last executing test programs: 5m11.131708463s ago: executing program 4 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xb}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000048000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000001c00048018000180080001006c6f67000c0002802200014000000000140000001100010000000000000000000200000a0c0ca25b658d3d827a6626abd147bd67d0ac15c115ead7a29248340ec4a44c5d26f50aaf0d114afdf1a1f770a5454b86008bc4ace86ac8fe415afca15b3eb6738ab2c3b0dc1f7e9b6a153ae9c67981dfa040ff979e"], 0xd0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x180) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x763, 0x1031, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x9, 0x20, 0xc, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xf7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x2e, 0x1003}, [@output_terminal={0x13, 0x24, 0x3, 0x3, 0x0, 0x0, 0x6, 0x0, 0x4, 0x8, 0x4, 0xa}, @processing_unit={0x11, 0x24, 0x9, 0x6, 0x1, [0x0, 0x0, 0x3]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x2b0, 0x8, 0x5, 0xf8, {0xa, 0x25, 0x25, 0x2, 0x7, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x2, 0x21, {0xa, 0x25, 0x25, 0x4, 0x2}}}}}}}}]}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r4, 0xffff800000000002, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 5m11.112661385s ago: executing program 4 (id=28): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 1) 5m9.766462784s ago: executing program 4 (id=29): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5m9.363546346s ago: executing program 4 (id=33): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t'], 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x4}}) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}], 0x58) sendto$inet(r0, 0x0, 0x0, 0x2400c806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r5 = syz_open_dev$mouse(&(0x7f0000000140), 0x800, 0x80102) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @local}, 0x1, 0x1, 0x1}}, 0x2e) 5m8.491649162s ago: executing program 4 (id=35): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, &(0x7f0000000200), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 5m8.34797968s ago: executing program 4 (id=36): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000002380)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2b, 0x80801, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000010c0)=@arm64={0x0, 0x2, 0x40, '\x00', 0x2}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80, 0x8, '9P2000.u'}, 0x15) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0xe, 0x100000001, &(0x7f0000000000)=0x7fffffffffffffff}) openat(r0, &(0x7f0000001100)='./file0\x00', 0x8600, 0x51) r4 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002ac0)={0xf2, 0xf2}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) syz_usb_control_io$uac3(r4, &(0x7f0000000040)={0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRES8, @ANYRESOCT=r5, @ANYBLOB="5a0a6160c812fc147475b0f05c53cfe47ab5c321b5d67bf523018e8d75b1e55af20e7af3976f704ef0afc27e3bf12f02062b457c19202d17361972e854b57f72730d0ce8ee9cebaf8892538de5c262ef90517dbe4542ce8a35eccf1f14f68410a282f292576b3b1d349f519bd668ddba962e26bad2a0e6315824ce9a302df06f37ca4f2e5baf4878ce37486268cca2673bc52adab2783345f0f125f9b0da22595a5929899516702d200dc47457efb6da8dcb762fc87cc8c31e418c549b4de00dcbb657e6c80c6c3553db7c59610010d472a833270af1cbe3aae89039c578a816774cbe8400f0bbee", @ANYRES64=r5, @ANYRESDEC], 0x0}, 0x0) 4m52.688456595s ago: executing program 32 (id=36): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[], 0x1c}}, 0xc000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000002380)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x2b, 0x80801, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r2, 0x4, 0x2c00) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f00000010c0)=@arm64={0x0, 0x2, 0x40, '\x00', 0x2}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80, 0x8, '9P2000.u'}, 0x15) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r0, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0xe, 0x100000001, &(0x7f0000000000)=0x7fffffffffffffff}) openat(r0, &(0x7f0000001100)='./file0\x00', 0x8600, 0x51) r4 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000002ac0)={0xf2, 0xf2}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)='v', 0x34022}], 0x1000000000000364) syz_usb_control_io$uac3(r4, &(0x7f0000000040)={0x14, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRES8, @ANYRESOCT=r5, @ANYBLOB="5a0a6160c812fc147475b0f05c53cfe47ab5c321b5d67bf523018e8d75b1e55af20e7af3976f704ef0afc27e3bf12f02062b457c19202d17361972e854b57f72730d0ce8ee9cebaf8892538de5c262ef90517dbe4542ce8a35eccf1f14f68410a282f292576b3b1d349f519bd668ddba962e26bad2a0e6315824ce9a302df06f37ca4f2e5baf4878ce37486268cca2673bc52adab2783345f0f125f9b0da22595a5929899516702d200dc47457efb6da8dcb762fc87cc8c31e418c549b4de00dcbb657e6c80c6c3553db7c59610010d472a833270af1cbe3aae89039c578a816774cbe8400f0bbee", @ANYRES64=r5, @ANYRESDEC], 0x0}, 0x0) 4m29.988876787s ago: executing program 0 (id=170): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "cb258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) 4m26.752491513s ago: executing program 0 (id=187): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) (async) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r3) sendmsg$SOCK_DESTROY(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="700000001500000307000000fcdbdf2501e85b0001009f98c4828b11597334c8ea883c7b4d07f96cd37c46488c47cac3e744afd680f1c88473ea644d06e511d91081781ffb19a94a54dec7e40589b83da0cb05c9be43ffb977453c071c8aee8505bead8e097faf450df76ce0dd00000032f30229549020d1763c60b6ae5ff0015db75013054d84506ff9df7d05117110596103bbc2553d180f002f5aa5a42c08a63ac9f66a6d9a88b7982f32"], 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400301, 0xc) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) (async) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r4, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x7, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FREEZING\x00', 0x9) (async) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180)='FREEZING\x00', 0x9) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 4m25.66766497s ago: executing program 0 (id=189): openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0x5, "2a161d2d71"}}) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000300000020392a8c3f4000010203010902a500030104007f080b0101010a20020904000000010120000924010700063500b20724dd04cfa80a0924070503000103000c2403010403830500150022102446054d2fc0691e13564c8c020101040907936f0000000307010904010000010220000904010101010220001024010505000400000005050000004409050109000206998008250101181c0000090402000001"], 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=r2], 0x24}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058565d, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x801) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a040101000009040100000102200009040101010102200010240101000101000000020300000000062402010210070501054000010825010000000000"], 0x0) 4m23.583501827s ago: executing program 0 (id=198): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="58002000806ffa3628a8d236699e9eca962f6501027bf4d90e45670c992d21cd1eb32e04816d590143f666edcc8ad46373f1d55d0edc693405aa1491cd799c3377fb0b9d3f8ed0d88233f794115e49fa934c60ec4fb8bc6c2c9893f019163e51b073cbe06bae2b44c6fe", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r3, @ANYBLOB="2b000e0080000000ffffffffffff080211000000b92e35ac622e0000000000000000000064000b000301950008000c000800000008000d0000000000"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$inet(r0, &(0x7f0000000480)="ab351b238086bdf5a25898ef36f5bc377b0f9d3c06df0b68afa59ef106c19d14c2e0b506f01ed27ecc38184c43e1d4854a9b68d35732b2ece9b4ae807d429b1bbe3641c616231c3e6353be98a05adbc7c702441f95c6c39c0b173cc36504bbe76e6774b092142e481f4c1b1df1459cce223407cd4e41671f763c285893e0bc09e874f61ca7ea694fa7cc4c122ca61da0", 0x90, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) getpid() setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x80, 0x4, 0xa1, 0x97, 0x5, 0x7, 0xc, 0x21, 0x80, 0x3, 0xf7, 0x1, 0x3}, 0xe) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000280)={0x9}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000011c0)=ANY=[@ANYBLOB="2000000000000000840000000200000004004900c004000002000000", @ANYRES32=0x0, @ANYBLOB="30000000000000008400000001"], 0x50, 0x40001}, 0x0) 4m22.025995732s ago: executing program 0 (id=209): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)='|', 0x1}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r4, 0x1000}, 0x8) sendmmsg$inet6(r2, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="db1f00d608989c53f4aee0b60e8ce7ef2b9f1c88972e370a33fd463bf2f11fa395382b7fa6a582b644b9190efdc12b27434cebbd8c37822900b432a1e9406c745c08237bbbf0a589400e931e288c7020eb8d2ac516", 0x55}, {&(0x7f0000000440)="549cac65e6786ad82a84515185600984f451080ebf5df00f474514b2d6f77277295a8b6e020f44e167a9e8296e2bd665360c725ba570d62abd2c6e976c50c5d5d70f9644b99d60a49ded049ed05cbc9fcef9850c10d903bd0c7be81c9da8f2f547b7be0c65b65f18424e3030e207f7062b3530c1fd62038aa5e4ae52261efd4dd014f68ce709c79de5115551c8133a4043cdf88674ca2b5b4ff27c660fd294ac24f21432cb097b77b83792ea3b79aaebc682ea19894166727f5c187c3e08ba05b7306306accad133037d2ed2f0127e092d75f42a7b73d891e3dc184b", 0xdc}, {&(0x7f0000000640)="570c4e5b7827c2d241bedf3f5447169c3f2943fcbc1f47dfc22c0944e8f99f937677ce58575bfae935623fa9cb59045a49badcf8df0133473ccf852267a68bb2cad431f3d72665d216a1052ca37f26de2bffd89fbd871e69666af4194eee95df1698966092f11da0216222ab81b206053bbbc4ad9c83b0d1f183c43ceac2d2cbbfda4be7a23886d48ae081f83c720cf495f88d422cfe16b190250325f0d156a2dc26bdb3702c925ff58b2dbce7f77d8d85c61fcc4c03f47aebc55612c36dcb707f420d89d4fce018a8d61bd159c838df19898cb1c0dcfe6f24d9581d7ce282252a55e831d2", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000002380)="b9c615adb435cca0e14c99165991425bf6869feb5bc91d16faaa1e553b9ba9b8885e3132b577ed920350b853789a3c023c2b935ea8b2b9b98d4523acf27f4e45df6667b26b934bf4a2e10acf78417923dcef99d0ddb6becfb3766973d20a95ee7e83108308969fca595741c7f50e9d35d0462bc65c295881993cbc4dfd962af204ba800dd23f3721fd98b3f6121083f68f408363a4a8620d535c1b29fbbe546f4a2b0b7681251f3ecc7b782f3df90e2942f9e737bb561ddd15b4b6b5ece9448a616a5221828a7ea71dfaaa7cf64f26b41375972d28cd3db598fa5a5625b6b00f13f7d6c194f39cc639e8a5b0ab06d35935e856555504eb25395adec288f6ff8e99de0119f863a5dbf4e3b18cf049d3b70379a3131cd90f25bd5e2f1c3b83e72b8cc88226def21b7824f92cddbf8f4271315ab0ba1dcab80dc1068d3491baacbbc651ba06cfd8bf3cfecce1c0b25124e28f839f25c7d4e2ad533f8fb14c514de63a86e4f06e9799ecaf00f7ff665a2fed73e567536d1d6b1e929a51d3d682559d4dbc174d9d389e53866249e58ff31a1832f453d299e7a3c4e4b673b546f2f0b670183e77f56a17f07c279bae471ce38124d34b6cb40dd5ac278f173c1296d07653d60ed4c1b8ccf2f3d7ff820bacfa26e4086a7bb79e5a72dbed2e8fff1340a9b158b0da2541074be22c160213fea049286cd8da7fb115968c622063040f9b2fbebbd3bbef6eddb51a1c7a082cc76fc7a8348c01b71d87631363e56cba171a1b501af0e02bcf4c1aaebde108a68de36ed5bbfd8037776f1b265716ace9faf8dfc59235cadfecf04f7fb81d03f112cab7c0ff3075d58ffa492652dd110adca2dda9a430535b9474c4faed55e8428fac436dd9723fb98cae9396cd56339b1012b84ba5181dcb5baf6e6f4aeeca6d138592c8e11abf0057f22c99aa0f3c64dd39f97e99a7be65e4dc45a5ef85ecf7c015cda60ae91b2eb439cb67e69b6eb9dd0b61043557530353d72e0468560d4bafcca1bd7f9c6afe1a3a662fb025fc19369ffee064153cbbeec0570b8fe3409f8309cfe934bc5583874e5ba8fd5612c1686dea7433e35aff9ff0e21204915e5c1239de29a5f38f110c4bf26ad1d167f17152d032fa550e8b36c4a45ebddfdbbce0cc2d90e84818ad6884e515091407be569cf665ab7d9274d33ea803cc08c1b3bc542dc81ce88acfcb1229aa5e7ba6f9f1a16495c11829d97b6bef2cd8decd5add93a5574cb84d2c6bb932222909916b2aba380cef005032d404d28cc3ab15c2de814412fc5f35e783687174fc7f80851ace4ce383e8e998bf94f0f87a6bc18d89c0c97c1ebe6e9247922f8535a0d23d44a64f538afa58b3c7a1e8cb5ee501c8e9cb7f476c89c4716f726ac9563c2c8fa14c1a5dd4cc3aa39c6dc1c87995b4f0334fd1f33437af245eb2a40d7e44293390397ae728acb1bf9a77cb8344ac9e2fa5e992bdbfa09767d44c17712941a4f52d888cb4377ab447deff3fca6953dd13eb9737d99d760cade6a9a0918d4cdfeffc8a7d8641c26d5ab5b367122b0b27055f9fc5633e85fc438969ca0a242f0cd14eec12e99bd7d7f8ad802c452566a86d69b8499822c3d04661de7e52124499e574f9e4c0482de31c798568f00432af1e4f988ff4097037c8a1f02a2aa36f9410bbbd47d647c63f22d7d3e72a92ff70934fd18e4b14f9be799308ba42d58c759e2f66696ead711902070c8d1dda1de261e9881429c5c9b4e4625b37b621928112dba116245f8a541f20dde2b4b820a93f153315fc7894cd9195c9076bd8b5fa922a2cce6a9af29c9401a45893936a3ce9485ddf84d043da66f966deb11fb2657b3a06eec71413a4eb3f035080c7368c53c1ce460b51a179ce81442fefef656d13b3ea789befda32fb6d3eb42f75cdeb62f9cc73b2429745f4a8105c64683ecd90734913f94699859c346c7bce9c828b1e0a2d15b8dc2ae8e4449febfd168c5719c039eb44ed314e060b063d3b32ee017ab1a28acc0861da4ba15e9a71040bf106bb45fe3b719ce40a0649f4f73265235164e88563bed2960a35007e46a539f96234b36750643dd239e482359221a3e75332d5beb627fa9d84bc3a2eb7266c890d1b2295042916fb89e935e8fa6237555f931fb312849571d8889152de3338a5c30e611698e4612c8c2586c182d799428352f3a9ec290985e427312a8d3365a8819097b1697f29f7a207e1323d96207a4e46ba4e5b50d984135da9cca6bcf4c62ea0dc2c1ad88c45163c420da885a456a06384deacd39eff91ae124c33749f007c9c73b39b5ef456e06c7394a010066d72790606d39add005ae84bdda4104077b8a797e24d329071c6e4836a5451f4a043b1f71388bbfade35b0ac98ca8711ddfe042f28cb8f76bb8fff0870c67c2c1150a580a93cc16edf6e73d15319263e36723e76d2203a96cb438b6246a3ac4da6621a7e4c89133584341862d547d7bb885c4c169507e30a16170a242a32ead68bd9a5ab169f7460df9c7a135f8b6af647101cdaf6fbd9c3b849ab70bce5dea4cbf5959dad2a91a2dbc095dfc8960e4c3872eabb62565d420c8df1b44e05ab16c69109a4c07733340d59fd3f9853d0183355f05ddeaee5a4f9a5f03f5d84c76634db61b6d9a4aea51ddbdf43aee55e7f3780cd31ee799f6f33003606a5df9db08849da7bf884df395b50474b24b3527682a87968cd1be63ec8405d38cba5db9c943987eda334efac5ff30b137259babe08532e2a930262edf64c7364dc0d987374d6ca78e16a63d56a63a05b6cd9044abc8599b97aefd6460b13dbef9ff09bb15d419f542eae4a237b0fe376605d300467679c06c33aba623c903a559d0836d8353afed6e39e68be56b775a4952e3edbdc461ea3e6883b596ae6e66e0a92f18d48abf9a23eb5ce70ceed4a2ab6611ed70600a9fced116864dcbf43cb72ea3af69f6a47a9728950fbc7c8c71f6c75713423e2b39ea8ea8e2ebdf68fe639fa8b2577c675a4706343577c8237431e91bd6c2a423d774ebd06db324361a0c6857fa0038974761d178224545a326093d945453119e18be577add7dc62317989bbd4ccc5c962c7c31ef56b5126e92adf8899a1cb3416b4087cc034c29b3518bcf8fe105f6bd70cd766a0617ea45ebf9750ac99ef104a7e14405fbab6d7d735fb7ddf72bc368ba08c14ccd6a1f35fb894b030136a05d882a2613fbcea5f934dcab251d047185eaf8e7e349998ec3cd220251a13d63a6926a27314234e55bfe66b125b502c82c7c8e0a7f71ac8deb73a8731d127ff8722cbc2794b99b4594f90cd62afc53a217ff5860146ec98f422191349a5c252ec81ddb055936712d2edf152564cfc0dc98dca3d1d4a6dca380aee72a4f1d33594a16c9f4a27fca028f2f328fc358962bfdfeaa2e060e19cc8232937d5d2b713ee45d6cd7b5a8fb1450f81653eef0cd73bbda10318abbb30daa1cacd59d30722b5264175a8c3ef10426647afa6eecd7d2cebef58b721de10a1dfe4fe1a7735912c9dc68576d5d462b4aa039f350135e2ca8c4203f379ba0afd22fbe84df3611a359e58bc73529517ff2c2b5d6f4cc44df1f37bb6910d9eaff57306a785715a237543f1b2f16b2ae50b5018e0b8988feaa1b24a9106497f87eeb12cbf705c17d5c53b41b7b6ed022ea3ce572a23e22f689fdc517a0d9cc6a997cfb0eefd67162cd727422f4164837dd349c0214922dbfc50c3657b1913ea1f88778320913229432c6c73527876b553b0a6158063323a7f2f36e0216ebaf5e9ea52a85447d43c8a0cbccdfb0b453ca1df93951471cb72225b97b75f1e77225779657bf6d77313ef8bda668c914769b1c0c0dbc5587e4ace985996a4b9ff4071488684d96d131810baa439ad5f9254217142a5697dbb7abf05a3bbde089b2a2e94153edce47b334ec35572bab1cb551c3c76acb7bc1ab82a7cfc6177b2dea4bb012a0cb3f71117f963a5fcf777c6d03ae50e2ffea596d0c5fb821a585352eace44cae8698c51889f341fc68bf0c0ff565f23aca99fe2194e6066c756848d8ff68d5b62075a374c3441217eb2b9ca87263de59a6240ceae2f8a86b6c064dafc6fb9a669e53c5cf815657766d9903d613fdf6fe2957be15eab0af44c1a4a933f940bea2e46518b31c2a1faf9596d086e4f397b200b040c0e5d090142cf42f7de30c3f8a6deb9331d5ea338470df38689f4456ab8d243d381dc7c551784d6ff11a1bcae327fb72cb4de6f04f9e0cbb5a069633baf800ff676d8efa4471a0d412f1d449b797a3c35cf6904db713639974d6f3d157b7dccf1526e0c65598b656cfb30be0643058ac33d6e51bd720a3aa1efe72148d9b2a2c58e44e453feb31956d67119ca0d4a75db27fd62c207902d27b59f7947691d6ac234522c7722ba04aacafd795a0cfa9d01fc4eecb9233ba819a48e22b9b9d2541f843e28bcd80fc058797d99438d20d39af224727c38a72c8ec008c0d286227dcb4799c8b0096c220fc450f10b2e52f293b624e64cac03084cc2e2626215522980f4d19ef37406f534b1061fe9691e721a38e6854c318433c574b17a841af00195306e2209b46021dda5126cc88a49046c17ae48f0a890fa8c53c248d12f96b2f2abe3155026679bc19f8abb0c90f6554b818294bca0525f49e20eb0daafea45ae572a00bc3a8fae5cefc6d5b90c52f0dfe0de4873f1ebd2cf1ebbf09acc9c83d491d5c7e8612c0a7a12376da52246c6bbd548e81e005e466e7848b4bf348b06f09a2da11ea1102c585549b4b7244e999e10f8a89f31d3855ac706742612c815552c784b4e30d51a4dd5a5b92e6cb1e36c19e8e424b450d590925f8bc94133b7a45feea68cd48bfa165d04d2a83c1374066a7cb98f3bf92c226624749eb5ce340be1178baea230909842503ec5696f8976b535f31ca52ed17c5befecb94ba9ec214ac36c3b0c955f30352e57e469564df9ab96e688e2449e821d84814e5d062a631721a3950bf2243a205ead77188121e4b44ddd0ea9946f0a10d805dc18940263", 0xdea}], 0x1}}], 0x2, 0x8800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r7, 0x0, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0xc80, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r8, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r8, 0x0, 0x80000000, 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x6, 0xfffffffffeffff80, 0xfffffffefffffffa, 0x4, 0x6, 0xe, 0x2, 0x1, 0x4bfb, 0x40000000004, 0x7fc, 0x2, 0x2000001, 0x7, 0x0, 0x10000008e], 0xdddd1000, 0x328112}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x1, 0x138) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) 4m20.80409721s ago: executing program 0 (id=211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 4m4.707142578s ago: executing program 33 (id=211): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 2m43.628281721s ago: executing program 5 (id=536): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2m42.980118905s ago: executing program 5 (id=542): openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0x5, "2a161d2d71"}}) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000300000020392a8c3f4000010203010902a500030104007f080b0101010a20020904000000010120000924010700063500b20724dd04cfa80a0924070503000103000c2403010403830500150022102446054d2fc0691e13564c8c020101040907936f0000000307010904010000010220000904010101010220001024010505000400000005050000004409050109000206998008250101181c0000090402000001"], 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES64=r2], 0x24}}, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x96, 0x0, 0x0, 0xa, "fd0f09a2"}, 0x5, 0x2, {}, 0x80000}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x801) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, 0x0) syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 2m42.457727938s ago: executing program 5 (id=544): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x21, 0x5, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x1000000000000007, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1, 0x100000001}, 0x0, &(0x7f0000000140)={0x2, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xfffff7ffffffffff}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x88000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000000100)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) getpriority(0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m41.422020535s ago: executing program 5 (id=546): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000380)=0x5ed, 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @broadcast}}}, &(0x7f0000000280)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r6, 0x100}, &(0x7f0000000340)=0x8) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) r7 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) r10 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r1, &(0x7f00000003c0)=""/247, 0xf7, 0x12042, 0x0, 0x0) (async) setresuid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002bbd7000ffdbdf253000000008000300", @ANYRES32=r14, @ANYBLOB="060036"], 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x2048004) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff3}, {0xf}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 2m39.612276969s ago: executing program 5 (id=556): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000300)={0x7}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) syz_emit_ethernet(0x42, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaa0030ca40090067000002069078ac1414bbffffffff00"/42, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7cc20005907800050002040900010000"], 0x0) ptrace$setregset(0x4205, r3, 0x200, &(0x7f00000001c0)={&(0x7f0000000140)="bd22dd5b99edac93e00b708378bea2cb0ecd3b11280828bcc3dd1061c00625ff7d51f5110964af05c1cd2bc8ffecdf5c63e5978293acac7b4151b18069467529e170a7959fc3eaf4896162c14e6b79267e1f2154", 0x54}) write(r2, &(0x7f0000000070)='syz0:127.0.0.1', 0xe) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1b5b, @loopback}}, 0x24) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x2, 0x17, 0x9, 0x0, 0x6, 0x0, 0x70bd2c, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x3c, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}]}, 0x30}}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x1ff) mount$afs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000c00), 0x0, 0x0) 2m39.59104751s ago: executing program 5 (id=557): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xe, 0x0, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r4}, 0x2d) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffff52ff86dd697a262d00303afe00000000000000000000ffffac1414aaff020000000000000000000000000001020090780000050062081331000133002001000000000000000000000000000200"/102], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) 2m23.666796438s ago: executing program 34 (id=557): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xe, 0x0, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r3, r4}, 0x2d) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffff52ff86dd697a262d00303afe00000000000000000000ffffac1414aaff020000000000000000000000000001020090780000050062081331000133002001000000000000000000000000000200"/102], 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000004240)={0x2020}, 0x2020) read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020) 15.699096357s ago: executing program 1 (id=948): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380), 0x0) 15.649389503s ago: executing program 6 (id=949): r0 = fsopen(&(0x7f0000000300)='ntfs\x00', 0xe7d30fb592d0081e) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='iocharset', &(0x7f0000000100)='iocharset', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000186dd60120008f9183a0006d1182c5cd4fe80000000000000000000000000000d0000000000000000000000000000000182009078000b36c0fe8000000000000000000000000000bb88e229d027e0a68be39dbdfbff42e0376081f2e00282b13435"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x3, &(0x7f0000000400)=[&(0x7f0000769000/0x1000)=nil, &(0x7f0000154000/0x3000)=nil, &(0x7f0000873000/0x3000)=nil], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x25, &(0x7f0000000280)}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff5aeadd61229e86dd60cb800000383aff00000000000000000000ffffac141429ff020000000000000000000000000001040290780900000060f9906308003afffe88000000000000070000000000010120010000000000000000000000000002af340000000000006c9a7f96de1866bc817a9ba5ad34b733a19e58a6"], 0x0) r5 = socket(0x40000000032, 0x6, 0x8000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) connect$inet6(r5, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) r10 = accept$inet6(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES64=0x0, @ANYRESHEX=r2, @ANYRESDEC=r10, @ANYRESHEX=r8], 0x50) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) 15.646855717s ago: executing program 1 (id=950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000008000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f82083463ddd05b6eaf50000000000e9ff00"/38], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x25, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000c5b700007b8af8ff00000000bfa200000007000007020000f8ffffffb703000000000000b70400000000000b0b53de005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xe2c, 0xf, 0xfffffffa, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) 13.630513822s ago: executing program 6 (id=953): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000001300)={0xa, 0x4}, 0xc) 13.466785352s ago: executing program 6 (id=954): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "cb258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="6010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) 12.63107433s ago: executing program 1 (id=960): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6, 0x7fffffff}, {}, {}, @result={0x0, 0xfffffffe}}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}], 0x54) 12.458050908s ago: executing program 1 (id=961): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) 12.45749587s ago: executing program 3 (id=962): connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x2, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x3}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) (rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@local}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'dummy0\x00'}}}, {{@uncond, 0x0, 0x2c8, 0x328, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x0, [{}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}]}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x77c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffff7f}, 0x1c) (async) pread64(r5, &(0x7f0000000100)=""/65, 0x41, 0x3) (async, rerun: 32) listen(r5, 0x0) (rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r7 = openat$full(0xffffff9c, &(0x7f0000000000), 0x101080, 0x0) preadv(r7, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000180)=""/47, 0x2f}], 0x2, 0x4, 0x6) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) (async, rerun: 32) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 32) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000021c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRES8=r2, @ANYRESDEC=r1], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4000804}, 0x44001) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 11.414915892s ago: executing program 2 (id=965): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000dc0)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1, 0x5, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[], 0x0) keyctl$revoke(0x3, 0x0) 9.367675871s ago: executing program 1 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x900, 0x24) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x0, 0x800) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r1, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery', 0x37) lseek(r0, 0x0, 0x2) read$FUSE(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x288}}, './dev\x00'}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="020000000000000000000000000000000500000808001a40000000070600124000020000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) read$ptp(r0, 0x0, 0x0) stat(&(0x7f0000000280)='./dev/kmsg\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000003f00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file0\x00'}) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r8, 0x0) lstat(&(0x7f0000000340)='./dev\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/kmsg\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000) r11 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000500)={{{@in=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000600)=0xe8) mount$bpf(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000240), 0x4, &(0x7f0000000640)={[{@mode={'mode', 0x3d, 0x8}}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0x7}}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, r9}}, {@gid={'gid', 0x3d, r10}}, {@uid={'uid', 0x3d, r11}}], [{@fowner_eq={'fowner', 0x3d, r12}}, {@dont_measure}, {@flag='nolazytime'}]}) 8.05147906s ago: executing program 3 (id=974): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000dc0)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1, 0x5, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[], 0x0) keyctl$revoke(0x3, 0x0) 6.776229129s ago: executing program 2 (id=975): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) (fail_nth: 1) 6.762641715s ago: executing program 6 (id=976): sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0xfe38, 0x0, 0x1, 0x0, 0x0, 0x200080c4}, 0x90) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) sendmsg$SOCK_DESTROY(r2, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="7000000015000003072501e85b0001009f98c4828b11597334c8ea883c7b4d07f96cd37c46488c47cac3e744afd611d91081781ffb19a94a54dec7e40589b83da0cb05c9be43ffb977453c071c8aee8505bead8e097faf450df76ce0dd00"/106], 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x400301, 0xc) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x7, &(0x7f0000000080)={0x10, "14a6c62707dab7299602abd83463604d70b41d4008e300"}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="23c9", 0x2}], 0x1}}], 0x2, 0x20008050) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="090300000000002a000000000000"], 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x80000004}, 0x50) 6.701703111s ago: executing program 7 (id=977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd00, &(0x7f0000001500)=ANY=[], 0x0) 5.774931364s ago: executing program 7 (id=978): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x16f) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) kcmp(r1, r1, 0x3, 0xffffffffffffffff, r0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x8) syz_pidfd_open(0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000068000104000000000000000000000000000000000800010003000000060003000100000014000200010000000000000002000000000000001c000c80"], 0x100}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./config/nullb/nullb1/memory_backed\x00', &(0x7f0000000240), &(0x7f0000000280), 0x2, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=@deltfilter={0xb0, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0x4}, {0x0, 0x9}, {0xffe0, 0x4}}, [@f_tcindex={{0xc}, {0x80, 0x2, [@TCA_TCINDEX_POLICE={0x64, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1, 0x8001, 0x1, 0xfffffffe, {0x9, 0x1, 0xfff9, 0x9, 0x5, 0x5}, {0x6, 0x2, 0x1, 0x23, 0x8}, 0x1, 0x9, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xb}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x357a}, @TCA_TCINDEX_SHIFT={0x8, 0x3, 0xb}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000070}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nullb/nullb1/memory_backed\x00', 0x2, 0x0) 5.599750061s ago: executing program 3 (id=979): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000009b40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000000680)='./file0\x00', 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) syz_fuse_handle_req(r0, &(0x7f0000007b40)="03a22d23cc46b5d35d9d123fa21ae52d727400e9fe390a159493e24bcdbe7515008e2e453169c348b08b788685d6839b7ea717b5473954cd4ed051b346d03fd2b7d2bf018e4d7d250daef7b38bb042761188419b919e883a0a3dd3b538c9c2b60f1609ec8c196830ed0936ee4973a9c8bdee59e022eaa430ef99b19f96784a131a5ef27409e4f282a82f9f1fcaf84a736cde74b6549517fa9c8a4269e9dd80f1e024361ed57295f7f7884bd5cd0afc025852cee7742e7770c6c1a6622782c37ae8e86733b32fd32357f7b52664bb057b731e66773a02b9f8f281fdb023e07886c2497cefadf8d54399a4e13c717556380bf27c55b8b53590ca7408b4c2a41f4c385cc2c0e14ad42fc84bdd6ef63b74ffa418dbe33f28328953da921a9ea410218dcc6444f16844679f76ec327115bf72ee5d7a294b52dbe6a95f9b366a3882e4f81268f7186766a2c388eb92e1d52c0dc929601529ef4d9fc6a8f455a7981c1db4c1456f81661cd015ab6c5847a8a68d9b545292a5059f1e7608bf34d2cd76ed89b8689ceabeae5332977ef6f6aafa8f27ce7c8da0a181e8f1ae6f116e3c92524ffa2733270cb6161604112220fdedc56e07689e0a042a278a0c0656172691c5055ad95ec962f1907537cdb5608b67ef296f4994a3fd2eb3a83c84b4c6552448ebd7eb5d717baf5914f42f96bb4626ffe47e549ea5f822d846c363dbcd09767f1e37c3265ef7c377d03b3803909ff9600e02191d2ff69ef3a88509a4890198a130dda64a689f26e090121505f0efcb5659469deec157f9901d883478aeaff424ab57c18c60d1907d9b86c391ffd01e73b2eddff8c4b5d8875e18a10c7c13db2fb0f64d2c5cdfc2ab3dd9e796708dc58e92b4aa44a88c7cb164f8f63a16bdbea71cca9983fb694d50a9ef8f440a5669f595a06eb0d53f8cfd24844bc5c7357cb261e6d00ada1dc68e97e862fac1b0b2a4db9096b8d1b046c053eaba49ece3b3fcdc77f3f5b773341730c0fa4fc9c0ee4fb35e3bfc486d92e12927d7642daa9e824e1ce35379967fd6e3475b4fad10c891265f8e40f288754ce3565e19743b3806241a9c29113bf01961929931e6c90cced2ed1f3855d5688a39779d5f85531ae1487536cc4d021af5eb5dac6e5f8e7c0cbf9754e14d219719628dc338e568768da0d6354be7969a9335fec4a5ed05e7ff1728ad7a4295625af1a33a85351e1d56cf74adc04399e5a0d23c869848f01280488bd98d558e691686cff3863a80ae535af6f99cadedf41b28502a674fd630ac0597f3e4d6d650f7af4426f97c8d3a6107fe9887173be14f850f162d9bf34346dcc2fcf9fa27bd8d378b3e0a92ddce67652000181fed815b6bbf4202f293704f502e0999fa5691ab1ff0f5cd1d40ad77071cfa26baf7c1c578a81dcd0e2839c650cbaa84f4fa7f71855259c98b3f63178b4d92b64ca89f8c50f5797e166100a60d8db9a62d3b637b2667e8b057778f1129ac4be99b4665ddc2062cfdebed434451920ad9ca7bb6c2326f1272c384d668e3abf4c65cfd7bac0d92247e7f0c685a0bf574da44096fe15798da92af64850637da4f0b71060d339529a7ca252f7f2b59e892ddb6e18c8d26dce01099e091435deed6422c7c6ff9289bd5e37605d60899f8e5bbf3a67e11a45cc8d91744fadc04c72354b66653eb7d73d525ca9b00ec4ee6f65d3cf0c34068261b92407623f33c2aef59d9bdd3fa661f22ae97586c601b1065a8a59b9fe55462fa59bfb03a8d19eab2050247a63b9aaf3400238636431876cdd06546f4e549c36de4038bdb9bad20d684a1bb89165ae84d1a7a3de43ea7220664679269f2770b3f6561ca5edc1e0182701a6252933c21b7b27045c6437065a894572d278f04996b5aa78a6f926135e684704a5299098ebfbf828b15fcc872ebe74ed2495e026cab99bab7138c75a71e86163523d073f0c9c05cbb3358f35613a4e1d99047aa33892c1e4011c7a08fb5dfe0d0d777ebd24b409e15ec51dab1d02363c495d187ecd4bb4cec9277decf44cc518e39b3106801b6deff431104b24165ea19c1458fb8f90b43e7f2d061fca639f62191967ceebe638352f66b7f16b745e743d359ca5aa55c2f45acc75715ad129599b7c7367eca492fef5d3f240dcf88dc523f5680c0a9b18d5de73d41b1fde40b47957af45ff009d846d1b75da91ad0ac5f49c0a299f2dff848a44a5fa83a2552e8eed4b2ba0d31f9d21aaf0b279a7cc7ab0d728332eed4f31ebdce606b8b628b18f3a03821667982e150bf5d0bb9da7eefbcd8ec62574affe6a3a14a5a293790ee5e99547bebc2fbbb5d21192e4e4cc179b049375ca02038ebcd5c043f40aeeb47b7534dd63174196184625aab69805b969209e7fe440ec4757ed0fccf772d21de70a364ac6a53c7b4479e6c53aa89d6c070914bebfbb11b64057bec54beb36cf74c576e36831f3ac2124bb8f3d95d1a83aeb7725dff58441496545a5558e4c1573dfcf59f3e1c62054d46c03cd0a1b813ab5b23ff57e18d29cc6206486186ef303dbdca56e5734d8e4a3624370f39d5cf87fda110f23180fb3a0ee14d02f48e7f59afdfc4478a3865a8c05bc450e0c0f1ce4236ad13cce233603399bd2d9dc46ee7a721b832115b2961d5442d3bf1a980fe3c64a60569055e7cfde0338f5b96080616c0397dd288e4244bc350bf90caf9e1d6a493e14d8c59987b229c9f68af140ded6aef0e1165fe2e3dc2add397dc12d7bbecb831d8fe88f3e697402fd9caad2f9c97a6bdc79ada714643e7b6c6ff6a3d73100f45250adb40bd458bd9c0bef991e48115ab576c4ebcf9d2fff89f8cfc3ef78af763a15f4b8ab3da6ed3ba2ef1fa9a89be9d9d6e316671062b79bca85729c4e8c95a8a09f57d2b1504092230f2c7bcc425b636e0d13bd11447ae4b9fb075cd76c361295a3f5eac32cb70065a666504ec5f7475837667ba259992ea3762d9230a852076cfe42dffd608d6e67978b804c101f642bc40738440694509ef04c56768cb6ac06f4367a287421247383ffbf39c55afddb0d615daa7fa033cbadfc8a8afb319761a2d2e83f3fe751179b9cd9490b2c5da1fa609a3a3bd186614bc86911f58c4023023cd8ea94d105fb0cfb30fdc5232b4ba4f4850f1501aaec986851cffeff1bdad3e7bbca16c1f46b45e0391eefbd140e068fc5aeb93d89a3a6f42c9402235e3423aabc03812ade3e7444f8ccebb6c7c03e3ade45f44ef2e50c0fbe298cecc6112ec0162407e589a9b19fa8d70531c223e5093e97ec08ee0e3a08312a7bfd6d19be54c2825d2fa1a43ec07e303fae29cec6d8a179f0c288b89091dd861ebb8b88a1acbc2107d7d5341755fcec348a1837c1d2bed3ca6aa8ffa25d3dc0419e2846c88a279cda1ef35392dc18fbd4e3eb74eba798bda967be716c03d9c048e862fd9ebe5f728a9ef92bc148fa86df73d51dbc3ee894744de360248fb0441a37ea80e7fdaa260d05addd4fb64a849516a1f2b91f912bce53eb9e0ae0c17b5e2bc3712374c288381abb1b6d09d46557dc179a1d2893f0c60fde93f9634a825cf485e9a78e41ef68bfc87af475cadb84f349be271776d6d0ca989f6beff3c45ff946b05f6ca45248e1eb9dc805d92885695673b84324449f6445704d98c0a9cb67927fd7f0dd97458804cd9748505275316431f57df1f271e72871781e492db669c41e87621658673c6567d84a3a696fe8926e9f08bd1ed8a3a26ab6a3a47971ed2ab78f94940f246c9da82c1e19802ba50c255a85ab7c17bed8ee5aefa38521f7799f7ad66ac564a9dd64d7bc52afc78040aa641a50a91ba9427f49538992d8e6e0d3608c3c4921e2a58aebb4dbd0537e53be881041a0ba6da4ae19a62cc74b412da6292348054ce2c77f8dba2a86c64c06d0e2811f32387bd66917f794cf96ef3dba7d0557c3d817177a20d2ac45aeaaa6705a31b87dc0ff2104436d87b057c5264beaf0021bb7d6c5959a9cddc8f78b34eba4e47bb953f3de840629c5c81791343a6b740d3b1683df9b6086a7a066ef7598ff9d9f96d4df3bbbc1c3dc6275d37597dcb181832d50259cb670eb24d48e39f25955b80a975a1171778663b74635f9c12eb52cb4f4524d63fa5f7ab9bb44010fb0ce3c8008027ac7b05d48957d98beba8a2d07f8abc95307bed92fd3235bb630782c405b97fd626e06a532616b4318e247103b6880f0ed59c5363fbe2cf11ea2a62f6ff6b3cad257d829751d6e8bb52c48bfad1bcfbdb1377a329201bb26c6094dc1e0e17d0b543383577a637f2949a59f3203a9d1319797a2028e64436c0cf9f955a9dc01bb874bf9e116b68d992b8e7e0467c5836edc60ba8de22cd709c7df6b7c1bc06fa374d0865c182be4cafc6850777cb3d41f1f4b8dea8f1d943f3b5152ff64c34ae527c8feab18f4a4ecd91d27418d08569d4a20218c9f6165bf919cbf5398625db5ff817cba353b2e2b3e996efdb7f0ec82f7e97740bef920aca9b2045309cc2949d29afccb0946114dc3e8f09e5582081cd0021000afbdc6e1cab4387c2f79dfc43acb25f7f6d64ce77a3da28e74a7980d654aa8311e9259fda1b7faf42f140c235b93fd69bfb19b47a89e473a3e84634172fe65f1a9a0b26aa11fa1e42bc4caa8ac1c172db7c3f924c630dfa897459b4a602bffd60731f3bfc3adbfffdb1f4313a0e0fb2ba5574b244f7d8625aecbbeb74672f0c5b17a24d157b39ebfb52233281ce616e7552d7df4aff102a38168a33713029ab0e2de77fb9beee97fb9b52fba78273312ba260cd1f9a866aac33cea526f58ab9af0c7af5b6d335edfbf4e0777919d8db94cf7368bfb8c9cb17f4049235b8a2e5a732cb66316e38deab71bf4bb070e034d18d68a64d70526119e105ff8e53321947b602586e6c38690352a5133d891d5ec7325913c89a775ba0f4cd9f560f13c012cdb6486e9d3935a891bf1a97edcd11bf864c853bed06d17b92376598755f378137b05ac57696c83ca4696de09235bae87273971253b3ca9ecd78e2da05ae53700eb2fbf653e5d20042f430db866d1323762850ca20abdfb586c00306d66173ae9d25869c6e59ce62c5296911f1e9c75e32ff5ea0da0734bdb74eff45f9728a8e90054340dedb2e3950e63f76aa65a15245207b1913b20ed298ae6c7522a39b186fd9219cbe30e0076d4f8719e5949c2517e60dad9db37c6a532bcd3e85c1b7fe61400fe5b56f8b871dee3bdf3e1d6367667e7b2cb675afa9e8b2b03f684e8826abd05c5c62a048ae4d90577c1e3ee4a99204d0ea40e0503a89bc7ab540a1e755dd8e522d9390b0e2c5d02c986ddbb613c5af6a31048d14b5b659ee982f62d800519117205c33366e3d26d58e48410fcbe34b8c9955807b205c25366e019340b6c5e1904355db75c23cc9bc8e8c652ec1d4dc299fd07bcd1c79c2ca84850a7ffc4915036b49d0eed0f549f6bd46adfd6fc851a01081e2fcb7a8f94098f85104616a59aa6f9af94af00962d8c1076b4e07ce2351a64ed864a392048d4235a7c51571811cb5f512b0c0c6cae87b84d45df18d211d1875208acdc359c3ee49f2efb4c765fc89e789aecf8e86ac9c9ff3370ad5418a0ef6e0a8a11151606b08e92b914fe6383a1a4e714afce45a32b39a792b8678eff7e2cd4c7c7df3b64d07d8edf12487bba3202edb441a0036938e1b36b6c8454e0af65ea7a4e65706e43b5383e9df2be0d869e2388574020a5e7963346669f7de8873bd4c18733db528c16188c6ce3bbaf9d1be84cec67063bf8c605a7210d8aa2abab17b6a8fdb1fcca24c78fb781c4bc6d805235fdc945ab85197ca0549ce51f0721b4b80085ae16c1c7e2e341f221716a6491ea02016dad3ceb23a77d4026bfd2365971769ec3cde6f5bdb5cb9ca19a58c20d9a797c2df14b048cb3c3dc14b3d61d4c73681cad0beddf883fb1713be8c7243824ff62c6ab5d8105022b32505d6901c47661d8ecca50e2982c70f198169ea2419f88851c70ad1aa3c71b1caff4bec292009f969597cd54fb3e904a715ae27c2d5b9cb040d9ce1a3fd05d7313559579d992f70e73ebb55451a98f7d72b047a82e6c592223644029ebbe9675b57974e198c2138244273ad0189df36c5534128bb6b9aa9cbbad367a60b1acb9f26fad921f80d8a4026a36173b5380062063ebb6b93403abc748da759603daae24e4f53edbbdab8ca2d8a1a2a971b9661eead24a98989a7dde92aae2c4a1180acbc6c9721697bc65685dc670e69ff596445c1d89928d3e0257bc9439d1db039e269e921593d526a6147651e2f451451402d950e4fa5bd7f7787176cda674b4db723406e6efb2b4937c46207dd71bb7b5e95a0cfdb0c51c8f54fd3115c3151ea61c0cf424fc7acfd1594fdb197bfadf2ce80f45d9ce9e7d3e1e4de513341400b21bf8aceb29098128ff3568ed157c56ad3bb1ce3056c27b61c83deaf8c4ff0d981e621e42223f816f38d3f2e2e300acfa09572e6bf6388059357f60e272c105826bc360e7538e98e6018c1ab559730a286424728b566130dc0d4b4bf972a7e7e4e6cfc9d620f7a9840a1afe02a4340698bbab7328c732fddc329a6ee4f90001375ea626b70c1fcc75c06aa8c36f2184d3aa68d2b1bef30ec2916113cc28079d8048f00725403b8af00f11d16bc9895cc84a942ef45b819e6c41999fce9348fe2a2319fb059d0ad1761e4a4969a0e876e64cec9898d0f1b41230b9215415546bde65bb80667f2763d05d3be2fecb9ea1b04074cf01bf65e6fdc2944467dd3fc6f3e0be2c925d26ab2a4a0c1d6d42e5854caad32ce510186c47c45cc67dff30bea70aa4b382a6b89b582c2920732545f095bebd146fe1bab4adefd5fe96aa0e1d5cfeb819b07c95cf25f0f2c46c11031b76ed5e4f9e32e04ed9bfcfa64a95a6e62d7df9ae4c1e5d6fb4c7c2af9d92f2155a952e77f8328a29cce85a34e9b14aa9bc02209d0beadac542036d6a8772fc7c667b6131dd70b6bc781306d509751bdb874347fae24287a7112cc7784f2fa81dcde424a6b06943d74238e997777fa43771bd4fd30aa1f71e4144f34c39404cbf1d15055483ae3778b008b92d0e0ac8f332ad165ebf309d672c70072a17f40afaa02a834512e3ad39cb8cf175c4c9cf2cc85ee28a62d6d60c0b64248738c92253c9cd319326fe252e239bc0c9c3d207b10770a1ca0c97c4bbe89df4ca9d89a6f6980117926457b347f0456d3ee38843fc0c92b2d200daa18c1dedcaff7a81892af56c4491e84ee9c3ed63d616087021b5277f9a396897b4193e1f28bcbbc6ec4421df4c29f50e99bf37f2a2cb648c909a33ccb370aa27c3f95290eb3d27ea6e34b303208c93447b33fab1744fdd58888ee829ec48856c099cbe043dbc2e8c8f444fbbb5d351538363b45c68b0fae7078d049dbe0ad7b802c7d15d36ec3bab763ce32d30689a3dafd340dba3d8454941840db33bbc50a36aad491ab17c8c3f9fac9d9b7fd80da23f50088d83c3421f818b43a031a8855e6ead48ed6e5d4f5e2697776c7dd6d5e465425d94f3f31a81b75c86d3c8473021cfab3c6dd52a7aac48ee0de4193aab0e5be6fc91cf48dff1e5756c53817e019bcb83952c385c0a723a043c7161b48166c19f5eb23222ccaa587d1bb388e6ff1efa041df9813368fe056e500a9c8f4971040bed9ad596abfc75935ec692dec0bda9e1eb611325f0ba7d3648e0d1235254ec61d9389f81e72607bb336b2ce0f929139124fd85d060e063ff6c46697a8b75aae34c7daa7851c562acb23959f1e1beb3382b76fbf653ed0c62223305a64d61d1cfb02b9210ad7655224f13ca3c537502e1e6be463b5b31c5b80f7ee5192d175fe2c04fffcaf1a80b16efe596621a9559407cdff5c2e2ea3d5f6f7856f201d925b0d62274d5cce3959854b73f8888dd02a68740e13d336730c4618c384be577aa8fb3f58ae32533af8b8b1432c87b48657856f3cbd73cdafc95afef98a461bec5871086a20d15d9af02532f0bc48b5772cd0373496afbfefe224a4d56afd5243d1dafdeb3450560bf1ceef1d4a9171e3cec99d255732052e30d946669072683f59a3748a006be34b689d8fbb2e1fe03d10a5f94280a136050fd27880d152fe2fd01050b038e5082959b7f067fc2024f8ee8f2752a564f3e19947c0e634f008b7dfb2ade426082f487302ed5a3afde015b3460ab68b9fb1bbb08357f905d80deb8fd935afe2383d3b0bdd1ebb76a8526a40de6fe0c1e4770fc4ac2a5b8f7b59df90dace580e0b9fa7731ed1d732eaa04a1070e0d1eb071432078c5852fd9b628a053823b29268684fb4e87ad4888ff5014f39a75621712c4d03d270aec407aaa986df5dac70df6ce663035e1882df2d05c0e647ee3e15b4c71166ed0f5d1b8f0a9d062077653fca34b8506029496c1a4cf797b85093df14e4ebcf0f83c8fa772f5398e691b356505c84f6125e47a92f2179ab67f94aa88e838f30b3ab03448cfa32fbc81c6f4a47bed6cb0a06efc2419f70afa863e6c8c55e0f5a61b85c943064b7c73c80bd652c4c1685b1edd240caa6d595c3df4332af03ad011000905f4ca73246cf03d5feff2d6fe7362509976a47fedeb192b6f03f7d32cf44b5642e02009f08b81765de3ba2dae842ca7aaa678c62474a8ebe4ddb65c9974e2c3b0907bd45132902dcc26d6656f9c8fc1834ec91a8701c86674685c3cfabd6cc665a04f32d5338a3063cf1ddbc012bd6d06d5c3fb153dfbadb9f8341dd5a88cd399f728813230d954b0d4e0d4c5dd9e598eaebb9721215344a9cb2d77ad013e5e8a0e7c24736ef6683e6190d9d9d133b0a7c81ceb4c2d4a30581051ab783ef9ca462968792821687cba8427ea9c12070f3b9bcb9ca6a2f5fcb2e3a29e27ba17403420613796e9bdcb33cd3b72dff77ab4acd78ff2e54ed94b2c2945d265dec41603b7f234a4a20c34b267d18a03cbc3e20709d5c4c2c884fa50b040fffe767077707c63a574e8fea77be1a9934223741d68827f190c65b5e7b59bfd4ea9ace76ba8261473f102b7196ed964e68b7f189291c1eba0350c9b5a18d7e1deaadf2cdd425207b6ade20febfa48191a1ee674d74b9c445d29d34fa887d4bb68ae65dbb522a4dec1980aceec57a46f75faf31bbb7dae982f8f4f4f89c5f3f569aa4b0d681fb75f1f196c4a89cb3eb67c0f5a49c74dda236fcee8d11d7af341cdf0d4cd742b52608ae116e45837167681d169c717cd267576dd970559c7f6f54e497d17e8b82c359bfebe1959e9662f27943a5ebe11d8efdaa31bf2ebbc821bf863c833fa6c1fccb9714e6a0eb031f185338bb33eb8f5cf8cfb1436a6bd9aa0d4854e7bf83ac6bd0581548f89aecc9dbdb09ee57c9b9a737e900b175b33d1d29f395da93d506ecdeb8cd4719c4a7a6d65a9b87a1b6842937dd02ef6fa346f1434f79b782e975c35100d2539eb4a1baee0420d3fc653e6c1e5a1c70d7eeff21b360e5a3cb7b77ba644e8bb49ad8c31f259fccb0d765bab7af34640e6b3ca1e0108eaedb6dc4bf982f9622f6d0bb09c6964f62a0c80b6d8c1e620e1d2bee2277bb1296c20bf679d1d08a3592934dc98df01e0ae41d449ef4d85c8ecc4ae406b245c3a6e3d511ef5a7b7a7b6ebb62eb8dbcb2be7d6a68773c366bd41f2c31516eddc38c288d8cc9e0d6349a984214d5d5be5d9a778ebc2890b18e6cb8eb21f01dd79b42d560958216ee7be5380f13ae5854ce69c4db783f65353b88741327d515ac577c7ef199cfcc20a684dc65b286f44a296b4124614e061b33a661f9db5804cc3446dce8dc36a87381fdc63b95215e91800cb7d7f386d10f7d8922f8aab8b1b9d56c284b042c79c36de907e895089856d598277954a2684a2baaea2ff3989809c06d436a5ac701f6bf60d5a459d2ef48c780370489e27a9b7f5fd8985d3a27b043423075ed2ce9f7fc830dddd06fb318a979e436c4bbbfa36dbe2f1a11987f17d77cc63747918b0e58097c91c42bfe11f4f4619bb0fb71536f6f730b1aa14228616295ff65de682ecc2f7dbcdf1db82ed368289d6a2fffdcc5c2ab6ff249f2b4cbaa71ba43e2313ec2fcb13c5c89593bed37b45232fdd984c8eb3ad58f83033deba0e74f5e3c9925201d1d13aa89c88eeffc68600f28cd775266b3982ed3467b86acaae8e55e199e2f19464cfdfb705805ef7ac877382f7725c5683115402fa7e568cb3b845e572a25c682bde474938cc3c3c4f104ab6363c31e5fba25b3328becaf2bfd804181211872c3aed79a6ff3a5480ffaef83fedff8afcf78eb4a153fc27e02207a4c347b6ed3fe8c3918282cd1163e95b4594a43146d5afcdcf22314fe4c455fae7f1f0e2f225908de31be1ee488532bf1ff41bf726674b933a53b8cbfcf62265a482a0876653f2f15e137928a022aa16df2fccb3cea5b6bde56d8cbc595731e173cff8a115756f9387f3a10bfafc8b65938bb8dcc8e4795420fce1ce1d10dc6418d7854ff37a69dc11d3fb5fc690a50c69a7205fa3f494f6518678c1a1889f429effe0211eaa8c86d0492a415fe3a6711750fa70ae805683d1ad30c9ada500f4a8d27aa5d5ed57be06d94fd10a943447be99493b29ad9a993fa21eb0941b55ec1d1cc0ae8a08411411afe5cf62ed48d4b865cb4c7796b9f06dc67a33a8230eb3097f77fdcbeeb659a49db954b7a56f5a74c5cb10591cca945ebd1fe98fa6242c12d1db72c1b55f0057448f9ac25c6990216ca4ab819524da1773b7f8c27f2adf2f3f5011f480bcd8b23ed020cf7d4eb09d4e4aa674efe9d6a3d927bd4ba7717cd56e9f94e4ac72bdb916f8144a9cc37d9d7df6d4841726891b897118c85e61048e447139649200bc04020c211436cbec1b3e1e8c47343c13f0345a11792686f2e2fc93f3477fc296c1e463af443b5f42329ccc3c4bd5a9b115fb95d4e87b97e4942b4d1a4bb2461f29755c0444f2d830d2412f095983364fee3ab809ef8f8a280140eb4b0cfad84335b8810e771a1c5868f481e709b39b2e587958508a117b9eb64258cce0ec6689a77346c93b44aa824600f1c4444f000a5c9f1c1fd17b5da54ff768177874eb11ed97795c25dec66ed2590e1d68bd57ba3370034a9d82247da8338e2bc7bc829e7116be0c79b21e231f1d2eeb1eec0f618a162b0810f174e383d50527e66db38b592696392134f2b71189afe67a846a31dfea56dce89087ab7f9e50f90a249519950d67b99e0b1d80f8aa4ba7a0a0253b1fccde0927369c606ebbb584d03a259a37795d0a34233d6622bfa062990e2da8045e90bd06761cd3023b3dd1b1bb6921a4c70790d173e12b705cf8160eb516770c0b4379152156e11867811273c35f4823e99a7e9a849bf3cf31908f4fa1e139c9ae7a3287066cbb585915a091963a7b7772cab834309282ffa0c2f74d37703836d84cf47e3c494364c0a6c7a19bfd16e3ac7026a415c31c4e892281c5130e1ab3fc481d778bbad38b92f78825a9d1795a194f7637d656dce3638005c281bce064eb5a562f886527a2871afac9c535b40f337ae2ad805bf9a95ee55e34a1020238791025ef45611598fcfc719bc984b1866f7529395230b9181439d29e2", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)={0x60, 