last executing test programs: 8m23.965048557s ago: executing program 4 (id=24): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r1, &(0x7f0000000100)=""/107, 0x6b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) write$nci(r1, &(0x7f0000000100)=ANY=[], 0x4) (async, rerun: 64) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x0, 0x2, {0x5, @pix={0x18, 0x3, 0x34325842, 0x5, 0x2, 0xfff, 0x3, 0x0, 0x0, 0x2, 0x2, 0x3}}, 0x4}) 8m23.530460415s ago: executing program 4 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000140)={0xc}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0xffffffffffffffaf, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x1010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) 8m20.156593382s ago: executing program 4 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) write(r0, &(0x7f0000000540)="7628144e08a5f2f9a2941da59a66a0bdadf387f026743e494707d49c63b2ecf889cea3a86c182caae3d024229a8ce5a30b0fc397e2800b5d71e76e31bf478a512d187fad72922a661ca4c633ea6d9da4afdb07478de9952f89e90cc976cb8c7821b0394928912c074e4ea07d22c16718143cd0d4d49719f42a7e921cd4410dd37dda52b72f262ba8d66e2f7080ad7ed46b08d3807b161b6a029fd47b718f8b939177044881aa7a6b51ce1066fad471b040e1efab8b2c1827ebe1d3525c8926cef36888e7d0234be77b1c6b45cf759f9abccbe07273b2002ef6182f0cd5b0e82e240507543ebc1331030b7a1970e7d782e3fa10f1ec1589e416abb28c884df229f6a759e1caaaf8c01c359da306c3ca2a9a936af085e76419d26134c54d7bc8cbf8386213c7f295fd144138315ac0bc158889822ecbff39c84ffaa2335036907984ef55f41aac900fa8c18a1648bb4456d7aaa1a8921a293c36589e385a784b2a36c6945b4cd283522a60a8f7c5545ae139caa9ab8b0abf5a2b10f7ad212b3d225bfb97d16c231f8f0ba52d57e2af521e54be9c248c1b5d2c6649a07bfcc7699862a640758e515851946ac75e4ddabc853d431e361a0dcaa1dcc56f7c138378801613d8da1eec5a53485a40788c2661daaf54cce11cb9d2460c24acf2a1fcfb02860f50230f282c8a4a09160bea74b2d92eb25a036beca03685b34d78fd8bcbb264d8f6f6fda516a991c9595fc37bbb3fba025984c685a9471b3391bbbfcc6413b71b600c100c9704baeb235522dfc28a472793c859210cdca53a07141e151b6ba78e9cb07c20e303859d5a1fca46ffa0ab6e292e31c8f6a5480b6715d57c27ba7febf8a94e8513ccd054fd389efb36f81dbeb6bad08b1bcb5afffd0caab14de4b0dc7216c3b8b5a32b4f33913906ce48311f9379527880907679d6ec9f6c017f37d36b0eb6b6827ad02d7c8be89a6c187469edcd5f2480e13aa1343d29da53dd35778d47c7471518ef7c43923d7a9b8cbce7e7ad7137e185d2db7714ba9afadeb5020bfb074862a8b53b952ca020d1660b598fcb3a2b922f291f84889b7508435133fadbade657f2049619484c6f3b0b935484812316cd018b651cb5e9e949aea742e929a7116d2564877860315f6621de988ed3bf103a8e1deaf8f9050b0de68f4e7cd2856d530fe7205377fbf598fe65b88089c60605f9af3729e36cbd70f5470550f4d8298912dae6ae6ed8a0a6c14eeadc7e90b39fe62e051a4bb366c62e3080d27eac6589300d923057cd66c6d56d320b3d15fc80059dce8283c8c97f53388713ad26e2872952008f1fa7e3c3d829d87cfe28e0f3b9d36e65d70333c4a3df09c53aa0e276ab41e399f99284bc8ca7df22185287a24029e62a64bd7b9df78853b854d090c6ec2bff3359c30cb84f9d512698176574c8f256b792f409b9330c4bcf1e1d927c279af07ed26357fa4587706915e8778734b874122dcbc4ef511f6c2ea26e7e69155ccbdea8dc4bc4f802732306e37a58794a10791a5d2c62ec302fbb9dfceb9a859734f6e26db8e43c99e951e8be26a3d9c335985002c6a8fdd75cae7d2edcb096c20897ed5e28fc2af8a08916798270a4466ba16e3a3cb35eddaff6ec8a27b75ad2515a3c2a75f00d56c4492ba0b9422f6b14a64e6de8d16e630ae2885ef80006a2f8ed4dcac7692bc162b544761c88d035b916659cce9e43c42281ca833cacc40ed0a603d2392be26196c396c6bbaed0aa3eef43aae0696c691af5e5d0072acd8f5c78636b8cc4cf161bcc0acc51213d6602ecd2c6c58bef22085fdd4f9adf44f66ee19f2c60222d9dfa192e429d74b7c8ce2ea8adb63530bd15b7315cfe9077b1fb064fa86751ab38061aa0da4f043cf1d3e09842d62a79fb0e6f2b4e45220eb5df3c193a2e926e46c0fbf6c88f1ac4a41cbc915875fc367094c5ffce1618a76fdc7de5c03ed23c515bded193fcde3cfbdfbd81d6a7d6a36de2ca3128e7a7d52cbfccd3cea15d92f76b82b6fdc5b6d544ca4a6047385b805cd397ce98f3c92a50bf8ba24405e63726e393a88f63f1af3eccdb5a0b3abdb13111568d6eff2f63b6e327ee054390ed2da1a1127d2223dbca281c596a98685c63331470fb4fecbb63db96bcaa71b5d79e75570ae2510cc89c12e0412debdffc562ac9f2ed547a733ef62294b6899db5c89f0688bd4254b2b25b45e5d3f10301366234b911b849b59b61c7c12d6943dc0fdf2d09b8fe3eb95edb5fc3ca455ed9fef15bea30a13c2f3b242da4a5fb25c7ca22a68791c20e14646c713023f3629eba15de188845b6b4b423ee1fe953bb84a6daa9ad76564ad01b810a49a9af90f1a97ffe4c4ffd113a07d9889acc9aa0d81791e8adab8060f1e5a5d92aff308d8ec1b3097fa1984a4d093aadb8182c75f56aaebb55f53ccd8c60e9108e68ec03be93d461c28540fab4b7d5ba39820765b651ba28d00fdfa475cf5852612bb9a26e9c248e2b39357cf62c246547cf5ba6bf20ad5fb42a3e7e58cf0a2903a57bdf19e181feb603e257afc08960aa099617a15f0b6e3f0f7524af2c545bbe6255cc62d8496989c56a076283585f181effd46598faf9fa75bf89f3f48aa572a196d6acf605c5fe11e2ccce16d63fcb4f8e1575f5cbfb273b52dea23227f6f36930eb48cf2afff52171060483460c9e9145210099d34420b6fcfd7f83e3cb9cd51e8378995d0b06ac07cdfccb22d1b2b0fa5bc8f8c31fd89c5339030ee872ca71f6149ce687bd36f3ce8f15d122bf1459919fd44ebca9d20ebc5cef69c5cc052d1462e5892fad896b0de33c69ddced0cd3b29541972a6f5be637cf594755791e158abd3981cec50b8b7b4d0349c2b2002894b99da1fda8bf1ef0ac1c17785ad7f2bdc0292b87cf8a8f468ce175bac6e098cb305fd742a8d19f491957c9be46be5c64848b3b699dd3e3ed9db9354436101f342fa03795be7ace945d18ba0b2cab0875b3798ac6bf54a627aedce8b474fe3576d75224e10a7501eaa68e1f7186cb62f8b6b9fbebee87bb6c51c9954bcad7d06e6b3e7d6b2bd387623b860c92be09094465863cd8d55d9ffb298e04aa4f80619fb9358c767c305ebc02bd82be59cf80fd45aba53ae5079d88375273b8c17c697bddebe8d0e4ef802e2f3824353e208bc3059ea2dd43217c571111258e5b659e89808bf33dd24e0b6ddffbe7427777f5d2cd2d417bef6f2d09e83cf1c0f232b8231c26480ca98d018a89a760dc62a5190170c4ce49e7c233b3d14fc6e2f9dd9f42047b14d0d71347581c8b727e9155b0d4a47da5f37afcd13a9486b36d567734b7d9a03db87a9bce3b3a833e5b56e1aa362df1e91a5951d29df72f6f0e7812656467ce4f8619633c8ba4af7f88feccbc2704ef62004138aa7cd6bf242a22103cdd1eb770efece5ea065f271f4121e024969befd515f77283fd8a711c0e14adf64f9de535cc8031563f3a72386bc468edcc5f2981dc678a6d2bad70217f6352b0d84c925b57beaa2587bb59d1e2ff548b1df8d08be8230bfff0765398ee2e4282abcc92d2e4d8a2e1544f4f4def4bbd4dc613266cb3a892badb3a9219026d772db252596f3f05b492cd3ac6b41e6801a3f1e184921b6be66602e7abd352220bcf06566c9f6b6ad387f2ba7dac8745db23cdaa9765ed7797e18b2eba685f7b750846163b98054f51249093dbec2c7b7c01e1e15b6ef2b3f6070b3e8455f05b8f7663d3cfef81c968528eaa0ea7b9e67ac0259d93460f00a8b9c97d2a5a36699787ec86ec320ae1e