected [ 905.040607][ T5612] usb 7-1: device descriptor read/8, error -71 [ 905.068553][ T29] audit: type=1400 audit(1784017954.591:1268): avc: denied { read } for pid=15323 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.110837][ T29] audit: type=1400 audit(1784017954.591:1269): avc: denied { read open } for pid=15323 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.185010][ T5612] usb usb7-port1: unable to enumerate USB device [ 905.232855][ T29] audit: type=1400 audit(1784017954.591:1270): avc: denied { getattr } for pid=15323 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 905.623835][ T5626] Bluetooth: hci0: command tx timeout [ 906.726385][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.771359][T15280] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.794102][T15280] bridge_slave_0: entered allmulticast mode [ 906.804064][T15280] bridge_slave_0: entered promiscuous mode [ 906.825559][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 906.867657][T15186] hsr_slave_0: left promiscuous mode [ 906.895887][T15186] hsr_slave_1: left promiscuous mode [ 906.922869][T15186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.934381][T15357] xt_hashlimit: size too large, truncated to 1048576 [ 906.945428][T15186] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 906.954765][ T5725] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 906.972886][T15186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.002168][T15186] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.082791][T15186] veth1_macvtap: left promiscuous mode [ 907.099423][T15186] veth0_macvtap: left promiscuous mode [ 907.135010][ T5725] usb 7-1: Using ep0 maxpacket: 8 [ 907.148833][T15186] veth1_vlan: left promiscuous mode [ 907.163024][ T5725] usb 7-1: unable to get BOS descriptor or descriptor too short [ 907.181081][ T5725] usb 7-1: config 7 has an invalid interface number: 234 but max is 0 [ 907.192278][T15186] veth0_vlan: left promiscuous mode [ 907.201263][ T5725] usb 7-1: config 7 has no interface number 0 [ 907.339583][ T5725] usb 7-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 907.369670][ T5725] usb 7-1: config 7 interface 234 has no altsetting 0 [ 907.554196][ T5725] usb 7-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 907.576053][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.596067][ T5725] usb 7-1: Product: syz [ 907.606879][ T5725] usb 7-1: Manufacturer: syz [ 907.620466][ T5725] usb 7-1: SerialNumber: syz [ 907.705968][ T5626] Bluetooth: hci0: command tx timeout [ 910.141890][ T5626] Bluetooth: hci0: command tx timeout [ 910.361858][T15373] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 910.570530][T15186] team0 (unregistering): Port device team_slave_1 removed [ 910.658922][T15186] team0 (unregistering): Port device team_slave_0 removed [ 911.238829][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.263079][T15280] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.277068][T15280] bridge_slave_1: entered allmulticast mode [ 911.288207][T15280] bridge_slave_1: entered promiscuous mode [ 911.412279][ T9543] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 911.460690][ T5725] usb 7-1: USB disconnect, device number 37 [ 911.463255][T15280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 911.578632][T15280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.002083][ T9543] usb 4-1: config 0 has no interfaces? [ 912.039452][ T9543] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 912.049364][ T5612] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 912.077720][ T9543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.114008][ T9543] usb 4-1: Product: syz [ 912.127610][ T9543] usb 4-1: Manufacturer: syz [ 912.147856][ T9543] usb 4-1: SerialNumber: syz [ 912.173137][ T9543] usb 4-1: config 0 descriptor?? [ 912.197655][T15280] team0: Port device team_slave_0 added [ 912.242579][T15280] team0: Port device team_slave_1 added [ 912.244811][ T5612] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 912.267424][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.276425][ T5612] usb 5-1: Product: syz [ 912.296189][ T5612] usb 5-1: Manufacturer: syz [ 912.300831][ T5612] usb 5-1: SerialNumber: syz [ 912.317025][ T5612] usb 5-1: config 0 descriptor?? [ 912.371456][T15280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.379975][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.414749][T15280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.469925][T15186] IPVS: stop unused estimator thread 0... [ 912.475428][T15375] tipc: Started in network mode [ 912.482281][ T5741] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 912.500413][T15375] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 912.532411][T15375] tipc: Enabled bearer , priority 10 [ 912.549001][T15280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.569289][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 913.060361][ T5741] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 913.075764][T15280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.078882][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 913.078896][ T29] audit: type=1400 audit(1784017962.601:1280): avc: denied { write } for pid=15383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.425522][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.569341][ T5741] usb 7-1: Product: syz [ 913.583874][ T5741] usb 7-1: Manufacturer: syz [ 913.594306][ T5741] usb 7-1: SerialNumber: syz [ 913.607678][ T5612] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 913.632419][ T5741] usb 7-1: config 0 descriptor?? [ 913.662020][ T5798] usb 4-1: USB disconnect, device number 81 [ 913.680305][ T5725] tipc: Node number set to 4269801492 [ 913.755421][ T5612] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 913.771191][ T5612] usb 5-1: USB disconnect, device number 53 [ 913.822694][ T29] audit: type=1400 audit(1784017963.341:1281): avc: denied { write } for pid=15405 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 913.899590][T15280] hsr_slave_0: entered promiscuous mode [ 913.906828][T15280] hsr_slave_1: entered promiscuous mode [ 913.976540][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 914.148761][T15280] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 914.159850][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.168879][T15280] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 914.193175][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.206430][T15280] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 914.235312][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 914.257116][T15280] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 914.302364][T15280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 914.314944][ T5741] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 914.423717][ T5741] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 914.475730][ T5741] usb 7-1: USB disconnect, device number 38 [ 914.656839][T15280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.734287][T15280] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.778241][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.785429][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.794394][ T29] audit: type=1400 audit(1784017964.311:1282): avc: denied { write } for pid=15411 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.847748][T15186] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.855245][T15186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.077312][ T5705] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 915.084184][T15434] xt_hashlimit: size too large, truncated to 1048576 [ 915.147291][ T29] audit: type=1400 audit(1784017964.671:1283): avc: denied { write } for pid=15435 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.382958][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 915.417650][ T5705] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 915.435150][ T5273] 8021q: adding VLAN 0 to HW filter on device eth11 [ 915.474609][ T5705] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 915.531838][ T5705] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.576484][ T5705] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 