0x0, 0x40, {{0x7, 0x581, 0x0, 0x45e, 0x2000000000, 0x2, 0x1000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.198828715s ago: executing program 7 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000008000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f82083463ddd05b6eaf50000000000e9ff00"/38], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x25, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000c5b700007b8af8ff00000000bfa200000007000007020000f8ffffffb703000000000000b70400000000000b0b53de005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xe2c, 0xf, 0xfffffffa, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TCSETS(r4, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) 3.042809276s ago: executing program 7 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240408a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r5 = io_uring_setup(0x4051, &(0x7f0000000800)={0x0, 0xa87, 0x0, 0x1, 0x38}) io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000000140)={0x62, 0x1, 0x1000000, 0x0, &(0x7f00000001c0)}, 0x20) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000002380)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.912276935s ago: executing program 2 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xe5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, 0x0, 0x880) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000004400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write(r3, &(0x7f00000000c0)='transport=fc,traddr=nn-33333333333333:pnpn-4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2232222222222222,nqn=n', 0x79) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x1ffe, {0x0, 0x0, 0x74, r2, {0xfffd, 0x6}, {0x1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3200c864}, 0x840) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'tunl0\x00', {'pimreg0\x00'}, 0x2}) 2.67096683s ago: executing program 1 (id=983): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/if_inet6\x00') preadv(r0, &(0x7f0000000500)=[{&(0x7f0000001240)=""/4092, 0xffc}], 0x1, 0x9, 0x6) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@private1, 0x0}, &(0x7f00000000c0)=0x14) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x40, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r5, &(0x7f0000000100)="0000010042", 0x5, 0x1be) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x1411, 0xc01, 0x80000, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) pwrite64(r5, &(0x7f0000000100)="55aa", 0x2, 0x1fe) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r7, 0x4c00, r5) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000340)=0x1000, 0x4) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)={0x360, r8, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5ef19547, 0x2b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_PEER_MEASUREMENTS={0x29c, 0x111, 0x0, 0x1, {0x298, 0x5, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x108, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xdc59f3932ffe2cc9}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xd4f}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x3}, @NL80211_ATTR_PEER_MEASUREMENTS={0x64, 0x111, 0x0, 0x1, {0x60, 0x5, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x286}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}]}, 0x360}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x620, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000040}, 0x8004) 2.601885498s ago: executing program 6 (id=984): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x0, 0x1, 0x80000000, 0x2}, {0x10, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x73, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(camellia)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.487876578s ago: executing program 6 (id=985): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "cb258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000e00)=ANY=[@ANYBLOB="400f13"], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.473633357s ago: executing program 2 (id=986): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v'], 0x20}}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) (fail_nth: 1) 2.385846033s ago: executing program 2 (id=987): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[], 0x10) r2 = getpid() r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x38, 0x41, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x14, r7, 0x502, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="6fce194c7ed0e86046ab3c3aca700312581f4969d2b7ca77710fb5f6ce20b4ba1d61f3fadaf68111d24569d92f38554d9568bd8380b33209c21be5501672cd052b47eb19263a90a68fa7c14521e86bb9e1d7f4e7065121f8c9fb95cb2c158f3d4b3e879cdfee0fc8d923becb1b3f5d1f8511265a9a22e6fd85a34e4626536e0793a7bf3460ea302734d18d2d86fda13d1cfa7800"/158], 0x20}}, 0x1) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000480)={0x1, @win={{0x3, 0xb, 0x2}, 0x2, 0x3, &(0x7f0000000140)={{0x501, 0xfff, 0x8, 0x800}, &(0x7f0000000100)={{0x6, 0x80000000, 0xfc0, 0xa7}, &(0x7f00000000c0)={{0xfffffffa, 0xcdd4, 0xc9ae, 0x9}, &(0x7f0000000080)={{0x1, 0xfffffff4, 0xfff, 0x5}}}}}, 0x0, &(0x7f00000002c0)="9a01508d59433db0d50be586b53faeaeac50dec89bb5b83c8a09ae67dc2491199595f0a7bbd7ec9d848a14152c03c421b4e22ec5c67e03c11aa45d430df41182cf222bfabb62c3251eb842d4e72d60bce8a4f05685bb8940f86f71b1a9894ea162e197e4d2f0e7e0d8272ee47c6da508d1d782ecf0f07071205e441278c2043b6e8a557bbfc31ff8f4219dace8115f8a865c3b8d8e07dd40831e073f7c02f0", 0x5}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r10, 0x6, 0x1e, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r11, 0x6, 0x6, &(0x7f0000000600)=0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 2.323898459s ago: executing program 7 (id=988): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3021, 0x3, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2, 0xe}, {0x0, 0x9}, {0xf, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000180)={0x0, "4a24739cc6b9971ed5c7f943ea72a58693f827b99c20dd678151fbd7b9f2dc446270941f9c99983b1f8dc9792334a746960011cb1bed88e2d65e40d53c1e823a", 0x1b}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000200)={r4, 0x43, 0xae}, &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'sha3-224-ce\x00'}}, &(0x7f00000002c0)="21009f1bb10d6973157bc03264421602209b16a6c545a7e74387dc8229be4b6c2ec593911a048f57d7746b9684389fe1c530d6295fa68bffd384f68ed4a3408f9a0c12", &(0x7f0000000340)=""/174) 2.189317877s ago: executing program 7 (id=989): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000dc0)=@keyring={'key_or_keyring:', r1}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x8, &(0x7f0000000080)=0x7) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/11, 0xb}], 0x1, 0x5, 0x20) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[], 0x0) keyctl$revoke(0x3, 0x0) 2.087630733s ago: executing program 2 (id=990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELTABLE={0xb0, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x50, 0x6, "7e35f8d080a0afd2dcc63fde9a33294eb7c7843fe96c56de44b0c5ecfbf861348393b2fa12b574eb1d75b812f5920131f2aa9d752f658efc6494d836ea35e5db48fc765d05ae84a623f8532f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x34, 0x6, "dc9979c1d04e912af1e8c4ff31934fe2de2c34fb03c37954405abea3208ed40d46ade7488bf8e3739560a0394418ecac"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x148}}, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) epoll_create1(0x0) add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@delqdisc={0x34, 0x25, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x6, 0xffff}, {0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x12d, 0x70bd2c, 0x6, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfffe}, {0x5, 0xfff1}, {0xd, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4041880) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xdfc, 0xe100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x1, 0x3, 0x5, {0x9, 0x21, 0xc49, 0xfc, 0x1, {0x22, 0xcd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x47, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x4, 0x2, 0x9}}]}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x250, 0x0, 0x7, 0x0, 0x10, 0x3d}, 0x74, &(0x7f00000007c0)={0x5, 0xf, 0x74, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "04a1a6c2218696b4cd505475ac8eb3a5"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x9, 0x0, 0xfff9, [0xc0, 0x30, 0xf, 0xffc000]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "5378b53d0312990d21c30dbfbfa5afaa"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f6909bfb963bf66de5f0ea504a38185a"}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "587026ae50a535f349ae61aa083780e8"}]}, 0x1, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x4020}}]}) 983.05024ms ago: executing program 3 (id=991): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0xb, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) eventfd2(0xb, 0x0) (async) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x0, r2}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x58}}, 0x0) (async) 851.78502ms ago: executing program 3 (id=992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000008000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f82083463ddd05b6eaf50000000000e9ff00"/38], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x25, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000c5b700007b8af8ff00000000bfa200000007000007020000f8ffffffb703000000000000b70400000000000b0b53de005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3e, 0xa, 0x8, 0x0, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0xe2c, 0xf, 0xfffffffa, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0x14, "3eccd8000000000000000010000000040100"}) 0s ago: executing program 3 (id=993): socket$nl_route(0x10, 0x3, 0x0) syz_clone3(0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) syz_ublk_setup_io_uring(0x23cf, &(0x7f0000000440)={0x0, 0x4015, 0x4, 0x2, 0x1b4}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_enable(r2, &(0x7f0000000040)='1', 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) kernel console output (not intermixed with test programs): 329.663273][ T30] audit: type=1400 audit(1788565477.791:576): avc: denied { shutdown } for pid=8684 comm="syz.1.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 329.781758][ T25] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 329.841740][ T2267] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 329.922354][ T25] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 329.923228][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.923264][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.996751][ T5723] pwc: recv_control_msg error -32 req 02 val 2700 [ 330.004071][ T5723] pwc: recv_control_msg error -32 req 02 val 2c00 [ 330.011388][ T5723] pwc: recv_control_msg error -32 req 04 val 1000 [ 330.018873][ T5723] pwc: recv_control_msg error -32 req 04 val 1300 [ 330.025706][ T2267] usb 7-1: unable to get BOS descriptor or descriptor too short [ 330.033501][ T2267] usb 7-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 330.042984][ T5723] pwc: recv_control_msg error -32 req 04 val 1400 [ 330.050021][ T5723] pwc: recv_control_msg error -32 req 02 val 2000 [ 330.056870][ T2267] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 330.067896][ T2267] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 330.079041][ T5723] pwc: recv_control_msg error -32 req 02 val 2100 [ 330.090353][ T2267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.098601][ T2267] usb 7-1: Product: syz [ 330.098622][ T2267] usb 7-1: Manufacturer: syz [ 330.098635][ T2267] usb 7-1: SerialNumber: syz [ 330.113595][ T5723] pwc: recv_control_msg error -32 req 04 val 1500 [ 330.164910][ T5723] pwc: recv_control_msg error -32 req 02 val 2500 [ 330.175521][ T5723] pwc: recv_control_msg error -32 req 02 val 2400 [ 330.187848][ T5723] pwc: recv_control_msg error -32 req 02 val 2600 [ 330.200017][ T5723] pwc: recv_control_msg error -32 req 02 val 2900 [ 330.207388][ T5723] pwc: recv_control_msg error -32 req 02 val 2800 [ 330.217587][ T5723] pwc: recv_control_msg error -32 req 04 val 1100 [ 330.226543][ T5723] pwc: Registered as video103. [ 330.233433][ T5723] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 330.375579][ T30] audit: type=1400 audit(1788565478.511:577): avc: denied { write } for pid=8682 comm="syz.6.741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 330.421997][ T5807] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 330.427694][ T25] hid-sensor-hub 0003:8086:0000.0005: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 330.531558][ T5335] usb 3-1: USB disconnect, device number 46 [ 330.572300][ T5807] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 330.573166][ T5807] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.573209][ T5807] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 330.573236][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.576667][ T5807] usb 8-1: config 0 descriptor?? [ 330.650786][ T2267] usb 7-1: 1:1 : sample bitwidth 62 in over sample bytes 3 [ 330.658224][ T2267] usb 7-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 330.670549][ T2267] usb 7-1: failed to enable PITCH for EP 0x1 [ 330.677376][ T2267] usb 7-1: unit 2 not found! [ 330.682435][ T2267] usb 7-1: unit 0 not found! [ 330.734133][ T2267] usb 7-1: USB disconnect, device number 26 [ 330.791118][ T5807] usb 8-1: USB disconnect, device number 9 [ 330.804468][ T5961] udevd[5961]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.506550][ T8714] netlink: 'syz.7.750': attribute type 3 has an invalid length. [ 331.519277][ T30] audit: type=1400 audit(1788565479.651:578): avc: denied { accept } for pid=8713 comm="syz.7.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 331.546113][ T30] audit: type=1400 audit(1788565479.681:579): avc: denied { setopt } for pid=8713 comm="syz.7.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 331.570022][ T30] audit: type=1400 audit(1788565479.701:580): avc: denied { write } for pid=8713 comm="syz.7.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 331.604554][ T30] audit: type=1400 audit(1788565479.741:581): avc: denied { setattr } for pid=8699 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 331.727339][ T25] usb 4-1: USB disconnect, device number 39 [ 331.829620][ T30] audit: type=1400 audit(1788565479.961:582): avc: denied { read } for pid=8699 comm="syz.2.746" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 331.853342][ T30] audit: type=1400 audit(1788565479.991:583): avc: denied { open } for pid=8699 comm="syz.2.746" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 332.429054][ T8726] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.751'. [ 332.563707][ T8731] 9pnet: p9_errstr2errno: server reported unknown error [ 332.774267][ T8739] busy [ 335.172195][ T25] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 335.253808][ T8751] netlink: 'syz.6.758': attribute type 2 has an invalid length. [ 335.264991][ T8751] No such timeout policy "s" [ 335.270825][ T8751] netlink: Failed to associated timeout policy 's' [ 335.310314][ T8749] syzkaller0: entered promiscuous mode [ 335.316016][ T8749] syzkaller0: entered allmulticast mode [ 335.345006][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 335.357346][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.357406][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.377134][ T25] usb 4-1: config 0 descriptor?? [ 335.396825][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 335.591690][ T5739] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 335.611958][ T1214] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 335.747768][ T5739] usb 8-1: Using ep0 maxpacket: 32 [ 335.762330][ T1214] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 335.763527][ T8754] loop3: detected capacity change from 0 to 7 [ 335.771985][ T8754] loop3: p1 p4 [ 335.772006][ T8754] loop3: partition table partially beyond EOD, truncated [ 335.796335][ T1214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.818503][ T1214] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.827714][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.842081][ T1214] usb 3-1: config 0 descriptor?? [ 335.869317][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.869738][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.876552][ T5739] usb 8-1: unable to get BOS descriptor or descriptor too short [ 335.876613][ T5739] usb 8-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 335.877339][ T5739] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 335.877364][ T5739] usb 8-1: can't read configurations, error -71 [ 336.060226][ T5335] usb 3-1: USB disconnect, device number 47 [ 336.101099][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 336.104676][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 336.105157][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 336.105646][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 336.106096][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 336.109883][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 336.110398][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 336.110875][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 336.111331][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 336.113045][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 336.113516][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 336.114811][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 336.115297][ T25] pwc: recv_control_msg error -32 req 02 val 2800 [ 336.115861][ T25] pwc: recv_control_msg error -32 req 04 val 1100 [ 336.116307][ T25] pwc: recv_control_msg error -32 req 04 val 1200 [ 336.122072][ T25] pwc: Registered as video103. [ 336.127642][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 336.553095][ T8768] busy [ 338.101213][ T2267] usb 4-1: USB disconnect, device number 40 [ 339.991022][ T8793] FAULT_INJECTION: forcing a failure. [ 339.991022][ T8793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.005194][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz.2.769 Not tainted syzkaller #0 PREEMPT(full) [ 340.005219][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 340.005229][ T8793] Call Trace: [ 340.005236][ T8793] [ 340.005242][ T8793] dump_stack_lvl+0x100/0x190 [ 340.005271][ T8793] should_fail_ex.cold+0x5/0xa [ 340.005294][ T8793] _copy_from_user+0x2e/0xd0 [ 340.005320][ T8793] copy_msghdr_from_user+0x9f/0x4c0 [ 340.005343][ T8793] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 340.005368][ T8793] ? lock_acquire+0x1d1/0x380 [ 340.005384][ T8793] ? get_pid_task+0x2a/0x250 [ 340.005407][ T8793] ___sys_sendmsg+0x106/0x1e0 [ 340.005428][ T8793] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.005448][ T8793] ? get_pid_task+0x106/0x250 [ 340.005486][ T8793] ? find_held_lock+0x2b/0x80 [ 340.005523][ T8793] __sys_sendmsg+0x160/0x210 [ 340.005539][ T8793] ? __pfx___sys_sendmsg+0x10/0x10 [ 340.005568][ T8793] do_syscall_64+0x123/0x790 [ 340.005594][ T8793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.005611][ T8793] RIP: 0033:0x7f7f59f9e159 [ 340.005626][ T8793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.005640][ T8793] RSP: 002b:00007f7f5adbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.005657][ T8793] RAX: ffffffffffffffda RBX: 00007f7f5a225fa0 RCX: 00007f7f59f9e159 [ 340.005668][ T8793] RDX: 0000000000040000 RSI: 0000200000000200 RDI: 0000000000000003 [ 340.005677][ T8793] RBP: 00007f7f5adbd090 R08: 0000000000000000 R09: 0000000000000000 [ 340.005687][ T8793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.005696][ T8793] R13: 00007f7f5a226038 R14: 00007f7f5a225fa0 R15: 00007ffca0d27678 [ 340.005719][ T8793] [ 342.192501][ T5724] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 342.205653][ T5616] Bluetooth: hci4: unexpected event for opcode 0x0c22 [ 342.216152][ T8808] futex_wake_op: syz.1.776 tries to shift op by -1; fix this program [ 342.342404][ T5724] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 342.355872][ T5724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.369999][ T5724] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.379377][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.390035][ T5724] usb 4-1: config 0 descriptor?? [ 342.448429][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 342.448471][ T30] audit: type=1400 audit(1788565490.581:585): avc: denied { connect } for pid=8814 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.454825][ T5616] Bluetooth: hci1: link tx timeout [ 342.455114][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.457045][ T5616] Bluetooth: hci1: link tx timeout [ 342.457057][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.460704][ T5616] Bluetooth: hci1: link tx timeout [ 342.460721][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.460794][ T5616] Bluetooth: hci1: link tx timeout [ 342.460803][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.460860][ T5616] Bluetooth: hci1: link tx timeout [ 342.460868][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.460925][ T5616] Bluetooth: hci1: link tx timeout [ 342.460933][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.460989][ T5616] Bluetooth: hci1: link tx timeout [ 342.460997][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461053][ T5616] Bluetooth: hci1: link tx timeout [ 342.461062][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461118][ T5616] Bluetooth: hci1: link tx timeout [ 342.461126][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461182][ T5616] Bluetooth: hci1: link tx timeout [ 342.461190][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461247][ T5616] Bluetooth: hci1: link tx timeout [ 342.461255][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461312][ T5616] Bluetooth: hci1: link tx timeout [ 342.461320][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461377][ T5616] Bluetooth: hci1: link tx timeout [ 342.461386][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461448][ T5616] Bluetooth: hci1: link tx timeout [ 342.461456][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461511][ T5616] Bluetooth: hci1: link tx timeout [ 342.461520][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.461575][ T5616] Bluetooth: hci1: link tx timeout [ 342.462072][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.702848][ T5616] Bluetooth: hci1: link tx timeout [ 342.702865][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.711259][ T30] audit: type=1400 audit(1788565490.841:586): avc: denied { shutdown } for pid=8814 comm="syz.2.