081b3d4a07d7ae87e74b1584a111eb3d0c387bf846b456141245446c3858390c606e116447c48a91d13b9b928bbf5113669050c2326ad5a09dfc51e740a8c51696513b9bce1a84ad65b6792487e49ef7a06875140a59cbacfc2e65c763bb7cbba6e3b8682e656e72796e832097bb84278ae1ae253e99d6fad4cf70b9f9cd8f4075ecd98bd4072c1fe74635df7944446933cda1fae8f859ad17d81edca5586fafc04853b0bd10182bdced494f939e28ce72a9903effbf7ecd454b459add5483b7305c18705fcdfd77147d57367b777647c5b0cdd959cde6f339f1e083968187fc58090b2af60b8a57490f738a209d7540d2c23ce60f1a18785bcc490a2742d2257f0c654ff98fb8c1a6c2c5a2cdfacf7b32b164a881dd3f21d365e5196028baa820c0e0afdefc2271b8742462fdddee563540e107552f45b0e818b8808aed5685db21da47bac157a0620e4a470845bb4fbe63bc2dde713b887a36a1f13285b2fd97065ae6091c78cdf665ed6219c333a4fb7f8ac92810af4ed6734dd67c60be9a8a7d88d1abfbdf65d79ac108d7bf4535122fc3dba3cb3d572c6c0f5b95f42ee6c2ae833e1818eda15ff765279a28892faec7ae8d3f9ff5405599b7777ee12857e3b79e851cf47b53aaa77dab6517deae65e305390186a56f523aa2ed296cd2c073995d391a404e0133570a2aa44d3fee5c8683c860182b4748ae763c80d74badc0fe6a16af8377cbb43676c069febc503d32f80bd4f146094608267e2322f0e2c53bee236b4994ff3ff17a9c088b681b19d4a8250ee4b51ad7f5b1235b1a74737e20e0cb82f396f1b342f1ede17bf7e12173f37feb215acf1f2b7c0d68b664c36bfbaec4058cf923d390ba43021ec3bf3513ffa09a5f318a133ad125bb52cf94130ce3d28db3a180897205d996ce73252ada3fbb3c809b7c61288202b19dd5db864dcb92f62778a20ea690973f33ebcf4e37c38d98e3c5eacfc4bfc9e216e32f12662fddf2ae126fafd8b94f320208b33891dcdd1ef3ef4f221a617678f457539a3e6fda412da58db5871a1b326ed6068e1594463274ed66d95233af8314fcff37b03741d87843083492fe0adaa9a5be57503c69d62e50bc16fad05414ecb6ecac55a358d9d2685a869d3ea2f69a69b693931448f0513ccdf12074101d9088c02524fe9e31993bfe2a4b7fd2c1d05b4636bb06efe59b6bf2befd4d192fb3a076ee86c2ed0fa4e30192e4ce490838319675d0a42fa144adcc88b9a91a6cbdc6e38016c2dd9cbdd1e9ff379dcf03a9a905d4f4133801d3648a9941f290c6ec534f470422fa7c9321fe8aac708a486ded943f437ba90331aff3d8b097c31df23083d5a91dccaa10b1bb4fbd27d88c15bbdeaf9d3058eda2fce8e2fdaf36aff19c9230c16388d8fd59c6eae4223835be2a6a825e1a12a67f85d2f9c5e2af10605598b51153ac5e1f154d5e3f79ced70c43abc7e53e77e1ceb999a1eb097ceb03008975f5d5585e5181fa6493a5366cf39b1bcfb28fa4de7f42ba94298a680ec95bdc4ff0cd2f893f527024fb4b195d5c7ee546a8ec5eb75de084ada187ffa90c7e1b44a0d2b6735c66202835bdb617eb03dda9e69197de55ad2909b963f16bf81af7d264f30f783544edbd0356b2a6d4d8dfb7293cd1c151d8a9deb15af8ea771d2825b5c0962c97c517cc8b2fd30bbdcd74c33b840e1bd763402906bad940ac31588fee088035fd55838493f399e1e0b26696d449b82cdb9bc4f621e2e22b5ca9ceea926fbe0b8f23865ae8d645042316c76d707c9f09747abaef6ce6d4d50b9ab1b74df110391e219478895c22e3fb30a4cf789feb90230ae5111d085be5ba3c5612f7c33125f33d68725b3b3b7ff4b6391b52d3f34c4da1a415c50a1e2ac446365a3e8cd1d2840cf842ae45bcd6e4d0e9f2e337ffa476a52cc258abce2e5a5cb5957eeac5d7fb661516acab62a94fcad56b800aa8e4c4197d1bf989d2a3cdd7b0334c3f6b6946b034c7475b5a", 0x1000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0x1, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0xff, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xf, 0x2, 0x6, '\x00', 0x2}, {0xf, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x5, '\x00', 