916.118192][ T5705] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 916.133112][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.196518][ T5705] usb 1-1: Product: syz [ 916.240448][ T5705] usb 1-1: Manufacturer: syz [ 916.245599][ T5705] usb 1-1: SerialNumber: syz [ 916.292978][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 916.451161][ T5705] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input37 [ 917.181878][ T5705] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 917.242520][T15474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 917.261778][ T5705] (id 0x00) [ 917.290839][T15474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.400157][ T29] audit: type=1400 audit(1784017966.921:1284): avc: denied { execute_no_trans } for pid=15429 comm="syz.0.2311" path="/439/file0" dev="tmpfs" ino=2367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 917.468991][T15430] Invalid argument reading file caps for ./file0 [ 917.511965][ T5705] rc_core: IR keymap rc-imon-pad not found [ 917.540099][ T5705] Registered IR keymap rc-empty [ 917.565078][ T5705] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 917.601227][ T5705] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 917.653069][T15280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.132438][ T5705] imon:send_packet: packet tx failed (-71) [ 918.181951][ T5705] imon 1-1:155.0: remote input dev register failed [ 918.184892][ T29] audit: type=1400 audit(1784017967.711:1285): avc: denied { write } for pid=15453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.274784][ T5705] imon 1-1:155.0: imon_init_intf0: rc device setup failed [ 918.371662][ T5612] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 918.433750][ T5705] imon 1-1:155.0: unable to initialize intf0, err 0 [ 918.445910][ T5705] imon:imon_probe: failed to initialize context! [ 918.453882][ T5705] imon 1-1:155.0: unable to register, err -19 [ 918.522294][ T5705] usb 1-1: USB disconnect, device number 68 [ 918.557432][ T29] audit: type=1400 audit(1784017968.081:1286): avc: denied { write } for pid=15492 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.605561][ T5612] usb 5-1: config 0 has an invalid interface number: 70 but max is 0 [ 918.630320][ T5612] usb 5-1: config 0 has no interface number 0 [ 918.663559][ T5612] usb 5-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 918.723680][ T5612] usb 5-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 918.795352][ T5612] usb 5-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 918.798896][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 918.862609][ T5612] usb 5-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.918869][ T5612] usb 5-1: config 0 interface 70 has no altsetting 0 [ 918.961928][ T5612] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 918.990613][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.027066][ T5612] usb 5-1: Product: syz [ 919.050784][ T5612] usb 5-1: Manufacturer: syz [ 919.069659][ T5612] usb 5-1: SerialNumber: syz [ 919.098227][T15280] veth0_vlan: entered promiscuous mode [ 919.115586][ T5612] usb 5-1: config 0 descriptor?? [ 919.152768][T15488] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 919.188350][T15280] veth1_vlan: entered promiscuous mode [ 919.332657][T15280] veth0_macvtap: entered promiscuous mode [ 919.377259][T15280] veth1_macvtap: entered promiscuous mode [ 919.395978][ T29] audit: type=1400 audit(1784017968.921:1287): avc: denied { ioctl } for pid=15509 comm="syz.6.2326" path="socket:[65602]" dev="sockfs" ino=65602 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 919.466194][T15280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.540157][ T29] audit: type=1400 audit(1784017968.961:1288): avc: denied { getopt } for pid=15509 comm="syz.6.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 919.565594][T15514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.581720][ T29] audit: type=1400 audit(1784017968.961:1289): avc: granted { setsecparam } for pid=15509 comm="syz.6.2326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 919.607276][T15514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.680086][T15280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.736657][ T1014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.760358][ T1014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.797582][ T1014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.845812][ T1014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.902745][T15519] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2328'. [ 920.457438][T15523] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 920.473488][T15488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.517983][T15488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.582945][T15519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 920.702049][T15488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.773891][T15519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 920.785073][T15488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.843632][T15519] bond0 (unregistering): Released all slaves [ 920.892576][ T5612] ti_usb_3410_5052 5-1:0.70: TI USB 3410 1 port adapter converter detected [ 920.958447][ T5612] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 921.016782][ T5612] usb 5-1: USB disconnect, device number 54 [ 921.034561][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.065142][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.078804][ T5612] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 921.110439][ T5612] ti_usb_3410_5052 5-1:0.70: device disconnected [ 921.143931][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.171175][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.243916][ T29] audit: type=1400 audit(1784017970.771:1290): avc: denied { mounton } for pid=15280 comm="syz-executor" path="/root/syzkaller.UgJwfm/syz-tmp" dev="sda1" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 921.397929][ T29] audit: type=1400 audit(1784017970.771:1291): avc: denied { mounton } for pid=15280 comm="syz-executor" path="/root/syzkaller.UgJwfm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 921.470223][ T29] audit: type=1400 audit(1784017970.771:1292): avc: denied { mounton } for pid=15280 comm="syz-executor" path="/root/syzkaller.UgJwfm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=66062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 921.527868][ T29] audit: type=1400 audit(1784017970.801:1293): avc: denied { mounton } for pid=15280 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 921.555065][ T29] audit: type=1400 audit(1784017970.811:1294): avc: denied { mount } for pid=15280 comm="syz-executor" name="/" dev="gadgetfs" ino=6909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 921.817220][T15544] ntfs3(loop0): try to read out of volume at offset 0x0 [ 921.891961][ T5705] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 922.427607][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 922.831422][ T5705] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 922.875685][T15547] FAULT_INJECTION: forcing a failure. [ 922.875685][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 922.881085][ T5705] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 922.901952][T15547] CPU: 1 UID: 0 PID: 15547 Comm: syz.6.2336 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.901981][T15547] Tainted: [L]=SOFTLOCKUP [ 922.901987][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 922.901998][T15547] Call Trace: [ 922.902004][T15547] [ 922.902011][T15547] dump_stack_lvl+0x100/0x190 [ 922.902039][T15547] should_fail_ex.cold+0x5/0xa [ 922.902061][T15547] should_failslab+0xc2/0x120 [ 922.902082][T15547] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 922.902100][T15547] ? __alloc_skb+0x5b7/0x710 [ 922.902115][T15547] ? __alloc_skb+0x140/0x710 [ 922.902134][T15547] __alloc_skb+0x140/0x710 [ 922.902147][T15547] ? __alloc_skb+0x5b7/0x710 [ 922.902162][T15547] ? __pfx___alloc_skb+0x10/0x10 [ 922.902185][T15547] netlink_alloc_large_skb+0x69/0x150 [ 922.902212][T15547] netlink_sendmsg+0x680/0xda0 [ 922.902240][T15547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.902273][T15547] ? selinux_socket_sendmsg+0x198/0x2f0 [ 922.902301][T15547] ____sys_sendmsg+0xa4d/0xbe0 [ 922.902321][T15547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 922.902346][T15547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 922.902378][T15547] ___sys_sendmsg+0x190/0x1e0 [ 922.902402][T15547] ? __pfx____sys_sendmsg+0x10/0x10 [ 922.902422][T15547] ? __lock_acquire+0x49f/0x1a40 [ 922.902441][T15547] ? get_pid_task+0x106/0x250 [ 922.902493][T15547] __sys_sendmsg+0x160/0x210 [ 922.902511][T15547] ? __pfx___sys_sendmsg+0x10/0x10 [ 922.902543][T15547] do_syscall_64+0x115/0x870 [ 922.902569][T15547] ? clear_bhb_loop+0x40/0x90 [ 922.902591][T15547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.902609][T15547] RIP: 0033:0x7f0f04f9de59 [ 922.902625][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.902641][T15547] RSP: 002b:00007f0f05e9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.902659][T15547] RAX: ffffffffffffffda RBX: 00007f0f05225fa0 RCX: 00007f0f04f9de59 [ 922.902672][T15547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 922.902683][T15547] RBP: 00007f0f05e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 922.902694][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.902704][T15547] R13: 00007f0f05226038 R14: 00007f0f05225fa0 R15: 00007fff11a8d468 [ 922.902729][T15547] [ 923.154455][ T5705] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 923.165519][ T5705] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 924.295538][ T5705] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 924.318583][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.351515][ T5705] usb 5-1: Product: syz [ 924.355743][ T5705] usb 5-1: Manufacturer: syz [ 924.360367][ T5705] usb 5-1: SerialNumber: syz [ 925.704221][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 925.754442][ T5705] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input40 [ 925.876816][ T5705] imon:send_packet: packet tx failed (-71) [ 925.898147][T15571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.937207][T15569] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 926.010243][ T5705] imon 5-1:155.0: panel buttons/knobs setup failed [ 926.067560][ T5705] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 926.220554][ T5705] (id 0x00) [ 926.331737][ T5705] rc_core: IR keymap rc-imon-pad not found [ 926.343527][ T5705] Registered IR keymap rc-empty [ 926.356408][ T5705] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 926.385767][ T5705] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 926.412186][ T5705] imon:send_packet: packet tx failed (-71) [ 926.441827][ T5705] imon 5-1:155.0: remote input dev register failed [ 926.480436][ T5705] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 926.501891][ T5612] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 926.777370][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 926.777425][ T29] audit: type=1400 audit(1784017976.231:1297): avc: denied { ioctl } for pid=15577 comm="syz.7.2344" path="socket:[66230]" dev="sockfs" ino=66230 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 926.941889][ T5612] usb 7-1: Using ep0 maxpacket: 8 [ 927.476892][ T5612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 927.485860][ T5612] usb 7-1: config 7 has an invalid interface number: 234 but max is 0 [ 927.494360][ T5612] usb 7-1: config 7 has no interface number 0 [ 927.500500][ T5612] usb 7-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 927.512380][ T5612] usb 7-1: config 7 interface 234 has no altsetting 0 [ 927.521330][ T5612] usb 7-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 927.530439][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.538817][ T5612] usb 7-1: Product: syz [ 927.543578][ T5612] usb 7-1: Manufacturer: syz [ 927.548367][ T5612] usb 7-1: SerialNumber: syz [ 927.591806][T15568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2343'. [ 927.795851][ T5705] imon 5-1:155.0: unable to initialize intf0, err 0 [ 927.802834][ T5705] imon:imon_probe: failed to initialize context! [ 927.809455][ T5705] imon 5-1:155.0: unable to register, err -19 [ 927.821313][ T5705] usb 5-1: USB disconnect, device number 55 [ 928.051473][T15591] netlink: 'syz.3.2345': attribute type 4 has an invalid length. [ 930.508049][T15600] fuse: Bad value for 'fd' [ 930.537828][T15602] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 931.191863][T15615] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 931.207461][T15596] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 931.234196][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.399326][ T42] usb 7-1: USB disconnect, device number 39 [ 931.447224][ T29] audit: type=1400 audit(1784017980.971:1298): avc: denied { watch } for pid=15622 comm="syz.6.2352" path="/250" dev="tmpfs" ino=1315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 931.651357][T15625] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2353'. [ 931.718075][ T5705] kernel write not supported for file bpf-map (pid: 5705 comm: kworker/1:4) [ 931.861983][ T29] audit: type=1400 audit(1784017981.321:1299): avc: denied { read } for pid=15622 comm="syz.6.2352" path="socket:[66823]" dev="sockfs" ino=66823 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 931.967429][T15625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.033742][T15625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.069544][T15625] bond0 (unregistering): Released all slaves [ 932.253476][ T29] audit: type=1400 audit(1784017981.781:1300): avc: denied { write } for pid=15604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 932.397194][ T29] audit: type=1400 audit(1784017981.921:1301): avc: denied { write } for pid=15641 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 933.471728][ T5798] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 933.555094][T15667] overlayfs: failed to resolve './file0': -2 [ 933.589900][ T29] audit: type=1400 audit(1784017983.111:1302): avc: denied { sqpoll } for pid=15669 comm="syz.4.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 933.638936][ T29] audit: type=1400 audit(1784017983.141:1303): avc: denied { read } for pid=15669 comm="syz.4.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 933.664674][ T5798] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.691655][ T5798] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 933.696465][ T29] audit: type=1400 audit(1784017983.221:1304): avc: denied { mount } for pid=15666 comm="syz.3.2362" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 933.727960][ T5798] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 933.765749][ T5612] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 933.771071][ T5798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.787522][ T5798] usb 8-1: Product: syz [ 933.792676][ T5798] usb 8-1: Manufacturer: syz [ 933.805742][ T5798] usb 8-1: SerialNumber: syz [ 933.961719][ T5612] usb 7-1: Using ep0 maxpacket: 8 [ 933.972618][ T5612] usb 7-1: unable to get BOS descriptor or descriptor too short [ 933.987951][ T5612] usb 7-1: config 7 has an invalid interface number: 234 but max is 0 [ 933.996955][T15686] netlink: 'syz.0.2365': attribute type 4 has an invalid length. [ 934.012606][ T5612] usb 7-1: config 7 has no interface number 0 [ 934.030861][ T5612] usb 7-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 934.049619][T15686] netlink: 'syz.0.2365': attribute type 4 has an invalid length. [ 934.058656][ T42] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 934.082456][ T5612] usb 7-1: config 7 interface 234 has no altsetting 0 [ 934.101502][ T5612] usb 7-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 934.112462][ T29] audit: type=1400 audit(1784017983.631:1305): avc: denied { write } for pid=15659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 934.136003][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.154324][ T5612] usb 7-1: Product: syz [ 934.164131][ T5612] usb 7-1: Manufacturer: syz [ 934.173646][ T5612] usb 7-1: SerialNumber: syz [ 934.274463][ T29] audit: type=1400 audit(1784017983.801:1306): avc: denied { setattr } for pid=15669 comm="syz.4.2363" name="[io_uring]" dev="anon_inodefs" ino=66396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 