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.736789][ T8812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 342.740972][ T8812] WARNING! power/level is deprecated; use power/control instead [ 342.749647][ T5739] usb 4-1: USB disconnect, device number 41 [ 342.774020][ T8816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 342.774212][ T8816] block device autoloading is deprecated and will be removed. [ 342.777398][ T5616] Bluetooth: hci1: link tx timeout [ 342.777415][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.777526][ T5616] Bluetooth: hci1: link tx timeout [ 342.781537][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.790915][ T5616] Bluetooth: hci1: link tx timeout [ 342.790931][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.790995][ T5616] Bluetooth: hci1: link tx timeout [ 342.791003][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.791060][ T5616] Bluetooth: hci1: link tx timeout [ 342.791069][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.801309][ T5616] Bluetooth: hci1: link tx timeout [ 342.801325][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.801911][ T5616] Bluetooth: hci1: link tx timeout [ 342.801921][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.801993][ T5616] Bluetooth: hci1: link tx timeout [ 342.802001][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802060][ T5616] Bluetooth: hci1: link tx timeout [ 342.802068][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802126][ T5616] Bluetooth: hci1: link tx timeout [ 342.802134][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802212][ T5616] Bluetooth: hci1: link tx timeout [ 342.802221][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802752][ T5616] Bluetooth: hci1: link tx timeout [ 342.802761][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802821][ T5616] Bluetooth: hci1: link tx timeout [ 342.802830][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802889][ T5616] Bluetooth: hci1: link tx timeout [ 342.802898][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.802956][ T5616] Bluetooth: hci1: link tx timeout [ 342.802965][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.803023][ T5616] Bluetooth: hci1: link tx timeout [ 342.803031][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.806576][ T5616] Bluetooth: hci1: link tx timeout [ 342.806591][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.806666][ T5616] Bluetooth: hci1: link tx timeout [ 342.806684][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.808287][ T5616] Bluetooth: hci1: link tx timeout [ 342.808300][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.809630][ T5616] Bluetooth: hci1: link tx timeout [ 342.809641][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.809703][ T5616] Bluetooth: hci1: link tx timeout [ 342.809712][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.809771][ T5616] Bluetooth: hci1: link tx timeout [ 342.809780][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.809852][ T5616] Bluetooth: hci1: link tx timeout [ 342.809860][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.809929][ T5616] Bluetooth: hci1: link tx timeout [ 342.809937][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810019][ T5616] Bluetooth: hci1: link tx timeout [ 342.810027][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810377][ T5616] Bluetooth: hci1: link tx timeout [ 342.810386][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810444][ T5616] Bluetooth: hci1: link tx timeout [ 342.810453][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810509][ T5616] Bluetooth: hci1: link tx timeout [ 342.810518][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810575][ T5616] Bluetooth: hci1: link tx timeout [ 342.810583][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810665][ T5616] Bluetooth: hci1: link tx timeout [ 342.810673][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.810731][ T5616] Bluetooth: hci1: link tx timeout [ 342.810739][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.811399][ T5616] Bluetooth: hci1: link tx timeout [ 342.811407][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.811464][ T5616] Bluetooth: hci1: link tx timeout [ 342.811473][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.811530][ T5616] Bluetooth: hci1: link tx timeout [ 342.811538][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 342.815263][ T5616] Bluetooth: hci1: link tx timeout [ 342.815274][ T5616] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 343.200141][ T8827] netlink: 'syz.6.778': attribute type 4 has an invalid length. [ 343.460479][ T8830] FAULT_INJECTION: forcing a failure. [ 343.460479][ T8830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.460521][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.1.780 Not tainted syzkaller #0 PREEMPT(full) [ 343.460542][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 343.460554][ T8830] Call Trace: [ 343.460560][ T8830] [ 343.460567][ T8830] dump_stack_lvl+0x100/0x190 [ 343.460600][ T8830] should_fail_ex.cold+0x5/0xa [ 343.460626][ T8830] _copy_from_user+0x2e/0xd0 [ 343.460656][ T8830] copy_msghdr_from_user+0x9f/0x4c0 [ 343.460684][ T8830] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 343.460715][ T8830] ? lock_acquire+0x1d1/0x380 [ 343.460735][ T8830] ? get_pid_task+0x2a/0x250 [ 343.460762][ T8830] ___sys_sendmsg+0x106/0x1e0 [ 343.460788][ T8830] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.460811][ T8830] ? get_pid_task+0x106/0x250 [ 343.460844][ T8830] ? find_held_lock+0x2b/0x80 [ 343.460885][ T8830] __sys_sendmsg+0x160/0x210 [ 343.460904][ T8830] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.460936][ T8830] do_syscall_64+0x123/0x790 [ 343.460961][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.460980][ T8830] RIP: 0033:0x7f17bb79e159 [ 343.460996][ T8830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.461013][ T8830] RSP: 002b:00007f17bc725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.461032][ T8830] RAX: ffffffffffffffda RBX: 00007f17bba25fa0 RCX: 00007f17bb79e159 [ 343.461045][ T8830] RDX: 0000000024000090 RSI: 0000200000000900 RDI: 0000000000000003 [ 343.461056][ T8830] RBP: 00007f17bc725090 R08: 0000000000000000 R09: 0000000000000000 [ 343.461067][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.461077][ T8830] R13: 00007f17bba26038 R14: 00007f17bba25fa0 R15: 00007ffe432a8da8 [ 343.461097][ T8830] [ 344.772747][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 344.814226][ T8843] busy [ 347.087275][ T8852] FAULT_INJECTION: forcing a failure. [ 347.087275][ T8852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.100569][ T8852] CPU: 0 UID: 0 PID: 8852 Comm: syz.6.788 Not tainted syzkaller #0 PREEMPT(full) [ 347.100595][ T8852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 347.100604][ T8852] Call Trace: [ 347.100609][ T8852] [ 347.100615][ T8852] dump_stack_lvl+0x100/0x190 [ 347.100647][ T8852] should_fail_ex.cold+0x5/0xa [ 347.100682][ T8852] _copy_from_user+0x2e/0xd0 [ 347.100710][ T8852] __sys_bpf+0x2f5/0x4a30 [ 347.100735][ T8852] ? __pfx___sys_bpf+0x10/0x10 [ 347.100751][ T8852] ? find_held_lock+0x2b/0x80 [ 347.100780][ T8852] ? get_pid_task+0xfc/0x250 [ 347.100803][ T8852] ? get_pid_task+0xfc/0x250 [ 347.100839][ T8852] ? find_held_lock+0x2b/0x80 [ 347.100873][ T8852] ? rcu_read_lock_any_held+0x6a/0x90 [ 347.100898][ T8852] ? find_held_lock+0x2b/0x80 [ 347.100921][ T8852] ? ksys_write+0x190/0x250 [ 347.100938][ T8852] ? ksys_write+0x190/0x250 [ 347.100955][ T8852] ? lock_acquire+0x1d1/0x380 [ 347.100991][ T8852] ? fput+0x7c/0x100 [ 347.101011][ T8852] ? ksys_write+0x1ac/0x250 [ 347.101032][ T8852] ? __x64_sys_bpf+0xce/0x140 [ 347.101048][ T8852] __x64_sys_bpf+0xce/0x140 [ 347.101066][ T8852] ? do_syscall_64+0xae/0x790 [ 347.101088][ T8852] do_syscall_64+0x123/0x790 [ 347.101110][ T8852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.101130][ T8852] RIP: 0033:0x7fb9cfb9e159 [ 347.101146][ T8852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.101164][ T8852] RSP: 002b:00007fb9d0b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.101182][ T8852] RAX: ffffffffffffffda RBX: 00007fb9cfe25fa0 RCX: 00007fb9cfb9e159 [ 347.101194][ T8852] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 347.101205][ T8852] RBP: 00007fb9d0b18090 R08: 0000000000000000 R09: 0000000000000000 [ 347.101216][ T8852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.101227][ T8852] R13: 00007fb9cfe26038 R14: 00007fb9cfe25fa0 R15: 00007ffff6422bd8 [ 347.101252][ T8852] [ 347.297339][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.787'. [ 347.435389][ T8850] netlink: 156 bytes leftover after parsing attributes in process `syz.7.787'. [ 347.544725][ T30] audit: type=1400 audit(1788565495.671:587): avc: denied { ioctl } for pid=8858 comm="syz.3.789" path="socket:[23489]" dev="sockfs" ino=23489 ioctlcmd=0x48d3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.242682][ T5724] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 348.640260][ T5724] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 348.645644][ T5724] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.645674][ T5724] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 348.645718][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.647302][ T5724] usb 3-1: config 0 descriptor?? [ 349.630213][ T8870] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20002 [ 349.651764][ T30] audit: type=1400 audit(1788565497.311:588): avc: denied { bind } for pid=8869 comm="syz.3.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.696518][ T5724] usb 3-1: USB disconnect, device number 48 [ 349.811688][ T5335] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 350.811732][ T5335] usb 8-1: Using ep0 maxpacket: 32 [ 350.817673][ T5335] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 350.827788][ T5335] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 350.827822][ T5335] usb 8-1: config 0 has no interface number 0 [ 350.827880][ T5335] usb 8-1: config 0 interface 184 has no altsetting 0 [ 350.856639][ T5335] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.865211][ T5335] usb 8-1: Product: syz [ 350.869471][ T5335] usb 8-1: Manufacturer: syz [ 350.874242][ T5335] usb 8-1: SerialNumber: syz [ 350.881224][ T5335] usb 8-1: config 0 descriptor?? [ 351.100803][ T8879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.785'. [ 351.100863][ T8879] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 351.841326][ T30] audit: type=1400 audit(1788565499.641:589): avc: denied { ioctl } for pid=8880 comm="syz.2.797" path="socket:[24148]" dev="sockfs" ino=24148 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 351.884808][ T5335] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 351.884839][ T5335] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.165336][ T8891] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 352.248026][ T8891] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 352.248170][ T8891] overlayfs: failed to look up (tracing) for ino (-66) [ 353.294292][ T30] audit: type=1400 audit(1788565500.301:590): avc: denied { mount } for pid=8888 comm="syz.3.794" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 353.294378][ T30] audit: type=1400 audit(1788565501.421:591): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 353.492242][ T5335] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 353.492300][ T5335] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 353.492394][ T5335] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 353.493357][ T5335] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 353.900904][ T5335] usb 8-1: USB disconnect, device number 12 [ 353.966972][ T8895] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 355.275065][ T8908] netlink: 5 bytes leftover after parsing attributes in process `syz.6.796'. [ 355.277184][ T8908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 355.347975][ T30] audit: type=1400 audit(1788565503.481:592): avc: denied { write } for pid=8900 comm="syz.6.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.307327][ T8925] FAT-fs (nbd3): unable to read boot sector [ 357.328373][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.804'. [ 357.370785][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 357.386029][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 357.451703][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 357.482441][ T1214] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 357.601828][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 357.617589][ T5609] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 357.649454][ T8913] loop3: detected capacity change from 0 to 7 [ 357.665370][ T1214] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 357.669678][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.771112][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.786852][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.970436][ T8913] loop3: p1 p4 [ 357.970472][ T8913] loop3: partition table partially beyond EOD, truncated [ 357.982150][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 357.982261][ T10] usb 8-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 357.986918][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 357.986948][ T10] usb 8-1: can't read configurations, error -71 [ 358.034724][ T5983] udevd[5983]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 358.049002][ T6298] udevd[6298]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 358.248349][ T1214] hid-sensor-hub 0003:8086:0000.0006: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.2-1/input0 [ 359.382212][ T5723] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 359.536160][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 359.740281][ T5609] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 360.107362][ T1214] usb 3-1: USB disconnect, device number 49 [ 360.197460][ T8943] loop3: detected capacity change from 0 to 7 [ 360.250666][ T8943] loop3: p1 p4 [ 360.250703][ T8943] loop3: partition table partially beyond EOD, truncated [ 360.263720][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.274057][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.291762][ T5723] usb 2-1: unable to get BOS descriptor or descriptor too short [ 360.291814][ T5723] usb 2-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 360.309306][ T5723] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 360.309340][ T5723] usb 2-1: can't read configurations, error -71 [ 360.377120][ T8958] FAULT_INJECTION: forcing a failure. [ 360.377120][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.377163][ T8958] CPU: 1 UID: 0 PID: 8958 Comm: syz.6.816 Not tainted syzkaller #0 PREEMPT(full) [ 360.377183][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 360.377193][ T8958] Call Trace: [ 360.377199][ T8958] [ 360.377206][ T8958] dump_stack_lvl+0x100/0x190 [ 360.377236][ T8958] should_fail_ex.cold+0x5/0xa [ 360.377260][ T8958] _copy_from_iter+0x1f4/0x1690 [ 360.377293][ T8958] ? __pfx__copy_from_iter+0x10/0x10 [ 360.377317][ T8958] ? __lock_acquire+0x4c5/0x1ec0 [ 360.377333][ T8958] ? _parse_integer_limit+0x1ac/0x220 [ 360.377357][ T8958] ? _kstrtoull+0x144/0x200 [ 360.377376][ T8958] ? __pfx__kstrtoull+0x10/0x10 [ 360.377397][ T8958] tun_get_user+0x3ba/0x3cc0 [ 360.377430][ T8958] ? __lock_acquire+0x4c5/0x1ec0 [ 360.377447][ T8958] ? __pfx_tun_get_user+0x10/0x10 [ 360.377465][ T8958] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 360.377494][ T8958] ? find_held_lock+0x2b/0x80 [ 360.377516][ T8958] ? tun_get+0x191/0x370 [ 360.377536][ T8958] ? tun_get+0x191/0x370 [ 360.377564][ T8958] tun_chr_write_iter+0xdc/0x200 [ 360.377581][ T8958] vfs_write+0x6af/0x1050 [ 360.377599][ T8958] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 360.377617][ T8958] ? __pfx_vfs_write+0x10/0x10 [ 360.377631][ T8958] ? find_held_lock+0x2b/0x80 [ 360.377666][ T8958] ksys_write+0x12a/0x250 [ 360.377681][ T8958] ? __pfx_ksys_write+0x10/0x10 [ 360.377709][ T8958] do_syscall_64+0x123/0x790 [ 360.377730][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.377747][ T8958] RIP: 0033:0x7fb9cfb9e159 [ 360.377761][ T8958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.377776][ T8958] RSP: 002b:00007fb9d0b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.377792][ T8958] RAX: ffffffffffffffda RBX: 00007fb9cfe25fa0 RCX: 00007fb9cfb9e159 [ 360.377803][ T8958] RDX: 0000000000000037 RSI: 00002000000000c0 RDI: 0000000000000003 [ 360.377813][ T8958] RBP: 00007fb9d0b18090 R08: 0000000000000000 R09: 0000000000000000 [ 360.377823][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.377833][ T8958] R13: 00007fb9cfe26038 R14: 00007fb9cfe25fa0 R15: 00007ffff6422bd8 [ 360.377856][ T8958] [ 361.656041][ T30] audit: type=1400 audit(1788565509.751:593): avc: denied { bind } for pid=8969 comm="syz.2.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 361.719481][ T30] audit: type=1400 audit(1788565509.851:594): avc: denied { write } for pid=8969 comm="syz.2.820" path="socket:[24263]" dev="sockfs" ino=24263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 361.735786][ T30] audit: type=1400 audit(1788565509.861:595): avc: denied { write } for pid=8971 comm="syz.1.821" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 361.775623][ T8974] FAULT_INJECTION: forcing a failure. [ 361.775623][ T8974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.775684][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.2.820 Not tainted syzkaller #0 PREEMPT(full) [ 361.775705][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 361.775717][ T8974] Call Trace: [ 361.775723][ T8974] [ 361.775731][ T8974] dump_stack_lvl+0x100/0x190 [ 361.775762][ T8974] should_fail_ex.cold+0x5/0xa [ 361.775789][ T8974] _copy_from_user+0x2e/0xd0 [ 361.775824][ T8974] copy_msghdr_from_user+0x9f/0x4c0 [ 361.775850][ T8974] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 361.775880][ T8974] ? __lock_acquire+0x4c5/0x1ec0 [ 361.775907][ T8974] ___sys_recvmsg+0xdd/0x1a0 [ 361.775932][ T8974] ? __pfx____sys_recvmsg+0x10/0x10 [ 361.775956][ T8974] ? lock_acquire+0x1d1/0x380 [ 361.775994][ T8974] do_recvmmsg+0x2f3/0x740 [ 361.776022][ T8974] ? __pfx_do_recvmmsg+0x10/0x10 [ 361.776048][ T8974] ? lockdep_hardirqs_on+0x7d/0x110 [ 361.776069][ T8974] ? irqentry_exit+0x24d/0xa10 [ 361.776105][ T8974] __x64_sys_recvmmsg+0x22a/0x280 [ 361.776125][ T8974] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 361.776144][ T8974] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 361.776175][ T8974] do_syscall_64+0x123/0x790 [ 361.776198][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.776217][ T8974] RIP: 0033:0x7f7f59f9e159 [ 361.776233][ T8974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.776250][ T8974] RSP: 002b:00007f7f581f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 361.776269][ T8974] RAX: ffffffffffffffda RBX: 00007f7f5a226180 RCX: 00007f7f59f9e159 [ 361.776281][ T8974] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000004 [ 361.776292][ T8974] RBP: 00007f7f581f6090 R08: 0000000000000000 R09: 0000000000000000 [ 361.776302][ T8974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.776312][ T8974] R13: 00007f7f5a226218 R14: 00007f7f5a226180 R15: 00007ffca0d27678 [ 361.776338][ T8974] [ 361.813261][ T8975] devpts: Bad value for 'max' [ 362.102458][ T30] audit: type=1400 audit(1788565510.231:596): avc: denied { accept } for pid=8976 comm="syz.7.