0x6}, {0x8, 0x9, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0xff}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3, '\x00', 0x8}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x6, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x7f}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x40, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8m15.004989972s ago: executing program 4 (id=41): r0 = syz_open_dev$vim2m(&(0x7f0000000200), 0xba2, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2b, 0x0, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x5}}, {@allow_other}]}}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x101041, 0x0) r5 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$TCSETSW2(r4, 0x5425, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f045}) ppoll(&(0x7f0000000300)=[{r0, 0x2007}], 0x1, 0x0, 0x0, 0x0) 8m13.045325156s ago: executing program 4 (id=49): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r0, @ANYBLOB='\x00'/11], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000848000/0x4000)=nil, 0x4000, 0x0, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x6, 0x0, 0x8) signalfd4(0xffffffffffffffff, &(0x7f0000000740)={[0x8000000000000001]}, 0x8, 0x80000) poll(0x0, 0x0, 0x6) futex(&(0x7f0000004000), 0x5, 0x300, 0x0, &(0x7f0000004000), 0xb0024000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 8m10.235087805s ago: executing program 4 (id=55): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000305"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x71467e54, 0x800) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/79) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000305"], 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x71467e54, 0x800) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/79) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) dup(r3) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) (async) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) (async) 7m55.070095271s ago: executing program 32 (id=55): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000305"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x71467e54, 0x800) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/79) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r5 = dup(r3) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000305"], 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$hiddev(&(0x7f00000000c0), 0x9, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x71467e54, 0x800) (async) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/79) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) dup(r3) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) (async) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) (async) 6m0.608950748s ago: executing program 5 (id=460): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r3}, 0x10) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) pipe(&(0x7f0000000100)) fanotify_init(0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) 5m56.581025274s ago: executing program 5 (id=475): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0xca, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback=0x7f00002f}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@broadcast}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@empty}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) 5m56.381706056s ago: executing program 5 (id=476): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffc) ioctl$KVM_CREATE_GUEST_MEMFD(r0, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) pipe2(0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000008, 0x3, 0x7fd, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0xfffffffd}, 0x0) r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r8, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0x2b}) io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r7, 0x1) r9 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r9, 0x84, 0x21, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[], 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) close(0xffffffffffffffff) 5m54.04088458s ago: executing program 5 (id=482): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0x4, 0x76, 0xfffffffffffffffd, 0xfffffffffffffffc]}, &(0x7f0000000080)=0x78) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x214, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TESTDATA={0x4b, 0x45, "86c174773f95329459d529b914e285404b1c29ca7eaf11667bdba620a152e148fcf1fb700f01d268fa6968427d7b3ed06e6f924a02af3d15f9577cbbd1dd6baf8a5359024dc313"}, @NL80211_ATTR_TESTDATA={0x71, 0x45, "83aa450969a55521efaf799360c8a4fa71c9e01b0f8db362d5630cd2734e07dc17997b04f893558bc7df191cd1437039e3bac893422d46064d709552cd66287fe921137ef467b0814007524323a9e390f681faa31ffd249a2c6e030da1ca492eb1c5ae3a7238edbe13396ee999"}, @NL80211_ATTR_TESTDATA={0x87, 0x45, "66bd03199a0fb8a298c0e540f4c4875e7ffd602c6dc0e647dff972c1c8f7f2e2e64e7033463d175084486c3a914cb74503090ba41007abceb2fb88333175eaca084ad4a196e44bd91ecb82afa8a9abee24f62d601c62bbb183e0566ab1a463a984c8611b0663013a312147687eca4131210b1e9df8b8d519458ccd68a7db3d54a8df4c"}, @NL80211_ATTR_TESTDATA={0x65, 0x45, "cb99554599025d3e16874e08ba9835010e9b3b53a6fc276781c5839bc2d3e498f8463cf111eeb34956dff248a71b08e29387ca8e2c0f9c9cf0b54e55ade8060c25bbcdaaf3f629f20c32fac20dca55af49d4d7204c83efb587f75e812e2f6ce32b"}, @NL80211_ATTR_TESTDATA={0x45, 0x45, "2e0cb1afcaf75e8dc19b631f4bcbf66f43ffd63eb25b76a30d590b7f3b544b1c802ac1b2b255a2bebb5b9129f91ead2b70946e4340ab046aeb86cea14e01023990"}]}, 0x214}, 0x1, 0x0, 0x0, 0x20044490}, 0x40) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000440)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x183201, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000004c0)=0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000500)=0x6) read$FUSE(r1, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000002580)={0x4, 0x35, {r4}, {0x0}, 0xc0c6, 0x2}) fstat(r1, &(0x7f00000025c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f0000002640)={0x78, 0x0, r5, {0x81, 0x2, 0x0, {0x2, 0xe, 0x1, 0x622323e4, 0x7fffffffffffffff, 0x7, 0x9, 0x5, 0x6, 0x1000, 0x1000, r7, r8, 0x36c, 0x3}}}, 0x78) r9 = accept4$ax25(r1, &(0x7f00000026c0)={{}, [@default, @remote, @bcast, @netrom, @bcast, @null, @remote, @rose]}, &(0x7f0000002740)=0x48, 0x80000) getsockopt$ax25_int(r9, 0x101, 0x6, &(0x7f0000002780), &(0x7f00000027c0)=0x4) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000002900)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x24, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x800) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002980), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000002a80)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002a40)={&(0x7f00000029c0)={0x54, r11, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = syz_usb_connect$uac1(0x5, 0x92, &(0x7f0000002ac0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x3, 0x1, 0x2, 0x20, 0xbd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf5, 0x2}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0xed, "abc8baa2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x2, 0x4, 0xff, 0xe5, 'vhk', "87461c"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd, 0x2, 0x7f, {0x7, 0x25, 0x1, 0x82, 0x3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9, 0x40, "", "d3fa"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x78, 0x4, {0x7, 0x25, 0x1, 0x80, 0x6, 0x3}}}}}}}]}}, &(0x7f0000002c40)={0xa, &(0x7f0000002b80)={0xa, 0x6, 0x311, 0x7, 0x5, 0xb, 0x0, 0x2}, 0x19, &(0x7f0000002bc0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x40, "9c434561e1f7d35e14866d2897fb8642"}]}, 0x1, [{0x4, &(0x7f0000002c00)=@lang_id={0x4}}]}) syz_usb_control_io$uac1(r12, &(0x7f0000002dc0)={0x14, &(0x7f0000002c80)={0x0, 0x21, 0x85, {0x85, 0x4, "d3c1236f20b13eda7e6aa75b90bd2f8a2010bf16b27801219662c2d75c5649ad98decd2fcfb055d2f9b9518cdf52872bf181a94a2d0980125068a7a2cd6c433b1aa3cdc8bbcee267347acadbfc566d4cbe2e9ddd792e587fdfb6fe9a4cbf3f11ad8820c80e9fb32ac604313af5be0de018a149f88ebeefb22d9d0bb4e0a6cff51f3f5a"}}, &(0x7f0000002d40)={0x0, 0x3, 0x4a, @string={0x4a, 0x3, "058439b1dc38ae0a450b5fe1dd266bad48990cda1ca159c46d592359e6e4166fa61e0e22e6174804e73df67dece7c0e375fcbc71a2f6124abd14ece3fc273c8bab60e7338321070c"}}}, &(0x7f00000030c0)={0x44, &(0x7f0000002e00)={0x0, 0x16, 0xe4, "957bda62c8ddf3d68e5d1fd1355187616b0bf1e56bdfccb78a9cd055a6524ad1635185daeda9891356caec87b6b3337d29198d7988a295274f51edd490955b66cd2221896db4488b054528c270d0ce564d97332faafb2c8368417a52dac7ff74efa4ac8116bd4aca0a9a19679581b5220ef70717fb2f15a8fe7c5068377cee10e5b69d1ec3ad9483f05a90330d61c754eee90dd9953d7c4daad4dff82d86e4f06d4a0d44741bbcfef9f4aedfbe6c2ede4449d100d75aca91e2385eaf0c0c80ce3761c7eaaa04067d7a0def84f93bd7ec841315ce383784eb60acf173603fef0c11003d31"}, &(0x7f0000002f00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002f40)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000002f80)={0x20, 0x81, 0x1, "06"}, &(0x7f0000002fc0)={0x20, 0x82, 0x1, "ab"}, &(0x7f0000003000)={0x20, 0x83, 0x2, "728e"}, &(0x7f0000003040)={0x20, 0x84, 0x2, "17e1"}, &(0x7f0000003080)={0x20, 0x85, 0x3, "9aa417"}}) timer_create(0x0, &(0x7f0000003140)={0x0, 0x6, 0x1, @tid=r6}, &(0x7f0000003180)=0x0) timer_settime(r13, 