934.561691][ T5612] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 936.767976][ T29] audit: type=1400 audit(1784017986.251:1307): avc: denied { write } for pid=15692 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.790863][ T5798] usb 8-1: USB disconnect, device number 2 [ 936.801495][ T5612] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 936.819314][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.858609][ T5612] usb 1-1: Product: syz [ 936.891058][ T5612] usb 1-1: Manufacturer: syz [ 936.919825][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 936.935265][ T5612] usb 1-1: SerialNumber: syz [ 936.970410][ T42] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 936.984769][ T5612] usb 1-1: config 0 descriptor?? [ 937.022542][ T42] usb 5-1: can't read configurations, error -71 [ 937.172869][ T5798] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 937.215068][T15705] xt_hashlimit: size too large, truncated to 1048576 [ 937.321286][ T5612] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 937.374679][ T5612] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 937.742122][ T5798] usb 8-1: config 0 has an invalid interface number: 70 but max is 0 [ 937.773578][ T5798] usb 8-1: config 0 has no interface number 0 [ 937.814076][ T5798] usb 8-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 937.927915][ T5798] usb 8-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 937.987849][ T5612] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 937.988289][ T5798] usb 8-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 938.022796][ T5612] usb 1-1: USB disconnect, device number 69 [ 938.146844][ T5798] usb 8-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.214103][ T5741] usb 7-1: USB disconnect, device number 40 [ 938.222815][ T5798] usb 8-1: config 0 interface 70 has no altsetting 0 [ 938.286945][ T5798] usb 8-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 938.324849][ T5798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.415097][ T5798] usb 8-1: Product: syz [ 938.488374][ T5798] usb 8-1: Manufacturer: syz [ 938.504425][ T5798] usb 8-1: SerialNumber: syz [ 939.295173][T15730] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 939.311738][ T29] audit: type=1400 audit(1784017988.101:1308): avc: denied { read } for pid=15723 comm="syz.0.2370" name="usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 939.352446][ T29] audit: type=1400 audit(1784017988.101:1309): avc: denied { open } for pid=15723 comm="syz.0.2370" path="/dev/usbmon6" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 939.376724][ T29] audit: type=1400 audit(1784017988.101:1310): avc: denied { ioctl } for pid=15723 comm="syz.0.2370" path="/dev/usbmon6" dev="devtmpfs" ino=735 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 939.403971][ T5798] usb 8-1: config 0 descriptor?? [ 939.515436][T15700] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 939.571022][ T29] audit: type=1400 audit(1784017988.171:1311): avc: denied { watch } for pid=15723 comm="syz.0.2370" path="/452/file5" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 939.628473][ T29] audit: type=1400 audit(1784017988.171:1312): avc: denied { watch_sb watch_reads } for pid=15723 comm="syz.0.2370" path="/452/file5" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 939.711262][T15741] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 940.189776][ T29] audit: type=1400 audit(1784017988.171:1313): avc: denied { watch_mount } for pid=15723 comm="syz.0.2370" path="/452/file5" dev="tmpfs" ino=2433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 940.720069][ T29] audit: type=1400 audit(1784017988.931:1314): avc: denied { write } for pid=15710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.767670][ T29] audit: type=1400 audit(1784017989.071:1315): avc: denied { write } for pid=15736 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 940.997009][ T5798] ti_usb_3410_5052 8-1:0.70: TI USB 3410 1 port adapter converter detected [ 941.306326][ T5798] usb 8-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 941.391828][ T5798] usb 8-1: USB disconnect, device number 3 [ 941.458245][ T5798] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 941.499112][ T5798] ti_usb_3410_5052 8-1:0.70: device disconnected [ 942.454779][T15799] xt_hashlimit: size too large, truncated to 1048576 [ 943.284755][ T29] audit: type=1400 audit(1784017992.801:1316): avc: denied { write } for pid=15763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 944.976690][ T29] audit: type=1400 audit(1784017994.501:1317): avc: denied { write } for pid=15814 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.062629][T15312] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 945.241727][ T5741] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 945.251129][T15312] usb 8-1: Using ep0 maxpacket: 8 [ 945.258363][T15823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 945.300216][T15312] usb 8-1: unable to get BOS descriptor or descriptor too short [ 945.358976][T15312] usb 8-1: config 7 has an invalid interface number: 234 but max is 0 [ 945.440931][T15312] usb 8-1: config 7 has no interface number 0 [ 945.495095][ T5741] usb 5-1: config 0 has an invalid interface number: 70 but max is 0 [ 945.571091][T15312] usb 8-1: config 7 interface 234 altsetting 5 has an endpoint descriptor with address 0x65, changing to 0x5 [ 945.608447][ T5741] usb 5-1: config 0 has no interface number 0 [ 945.656520][ T5741] usb 5-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 945.857966][T15312] usb 8-1: config 7 interface 234 has no altsetting 0 [ 946.092836][ T5741] usb 5-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 946.104740][ T5741] usb 5-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 946.116999][ T5741] usb 5-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.130547][ T5741] usb 5-1: config 0 interface 70 has no altsetting 0 [ 946.138739][T15312] usb 8-1: New USB device found, idVendor=413c, idProduct=8185, bcdDevice=58.bb [ 946.148442][T15312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.157765][T15312] usb 8-1: Product: syz [ 946.162304][ T5741] usb 5-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 946.171448][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.179743][T15312] usb 8-1: Manufacturer: syz [ 946.184385][ T5741] usb 5-1: Product: syz [ 946.188860][T15312] usb 8-1: SerialNumber: syz [ 946.194870][ T5741] usb 5-1: Manufacturer: syz [ 946.200681][ T5741] usb 5-1: SerialNumber: syz [ 946.227303][ T5741] usb 5-1: config 0 descriptor?? [ 946.236208][T15816] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 946.641871][T15312] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 948.673686][ T5741] ti_usb_3410_5052 5-1:0.70: TI USB 3410 1 port adapter converter detected [ 948.690916][ T5741] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 948.709684][ T5741] usb 5-1: USB disconnect, device number 58 [ 948.790816][ T5741] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 948.802612][ T5741] ti_usb_3410_5052 5-1:0.70: device disconnected [ 948.828846][T15848] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 948.848110][T15312] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 948.862571][T15312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.876870][T15312] usb 1-1: config 0 has no interface number 0 [ 948.896456][T15312] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 948.907076][T15312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.952171][T15312] usb 1-1: Product: syz [ 949.482938][T15312] usb 1-1: Manufacturer: syz [ 949.493925][T15312] usb 1-1: SerialNumber: syz [ 949.513237][T15312] usb 1-1: config 0 descriptor?? [ 949.528938][T15850] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2392'. [ 949.533561][T15312] usb 1-1: can't set config #0, error -71 [ 949.552238][T15312] usb 1-1: USB disconnect, device number 70 [ 949.711555][ T5730] usb 8-1: USB disconnect, device number 4 [ 949.883632][T15859] xt_hashlimit: size too large, truncated to 1048576 [ 950.459829][T15867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2397'. [ 951.022746][ T5725] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 951.187917][ T29] audit: type=1400 audit(1784018000.711:1318): avc: denied { listen } for pid=15879 comm="syz.4.2401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 951.262276][ T5725] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 951.271742][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.286499][ T5725] usb 1-1: Product: syz [ 951.295582][ T5725] usb 1-1: Manufacturer: syz [ 951.309015][ T5725] usb 1-1: SerialNumber: syz [ 951.333857][ T5725] usb 1-1: config 0 descriptor?? [ 951.677928][T15886] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 952.046542][ T5725] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 952.113161][ T5725] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 952.128511][ T5725] usb 1-1: USB disconnect, device number 71 [ 952.134802][ T5741] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 952.663273][ T5741] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 952.671559][ T5741] usb 7-1: config 0 has no interface number 0 [ 952.678137][ T5741] usb 7-1: config 0 interface 70 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 952.691871][ T5741] usb 7-1: config 0 interface 70 altsetting 5 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 952.711910][ T5741] usb 7-1: config 0 interface 70 altsetting 5 endpoint 0x83 has invalid maxpacket 42809, setting to 64 [ 952.735321][ T5741] usb 7-1: config 0 interface 70 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.760054][ T5741] usb 7-1: config 0 interface 70 has no altsetting 0 [ 952.788088][ T5741] usb 7-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=55.9e [ 952.817275][T15912] xt_hashlimit: size too large, truncated to 1048576 [ 952.828342][ T5741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.849250][ T5741] usb 7-1: Product: syz [ 952.865309][ T5741] usb 7-1: Manufacturer: syz [ 952.879823][ T5741] usb 7-1: SerialNumber: syz [ 952.897982][ T5741] usb 7-1: config 0 descriptor?? [ 952.923476][T15892] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 953.248514][T15925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.306812][T15925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.457882][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.480054][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.520628][T15929] sctp: [Deprecated]: syz.3.2414 (pid 15929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 953.520628][T15929] Use struct sctp_sack_info instead [ 953.578671][T15892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.601703][ T5725] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 953.628493][T15892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.737124][ T5741] ti_usb_3410_5052 7-1:0.70: TI USB 3410 1 port adapter converter detected [ 953.783225][ T5741] usb 7-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 953.792708][ T5725] usb 8-1: Using ep0 maxpacket: 32 [ 953.825828][ T5725] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 953.844738][ T5741] usb 7-1: USB disconnect, device number 41 [ 953.882659][ T5725] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.935735][ T5741] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 953.952864][ T5725] usb 8-1: Product: syz [ 953.962410][ T5725] usb 8-1: Manufacturer: syz [ 953.973381][ T5725] usb 8-1: SerialNumber: syz [ 953.983212][ T5741] ti_usb_3410_5052 7-1:0.70: device disconnected [ 954.044894][ T5725] usb 8-1: config 0 descriptor?? [ 954.183753][T15933] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2415'. [ 954.474237][ T5725] airspy 8-1:0.0: Board ID: 00 [ 954.489753][ T5725] airspy 8-1:0.0: Firmware version: [ 955.661281][T15927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.679916][T15927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.804262][ T5725] airspy 8-1:0.0: usb_control_msg() failed -71 request 12 [ 955.959849][ T5725] airspy 8-1:0.0: Registered as swradio24 [ 955.981244][ T5725] airspy 8-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 956.025744][ T5725] usb 8-1: USB disconnect, device number 5 [ 956.059143][T15950] xt_hashlimit: size too large, truncated to 1048576 [ 956.367367][T15959] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 959.516199][T15992] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2428'. [ 959.621178][T15999] xt_hashlimit: size too large, truncated to 1048576 [ 960.529066][T16006] xt_hashlimit: size too large, truncated to 1048576 [ 961.155231][T16012] trusted_key: encrypted_key: insufficient parameters specified [ 961.195076][T16014] xt_hashlimit: size too large, truncated to 1048576 [ 961.295025][ T29] audit: type=1400 audit(1784018010.821:1319): avc: denied { connect } for pid=16011 comm="syz.3.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 961.323568][T16016] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2436'. [ 961.336934][T16016] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2436'. [ 962.112698][T16026] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 963.039328][T16037] pim6reg: entered allmulticast mode [ 963.123349][ T29] audit: type=1400 audit(1784018012.651:1320): avc: denied { create } for pid=16038 comm="syz.6.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.147409][T16040] pim6reg: left allmulticast mode [ 963.239442][ T29] audit: type=1400 audit(1784018012.711:1321): avc: denied { connect } for pid=16038 comm="syz.6.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.338302][ T29] audit: type=1400 audit(1784018012.721:1322): avc: denied { write } for pid=16038 comm="syz.6.2445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.640232][T16046] syz.6.2447 (16046): /proc/16045/oom_adj is deprecated, please use /proc/16045/oom_score_adj instead. [ 963.739691][T16051] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2447'. [ 963.804542][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2447'. [ 963.885824][T16046] input: syz1 as /devices/virtual/input/input47 [ 964.096491][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 966.687895][T16088] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 966.921696][ T5725] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 967.200936][T16094] xt_hashlimit: size too large, truncated to 1048576 [ 967.223313][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 967.249428][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.313373][ T29] audit: type=1400 audit(1784018016.751:1323): avc: denied { setopt } for pid=16098 comm="syz.6.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 967.350712][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.364114][ T5725] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 967.380557][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.397103][ T5725] usb 4-1: config 0 descriptor?? [ 967.522363][T16096] xt_CT: You must specify a L4 protocol and not use inversions on it [ 968.041364][ T5725] hid_map_usage: 4377 callbacks suppressed [ 968.041435][ T5725] HID 045e:07da: Invalid code 65791 type 1 [ 968.157557][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0014/input/input49 [ 968.323440][ T5725] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 970.400151][ T42] usb 4-1: USB disconnect, device number 82 [ 971.966718][ T29] audit: type=1400 audit(1784018021.221:1324): avc: denied { ioctl } for pid=16129 comm="syz.3.2466" path="socket:[69429]" dev="sockfs" ino=69429 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 973.330185][T16142] xt_hashlimit: size too large, truncated to 1048576 [ 973.760120][T16153] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 973.986717][T16157] tmpfs: Bad value for 'mpol' [ 974.510046][T16166] netlink: 'syz.4.2478': attribute type 11 has an invalid length. [ 974.517706][T16164] xt_hashlimit: size too large, truncated to 1048576 [ 974.610053][T16166] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2478'. [ 974.749447][ T29] audit: type=1400 audit(1784018024.271:1325): avc: denied { write } for pid=16165 comm="syz.4.2478" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 976.000414][T16185] trusted_key: encrypted_key: insufficient parameters specified [ 976.470391][T16195] Option 'TXƮ' to dns_resolver key: bad/missing value [ 976.532900][T16195] netlink: 'syz.4.2482': attribute type 1 has an invalid length. [ 976.552711][T16195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2482'. [ 976.831074][ T29] audit: type=1400 audit(1784018026.291:1326): avc: denied { map } for pid=16193 comm="syz.4.2482" path="/dev/ublkc2" dev="devtmpfs" ino=3971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 979.520619][T16200] xt_hashlimit: size too large, truncated to 1048576 [ 980.398233][T16215] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2487'. [ 980.697445][T16217] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 980.729793][ T29] audit: type=1400 audit(1784018030.251:1327): avc: denied { getopt } for pid=16206 comm="syz.4.