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 362.123647][ T30] audit: type=1400 audit(1788565510.261:597): avc: denied { read } for pid=8976 comm="syz.7.823" path="socket:[24794]" dev="sockfs" ino=24794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 362.353843][ T8986] binder: 8983:8986 ioctl c0306201 2000000003c0 returned -14 [ 362.687475][ T30] audit: type=1400 audit(1788565510.821:598): avc: denied { append } for pid=9005 comm="syz.1.832" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 362.725312][ T8995] ftl_cs: FTL header not found. [ 362.816077][ T8995] block2mtd: mtd1: [/dev/zram0] erase_size = 64KiB [65536] [ 363.984125][ T9018] busy [ 363.991876][ T5739] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 364.153428][ T5739] usb 4-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 364.195621][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.774801][ T9007] input: syz0 as /devices/virtual/input/input26 [ 364.899097][ T5739] hid-sensor-hub 0003:8086:0000.0007: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.3-1/input0 [ 365.076237][ T30] audit: type=1400 audit(1788565513.201:599): avc: denied { open } for pid=9024 comm="syz.6.836" path="/dev/ttyr1" dev="devtmpfs" ino=392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 365.212185][ T9027] FAULT_INJECTION: forcing a failure. [ 365.212185][ T9027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.212245][ T9027] CPU: 1 UID: 0 PID: 9027 Comm: syz.1.837 Not tainted syzkaller #0 PREEMPT(full) [ 365.212272][ T9027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 365.212282][ T9027] Call Trace: [ 365.212288][ T9027] [ 365.212295][ T9027] dump_stack_lvl+0x100/0x190 [ 365.212323][ T9027] should_fail_ex.cold+0x5/0xa [ 365.212346][ T9027] _copy_from_user+0x2e/0xd0 [ 365.212372][ T9027] copy_msghdr_from_user+0x9f/0x4c0 [ 365.212394][ T9027] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 365.212420][ T9027] ? lock_acquire+0x1d1/0x380 [ 365.212437][ T9027] ? get_pid_task+0x2a/0x250 [ 365.212460][ T9027] ___sys_sendmsg+0x106/0x1e0 [ 365.212481][ T9027] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.212501][ T9027] ? get_pid_task+0x106/0x250 [ 365.212530][ T9027] ? find_held_lock+0x2b/0x80 [ 365.212564][ T9027] __sys_sendmsg+0x160/0x210 [ 365.212580][ T9027] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.212608][ T9027] do_syscall_64+0x123/0x790 [ 365.212630][ T9027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.212646][ T9027] RIP: 0033:0x7f17bb79e159 [ 365.212660][ T9027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.212675][ T9027] RSP: 002b:00007f17bc725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.212691][ T9027] RAX: ffffffffffffffda RBX: 00007f17bba25fa0 RCX: 00007f17bb79e159 [ 365.212702][ T9027] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 365.212711][ T9027] RBP: 00007f17bc725090 R08: 0000000000000000 R09: 0000000000000000 [ 365.212721][ T9027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.212730][ T9027] R13: 00007f17bba26038 R14: 00007f17bba25fa0 R15: 00007ffe432a8da8 [ 365.212752][ T9027] [ 365.409013][ T30] audit: type=1400 audit(1788565513.541:600): avc: denied { write } for pid=9028 comm="syz.6.838" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 365.433027][ T30] audit: type=1400 audit(1788565513.571:601): avc: denied { open } for pid=9028 comm="syz.6.838" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 365.434311][ T30] audit: type=1400 audit(1788565513.571:602): avc: denied { ioctl } for pid=9028 comm="syz.6.838" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 365.847387][ T9037] binder: 9034:9037 ioctl c0306201 2000000003c0 returned -14 [ 366.725997][ T5739] usb 4-1: USB disconnect, device number 42 [ 368.194798][ T9063] FAULT_INJECTION: forcing a failure. [ 368.194798][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.194830][ T9063] CPU: 0 UID: 0 PID: 9063 Comm: syz.7.848 Not tainted syzkaller #0 PREEMPT(full) [ 368.194843][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 368.194850][ T9063] Call Trace: [ 368.194854][ T9063] [ 368.194859][ T9063] dump_stack_lvl+0x100/0x190 [ 368.194879][ T9063] should_fail_ex.cold+0x5/0xa [ 368.194895][ T9063] _copy_from_user+0x2e/0xd0 [ 368.194914][ T9063] copy_msghdr_from_user+0x9f/0x4c0 [ 368.194930][ T9063] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 368.194948][ T9063] ? lock_acquire+0x1d1/0x380 [ 368.194959][ T9063] ? get_pid_task+0x2a/0x250 [ 368.194975][ T9063] ___sys_sendmsg+0x106/0x1e0 [ 368.194990][ T9063] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.195005][ T9063] ? get_pid_task+0x106/0x250 [ 368.195024][ T9063] ? find_held_lock+0x2b/0x80 [ 368.195050][ T9063] __sys_sendmsg+0x160/0x210 [ 368.195061][ T9063] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.195079][ T9063] do_syscall_64+0x123/0x790 [ 368.195102][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.195119][ T9063] RIP: 0033:0x7f600159e159 [ 368.195132][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.195143][ T9063] RSP: 002b:00007f60024db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.195154][ T9063] RAX: ffffffffffffffda RBX: 00007f6001825fa0 RCX: 00007f600159e159 [ 368.195161][ T9063] RDX: 0000000000040000 RSI: 0000200000000400 RDI: 0000000000000003 [ 368.195168][ T9063] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 368.195174][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.195181][ T9063] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 368.195195][ T9063] [ 368.309385][ T5739] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 368.340082][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 368.340097][ T30] audit: type=1400 audit(1788565516.471:604): avc: denied { mounton } for pid=9064 comm="syz.7.849" path="/73/mnt" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 368.458075][ T5739] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 368.476274][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.478653][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.478674][ T5739] usb 4-1: Product: syz [ 368.478686][ T5739] usb 4-1: Manufacturer: syz [ 368.478698][ T5739] usb 4-1: SerialNumber: syz [ 368.488966][ T5739] usb 4-1: config 0 descriptor?? [ 368.492919][ T5739] cytherm 4-1:0.0: Cypress thermometer device now attached [ 368.572604][ T5807] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 368.716215][ T5739] usb 4-1: USB disconnect, device number 43 [ 368.716927][ T5739] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 368.724629][ T5807] usb 8-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 368.725451][ T5807] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 368.725475][ T5807] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 368.725494][ T5807] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 368.727119][ T5807] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.727137][ T5807] usb 8-1: Product: syz [ 368.727149][ T5807] usb 8-1: Manufacturer: syz [ 368.727160][ T5807] usb 8-1: SerialNumber: syz [ 368.736625][ T9065] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 368.736718][ T9065] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 368.739757][ T5807] oti6858 8-1:1.0: oti6858 converter detected [ 368.751447][ T5807] usb 8-1: oti6858 converter now attached to ttyUSB0 [ 371.239499][ T2267] usb 8-1: USB disconnect, device number 15 [ 371.260343][ T2267] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 371.269085][ T2267] oti6858 8-1:1.0: device disconnected [ 372.212484][ T2267] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 372.404916][ T2267] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 372.423589][ T2267] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 372.432792][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 372.444141][ T2267] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.457771][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 372.472178][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 372.500283][ T2267] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 372.508433][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 372.521037][ T2267] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.521092][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 372.550593][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 372.726031][ T2267] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 372.734064][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 372.746375][ T2267] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 372.759340][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 372.777349][ T2267] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 372.901332][ T30] audit: type=1400 audit(1788565521.031:605): avc: denied { recv } for pid=9086 comm="syz.7.855" saddr=10.128.0.169 src=47838 daddr=10.128.0.254 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 372.955051][ T2267] usb 4-1: string descriptor 0 read error: -22 [ 372.962446][ T2267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.214106][ T2267] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 373.332940][ T9093] FAULT_INJECTION: forcing a failure. [ 373.332940][ T9093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.332990][ T9093] CPU: 1 UID: 0 PID: 9093 Comm: syz.2.857 Not tainted syzkaller #0 PREEMPT(full) [ 373.333012][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 373.333023][ T9093] Call Trace: [ 373.333029][ T9093] [ 373.333036][ T9093] dump_stack_lvl+0x100/0x190 [ 373.333075][ T9093] should_fail_ex.cold+0x5/0xa [ 373.333101][ T9093] _copy_from_user+0x2e/0xd0 [ 373.333127][ T9093] copy_msghdr_from_user+0x9f/0x4c0 [ 373.333151][ T9093] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 373.333174][ T9093] ? lock_acquire+0x1d1/0x380 [ 373.333190][ T9093] ? get_pid_task+0x2a/0x250 [ 373.333213][ T9093] ___sys_sendmsg+0x106/0x1e0 [ 373.333235][ T9093] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.333255][ T9093] ? get_pid_task+0x106/0x250 [ 373.333283][ T9093] ? find_held_lock+0x2b/0x80 [ 373.333317][ T9093] __sys_sendmsg+0x160/0x210 [ 373.333333][ T9093] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.333360][ T9093] do_syscall_64+0x123/0x790 [ 373.333381][ T9093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.333399][ T9093] RIP: 0033:0x7f7f59f9e159 [ 373.333412][ T9093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.333427][ T9093] RSP: 002b:00007f7f5adbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.333442][ T9093] RAX: ffffffffffffffda RBX: 00007f7f5a225fa0 RCX: 00007f7f59f9e159 [ 373.333452][ T9093] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 373.333462][ T9093] RBP: 00007f7f5adbd090 R08: 0000000000000000 R09: 0000000000000000 [ 373.333471][ T9093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.333481][ T9093] R13: 00007f7f5a226038 R14: 00007f7f5a225fa0 R15: 00007ffca0d27678 [ 373.333502][ T9093] [ 374.623445][ T30] audit: type=1400 audit(1788565522.751:606): avc: denied { ioctl } for pid=9094 comm="syz.2.858" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 374.766518][ T2267] usb 4-1: USB disconnect, device number 44 [ 374.815349][ T9105] FAULT_INJECTION: forcing a failure. [ 374.815349][ T9105] name failslab, interval 1, probability 1, space 0, times 0 [ 374.830279][ T9105] CPU: 1 UID: 0 PID: 9105 Comm: syz.7.860 Not tainted syzkaller #0 PREEMPT(full) [ 374.830303][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 374.830313][ T9105] Call Trace: [ 374.830319][ T9105] [ 374.830326][ T9105] dump_stack_lvl+0x100/0x190 [ 374.830356][ T9105] should_fail_ex.cold+0x5/0xa [ 374.830379][ T9105] should_failslab+0xc2/0x120 [ 374.830401][ T9105] kmem_cache_alloc_noprof+0x92/0x6a0 [ 374.830420][ T9105] ? mas_preallocate+0xc22/0xee0 [ 374.830449][ T9105] mas_preallocate+0xc22/0xee0 [ 374.830474][ T9105] ? __pfx_mas_preallocate+0x10/0x10 [ 374.830503][ T9105] ? __pfx_mas_next_range+0x10/0x10 [ 374.830532][ T9105] expand_downwards+0x332/0x1500 [ 374.830566][ T9105] ? __pfx_expand_downwards+0x10/0x10 [ 374.830601][ T9105] ? __pfx_find_vma+0x10/0x10 [ 374.830619][ T9105] ? __put_user_4+0xd/0x30 [ 374.830652][ T9105] lock_mm_and_find_vma+0x3a3/0x6f0 [ 374.830677][ T9105] do_user_addr_fault+0x293/0x12f0 [ 374.830703][ T9105] ? rcu_is_watching+0x13/0xc0 [ 374.830730][ T9105] exc_page_fault+0x6f/0xd0 [ 374.830751][ T9105] asm_exc_page_fault+0x26/0x30 [ 374.830770][ T9105] RIP: 0010:__put_user_4+0xd/0x30 [ 374.830790][ T9105] Code: 66 89 01 31 c9 0f 01 ca e9 50 ec 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 374.830805][ T9105] RSP: 0018:ffffc90005d7fe10 EFLAGS: 00050206 [ 374.830820][ T9105] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000500 [ 374.830830][ T9105] RDX: ffff8880327c2580 RSI: ffffffff82612461 RDI: ffffffff8c620f80 [ 374.830842][ T9105] RBP: 1ffff92000baffc6 R08: 00000000000495a9 R09: 00000000000001c9 [ 374.830853][ T9105] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000004 [ 374.830863][ T9105] R13: 0000000000000005 R14: 0000000000000005 R15: dffffc0000000000 [ 374.830881][ T9105] ? __might_fault+0x111/0x140 [ 374.830906][ T9105] __sys_socketpair+0x120/0x5b0 [ 374.830932][ T9105] ? __pfx___sys_socketpair+0x10/0x10 [ 374.830957][ T9105] ? __pfx_ksys_write+0x10/0x10 [ 374.830976][ T9105] __x64_sys_socketpair+0x96/0x100 [ 374.831007][ T9105] ? lockdep_hardirqs_on+0x7d/0x110 [ 374.831045][ T9105] do_syscall_64+0x123/0x790 [ 374.831100][ T9105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.831130][ T9105] RIP: 0033:0x7f600159e159 [ 374.831158][ T9105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.831186][ T9105] RSP: 002b:00007f60024db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 374.831241][ T9105] RAX: ffffffffffffffda RBX: 00007f6001825fa0 RCX: 00007f600159e159 [ 374.831259][ T9105] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 374.831269][ T9105] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 374.831280][ T9105] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 374.831291][ T9105] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 374.831316][ T9105] [ 375.155904][ T9107] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 375.208794][ T9113] FAULT_INJECTION: forcing a failure. [ 375.208794][ T9113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.222211][ T9113] CPU: 0 UID: 0 PID: 9113 Comm: syz.7.864 Not tainted syzkaller #0 PREEMPT(full) [ 375.222235][ T9113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 375.222246][ T9113] Call Trace: [ 375.222253][ T9113] [ 375.222259][ T9113] dump_stack_lvl+0x100/0x190 [ 375.222289][ T9113] should_fail_ex.cold+0x5/0xa [ 375.222313][ T9113] _copy_from_user+0x2e/0xd0 [ 375.222340][ T9113] copy_msghdr_from_user+0x9f/0x4c0 [ 375.222366][ T9113] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 375.222393][ T9113] ? lock_acquire+0x1d1/0x380 [ 375.222412][ T9113] ? get_pid_task+0x2a/0x250 [ 375.222437][ T9113] ___sys_sendmsg+0x106/0x1e0 [ 375.222460][ T9113] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.222482][ T9113] ? get_pid_task+0x106/0x250 [ 375.222511][ T9113] ? find_held_lock+0x2b/0x80 [ 375.222550][ T9113] __sys_sendmsg+0x160/0x210 [ 375.222567][ T9113] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.222596][ T9113] do_syscall_64+0x123/0x790 [ 375.222619][ T9113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.222636][ T9113] RIP: 0033:0x7f600159e159 [ 375.222650][ T9113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.222666][ T9113] RSP: 002b:00007f60024db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.222683][ T9113] RAX: ffffffffffffffda RBX: 00007f6001825fa0 RCX: 00007f600159e159 [ 375.222694][ T9113] RDX: 000000002400c000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 375.222705][ T9113] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 375.222721][ T9113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.222732][ T9113] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 375.222755][ T9113] [ 375.316447][ T9114] netlink: 'syz.1.861': attribute type 10 has an invalid length. [ 376.662035][ T9114] team0: Port device dummy0 added [ 376.728212][ T9122] FAULT_INJECTION: forcing a failure. [ 376.728212][ T9122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.741576][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.3.869 Not tainted syzkaller #0 PREEMPT(full) [ 376.741602][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 376.741612][ T9122] Call Trace: [ 376.741619][ T9122] [ 376.741626][ T9122] dump_stack_lvl+0x100/0x190 [ 376.741657][ T9122] should_fail_ex.cold+0x5/0xa [ 376.741683][ T9122] _copy_to_user+0x32/0xd0 [ 376.741714][ T9122] simple_read_from_buffer+0xcb/0x170 [ 376.741737][ T9122] proc_fail_nth_read+0x1af/0x230 [ 376.741760][ T9122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.741782][ T9122] ? rw_verify_area+0xce/0x6d0 [ 376.741808][ T9122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.741829][ T9122] vfs_read+0x1e4/0xb40 [ 376.741847][ T9122] ? lock_acquire+0x1d1/0x380 [ 376.741866][ T9122] ? __fget_files+0x34/0x3d0 [ 376.741887][ T9122] ? __pfx_vfs_read+0x10/0x10 [ 376.741902][ T9122] ? find_held_lock+0x2b/0x80 [ 376.741927][ T9122] ? __fget_files+0x215/0x3d0 [ 376.741952][ T9122] ? __fget_files+0x21f/0x3d0 [ 376.741980][ T9122] ksys_read+0x12a/0x250 [ 376.742020][ T9122] ? __pfx_ksys_read+0x10/0x10 [ 376.742044][ T9122] do_syscall_64+0x123/0x790 [ 376.742068][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.742086][ T9122] RIP: 0033:0x7f40ca35e98e [ 376.742102][ T9122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 376.742119][ T9122] RSP: 002b:00007f40cb291fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.742137][ T9122] RAX: ffffffffffffffda RBX: 00007f40cb2926c0 RCX: 00007f40ca35e98e [ 376.742149][ T9122] RDX: 000000000000000f RSI: 00007f40cb2920a0 RDI: 0000000000000003 [ 376.742160][ T9122] RBP: 00007f40cb292090 R08: 0000000000000000 R09: 0000000000000000 [ 376.742171][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.742181][ T9122] R13: 00007f40ca626038 R14: 00007f40ca625fa0 R15: 00007ffe5281fa78 [ 376.742207][ T9122] [ 378.353934][ T9132] FAULT_INJECTION: forcing a failure. [ 378.353934][ T9132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.367277][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz.7.871 Not tainted syzkaller #0 PREEMPT(full) [ 378.367295][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 378.367302][ T9132] Call Trace: [ 378.367306][ T9132] [ 378.367311][ T9132] dump_stack_lvl+0x100/0x190 [ 378.367333][ T9132] should_fail_ex.cold+0x5/0xa [ 378.367350][ T9132] _copy_from_user+0x2e/0xd0 [ 378.367368][ T9132] copy_msghdr_from_user+0x9f/0x4c0 [ 378.367384][ T9132] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 378.367402][ T9132] ? lock_acquire+0x1d1/0x380 [ 378.367415][ T9132] ? get_pid_task+0x2a/0x250 [ 378.367432][ T9132] ___sys_sendmsg+0x106/0x1e0 [ 378.367447][ T9132] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.367461][ T9132] ? get_pid_task+0x106/0x250 [ 378.367481][ T9132] ? find_held_lock+0x2b/0x80 [ 378.367505][ T9132] __sys_sendmsg+0x160/0x210 [ 378.367518][ T9132] ? __pfx___sys_sendmsg+0x10/0x10 [ 378.367536][ T9132] do_syscall_64+0x123/0x790 [ 378.367552][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.367564][ T9132] RIP: 0033:0x7f600159e159 [ 378.367574][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.367592][ T9132] RSP: 002b:00007f60024db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.367603][ T9132] RAX: ffffffffffffffda RBX: 00007f6001825fa0 RCX: 00007f600159e159 [ 378.367610][ T9132] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 378.367617][ T9132] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 378.367624][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.367630][ T9132] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 378.367645][ T9132] [ 378.696456][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.870'. [ 378.703233][ T30] audit: type=1800 audit(1788565526.831:607): pid=9134 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.870" name="memory_backed" dev="configfs" ino=25120 res=0 errno=0 [ 379.799873][ T30] audit: type=1326 audit(1788565527.931:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.1.872" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17bb79e159 code=0x0 [ 379.856388][ T30] audit: type=1400 audit(1788565527.991:609): avc: denied { read } for pid=9141 comm="syz.6.873" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 379.858245][ T30] audit: type=1400 audit(1788565527.991:610): avc: denied { open } for pid=9141 comm="syz.6.873" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 380.562394][ T9161] syz.2.876 (9161): /proc/9161/oom_adj is deprecated, please use /proc/9161/oom_score_adj instead. [ 380.667602][ T30] audit: type=1400 audit(1788565528.791:611): avc: denied { write } for pid=9155 comm="syz.2.876" name="usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.667832][ T30] audit: type=1400 audit(1788565528.791:612): avc: denied { open } for pid=9155 comm="syz.2.876" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 380.922993][ T9143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.938424][ T9143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.945615][ T9143] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 381.015015][ T9143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 381.021337][ T9143] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 381.030980][ T9143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 381.038862][ T9143] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 381.048019][ T9143] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 381.054721][ T9143] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 381.064216][ T9143] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 381.070393][ T9143] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 381.085455][ T9143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.091957][ T9143] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 381.361723][ T5807] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 381.376030][ T5739] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 381.524064][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.524127][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.537602][ T5807] usb 8-1: Using ep0 maxpacket: 16 [ 381.546707][ T5807] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 381.556260][ T5739] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 381.570221][ T5739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.581045][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.586719][ T9170] FAULT_INJECTION: forcing a failure. [ 381.586719][ T9170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.586746][ T9170] CPU: 0 UID: 0 PID: 9170 Comm: syz.2.880 Not tainted syzkaller #0 PREEMPT(full) [ 381.586765][ T9170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 381.586775][ T9170] Call Trace: [ 381.586781][ T9170] [ 381.586788][ T9170] dump_stack_lvl+0x100/0x190 [ 381.586817][ T9170] should_fail_ex.cold+0x5/0xa [ 381.586840][ T9170] _copy_to_user+0x32/0xd0 [ 381.586867][ T9170] simple_read_from_buffer+0xcb/0x170 [ 381.586889][ T9170] proc_fail_nth_read+0x1af/0x230 [ 381.586910][ T9170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.586931][ T9170] ? rw_verify_area+0xce/0x6d0 [ 381.586954][ T9170] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 381.586973][ T9170] vfs_read+0x1e4/0xb40 [ 381.586989][ T9170] ? lock_acquire+0x1d1/0x380 [ 381.587007][ T9170] ? __fget_files+0x34/0x3d0 [ 381.587025][ T9170] ? __pfx_vfs_read+0x10/0x10 [ 381.587043][ T9170] ? find_held_lock+0x2b/0x80 [ 381.587067][ T9170] ? __fget_files+0x215/0x3d0 [ 381.587089][ T9170] ? __fget_files+0x21f/0x3d0 [ 381.587117][ T9170] ksys_read+0x12a/0x250 [ 381.587132][ T9170] ? __pfx_ksys_read+0x10/0x10 [ 381.587153][ T9170] do_syscall_64+0x123/0x790 [ 381.587176][ T9170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.587193][ T9170] RIP: 0033:0x7f7f59f5e98e [ 381.587207][ T9170] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.587222][ T9170] RSP: 002b:00007f7f5ad9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.587239][ T9170] RAX: ffffffffffffffda RBX: 00007f7f5ad9c6c0 RCX: 00007f7f59f5e98e [ 381.587250][ T9170] RDX: 000000000000000f RSI: 00007f7f5ad9c0a0 RDI: 0000000000000008 [ 381.587261][ T9170] RBP: 00007f7f5ad9c090 R08: 0000000000000000 R09: 0000000000000000 [ 381.587271][ T9170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.587281][ T9170] R13: 00007f7f5a226128 R14: 00007f7f5a226090 R15: 00007ffca0d27678 [ 381.587304][ T9170] [ 381.627624][ T5807] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.627653][ T5807] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 381.627713][ T5807] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.812148][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.812411][ T5739] usb 2-1: Product: syz [ 381.812434][ T5739] usb 2-1: Manufacturer: syz [ 381.812448][ T5739] usb 2-1: SerialNumber: syz [ 381.841284][ T9179] FAULT_INJECTION: forcing a failure. [ 381.841284][ T9179] name failslab, interval 1, probability 1, space 0, times 0 [ 381.841338][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.6.883 Not tainted syzkaller #0 PREEMPT(full) [ 381.841368][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 381.841387][ T9179] Call Trace: [ 381.841393][ T9179] [ 381.841399][ T9179] dump_stack_lvl+0x100/0x190 [ 381.841436][ T9179] should_fail_ex.cold+0x5/0xa [ 381.841480][ T9179] should_failslab+0xc2/0x120 [ 381.841509][ T9179] __kmalloc_noprof+0xfc/0x840 [ 381.841524][ T9179] ? rcu_is_watching+0x13/0xc0 [ 381.841549][ T9179] ? tomoyo_realpath_from_path+0xb6/0x690 [ 381.841607][ T9179] tomoyo_realpath_from_path+0xb6/0x690 [ 381.841634][ T9179] tomoyo_path_number_perm+0x23c/0x580 [ 381.841664][ T9179] ? tomoyo_path_number_perm+0x22e/0x580 [ 381.841692][ T9179] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 381.841747][ T9179] ? __lock_acquire+0x4c5/0x1ec0 [ 381.841776][ T9179] ? __fget_files+0x34/0x3d0 [ 381.841796][ T9179] ? find_held_lock+0x2b/0x80 [ 381.841816][ T9179] ? hook_file_ioctl_common+0x140/0x440 [ 381.841841][ T9179] ? __fget_files+0x21f/0x3d0 [ 381.841863][ T9179] security_file_ioctl+0xd3/0x230 [ 381.841890][ T9179] __x64_sys_ioctl+0xb7/0x210 [ 381.841917][ T9179] do_syscall_64+0x123/0x790 [ 381.841939][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.841955][ T9179] RIP: 0033:0x7fb9cfb9e159 [ 381.841970][ T9179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.842008][ T9179] RSP: 002b:00007fb9d0b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.842024][ T9179] RAX: ffffffffffffffda RBX: 00007fb9cfe25fa0 RCX: 00007fb9cfb9e159 [ 381.842036][ T9179] RDX: 0000200000000000 RSI: 000000004008af30 RDI: 0000000000000003 [ 381.842046][ T9179] RBP: 00007fb9d0b18090 R08: 0000000000000000 R09: 0000000000000000 [ 381.842057][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.842067][ T9179] R13: 00007fb9cfe26038 R14: 00007fb9cfe25fa0 R15: 00007ffff6422bd8 [ 381.842090][ T9179] [ 381.843805][ T9179] ERROR: Out of memory at tomoyo_realpath_from_path. [ 381.953184][ T30] audit: type=1400 audit(1788565530.081:613): avc: denied { watch } for pid=9182 comm="syz.2.884" path="/171/debug/kvm" dev="debugfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 382.046417][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 382.064137][ T9186] FAULT_INJECTION: forcing a failure. [ 382.064137][ T9186] name failslab, interval 1, probability 1, space 0, times 0 [ 382.064165][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.6.885 Not tainted syzkaller #0 PREEMPT(full) [ 382.064183][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 382.064193][ T9186] Call Trace: [ 382.064199][ T9186] [ 382.064206][ T9186] dump_stack_lvl+0x100/0x190 [ 382.064233][ T9186] should_fail_ex.cold+0x5/0xa [ 382.064256][ T9186] should_failslab+0xc2/0x120 [ 382.064276][ T9186] __kmalloc_noprof+0xfc/0x840 [ 382.064291][ T9186] ? rcu_is_watching+0x13/0xc0 [ 382.064312][ T9186] ? tomoyo_realpath_from_path+0xb6/0x690 [ 382.064334][ T9186] tomoyo_realpath_from_path+0xb6/0x690 [ 382.064357][ T9186] tomoyo_path_number_perm+0x23c/0x580 [ 382.064380][ T9186] ? tomoyo_path_number_perm+0x22e/0x580 [ 382.064404][ T9186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 382.064442][ T9186] ? __lock_acquire+0x4c5/0x1ec0 [ 382.064470][ T9186] ? __fget_files+0x34/0x3d0 [ 382.064490][ T9186] ? find_held_lock+0x2b/0x80 [ 382.064510][ T9186] ? hook_file_ioctl_common+0x140/0x440 [ 382.064535][ T9186] ? __fget_files+0x21f/0x3d0 [ 382.064556][ T9186] security_file_ioctl+0xd3/0x230 [ 382.064582][ T9186] __x64_sys_ioctl+0xb7/0x210 [ 382.064614][ T9186] do_syscall_64+0x123/0x790 [ 382.064636][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.064653][ T9186] RIP: 0033:0x7fb9cfb9e159 [ 382.064684][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.064698][ T9186] RSP: 002b:00007fb9d0b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.064715][ T9186] RAX: ffffffffffffffda RBX: 00007fb9cfe25fa0 RCX: 00007fb9cfb9e159 [ 382.064726][ T9186] RDX: 0000200000000100 RSI: 000000004024700a RDI: 0000000000000003 [ 382.064736][ T9186] RBP: 00007fb9d0b18090 R08: 0000000000000000 R09: 0000000000000000 [ 382.064746][ T9186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.064755][ T9186] R13: 00007fb9cfe26038 R14: 00007fb9cfe25fa0 R15: 00007ffff6422bd8 [ 382.064778][ T9186] [ 382.064785][ T9186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 382.100496][ T5807] usb 8-1: config 0 descriptor?? [ 382.318596][ T5739] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 382.318625][ T5739] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 382.327218][ T5739] usb 2-1: USB disconnect, device number 46 [ 382.426265][ T30] audit: type=1400 audit(1788565530.561:614): avc: denied { accept } for pid=9189 comm="syz.6.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.630458][ T5807] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0008/input/input27 [ 382.642502][ T9194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'. [ 382.654670][ T30] audit: type=1800 audit(1788565530.791:615): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.888" name="memory_backed" dev="configfs" ino=25325 res=0 errno=0 [ 382.672333][ T5739] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 382.697019][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.700748][ T5335] syz0: Port: 1 Link DOWN [ 382.709466][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.709566][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.710838][ T5335] syz0: Port: 1 Link ACTIVE [ 382.721807][ T5807] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 382.807966][ T5807] usb 8-1: USB disconnect, device number 16 [ 382.848040][ T5739] usb 2-1: not running at top speed; connect to a high speed hub [ 382.848093][ T5739] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 382.848903][ T5739] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.849711][ T9197] fido_id[9197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 382.897666][ T5739] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.897717][ T5739] usb 2-1: Product: syz [ 382.897960][ T5739] usb 2-1: Manufacturer: 闪挮ⵤ婷ࢲ茲릇𗕛 [ 382.897976][ T5739] usb 2-1: SerialNumber: syz [ 383.985318][ T5603] Bluetooth: hci6: command 0x0406 tx timeout [ 383.985370][ T5603] Bluetooth: hci5: command 0x0406 tx timeout [ 383.985384][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 383.985407][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 383.985435][ T5616] Bluetooth: hci1: command 0x0406 tx timeout [ 383.986798][ T5739] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 383.986826][ T5739] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -110 [ 383.997820][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 384.086108][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.087285][ T9203] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.087410][ T9203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.667641][ T5807] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 384.833667][ T5807] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 384.837379][ T5807] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.839041][ T5807] usb 7-1: config 0 has no interface number 0 [ 384.839813][ T5807] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 384.840467][ T5807] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 384.841478][ T5807] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.897839][ T5807] usb 7-1: config 0 descriptor?? [ 384.951578][ T9209] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 385.042553][ T5807] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 385.480463][ T5807] usb 7-1: USB disconnect, device number 27 [ 386.001759][ T5807] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 386.041759][ T5600] Bluetooth: hci5: command 0x0406 tx timeout [ 386.047999][ T5616] Bluetooth: hci3: command 0x0406 tx timeout [ 386.048091][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 386.048151][ T5616] Bluetooth: hci6: command 0x0406 tx timeout [ 386.053193][ T5600] Bluetooth: hci2: command 0x0406 tx timeout [ 386.063162][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 386.161745][ T5807] usb 7-1: device descriptor read/64, error -71 [ 386.263614][ T5723] usb 2-1: USB disconnect, device number 47 [ 386.421561][ T10] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 386.433626][ T5807] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 386.551841][ T10] usb 8-1: device descriptor read/64, error -71 [ 386.571934][ T5807] usb 7-1: device descriptor read/64, error -71 [ 386.608432][ T30] audit: type=1400 audit(1788565534.741:616): avc: denied { setopt } for pid=9232 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 386.682430][ T5807] usb usb7-port1: attempt power cycle [ 386.711674][ T5335] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 386.791826][ T10] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 386.862272][ T5335] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 386.875025][ T5335] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.885508][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.902335][ T5335] as10x_usb: device has been detected [ 386.908440][ T5335] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 386.921790][ T10] usb 8-1: device descriptor read/64, error -71 [ 386.938634][ T5335] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 386.970639][ T5335] as10x_usb: error during firmware upload part1 [ 386.977507][ T5335] Registered device Abilis Systems DVB-Titan [ 387.021662][ T5807] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 387.042568][ T10] usb usb8-port1: attempt power cycle [ 387.048179][ T5807] usb 7-1: device descriptor read/8, error -71 [ 387.056582][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 387.281903][ T5807] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 387.521649][ T10] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 387.797363][ T10] usb 8-1: device not accepting address 19, error -71 [ 388.601710][ T5603] Bluetooth: hci6: command 0x0406 tx timeout [ 390.150698][ T5807] usb 7-1: device descriptor read/8, error -71 [ 390.257035][ T5807] usb usb7-port1: unable to enumerate USB device [ 390.278677][ T10] usb 4-1: USB disconnect, device number 45 [ 390.294460][ T10] Unregistered device Abilis Systems DVB-Titan [ 390.296685][ T10] as10x_usb: device has been disconnected [ 390.406073][ T9255] FAULT_INJECTION: forcing a failure. [ 390.406073][ T9255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.406115][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.7.905 Not tainted syzkaller #0 PREEMPT(full) [ 390.406136][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 390.406148][ T9255] Call Trace: [ 390.406154][ T9255] [ 390.406162][ T9255] dump_stack_lvl+0x100/0x190 [ 390.406193][ T9255] should_fail_ex.cold+0x5/0xa [ 390.406219][ T9255] _copy_from_user+0x2e/0xd0 [ 390.406248][ T9255] __sys_bpf+0x2f5/0x4a30 [ 390.406271][ T9255] ? __pfx___sys_bpf+0x10/0x10 [ 390.406289][ T9255] ? find_held_lock+0x2b/0x80 [ 390.406311][ T9255] ? get_pid_task+0xfc/0x250 [ 390.406338][ T9255] ? get_pid_task+0xfc/0x250 [ 390.406367][ T9255] ? find_held_lock+0x2b/0x80 [ 390.406392][ T9255] ? rcu_read_lock_any_held+0x6a/0x90 [ 390.406416][ T9255] ? find_held_lock+0x2b/0x80 [ 390.406438][ T9255] ? ksys_write+0x190/0x250 [ 390.406456][ T9255] ? ksys_write+0x190/0x250 [ 390.406472][ T9255] ? lock_acquire+0x1d1/0x380 [ 390.406506][ T9255] ? fput+0x7c/0x100 [ 390.406528][ T9255] ? ksys_write+0x1ac/0x250 [ 390.406548][ T9255] ? __x64_sys_bpf+0xce/0x140 [ 390.406565][ T9255] __x64_sys_bpf+0xce/0x140 [ 390.406583][ T9255] ? do_syscall_64+0xae/0x790 [ 390.406604][ T9255] do_syscall_64+0x123/0x790 [ 390.406626][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.406645][ T9255] RIP: 0033:0x7f600159e159 [ 390.406660][ T9255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.406678][ T9255] RSP: 002b:00007f60024db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.406697][ T9255] RAX: ffffffffffffffda RBX: 00007f6001825fa0 RCX: 00007f600159e159 [ 390.406709][ T9255] RDX: 0000000000000050 RSI: 0000200000001f40 RDI: 000000000000000a [ 390.406721][ T9255] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 390.406732][ T9255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.406744][ T9255] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 390.406769][ T9255] [ 391.655414][ T30] audit: type=1400 audit(1788565538.801:617): avc: denied { cmd } for pid=9261 comm="syz.6.907" path="socket:[25835]" dev="sockfs" ino=25835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 392.391891][ T9276] netlink: 'syz.1.910': attribute type 1 has an invalid length. [ 392.434725][ T9276] bond1: entered promiscuous mode [ 392.440194][ T9276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.467883][ T9276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.468229][ T9276] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 392.468247][ T9276] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 392.474667][ T9276] bond1: (slave gre1): making interface the new active one [ 392.474695][ T9276] gre1: entered promiscuous mode [ 392.501400][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 392.503048][ T9276] bond1: (slave gre1): Enslaving as an active interface with an up link [ 392.612809][ T9279] bond1 (unregistering): (slave gre1): Releasing backup interface [ 392.612932][ T9279] gre1: left promiscuous mode [ 392.639282][ T9279] bond1 (unregistering): Released all slaves [ 392.754786][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.755126][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.299402][ T9286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=21584 sclass=netlink_route_socket pid=9286 comm=syz.6.913 [ 393.770576][ T9285] netlink: 'syz.6.913': attribute type 13 has an invalid length. [ 393.770594][ T9285] netlink: 'syz.6.913': attribute type 17 has an invalid length. [ 393.776524][ T30] audit: type=1400 audit(1788565541.891:618): avc: denied { map } for pid=9284 comm="syz.6.913" path="socket:[25863]" dev="sockfs" ino=25863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.776566][ T30] audit: type=1400 audit(1788565541.891:619): avc: denied { read } for pid=9284 comm="syz.6.913" path="socket:[25863]" dev="sockfs" ino=25863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 393.877988][ T9285] gretap0: refused to change device tx_queue_len [ 393.878268][ T9285] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 393.949440][ T5723] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 394.134995][ T5723] usb 8-1: Using ep0 maxpacket: 8 [ 394.142208][ T5723] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 394.156735][ T5723] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.170519][ T5723] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 394.186551][ T5723] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.222974][ T5723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.231287][ T5723] usb 8-1: Product: syz [ 394.237107][ T5723] usb 8-1: Manufacturer: syz [ 394.242783][ T5723] usb 8-1: SerialNumber: syz [ 394.397559][ T5723] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 394.436668][ T5723] usbtest 8-1:1.0: couldn't get endpoints, -22 [ 394.443976][ T5723] usbtest 8-1:1.0: probe with driver usbtest failed with error -22 [ 394.562820][ T5723] usb 8-1: USB disconnect, device number 21 [ 395.467599][ T9291] FAULT_INJECTION: forcing a failure. [ 395.467599][ T9291] name failslab, interval 1, probability 1, space 0, times 0 [ 395.467636][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT(full) [ 395.467649][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 395.467656][ T9291] Call Trace: [ 395.467660][ T9291] [ 395.467666][ T9291] dump_stack_lvl+0x100/0x190 [ 395.467687][ T9291] should_fail_ex.cold+0x5/0xa [ 395.467704][ T9291] should_failslab+0xc2/0x120 [ 395.467718][ T9291] __kmalloc_cache_noprof+0x91/0x6d0 [ 395.467735][ T9291] ? proc_thread_self_get_link+0x1a6/0x210 [ 395.467754][ T9291] proc_thread_self_get_link+0x1a6/0x210 [ 395.467770][ T9291] pick_link+0xac2/0x13c0 [ 395.467789][ T9291] ? selinux_inode_permission+0x14a/0x1130 [ 395.467804][ T9291] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 395.467822][ T9291] step_into_slowpath+0x9ba/0xf90 [ 395.467836][ T9291] ? __pfx_step_into_slowpath+0x10/0x10 [ 395.467849][ T9291] ? lookup_fast+0x2da/0x600 [ 395.467858][ T9291] ? inode_permission+0x374/0x620 [ 395.467876][ T9291] link_path_walk+0xf28/0x1cc0 [ 395.467893][ T9291] path_openat+0x1ac/0x2440 [ 395.467912][ T9291] ? __pfx_path_openat+0x10/0x10 [ 395.467934][ T9291] do_file_open+0x20e/0x430 [ 395.467956][ T9291] ? __pfx_do_file_open+0x10/0x10 [ 395.467982][ T9291] ? _raw_spin_unlock+0x28/0x50 [ 395.467994][ T9291] ? alloc_fd+0x471/0x7a0 [ 395.468012][ T9291] do_sys_openat2+0x10f/0x1e0 [ 395.468027][ T9291] ? __pfx_do_sys_openat2+0x10/0x10 [ 395.468041][ T9291] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.468059][ T9291] __x64_sys_openat+0x12d/0x210 [ 395.468075][ T9291] ? __pfx___x64_sys_openat+0x10/0x10 [ 395.468095][ T9291] do_syscall_64+0x123/0x790 [ 395.468109][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.468121][ T9291] RIP: 0033:0x7f17bb75e98e [ 395.468132][ T9291] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 395.468143][ T9291] RSP: 002b:00007f17bc724f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.468155][ T9291] RAX: ffffffffffffffda RBX: 00007f17bc7256c0 RCX: 00007f17bb75e98e [ 395.468163][ T9291] RDX: 0000000000000002 RSI: 00007f17bb83492b RDI: ffffffffffffff9c [ 395.468169][ T9291] RBP: 00007f17bb835024 R08: 0000000000000000 R09: 0000000000000000 [ 395.468176][ T9291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.468183][ T9291] R13: 00007f17bba26038 R14: 00007f17bba25fa0 R15: 00007ffe432a8da8 [ 395.468198][ T9291] [ 395.468597][ T9291] FAULT_INJECTION: forcing a failure. [ 395.468597][ T9291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.468620][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.1.915 Not tainted syzkaller #0 PREEMPT(full) [ 395.468634][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 395.468640][ T9291] Call Trace: [ 395.468645][ T9291] [ 395.468650][ T9291] dump_stack_lvl+0x100/0x190 [ 395.468669][ T9291] should_fail_ex.cold+0x5/0xa [ 395.468685][ T9291] strncpy_from_user+0x3b/0x2d0 [ 395.468697][ T9291] ? find_held_lock+0x2b/0x80 [ 395.468714][ T9291] path_getxattrat+0x102/0x430 [ 395.468731][ T9291] ? __pfx_path_getxattrat+0x10/0x10 [ 395.468745][ T9291] ? find_held_lock+0x2b/0x80 [ 395.468760][ T9291] ? ksys_write+0x190/0x250 [ 395.468783][ T9291] ? __pfx_ksys_write+0x10/0x10 [ 395.468798][ T9291] do_syscall_64+0x123/0x790 [ 395.468823][ T9291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.468834][ T9291] RIP: 0033:0x7f17bb79e159 [ 395.468844][ T9291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.468855][ T9291] RSP: 002b:00007f17bc725028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 395.468866][ T9291] RAX: ffffffffffffffda RBX: 00007f17bba25fa0 RCX: 00007f17bb79e159 [ 395.468874][ T9291] RDX: 00002000000012c0 RSI: 0000200000000180 RDI: 0000200000000040 [ 395.468881][ T9291] RBP: 00007f17bc725090 R08: 0000000000000000 R09: 0000000000000000 [ 395.468888][ T9291] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 395.468895][ T9291] R13: 00007f17bba26038 R14: 00007f17bba25fa0 R15: 00007ffe432a8da8 [ 395.468913][ T9291] [ 396.004881][ T5723] kernel write not supported for file /snd/midiC2D0 (pid: 5723 comm: kworker/0:7) [ 396.052526][ T9296] FAULT_INJECTION: forcing a failure. [ 396.052526][ T9296] name failslab, interval 1, probability 1, space 0, times 0 [ 396.052558][ T9296] CPU: 0 UID: 0 PID: 9296 Comm: syz.3.916 Not tainted syzkaller #0 PREEMPT(full) [ 396.052573][ T9296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 396.052580][ T9296] Call Trace: [ 396.052584][ T9296] [ 396.052590][ T9296] dump_stack_lvl+0x100/0x190 [ 396.052614][ T9296] should_fail_ex.cold+0x5/0xa [ 396.052631][ T9296] should_failslab+0xc2/0x120 [ 396.052647][ T9296] __kmalloc_cache_noprof+0x91/0x6d0 [ 396.052664][ T9296] ? proc_self_get_link+0x189/0x1f0 [ 396.052682][ T9296] proc_self_get_link+0x189/0x1f0 [ 396.052697][ T9296] pick_link+0xac2/0x13c0 [ 396.052715][ T9296] ? selinux_inode_permission+0x14a/0x1130 [ 396.052729][ T9296] ? __pfx_proc_self_get_link+0x10/0x10 [ 396.052745][ T9296] step_into_slowpath+0x9ba/0xf90 [ 396.052759][ T9296] ? __pfx_step_into_slowpath+0x10/0x10 [ 396.052773][ T9296] ? lookup_fast+0x2da/0x600 [ 396.052782][ T9296] ? inode_permission+0x374/0x620 [ 396.052800][ T9296] link_path_walk+0xf28/0x1cc0 [ 396.052817][ T9296] path_openat+0x1ac/0x2440 [ 396.052832][ T9296] ? __pfx_path_openat+0x10/0x10 [ 396.052849][ T9296] do_file_open+0x20e/0x430 [ 396.052870][ T9296] ? __pfx_do_file_open+0x10/0x10 [ 396.052896][ T9296] ? _raw_spin_unlock+0x28/0x50 [ 396.052908][ T9296] ? alloc_fd+0x471/0x7a0 [ 396.052931][ T9296] do_sys_openat2+0x10f/0x1e0 [ 396.052952][ T9296] ? __pfx_do_sys_openat2+0x10/0x10 [ 396.052974][ T9296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.052992][ T9296] __x64_sys_openat+0x12d/0x210 [ 396.053007][ T9296] ? __pfx___x64_sys_openat+0x10/0x10 [ 396.053027][ T9296] do_syscall_64+0x123/0x790 [ 396.053041][ T9296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.053053][ T9296] RIP: 0033:0x7f40ca35e98e [ 396.053064][ T9296] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.053075][ T9296] RSP: 002b:00007f40cb291f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 396.053087][ T9296] RAX: ffffffffffffffda RBX: 00007f40cb2926c0 RCX: 00007f40ca35e98e [ 396.053095][ T9296] RDX: 0000000000000000 RSI: 00007f40ca43475f RDI: ffffffffffffff9c [ 396.053102][ T9296] RBP: 00007f40ca435024 R08: 0000000000000000 R09: 0000000000000000 [ 396.053109][ T9296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.053116][ T9296] R13: 00007f40ca626038 R14: 00007f40ca625fa0 R15: 00007ffe5281fa78 [ 396.053131][ T9296] [ 396.131750][ T9297] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 396.131770][ T9297] netlink: 64 bytes leftover after parsing attributes in process `syz.3.916'. [ 396.131785][ T9297] nbd: must specify at least one socket [ 397.710878][ T9311] fuse: Bad value for 'group_id' [ 397.717548][ T9311] fuse: Bad value for 'group_id' [ 397.865361][ T30] audit: type=1400 audit(1788565546.001:620): avc: denied { ioctl } for pid=9313 comm="syz.2.925" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x500e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 397.906694][ T9314] FAULT_INJECTION: forcing a failure. [ 397.906694][ T9314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.906753][ T9314] CPU: 1 UID: 0 PID: 9314 Comm: syz.1.924 Not tainted syzkaller #0 PREEMPT(full) [ 397.906772][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 397.906782][ T9314] Call Trace: [ 397.906788][ T9314] [ 397.906796][ T9314] dump_stack_lvl+0x100/0x190 [ 397.906823][ T9314] should_fail_ex.cold+0x5/0xa [ 397.906845][ T9314] _copy_from_user+0x2e/0xd0 [ 397.906871][ T9314] copy_msghdr_from_user+0x9f/0x4c0 [ 397.906895][ T9314] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 397.906921][ T9314] ? lock_acquire+0x1d1/0x380 [ 397.906940][ T9314] ? get_pid_task+0x2a/0x250 [ 397.906963][ T9314] ___sys_sendmsg+0x106/0x1e0 [ 397.906986][ T9314] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.907007][ T9314] ? get_pid_task+0x106/0x250 [ 397.907036][ T9314] ? find_held_lock+0x2b/0x80 [ 397.907075][ T9314] __sys_sendmsg+0x160/0x210 [ 397.907092][ T9314] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.907122][ T9314] do_syscall_64+0x123/0x790 [ 397.907145][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.907162][ T9314] RIP: 0033:0x7f17bb79e159 [ 397.907177][ T9314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.907192][ T9314] RSP: 002b:00007f17bc725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.907209][ T9314] RAX: ffffffffffffffda RBX: 00007f17bba25fa0 RCX: 00007f17bb79e159 [ 397.907221][ T9314] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000008 [ 397.907231][ T9314] RBP: 00007f17bc725090 R08: 0000000000000000 R09: 0000000000000000 [ 397.907242][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.907252][ T9314] R13: 00007f17bba26038 R14: 00007f17bba25fa0 R15: 00007ffe432a8da8 [ 397.907282][ T9314] [ 397.977515][ T9307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.920'. [ 397.980314][ T30] audit: type=1800 audit(1788565546.111:621): pid=9307 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.920" name="memory_backed" dev="configfs" ino=25921 res=0 errno=0 [ 398.101682][ T5335] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 398.267914][ T5335] usb 3-1: not running at top speed; connect to a high speed hub [ 398.267963][ T5335] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.269169][ T5335] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 398.269205][ T5335] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 398.269241][ T5335] usb 3-1: config 1 interface 0 has no altsetting 0 [ 398.271723][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.271759][ T5335] usb 3-1: Product: syz [ 398.271786][ T5335] usb 3-1: Manufacturer: 㼃凫埲ᱥ嶜㵱剳痂탆祊⚑ꯈຓ 鶄됯硍㐛⊡臣邷䉳〼㉰Ე뷕ท膩悜上ໃ醲祴鼰杅橜⛌죩׌쳹틭⳪䩊뜩芰ᡬ淄遭윸蹢鍽渌逝㻆㢎覢ꄳꦺ艏梡ᗈ⚞饚ᆓ⣹觀 [ 398.271816][ T5335] usb 3-1: SerialNumber: syz [ 398.295027][ T9315] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 398.621889][ T9327] fuse: Bad value for 'fd' [ 398.819571][ T5335] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 398.948160][ T5335] usb 3-1: USB disconnect, device number 50 [ 399.324778][ T9336] FAULT_INJECTION: forcing a failure. [ 399.324778][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.338048][ T9336] CPU: 1 UID: 0 PID: 9336 Comm: syz.7.929 Not tainted syzkaller #0 PREEMPT(full) [ 399.338075][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 399.338087][ T9336] Call Trace: [ 399.338094][ T9336] [ 399.338102][ T9336] dump_stack_lvl+0x100/0x190 [ 399.338136][ T9336] should_fail_ex.cold+0x5/0xa [ 399.338163][ T9336] _copy_to_user+0x32/0xd0 [ 399.338195][ T9336] simple_read_from_buffer+0xcb/0x170 [ 399.338220][ T9336] proc_fail_nth_read+0x1af/0x230 [ 399.338244][ T9336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.338268][ T9336] ? rw_verify_area+0xce/0x6d0 [ 399.338294][ T9336] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 399.338315][ T9336] vfs_read+0x1e4/0xb40 [ 399.338333][ T9336] ? lock_acquire+0x1d1/0x380 [ 399.338351][ T9336] ? __fget_files+0x34/0x3d0 [ 399.338372][ T9336] ? __pfx_vfs_read+0x10/0x10 [ 399.338388][ T9336] ? find_held_lock+0x2b/0x80 [ 399.338419][ T9336] ? __fget_files+0x215/0x3d0 [ 399.338444][ T9336] ? __fget_files+0x21f/0x3d0 [ 399.338473][ T9336] ksys_read+0x12a/0x250 [ 399.338490][ T9336] ? __pfx_ksys_read+0x10/0x10 [ 399.338506][ T9336] ? __x64_sys_pselect6+0xff/0x1c0 [ 399.338535][ T9336] do_syscall_64+0x123/0x790 [ 399.338560][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.338580][ T9336] RIP: 0033:0x7f600155e98e [ 399.338597][ T9336] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.338615][ T9336] RSP: 002b:00007f60024dafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.338635][ T9336] RAX: ffffffffffffffda RBX: 00007f60024db6c0 RCX: 00007f600155e98e [ 399.338647][ T9336] RDX: 000000000000000f RSI: 00007f60024db0a0 RDI: 0000000000000003 [ 399.338658][ T9336] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 399.338668][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.338680][ T9336] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 399.338706][ T9336] [ 399.500176][ T9338] FAULT_INJECTION: forcing a failure. [ 399.500176][ T9338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.500203][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.1.930 Not tainted syzkaller #0 PREEMPT(full) [ 399.500222][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 399.500232][ T9338] Call Trace: [ 399.500238][ T9338] [ 399.500245][ T9338] dump_stack_lvl+0x100/0x190 [ 399.500272][ T9338] should_fail_ex.cold+0x5/0xa [ 399.500296][ T9338] _copy_from_user+0x2e/0xd0 [ 399.500322][ T9338] copy_msghdr_from_user+0x9f/0x4c0 [ 399.500345][ T9338] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 399.500372][ T9338] ? lock_acquire+0x1d1/0x380 [ 399.500388][ T9338] ? get_pid_task+0x2a/0x250 [ 399.500412][ T9338] ___sys_sendmsg+0x106/0x1e0 [ 399.500434][ T9338] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.500455][ T9338] ? get_pid_task+0x106/0x250 [ 399.500484][ T9338] ? find_held_lock+0x2b/0x80 [ 399.500519][ T9338] __sys_sendmsg+0x160/0x210 [ 399.500535][ T9338] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.500563][ T9338] do_syscall_64+0x123/0x790 [ 399.500585][ T9338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.500602][ T9338] RIP: 0033:0x7f17bb79e159 [ 399.500619][ T9338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.500635][ T9338] RSP: 002b:00007f17bc725028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.500652][ T9338] RAX: ffffffffffffffda RBX: 00007f17bba25fa0 RCX: 00007f17bb79e159 [ 399.500663][ T9338] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 399.500674][ T9338] RBP: 00007f17bc725090 R08: 0000000000000000 R09: 0000000000000000 [ 399.500684][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.500694][ T9338] R13: 00007f17bba26038 R14: 00007f17bba25fa0 R15: 00007ffe432a8da8 [ 399.500716][ T9338] [ 401.468873][ T9356] netlink: 24 bytes leftover after parsing attributes in process `syz.7.936'. [ 401.480695][ T30] audit: type=1800 audit(1788565549.621:622): pid=9356 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.936" name="memory_backed" dev="configfs" ino=26639 res=0 errno=0 [ 401.686528][ T30] audit: type=1400 audit(1788565549.821:623): avc: denied { connect } for pid=9344 comm="syz.1.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 401.799217][ T9364] evm: overlay not supported [ 402.042701][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 402.042943][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 402.068966][ T9366] ceph: No mds server is up or the cluster is laggy [ 402.221138][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 402.245309][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 402.516506][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 402.518470][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 402.591842][ T5807] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 402.796405][ T5807] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 402.809441][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.823629][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.857158][ T5807] usb 4-1: config 0 descriptor?? [ 402.974629][ T5807] pwc: Askey VC010 type 2 USB webcam detected. [ 403.047251][ T5739] libceph: connect (1)[c::]:6789 error -101 [ 403.054692][ T5739] libceph: mon0 (1)[c::]:6789 connect error [ 403.742106][ T5807] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.750598][ T5807] pwc: recv_control_msg error -32 req 02 val 2c00 [ 403.768024][ T5807] pwc: recv_control_msg error -32 req 04 val 1000 [ 403.777932][ T5807] pwc: recv_control_msg error -32 req 04 val 1300 [ 403.785615][ T5807] pwc: recv_control_msg error -32 req 04 val 1400 [ 403.792721][ T31] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 403.864892][ T9386] FAULT_INJECTION: forcing a failure. [ 403.864892][ T9386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.878358][ T9386] CPU: 1 UID: 0 PID: 9386 Comm: syz.6.942 Not tainted syzkaller #0 PREEMPT(full) [ 403.878386][ T9386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 403.878400][ T9386] Call Trace: [ 403.878407][ T9386] [ 403.878417][ T9386] dump_stack_lvl+0x100/0x190 [ 403.878449][ T9386] should_fail_ex.cold+0x5/0xa [ 403.878474][ T9386] _copy_from_user+0x2e/0xd0 [ 403.878504][ T9386] __sys_bpf+0x2f5/0x4a30 [ 403.878529][ T9386] ? __pfx___sys_bpf+0x10/0x10 [ 403.878546][ T9386] ? find_held_lock+0x2b/0x80 [ 403.878571][ T9386] ? get_pid_task+0xfc/0x250 [ 403.878590][ T9386] ? get_pid_task+0xfc/0x250 [ 403.878614][ T9386] ? find_held_lock+0x2b/0x80 [ 403.878637][ T9386] ? rcu_read_lock_any_held+0x6a/0x90 [ 403.878657][ T9386] ? find_held_lock+0x2b/0x80 [ 403.878675][ T9386] ? ksys_write+0x190/0x250 [ 403.878694][ T9386] ? ksys_write+0x190/0x250 [ 403.878707][ T9386] ? lock_acquire+0x1d1/0x380 [ 403.878735][ T9386] ? fput+0x7c/0x100 [ 403.878752][ T9386] ? ksys_write+0x1ac/0x250 [ 403.878767][ T9386] ? __x64_sys_bpf+0xce/0x140 [ 403.878780][ T9386] __x64_sys_bpf+0xce/0x140 [ 403.878794][ T9386] ? do_syscall_64+0xae/0x790 [ 403.878815][ T9386] do_syscall_64+0x123/0x790 [ 403.878834][ T9386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.878849][ T9386] RIP: 0033:0x7fb9cfb9e159 [ 403.878862][ T9386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.878876][ T9386] RSP: 002b:00007fb9d0b18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.878892][ T9386] RAX: ffffffffffffffda RBX: 00007fb9cfe25fa0 RCX: 00007fb9cfb9e159 [ 403.878902][ T9386] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 403.878910][ T9386] RBP: 00007fb9d0b18090 R08: 0000000000000000 R09: 0000000000000000 [ 403.878919][ T9386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.878928][ T9386] R13: 00007fb9cfe26038 R14: 00007fb9cfe25fa0 R15: 00007ffff6422bd8 [ 403.878949][ T9386] [ 403.992495][ T5807] pwc: recv_control_msg error -32 req 02 val 2000 [ 403.997623][ T31] usb 3-1: New USB device found, idVendor=8086, idProduct=0000, bcdDevice= 0.00 [ 403.997924][ T5807] pwc: recv_control_msg error -32 req 02 val 2100 [ 404.003264][ T5807] pwc: recv_control_msg error -32 req 04 val 1500 [ 404.014811][ T5807] pwc: recv_control_msg error -32 req 02 val 2500 [ 404.039427][ T5807] pwc: recv_control_msg error -32 req 02 val 2400 [ 404.056765][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.066367][ T5807] pwc: recv_control_msg error -32 req 02 val 2600 [ 404.082832][ T5807] pwc: recv_control_msg error -32 req 02 val 2900 [ 404.100321][ T30] audit: type=1800 audit(1788565552.231:624): pid=9388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.945" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 404.108872][ T9388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25083 sclass=netlink_route_socket pid=9388 comm=syz.7.945 [ 404.213047][ T5807] pwc: recv_control_msg error -32 req 02 val 2800 [ 404.228999][ T5807] pwc: recv_control_msg error -32 req 04 val 1100 [ 404.237194][ T5807] pwc: recv_control_msg error -32 req 04 val 1200 [ 404.247189][ T5807] pwc: Registered as video103. [ 404.255817][ T5807] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 404.461672][ T10] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 404.544923][ T31] hid-sensor-hub 0003:8086:0000.0009: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.2-1/input0 [ 404.601702][ T10] usb 8-1: device descriptor read/64, error -71 [ 404.841691][ T10] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 404.971689][ T10] usb 8-1: device descriptor read/64, error -71 [ 405.081963][ T10] usb usb8-port1: attempt power cycle [ 405.431662][ T10] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 405.462112][ T10] usb 8-1: device descriptor read/8, error -71 [ 405.711670][ T10] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 405.732216][ T10] usb 8-1: device descriptor read/8, error -71 [ 405.841954][ T10] usb usb8-port1: unable to enumerate USB device [ 406.269980][ T31] usb 3-1: USB disconnect, device number 51 [ 406.343532][ T5723] usb 4-1: USB disconnect, device number 46 [ 406.615577][ T5609] Bluetooth: hci0: unexpected event for opcode 0x1001 [ 406.670482][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.951'. [ 407.516144][ T9427] FAULT_INJECTION: forcing a failure. [ 407.516144][ T9427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.531391][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.2.957 Not tainted syzkaller #0 PREEMPT(full) [ 407.531411][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 407.531418][ T9427] Call Trace: [ 407.531425][ T9427] [ 407.531431][ T9427] dump_stack_lvl+0x100/0x190 [ 407.531463][ T9427] should_fail_ex.cold+0x5/0xa [ 407.531486][ T9427] _copy_from_user+0x2e/0xd0 [ 407.531512][ T9427] copy_msghdr_from_user+0x9f/0x4c0 [ 407.531539][ T9427] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 407.531558][ T9427] ? lock_acquire+0x1d1/0x380 [ 407.531575][ T9427] ? get_pid_task+0x2a/0x250 [ 407.531600][ T9427] ___sys_sendmsg+0x106/0x1e0 [ 407.531623][ T9427] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.531642][ T9427] ? get_pid_task+0x106/0x250 [ 407.531663][ T9427] ? find_held_lock+0x2b/0x80 [ 407.531688][ T9427] __sys_sendmsg+0x160/0x210 [ 407.531699][ T9427] ? __pfx___sys_sendmsg+0x10/0x10 [ 407.531718][ T9427] do_syscall_64+0x123/0x790 [ 407.531732][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.531745][ T9427] RIP: 0033:0x7f7f59f9e159 [ 407.531755][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.531767][ T9427] RSP: 002b:00007f7f5adbd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.531779][ T9427] RAX: ffffffffffffffda RBX: 00007f7f5a225fa0 RCX: 00007f7f59f9e159 [ 407.531787][ T9427] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 407.531794][ T9427] RBP: 00007f7f5adbd090 R08: 0000000000000000 R09: 0000000000000000 [ 407.531801][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.531808][ T9427] R13: 00007f7f5a226038 R14: 00007f7f5a225fa0 R15: 00007ffca0d27678 [ 407.531822][ T9427] [ 407.531943][ T31] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 407.712043][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 407.712967][ T31] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 407.732135][ T31] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 407.732159][ T31] usb 7-1: config 0 has no interface number 0 [ 407.732192][ T31] usb 7-1: config 0 interface 184 has no altsetting 0 [ 407.771676][ T2267] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 407.783799][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.783826][ T31] usb 7-1: Product: syz [ 407.783840][ T31] usb 7-1: Manufacturer: syz [ 407.783851][ T31] usb 7-1: SerialNumber: syz [ 407.795694][ T31] usb 7-1: config 0 descriptor?? [ 407.863010][ T9429] FAULT_INJECTION: forcing a failure. [ 407.863010][ T9429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.863063][ T9429] CPU: 0 UID: 0 PID: 9429 Comm: syz.3.958 Not tainted syzkaller #0 PREEMPT(full) [ 407.863084][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 407.863094][ T9429] Call Trace: [ 407.863100][ T9429] [ 407.863107][ T9429] dump_stack_lvl+0x100/0x190 [ 407.863132][ T9429] should_fail_ex.cold+0x5/0xa [ 407.863154][ T9429] _copy_from_user+0x2e/0xd0 [ 407.863179][ T9429] copy_msghdr_from_user+0x9f/0x4c0 [ 407.863202][ T9429] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 407.863234][ T9429] ? __lock_acquire+0x4c5/0x1ec0 [ 407.863256][ T9429] ___sys_recvmsg+0xdd/0x1a0 [ 407.863277][ T9429] ? __pfx____sys_recvmsg+0x10/0x10 [ 407.863298][ T9429] ? lock_acquire+0x1d1/0x380 [ 407.863331][ T9429] do_recvmmsg+0x2f3/0x740 [ 407.863354][ T9429] ? __pfx_do_recvmmsg+0x10/0x10 [ 407.863375][ T9429] ? lock_acquire+0x1d1/0x380 [ 407.863393][ T9429] ? __mutex_unlock_slowpath+0x35d/0x930 [ 407.863418][ T9429] ? __fget_files+0x21f/0x3d0 [ 407.863442][ T9429] __x64_sys_recvmmsg+0x22a/0x280 [ 407.863461][ T9429] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 407.863484][ T9429] do_syscall_64+0x123/0x790 [ 407.863505][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.863521][ T9429] RIP: 0033:0x7f40ca39e159 [ 407.863535][ T9429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.863551][ T9429] RSP: 002b:00007f40cb292028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 407.863567][ T9429] RAX: ffffffffffffffda RBX: 00007f40ca625fa0 RCX: 00007f40ca39e159 [ 407.863578][ T9429] RDX: 0000000000000001 RSI: 0000200000001c00 RDI: 0000000000000003 [ 407.863588][ T9429] RBP: 00007f40cb292090 R08: 0000000000000000 R09: 0000000000000000 [ 407.863598][ T9429] R10: 000000000000002b R11: 0000000000000246 R12: 0000000000000001 [ 407.863608][ T9429] R13: 00007f40ca626038 R14: 00007f40ca625fa0 R15: 00007ffe5281fa78 [ 407.863631][ T9429] [ 407.933648][ T2267] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 407.934476][ T2267] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.934495][ T2267] usb 8-1: config 0 has no interfaces? [ 407.934518][ T2267] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.942124][ T2267] usb 8-1: config 0 descriptor?? [ 408.203095][ T10] usb 8-1: USB disconnect, device number 26 [ 408.244014][ T9441] xt_bpf: check failed: parse error [ 408.681659][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 408.681713][ T5603] Bluetooth: hci0: command 0x0406 tx timeout [ 408.754031][ T31] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 408.754075][ T31] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 408.970102][ T31] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 408.981506][ T31] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 408.981557][ T31] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 408.981766][ T31] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 409.191222][ T9456] FAULT_INJECTION: forcing a failure. [ 409.191222][ T9456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.191266][ T9456] CPU: 0 UID: 0 PID: 9456 Comm: syz.7.966 Not tainted syzkaller #0 PREEMPT(full) [ 409.191287][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 409.191296][ T9456] Call Trace: [ 409.191302][ T9456] [ 409.191308][ T9456] dump_stack_lvl+0x100/0x190 [ 409.191337][ T9456] should_fail_ex.cold+0x5/0xa [ 409.191362][ T9456] _copy_from_user+0x2e/0xd0 [ 409.191388][ T9456] copy_msghdr_from_user+0x9f/0x4c0 [ 409.191411][ T9456] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 409.191438][ T9456] ? lock_acquire+0x1d1/0x380 [ 409.191454][ T9456] ? get_pid_task+0x2a/0x250 [ 409.191477][ T9456] ___sys_sendmsg+0x106/0x1e0 [ 409.191500][ T9456] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.191521][ T9456] ? get_pid_task+0x106/0x250 [ 409.191553][ T9456] ? find_held_lock+0x2b/0x80 [ 409.191588][ T9456] __sys_sendmsg+0x160/0x210 [ 409.191606][ T9456] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.191634][ T9456] do_syscall_64+0x123/0x790 [ 409.191657][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.191674][ T9456] RIP: 0033:0x7f600159e159 [ 409.191689][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.191705][ T9456] RSP: 002b:00007f60024db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.191723][ T9456] RAX: ffffffffffffffda RBX: 00007f6001825fa0 RCX: 00007f600159e159 [ 409.191734][ T9456] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 409.191745][ T9456] RBP: 00007f60024db090 R08: 0000000000000000 R09: 0000000000000000 [ 409.191761][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.191771][ T9456] R13: 00007f6001826038 R14: 00007f6001825fa0 R15: 00007ffcf00585f8 [ 409.191794][ T9456] [ 410.417939][ T9464] fuse: Unknown parameter 'grou00000000000000000000' [ 413.646278][ T10] usb 7-1: USB disconnect, device number 32 [ 413.710841][ T9480] syz.7.973 (9480) used greatest stack depth: 19848 bytes left [ 414.520428][ T9492] FAULT_INJECTION: forcing a failure. [ 414.520428][ T9492] name failslab, interval 1, probability 1, space 0, times 0 [ 414.520473][ T9492] CPU: 0 UID: 0 PID: 9492 Comm: syz.2.975 Not tainted syzkaller #0 PREEMPT(full) [ 414.520495][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 414.520505][ T9492] Call Trace: [ 414.520511][ T9492] [ 414.520519][ T9492] dump_stack_lvl+0x100/0x190 [ 414.520551][ T9492] should_fail_ex.cold+0x5/0xa [ 414.520587][ T9492] should_failslab+0xc2/0x120 [ 414.520611][ T9492] __kvmalloc_node_noprof+0x113/0x9b0 [ 414.520632][ T9492] ? __pfx_net_ctl_permissions+0x10/0x10 [ 414.520691][ T9492] ? proc_sys_call_handler+0x2c7/0x5a0 [ 414.520723][ T9492] proc_sys_call_handler+0x2c7/0x5a0 [ 414.520752][ T9492] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 414.520787][ T9492] vfs_write+0x6af/0x1050 [ 414.520806][ T9492] ? __pfx_proc_sys_write+0x10/0x10 [ 414.520833][ T9492] ? __fget_files+0x34/0x3d0 [ 414.520854][ T9492] ? __pfx_vfs_write+0x10/0x10 [ 414.520870][ T9492] ? find_held_lock+0x2b/0x80 [ 414.520913][ T9492] ksys_write+0x12a/0x250 [ 414.520931][ T9492] ? __pfx_ksys_write+0x10/0x10 [ 414.520957][ T9492] do_syscall_64+0x123/0x790 [ 414.520979][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.520999][ T9492] RIP: 0033:0x7f7f59f9e159 [ 414.521014][ T9492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.521032][ T9492] RSP: 002b:00007f7f5adbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 414.521051][ T9492] RAX: ffffffffffffffda RBX: 00007f7f5a225fa0 RCX: 00007f7f59f9e159 [ 414.521564][ T9492] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000003 [ 414.521737][ T9492] RBP: 00007f7f5adbd090 R08: 0000000000000000 R09: 0000000000000000 [ 414.521882][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.521997][ T9492] R13: 00007f7f5a226038 R14: 00007f7f5a225fa0 R15: 00007ffca0d27678 [ 414.522131][ T9492] [ 414.709718][ T3301] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 414.717967][ T9471] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 414.721554][ T30] audit: type=1400 audit(1788565562.851:625): avc: denied { create } for pid=9493 comm="syz.6.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 414.909849][ T9498] netlink: 5 bytes leftover after parsing attributes in process `syz.6.976'. [ 414.924095][ T9498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.646639][ T9496] netlink: 24 bytes leftover after parsing attributes in process `syz.7.978'. [ 415.678852][ T30] audit: type=1800 audit(1788565563.811:626): pid=9496 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.978" name="memory_backed" dev="configfs" ino=26986 res=0 errno=0 [ 417.417026][ T9504] syzkaller0: entered promiscuous mode [ 417.417058][ T9504] syzkaller0: entered allmulticast mode [ 417.508641][ T9506] FAULT_INJECTION: forcing a failure. [ 417.508641][ T9506] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.521697][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.2.982 Not tainted syzkaller #0 PREEMPT(full) [ 417.521727][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 417.521739][ T9506] Call Trace: [ 417.521746][ T9506] [ 417.521756][ T9506] dump_stack_lvl+0x100/0x190 [ 417.521824][ T9506] should_fail_ex.cold+0x5/0xa [ 417.521855][ T9506] get_futex_key+0x1d0/0x14f0 [ 417.521906][ T9506] ? __pfx_get_futex_key+0x10/0x10 [ 417.521932][ T9506] ? find_held_lock+0x2b/0x80 [ 417.521961][ T9506] ? futex_wake+0x4ea/0x5e0 [ 417.521999][ T9506] futex_wake+0xf4/0x5e0 [ 417.522028][ T9506] ? futex_wait+0x11e/0x370 [ 417.522063][ T9506] ? __pfx_futex_wake+0x10/0x10 [ 417.522127][ T9506] ? lock_acquire+0x1d1/0x380 [ 417.522165][ T9506] ? find_held_lock+0x2b/0x80 [ 417.522188][ T9506] ? __fget_files+0x215/0x3d0 [ 417.522206][ T9506] ? __fget_files+0x215/0x3d0 [ 417.522228][ T9506] do_futex+0x2b2/0x440 [ 417.522252][ T9506] ? __pfx_do_futex+0x10/0x10 [ 417.522277][ T9506] ? fput+0x7c/0x100 [ 417.522302][ T9506] __x64_sys_futex+0x34f/0x4d0 [ 417.522329][ T9506] ? __pfx___x64_sys_futex+0x10/0x10 [ 417.522376][ T9506] do_syscall_64+0x123/0x790 [ 417.522404][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.522425][ T9506] RIP: 0033:0x7f7f59f9e159 [ 417.522444][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.522474][ T9506] RSP: 002b:00007f7f5adbd0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.522496][ T9506] RAX: ffffffffffffffda RBX: 00007f7f5a225fa8 RCX: 00007f7f59f9e159 [ 417.522513][ T9506] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7f5a225fac [ 417.522527][ T9506] RBP: 00007f7f5a225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 417.522540][ T9506] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 417.522553][ T9506] R13: 00007f7f5a226038 R14: 00007ffca0d27590 R15: 00007ffca0d27678 [ 417.522582][ T9506] [ 417.610568][ T9507] fuse: Bad value for 'fd' [ 417.795059][ T9507] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 417.802820][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 417.840224][ T9512] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.984'. [ 417.840320][ T9507] veth1_macvtap: left promiscuous mode [ 418.007346][ T9516] FAULT_INJECTION: forcing a failure. [ 418.007346][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.007402][ T9516] CPU: 1 UID: 0 PID: 9516 Comm: syz.2.986 Not tainted syzkaller #0 PREEMPT(full) [ 418.007422][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 418.007433][ T9516] Call Trace: [ 418.007439][ T9516] [ 418.007445][ T9516] dump_stack_lvl+0x100/0x190 [ 418.007471][ T9516] should_fail_ex.cold+0x5/0xa [ 418.007493][ T9516] _copy_from_user+0x2e/0xd0 [ 418.007518][ T9516] copy_msghdr_from_user+0x9f/0x4c0 [ 418.007541][ T9516] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 418.007566][ T9516] ? _kstrtoull+0x144/0x200 [ 418.007583][ T9516] ? __pfx__kstrtoull+0x10/0x10 [ 418.007604][ T9516] ___sys_sendmsg+0x106/0x1e0 [ 418.007626][ T9516] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.007655][ T9516] ? __fget_files+0x34/0x3d0 [ 418.007689][ T9516] __sys_sendmmsg+0x20c/0x440 [ 418.007709][ T9516] ? __pfx___sys_sendmmsg+0x10/0x10 [ 418.007724][ T9516] ? ksys_write+0x190/0x250 [ 418.007763][ T9516] ? fput+0x7c/0x100 [ 418.007782][ T9516] ? ksys_write+0x1ac/0x250 [ 418.007796][ T9516] ? __pfx_ksys_write+0x10/0x10 [ 418.007816][ T9516] __x64_sys_sendmmsg+0x9c/0x100 [ 418.007832][ T9516] ? lockdep_hardirqs_on+0x7d/0x110 [ 418.007853][ T9516] do_syscall_64+0x123/0x790 [ 418.007873][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.007890][ T9516] RIP: 0033:0x7f7f59f9e159 [ 418.007905][ T9516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.007920][ T9516] RSP: 002b:00007f7f5adbd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 418.007937][ T9516] RAX: ffffffffffffffda RBX: 00007f7f5a225fa0 RCX: 00007f7f59f9e159 [ 418.007948][ T9516] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000004 [ 418.007959][ T9516] RBP: 00007f7f5adbd090 R08: 0000000000000000 R09: 0000000000000000 [ 418.007969][ T9516] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 418.007978][ T9516] R13: 00007f7f5a226038 R14: 00007f7f5a225fa0 R15: 00007ffca0d27678 [ 418.008001][ T9516] [ 418.081894][ T31] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 418.173735][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 418.183776][ T9520] openvswitch: netlink: IPv6 tunnel dst address is zero [ 418.233797][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 418.264843][ T31] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.264885][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 418.264919][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.267135][ T31] usb 2-1: config 0 descriptor?? [ 418.331628][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 418.337902][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 418.371108][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 418.379759][ T10] usb 7-1: config 0 has no interface number 0 [ 418.385985][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 418.394860][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.403008][ T10] usb 7-1: Product: syz [ 418.403056][ T10] usb 7-1: Manufacturer: syz [ 418.403069][ T10] usb 7-1: SerialNumber: syz [ 418.959630][ T10] usb 7-1: config 0 descriptor?? [ 419.411159][ T9530] fuse: Unknown parameter 'grou00000000000000000000' [ 419.461693][ T5723] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 419.481025][ T9532] netlink: 'syz.3.991': attribute type 5 has an invalid length. [ 419.489891][ T9532] ip6erspan0: entered promiscuous mode [ 419.496841][ T9534] netlink: 'syz.3.991': attribute type 5 has an invalid length. [ 419.630479][ T5723] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 419.650791][ T9510] loop0: detected capacity change from 0 to 1 [ 419.670498][ T31] usbhid 2-1:0.0: can't add hid device: -71 [ 419.677815][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 419.711507][ T31] usb 2-1: USB disconnect, device number 48 [ 420.151766][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 420.151808][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 420.163950][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.163990][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.164031][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.164056][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 420.164075][ T5723] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.261184][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.261223][ T5723] usb 3-1: Product: syz [ 420.261275][ T5723] usb 3-1: Manufacturer: syz [ 420.261288][ T5723] usb 3-1: SerialNumber: syz [ 420.263665][ T5723] usb 3-1: config 0 descriptor?? [ 420.417527][ T5723] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 420.521932][ T32] INFO: task syz.5.557:8014 blocked for more than 143 seconds. [ 420.521966][ T32] Not tainted syzkaller #0 [ 420.521992][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 420.522003][ T32] task:syz.5.557 state:D stack:28728 pid:8014 tgid:8011 ppid:6186 task_flags:0x400140 flags:0x00080002 [ 420.522069][ T32] Call Trac ** replaying previous printk message ** [ 420.522069][ T32] Call Trace: [ 420.522077][ T32] [ 420.522091][ T32] __schedule+0x1259/0x6920 [ 420.522119][ T32] ? __lock_acquire+0x4c5/0x1ec0 [ 420.522149][ T32] ? lock_acquire+0x1d1/0x380 [ 420.522170][ T32] ? __pfx___schedule+0x10/0x10 [ 420.522187][ T32] ? find_held_lock+0x2b/0x80 [ 420.522208][ T32] ? schedule+0x225/0x2c0 [ 420.522226][ T32] schedule+0xdd/0x2c0 [ 420.522244][ T32] cgroup_lock_and_drain_offline+0x383/0x800 [ 420.522275][ T32] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 420.522301][ T32] ? rcu_is_watching+0x13/0xc0 [ 420.522323][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.522350][ T32] ? bpf_lsm_capable+0x9/0x10 [ 420.522394][ T32] ? security_capable+0x80/0x260 [ 420.522421][ T32] cgroup1_get_tree+0xc2/0x1620 [ 420.522446][ T32] ? bpf_lsm_capable+0x9/0x10 [ 420.522467][ T32] ? security_capable+0x80/0x260 [ 420.522490][ T32] vfs_get_tree+0x92/0x320 [ 420.522514][ T32] path_mount+0x7d0/0x24c0 [ 420.522541][ T32] ? __pfx_path_mount+0x10/0x10 [ 420.522562][ T32] ? lockdep_hardirqs_on+0x7d/0x110 [ 420.522646][ T32] ? putname+0xb1/0x110 [ 420.522667][ T32] ? kmem_cache_free+0x127/0x6c0 [ 420.522698][ T32] ? __x64_sys_mount+0x293/0x310 [ 420.522721][ T32] __x64_sys_mount+0x293/0x310 [ 420.522750][ T32] ? __pfx___x64_sys_mount+0x10/0x10 [ 420.522780][ T32] do_syscall_64+0x123/0x790 [ 420.522802][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.522821][ T32] RIP: 0033:0x7fb73c39e159 [ 420.522836][ T32] RSP: 002b:00007fb73d1a8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 420.522856][ T32] RAX: ffffffffffffffda RBX: 00007fb73c626090 RCX: 00007fb73c39e159 [ 420.522868][ T32] RDX: 0000200000000640 RSI: 0000200000000600 RDI: 0000000000000000 [ 420.522890][ T32] RBP: 00007fb73c435024 R08: 0000000000000000 R09: 0000000000000000 [ 420.522901][ T32] R10: 0000000002208000 R11: 0000000000000246 R12: 0000000000000000 [ 420.522913][ T32] R13: 00007fb73c626128 R14: 00007fb73c626090 R15: 00007ffd8dafdd98 [ 420.522937][ T32] [ 420.522959][ T32] [ 420.522959][ T32] Showing all locks held in the system: [ 420.522968][ T32] locks held by kworker/0:1/10: 5, on CPU#0: [ 420.522982][ T32] #0: ffff8880232e0d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 420.523038][ T32] #1: ffffc900000f7d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 420.523091][ T32] #2: ffff88802b9021d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 420.523188][ T32] #3: ffff888020fd21d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 420.523269][ T32] #4: ffff888020fd31a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 420.523321][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 420.523334][ T32] #0: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 420.523444][ T32] locks held by getty/5362: 2, on CPU#0: [ 420.523458][ T32] #0: ffff8880247330a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 420.523584][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 420.523694][ T32] locks held by kworker/u8:12/5820: 7, last CPU#0: [ 420.523709][ T32] #0: ffff88807c658140 ((wq_completion)wg-kex-wg2#5){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 420.523771][ T32] #1: ffffc90004f57d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 420.523824][ T32] #2: ffff888037ccdaa0 (&peer->endpoint_lock){++-.}-{3:3}, at: wg_socket_send_skb_to_peer+0x5f/0x210 [ 420.523909][ T32] #3: ffffffff8edec000 (rcu_read_lock_bh){....}-{1:3}, at: send6+0x303/0xc40 [ 420.523962][ T32] #4: ffffe8ffffc69f08 (&({ do { const void __seg_gs *__vpp_verify = (typeof((dst_cache->cache) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((dst_cache->cache))) *)(( unsigned long)((dst_cache->cache))))); (typeof((__typeof_unqual__(*((dst_cache->cache))) *)(( unsigned long)((dst_cache->cache))))) (__ptr + (((__per_cpu_offset[(i)])))); }); })->bh_lock){+.-.}-{3:3}, at: dst_cache_set_ip6+0xed/0xb50 [ 420.524139][ T32] #5: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 420.524202][ T32] #6: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 420.524275][ T32] locks held by udevd/5983: 4, on CPU#1: [ 420.524291][ T32] #0: ffff888059cbe878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 420.524343][ T32] #1: ffff8880373df080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4f/0x2a0 [ 420.524403][ T32] #2: ffff8880583004b8 (kn->active#30){++++}-{0:0}, at: kernfs_seq_start+0xbc/0x2a0 [ 420.524463][ T32] #3: ffff888020fd21d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 420.524562][ T32] locks held by udevd/6298: 3, last CPU#0: [ 420.524578][ T32] #0: ffff88807e3ca460 (sb_writers#6){.+.+}-{0:0}, at: lookup_open+0x150/0x1990 [ 420.524648][ T32] #1: ffff8880354f6308 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_open+0xb13/0x1990 [ 420.524721][ T32] #2: ffffffff8edec060 (rcu_read_lock){....}-{1:3}, at: security_compute_sid+0x207/0x2120 [ 420.524783][ T32] locks held by syz.7.989/9522: 1, on CPU#1: [ 420.524799][ T32] #0: ffff88802b9021d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 420.524868][ T32] [ 420.524875][ T32] ============================================= [ 420.524875][ T32] [ 420.524886][ T32] NMI backtrace for cpu 1 [ 420.524899][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 420.524924][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 420.524934][ T32] Call Trace: [ 420.524950][ T32] [ 420.524957][ T32] dump_stack_lvl+0x100/0x190 [ 420.524988][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 420.525018][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 420.525102][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 420.525136][ T32] sys_info+0x141/0x190 [ 420.525161][ T32] watchdog+0xcb1/0x1030 [ 420.525187][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 420.525206][ T32] ? __pfx_watchdog+0x10/0x10 [ 420.525224][ T32] ? __kthread_parkme+0x18f/0x230 [ 420.525245][ T32] ? kthread+0x13a/0x450 [ 420.525265][ T32] ? __pfx_watchdog+0x10/0x10 [ 420.525282][ T32] kthread+0x373/0x450 [ 420.525305][ T32] ? __pfx_kthread+0x10/0x10 [ 420.525330][ T32] ret_from_fork+0x730/0xd60 [ 420.525353][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 420.525372][ T32] ? __switch_to+0x800/0x10f0 [ 420.525411][ T32] ? __pfx_kthread+0x10/0x10 [ 420.525434][ T32] ret_from_fork_asm+0x1a/0x30 [ 420.525463][ T32] [ 420.525516][ T32] Sending NMI from CPU 1 to CPUs 0: [ 420.525604][ C0] NMI backtrace for cpu 0 [ 420.525617][ C0] CPU: 0 UID: 0 PID: 6298 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 420.525633][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 420.525642][ C0] RIP: 0010:check_preemption_disabled+0x2a/0xe0 [ 420.525667][ C0] Code: 41 54 55 53 48 83 ec 08 65 8b 15 89 07 bc 08 65 8b 2d 92 07 bc 08 85 d2 74 0f 48 83 c4 08 89 e8 5b 5d 41 5c c3 cc cc cc cc 9c <58> f6 c4 02 74 ea 65 4c 8b 25 50 07 bc 08 48 89 fb 41 f6 44 24 2f [ 420.525680][ C0] RSP: 0018:ffffc900068ff928 EFLAGS: 00000046 [ 420.525693][ C0] RAX: ffff88802f7f2580 RBX: 0000000000000000 RCX: 0000000000000001 [ 420.525702][ C0] RDX: 0000000000000000 RSI: ffffffff8e4e2a0c RDI: ffffffff8c620f80 [ 420.525711][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 420.525720][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000002 [ 420.525728][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 420.525737][ C0] FS: 00007ff2bf399880(0000) GS:ffff888123b60000(0000) knlGS:0000000000000000 [ 420.525752][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.525761][ C0] CR2: 00007ff2bea623ec CR3: 000000007af4b000 CR4: 00000000003526f0 [ 420.525771][ C0] Call Trace: [ 420.525776][ C0] [ 420.525782][ C0] ? __kasan_check_byte+0x13/0x50 [ 420.525808][ C0] lock_acquire+0x176/0x380 [ 420.525824][ C0] ? tomoyo_domain+0xb2/0x150 [ 420.525840][ C0] ? tomoyo_profile+0x47/0x60 [ 420.525858][ C0] tomoyo_path2_perm+0x297/0x700 [ 420.525878][ C0] ? tomoyo_path2_perm+0x291/0x700 [ 420.525897][ C0] ? find_held_lock+0x2b/0x80 [ 420.525915][ C0] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 420.525933][ C0] ? try_to_unlazy+0x296/0x910 [ 420.525953][ C0] ? current_check_refer_path+0x2c4/0xe80 [ 420.525985][ C0] tomoyo_path_rename+0xfc/0x1a0 [ 420.526001][ C0] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 420.526018][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 420.526080][ C0] security_path_rename+0x18e/0x3c0 [ 420.526100][ C0] filename_renameat2+0x731/0xa60 [ 420.526123][ C0] ? __pfx_filename_renameat2+0x10/0x10 [ 420.526142][ C0] ? lock_acquire+0x1d1/0x380 [ 420.526155][ C0] ? __might_fault+0xc5/0x140 [ 420.526176][ C0] ? __might_fault+0xc5/0x140 [ 420.526200][ C0] ? do_getname+0x191/0x390 [ 420.526220][ C0] __x64_sys_rename+0x81/0xb0 [ 420.526239][ C0] do_syscall_64+0x123/0x790 [ 420.526257][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.526272][ C0] RIP: 0033:0x7ff2bec7acc7 [ 420.526285][ C0] Code: e8 5e a7 09 00 f7 d8 19 c0 5b c3 0f 1f 84 00 00 00 00 00 b8 ff ff ff ff 5b c3 66 0f 1f 84 00 00 00 00 00 b8 52 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 61 17 00 f7 d8 64 89 02 b8 [ 420.526299][ C0] RSP: 002b:00007ffce236cd98 EFLAGS: 00000206 ORIG_RAX: 0000000000000052 [ 420.526314][ C0] RAX: ffffffffffffffda RBX: 00005569d09711e0 RCX: 00007ff2bec7acc7 [ 420.526325][ C0] RDX: 00005569d071f010 RSI: 00007ffce236cdb0 RDI: 00007ffce236d1b0 [ 420.526335][ C0] RBP: 00005569d0965320 R08: 00000000000001e0 R09: 0000000000000000 [ 420.526345][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffce236cdb0 [ 420.526354][ C0] R13: 00007ffce236d1b0 R14: 0000000000000000 R15: 00005569d095d170 [ 420.526371][ C0] [ 420.561700][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 421.524989][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 421.534101][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 421.544144][ T32] Call Trace: [ 421.547414][ T32] [ 421.550337][ T32] dump_stack_lvl+0x100/0x190 [ 421.554998][ T32] vpanic+0x553/0x970 [ 421.558955][ T32] ? __pfx_vpanic+0x10/0x10 [ 421.563435][ T32] panic+0xd1/0xe0 [ 421.567135][ T32] ? __pfx_panic+0x10/0x10 [ 421.571530][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 421.577681][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 421.583862][ T32] ? watchdog.cold+0x1ec/0x234 [ 421.588649][ T32] watchdog.cold+0x1fd/0x234 [ 421.593240][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 421.599035][ T32] ? __pfx_watchdog+0x10/0x10 [ 421.603695][ T32] ? __kthread_parkme+0x18f/0x230 [ 421.608699][ T32] ? kthread+0x13a/0x450 [ 421.612937][ T32] ? __pfx_watchdog+0x10/0x10 [ 421.617599][ T32] kthread+0x373/0x450 [ 421.621657][ T32] ? __pfx_kthread+0x10/0x10 [ 421.626273][ T32] ret_from_fork+0x730/0xd60 [ 421.630863][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 421.635972][ T32] ? __switch_to+0x800/0x10f0 [ 421.640669][ T32] ? __pfx_kthread+0x10/0x10 [ 421.645267][ T32] ret_from_fork_asm+0x1a/0x30 [ 421.650048][ T32] [ 421.653447][ T32] Kernel Offset: disabled [ 421.657760][ T32] Rebooting in 86400 seconds..