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 981.056206][T16228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 981.535608][T16237] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2492'. [ 981.951127][T16238] hfs: can't find a HFS filesystem on dev nullb0 [ 981.996764][ T29] audit: type=1400 audit(1784018031.521:1328): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 982.151646][ T5725] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 982.296404][ T29] audit: type=1400 audit(1784018031.821:1329): avc: denied { map } for pid=16250 comm="syz.0.2498" path="pipe:[70843]" dev="pipefs" ino=70843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 982.326034][ T29] audit: type=1400 audit(1784018031.821:1330): avc: denied { execute } for pid=16250 comm="syz.0.2498" path="pipe:[70843]" dev="pipefs" ino=70843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 982.361232][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.405681][T16250] mmap: syz.0.2498 (16250): VmData 37593088 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 982.469175][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.510846][T16254] xt_hashlimit: size too large, truncated to 1048576 [ 982.518041][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 982.532649][ T5725] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 982.542819][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.581237][ T5725] usb 5-1: config 0 descriptor?? [ 983.016587][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.063900][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.134840][T16240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.184051][T16240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.476675][ T5725] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 984.713762][ C0] plantronics 0003:047F:FFFF.0015: usb_submit_urb(ctrl) failed: -1 [ 984.875994][T16278] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 985.559907][ T9543] usb 5-1: USB disconnect, device number 59 [ 985.899855][ T29] audit: type=1400 audit(1784018035.421:1331): avc: denied { append } for pid=16292 comm="syz.4.2507" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 985.900666][T16293] netlink: 'syz.4.2507': attribute type 1 has an invalid length. [ 985.990487][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2506'. [ 986.012874][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2506'. [ 986.152841][T16300] : renamed from bond_slave_0 [ 986.263682][T16294] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2507'. [ 986.577911][ T29] audit: type=1400 audit(1784018036.101:1332): avc: denied { getopt } for pid=16291 comm="syz.6.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 987.565863][T16311] xt_hashlimit: size too large, truncated to 1048576 [ 987.923897][T16318] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 988.836354][T16326] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 989.561705][ T5725] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 989.691677][ T5725] usb 7-1: device descriptor read/64, error -71 [ 989.831739][ T42] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 989.962948][T16336] xt_hashlimit: size too large, truncated to 1048576 [ 989.988735][ T5725] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 990.043265][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.074691][ T42] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.113914][ T42] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 990.141651][ T9543] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 990.152641][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.182952][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.225309][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.248098][ T42] usb 8-1: config 0 descriptor?? [ 990.300194][ T5725] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 990.322706][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.351962][ T9543] usb 5-1: Using ep0 maxpacket: 16 [ 990.362610][ T9543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 990.382022][ T9543] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.399355][ T5725] usb 7-1: config 0 descriptor?? [ 990.422475][ T9543] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 990.432283][ T9543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.458748][ T9543] usb 5-1: config 0 descriptor?? [ 990.924730][ T9543] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 990.951244][ T9543] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 990.985631][ T9543] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 991.014294][ T9543] konepure 0003:1E7D:2DB4.0017: unknown main item tag 0x0 [ 991.110757][ T9543] konepure 0003:1E7D:2DB4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2db4] on usb-dummy_hcd.4-1/input0 [ 991.135022][ T5725] usb 7-1: string descriptor 0 read error: -22 [ 991.243655][ T9543] usb 5-1: USB disconnect, device number 60 [ 991.259355][T16346] loop3: detected capacity change from 0 to 7 [ 991.281542][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.291266][ C1] buffer_io_error: 325 callbacks suppressed [ 991.291279][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.315389][ T42] usb 8-1: string descriptor 0 read error: -22 [ 991.332994][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 991.342290][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.395136][ T5725] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 991.418588][T16344] fido_id[16344]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 991.439041][ T5725] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 991.475235][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.487577][ T5725] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 991.498346][ T5725] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 991.508073][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.516751][ T5725] uclogic 0003:256C:006D.0016: probe with driver uclogic failed with error -71 [ 991.530067][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.539534][ T5725] usb 7-1: USB disconnect, device number 43 [ 991.549846][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.557726][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.586578][T16346] ldm_validate_partition_table(): Disk read failed. [ 991.606730][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.614740][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.633097][T16346] Buffer I/O error on dev loop3, logical block 0, async page read [ 991.641066][T16346] Dev loop3: unable to read RDB block 0 [ 991.656579][ T42] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #100: -71 [ 991.664485][T16346] loop3: unable to read partition table [ 991.667089][ T42] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71 [ 991.680775][ T42] uclogic 0003:256C:006D.0018: failed probing pen v1 parameters: -71 [ 991.690862][ T42] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 991.694236][T16346] loop3: partition table beyond EOD, truncated [ 991.709542][T16346] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 991.727239][ T42] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 991.809304][ T42] usb 8-1: USB disconnect, device number 6 [ 992.041984][T15312] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 992.203323][T15312] usb 5-1: Using ep0 maxpacket: 8 [ 992.299678][ T29] audit: type=1400 audit(1784018041.821:1333): avc: denied { shutdown } for pid=16354 comm="syz.6.2522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 992.663531][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.558528][T16359] xt_hashlimit: size too large, truncated to 1048576 [ 996.606320][T15312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 996.656226][T15312] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 996.695335][T15312] usb 5-1: can't read configurations, error -71 [ 998.201473][T16377] xt_hashlimit: size too large, truncated to 1048576 [ 999.970014][ T5730] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1000.194322][ T5730] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1000.239016][ T5730] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1000.257225][ T5730] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1000.273909][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.359206][T16389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1000.384493][T16402] tipc: Started in network mode [ 1000.397815][T16402] tipc: Node identity 82a21d74d80c, cluster identity 4711 [ 1000.421123][T16402] tipc: Enabled bearer , priority 0 [ 1000.466488][ T5730] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1000.552013][T16401] tipc: Disabling bearer [ 1001.675804][T16412] xt_hashlimit: size too large, truncated to 1048576 [ 1001.728458][T15312] usb 4-1: USB disconnect, device number 83 [ 1002.765362][T16423] trusted_key: encrypted_key: insufficient parameters specified [ 1003.532033][T15312] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1003.579804][ T29] audit: type=1400 audit(1784018053.101:1334): avc: denied { connect } for pid=16426 comm="syz.3.2539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1003.621119][T16429] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2540'. [ 1003.706301][T16429] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16429 comm=syz.4.2540 [ 1003.722037][T15312] usb 8-1: Using ep0 maxpacket: 8 [ 1004.047894][T16441] trusted_key: encrypted_key: hex blob is missing [ 1004.462251][ T9543] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1004.716053][ T9543] usb 1-1: unable to get BOS descriptor set [ 1004.822951][ T9543] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.916928][ T9543] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.234378][ T9543] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 1005.314719][ T9543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.405547][ T9543] usb 1-1: Product: syz [ 1005.465057][ T9543] usb 1-1: Manufacturer: syz [ 1005.505077][ T9543] usb 1-1: SerialNumber: syz [ 1005.527124][ T5741] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1005.545778][ T5612] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1006.292426][ T5612] usb 7-1: device descriptor read/64, error -71 [ 1006.300177][ T5741] usb 4-1: device descriptor read/64, error -71 [ 1006.398789][ T9543] usb 1-1: cannot find UAC_HEADER [ 1006.612474][ T5741] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1006.620270][ T5612] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1006.871828][ T5741] usb 4-1: device descriptor read/64, error -71 [ 1007.073031][ T5741] usb usb4-port1: attempt power cycle [ 1007.474680][ T5741] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1007.577280][ T9543] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1007.600991][ T9543] usb 1-1: USB disconnect, device number 72 [ 1007.629422][T16340] udevd[16340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1007.661912][T16452] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2544'. [ 1007.774482][ T5741] usb 4-1: device not accepting address 86, error -71 [ 1007.862845][T16457] netlink: 'syz.0.2545': attribute type 4 has an invalid length. [ 1008.344319][T15312] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1008.400836][T15312] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1008.440188][T15312] usb 8-1: can't read configurations, error -71 [ 1008.855419][T16472] netlink: 'syz.6.2549': attribute type 49 has an invalid length. [ 1008.882125][T15312] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1009.446803][T15312] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1009.460199][T15312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.481777][ T5612] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1009.491527][T15312] usb 8-1: Product: syz [ 1009.514210][T15312] usb 8-1: Manufacturer: syz [ 1009.529076][T15312] usb 8-1: SerialNumber: syz [ 1009.535183][T16472] bond_slave_0: entered promiscuous mode [ 1009.550977][T16472] bond_slave_0: entered allmulticast mode [ 1009.559424][T15312] usb 8-1: config 0 descriptor?? [ 1009.656745][ T42] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1009.673013][ T5612] usb 7-1: Using ep0 maxpacket: 8 [ 1009.694824][ T5612] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 1009.725645][ T5612] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1009.742569][ T5612] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.760073][ T5612] usb 7-1: Product: syz [ 1009.772078][ T5612] usb 7-1: Manufacturer: syz [ 1009.786862][ T5612] usb 7-1: SerialNumber: syz [ 1009.841737][ T42] usb 1-1: device descriptor read/64, error -71 [ 1010.081755][ T42] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1010.214602][T15312] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1010.243001][ T5612] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1010.253700][ T42] usb 1-1: device descriptor read/64, error -71 [ 1010.258289][ T5612] usb 7-1: found format II with max.bitrate = 1025, frame size=32767 [ 1010.269908][ T5612] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1010.302022][T15312] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 1010.333506][T15312] usb 8-1: USB disconnect, device number 8 [ 1010.392224][ T42] usb usb1-port1: attempt power cycle [ 1010.395718][ T5612] usb 7-1: USB disconnect, device number 46 [ 1010.739412][ T29] audit: type=1400 audit(1784018060.261:1335): avc: denied { write } for pid=16477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.821785][ T42] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1010.863240][ T42] usb 1-1: device descriptor read/8, error -71 [ 1011.052311][ T29] audit: type=1400 audit(1784018060.571:1336): avc: denied { write } for pid=16501 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1011.293325][ T42] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1011.345595][ T42] usb 1-1: device descriptor read/8, error -71 [ 1011.845155][ T42] usb usb1-port1: unable to enumerate USB device [ 1012.567881][T16523] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2556'. [ 1012.679745][ T29] audit: type=1400 audit(1784018062.201:1337): avc: denied { write } for pid=16507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.851887][ T5612] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1012.877936][ T5741] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1012.887624][ T29] audit: type=1400 audit(1784018062.391:1338): avc: denied { write } for pid=16536 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1012.967240][T16539] xt_hashlimit: size too large, truncated to 1048576 [ 1013.123256][ T5612] usb 1-1: Using ep0 maxpacket: 8 [ 1013.131665][ T5741] usb 5-1: Using ep0 maxpacket: 8 [ 1013.161513][ T5612] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1014.291789][ T5612] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1015.526353][ T5612] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1015.536919][ T5612] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.550290][ T5612] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1015.559414][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.804611][ T5612] usb 1-1: usb_control_msg returned -71 [ 1015.844073][ T5612] usbtmc 1-1:16.0: can't read capabilities [ 1016.324926][ T5612] usb 1-1: USB disconnect, device number 77 [ 1016.544209][ T5741] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1016.561823][T16546] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1016.658101][ T5741] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1016.703718][ T5741] usb 5-1: can't read configurations, error -71 [ 1054.586696][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.082648][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.729103][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1122.736078][ C0] rcu: 1-...0: (1 GPs behind) idle=d29c/1/0x4000000000000000 softirq=97914/97915 fqs=620 [ 1122.747022][ C0] rcu: hardirqs softirqs csw/system [ 1122.753427][ C0] rcu: number: 0 0 0 [ 1122.759832][ C0] rcu: cputime: 0 0 0 ==> 49350(ms) [ 1122.767625][ C0] rcu: (detected by 0, t=10506 jiffies, g=108717, q=304 ncpus=2) [ 1122.775418][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1122.775449][ C1] NMI backtrace for cpu 1 [ 1122.775463][ C1] CPU: 1 UID: 0 PID: 16575 Comm: syz.0.2565 Tainted: G L syzkaller #0 PREEMPT(full) [ 1122.775483][ C1] Tainted: [L]=SOFTLOCKUP [ 1122.775488][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1122.775497][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 1122.775519][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 0b f9 b8 f5 cc [ 1122.775532][ C1] RSP: 0018:ffffc90000a08d50 EFLAGS: 00000093 [ 1122.775545][ C1] RAX: 0000000080010003 RBX: ffffffff9b938978 RCX: 0000000000000000 [ 1122.775554][ C1] RDX: 0000000000010003 RSI: 0000000000000004 RDI: 0000000000000001 [ 1122.775563][ C1] RBP: 0000000000000002 R08: 0000000000000000 R09: fffffbfff372712f [ 1122.775572][ C1] R10: ffffffff9b93897b R11: 0000000000000000 R12: 0000000000000002 [ 1122.775581][ C1] R13: ffff888035722300 R14: dffffc0000000000 R15: 1ffff920001411b2 [ 1122.775592][ C1] FS: 00007ff0633096c0(0000) GS:ffff888123ee8000(0000) knlGS:0000000000000000 [ 1122.775607][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.775617][ C1] CR2: 0000200000000340 CR3: 000000007daf1000 CR4: 00000000003526f0 [ 1122.775626][ C1] DR0: 0000000000000009 DR1: 00000000000000c9 DR2: 00000000000000f3 [ 1122.775635][ C1] DR3: 00000000000000c0 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1122.775645][ C1] Call Trace: [ 1122.775651][ C1] [ 1122.775656][ C1] _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1122.775677][ C1] debug_object_activate+0x343/0x4b0 [ 1122.775696][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 1122.775713][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1122.775734][ C1] enqueue_hrtimer+0x75/0x2f0 [ 1122.775753][ C1] __hrtimer_run_queues+0x6ed/0x9c0 [ 1122.775775][ C1] hrtimer_interrupt+0x3e5/0x940 [ 1122.775798][ C1] __sysvec_apic_timer_interrupt+0x109/0x470 [ 1122.775819][ C1] sysvec_apic_timer_interrupt+0x9e/0xc0 [ 1122.775839][ C1] [ 1122.775844][ C1] [ 1122.775850][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1122.775866][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1122.775885][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 30 29 f6 48 89 df e8 de 7f 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 8f 18 f6 65 8b 05 ee 38 a7 08 85 c0 74 16 5b [ 1122.775898][ C1] RSP: 0018:ffffc90003d57b48 EFLAGS: 00000246 [ 1122.775909][ C1] RAX: 0000000000000002 RBX: ffff8880b8428400 RCX: 0000000000000080 [ 1122.775918][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: ffffffff8c400f80 [ 1122.775927][ C1] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000 [ 1122.775936][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: fffffbfff2244792 [ 1122.775945][ C1] R13: 0000000000000005 R14: 0000000000000000 R15: 0000000000000000 [ 1122.775959][ C1] clock_was_set+0x5cf/0x850 [ 1122.775981][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 1122.775999][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1122.776014][ C1] ? find_held_lock+0x2b/0x80 [ 1122.776035][ C1] do_adjtimex+0x302/0x370 [ 1122.776052][ C1] ? __pfx_do_adjtimex+0x10/0x10 [ 1122.776074][ C1] ? __pfx_posix_clock_realtime_adj+0x10/0x10 [ 1122.776092][ C1] __do_sys_clock_adjtime+0x177/0x290 [ 1122.776111][ C1] ? __pfx___do_sys_clock_adjtime+0x10/0x10 [ 1122.776130][ C1] ? __pfx_do_futex+0x10/0x10 [ 1122.776156][ C1] do_syscall_64+0x115/0x870 [ 1122.776175][ C1] ? clear_bhb_loop+0x40/0x90 [ 1122.776191][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.776205][ C1] RIP: 0033:0x7ff06239de59 [ 1122.776217][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1122.776230][ C1] RSP: 002b:00007ff063309028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 1122.776243][ C1] RAX: ffffffffffffffda RBX: 00007ff062625fa0 RCX: 00007ff06239de59 [ 1122.776252][ C1] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000000 [ 1122.776260][ C1] RBP: 00007ff062433e6f R08: 0000000000000000 R09: 0000000000000000 [ 1122.776269][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.776278][ C1] R13: 00007ff062626038 R14: 00007ff062625fa0 R15: 00007ffe092b6a58 [ 1122.776293][ C1] [ 1122.776438][ C0] rcu: rcu_preempt kthread starved for 4375 jiffies! g108717 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1123.210260][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1123.220218][ C0] rcu: RCU grace-period kthread stack dump: [ 1123.226091][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1123.239574][ C0] Call Trace: [ 1123.242843][ C0] [ 1123.245769][ C0] __schedule+0x125c/0x6730 [ 1123.250292][ C0] ? __pfx___schedule+0x10/0x10 [ 1123.255155][ C0] ? find_held_lock+0x2b/0x80 [ 1123.259830][ C0] ? schedule+0x225/0x2c0 [ 1123.264158][ C0] schedule+0xdd/0x2c0 [ 1123.268223][ C0] schedule_timeout+0x127/0x280 [ 1123.273069][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1123.278437][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1123.283737][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1123.289538][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1123.294991][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1123.299748][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1123.305028][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1123.309971][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 1123.315165][ C0] rcu_gp_kthread+0x179/0x230 [ 1123.319835][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1123.325021][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1123.330827][ C0] ? __kthread_parkme+0x18c/0x230 [ 1123.335852][ C0] ? kthread+0x13a/0x450 [ 1123.340090][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1123.345277][ C0] kthread+0x370/0x450 [ 1123.349865][ C0] ? __pfx_kthread+0x10/0x10 [ 1123.354460][ C0] ret_from_fork+0x72b/0xd50 [ 1123.359044][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1123.364153][ C0] ? __switch_to+0x800/0x10f0 [ 1123.368830][ C0] ? __pfx_kthread+0x10/0x10 [ 1123.373420][ C0] ret_from_fork_asm+0x1a/0x30 [ 1123.378192][ C0] [ 1123.381199][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1123.387511][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1123.398005][ C0] Tainted: [L]=SOFTLOCKUP [ 1123.402313][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1123.412356][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1123.417987][ C0] Code: 76 8d 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 39 12 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1123.437582][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000246 [ 1123.443640][ C0] RAX: 000000000607ad81 RBX: ffffffff8e891480 RCX: ffffffff8bb962d5 [ 1123.451602][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a3c59 RDI: ffffffff8c400f80 [ 1123.459560][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 1123.467522][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 1123.475479][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 1123.483439][ C0] FS: 0000000000000000(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 1123.492359][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1123.498953][ C0] CR2: 00007fce3d5556b8 CR3: 000000007eaca000 CR4: 00000000003526f0 [ 1123.506917][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1123.514881][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1123.522840][ C0] Call Trace: [ 1123.526112][ C0] [ 1123.529030][ C0] default_idle+0x9/0x10 [ 1123.533269][ C0] default_idle_call+0x6c/0xb0 [ 1123.538023][ C0] do_idle+0x3a7/0x5b0 [ 1123.542091][ C0] ? __pfx_do_idle+0x10/0x10 [ 1123.546684][ C0] cpu_startup_entry+0x4f/0x60 [ 1123.551443][ C0] rest_init+0x251/0x260 [ 1123.555676][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1123.561214][ C0] start_kernel+0x48e/0x490 [ 1123.565718][ C0] x86_64_start_reservations+0x24/0x30 [ 1123.571166][ C0] x86_64_start_kernel+0x12b/0x130 [ 1123.576285][ C0] common_startup_64+0x13e/0x158 [ 1123.581234][ C0]