0x1, &(0x7f00000031c0)={{}, {0x77359400}}, &(0x7f0000003200)) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000035c0)={&(0x7f00000034c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@enum64={0xe, 0x2, 0x0, 0x13, 0x1, 0x8, [{0x8, 0x6, 0x3}, {0x4, 0x8, 0x9}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f0000003540)=""/78, 0x42, 0x4e, 0x1, 0xfffffffc}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003700)={0x18, 0x25, &(0x7f0000003240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x6}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000003380)='syzkaller\x00', 0x0, 0xce, &(0x7f00000033c0)=""/206, 0x40f00, 0x33, '\x00', 0x0, 0x0, r14, 0x8, &(0x7f0000003600)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000003640)={0x5, 0x9, 0x80000001, 0x2169}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003680)=[0x1], &(0x7f00000036c0)=[{0x0, 0x4, 0x1, 0xa}, {0x5, 0x3, 0x8, 0x4}], 0x10, 0xffffc000}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000037c0), r1) close(r15) pwritev(r1, &(0x7f0000003bc0)=[{&(0x7f0000003800)="55ccc295ff8234243cb54037656dfff8b38629747ebccf13ccaa0d05db223c77763ab85fc12f6f87df4dcb5244dd304f5db7a09448b6ba", 0x37}, {&(0x7f0000003840)="7b336dd5cac92aba66514372b2b736551abcff8e9a764e933e179ca230356d8449f6cd6dfedd232d9279bbd4f13b78364ae90609ec0539f7a62ee8f8f34c944c1184eddf385a765e461896e9b3bd41cfb1ca0f8562d1f3931d73202f198dde274a32713c5c9baa96280aa1f87ecc397d69827bb3ffc99ca5f74b433415d9f4754f21620f5f502964da37da81c3e2665256f6e1e61a67a8e34ea87e5cd50b45141d5cf3d3c9f5ab30ed117fc2376214395e648781be03299081815923", 0xbc}, {&(0x7f0000003900)="84130226151ce998f06dc516cd5be3c1023b34b6234c42fdd4d908ac86e36ebe5f36a4ac330e169128d0974df7a5d7e9072e2dfa64abbaad4c33a40544c2f71e0be38cf033de7673fc43148aed50ef34dfaf9312e82b9d9711da2a1939d023ad9cbab0622db03e67", 0x68}, {&(0x7f0000003980)="da2fa0a4e0ab75c22e3e66be88936ac8ac6cc6baf3b5acf0e3d07b43fadccbfca97fb19ec88a88890ba81287299cb60e3bfd8a9a6198fc39396114ba64ccd5730de20eb6a5a8e3a04fca5bfa4088aee44ec68d04de83dd5afe716091bf6f04597b2c1b2a5b2f9f79f8d31f48441b4f94a6ea7db0c9d6fc31fd473cf7dae329d2a615784ea768326bae5fa45b94c5059a9dcf2e303ce39b57a8eaa9246a7b3d57e31de71cd11e55de300ee9655f060d3c6d76168a3a9d265586035bd5955e6e4ee244c365b75089cf035117572aa7ec823ba2609dc576e1d1119d81b6293db3619f0d8ea96e9f4452e3cc9f2b666b", 0xee}, {&(0x7f0000003a80)="0777db922d06e5200c2080695aa7d9ac4e5d0dd8edd31f1e612564c591d9e0aba9426c4fedb050e46ab6ddf840f22cf71cf3a508be07f1ce141fd8fa9a7113b26405765b44bef55ed6723d428feefa80eeb5c0f07c55fcc7d3d7634da2e472163d177c3bee9fb00d4ea77f28d2026ab84001063b296de364eb779a88659eec526e79b0766db38d58312d96a68b34e67d59a7be807aa00bb66018308af7564901bfa35675f29ba4a70bfb4ef2bdcfa7931c9b67aea5", 0xb5}, {&(0x7f0000003b40)="a7b346c961c7818bf8f7db", 0xb}, {&(0x7f0000003b80)="b7ed8f5f12c9393ee8be31587ddd9093073ca16b03b9e407ecaab84f087ad5ac7da2cd47c38717b86c44730575d723da6853d0a1aa46aabf0d847fd3f72e81", 0x3f}], 0x7, 0x8, 0x0) 5m52.743347877s ago: executing program 2 (id=489): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r1, 0x10000000) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x9, 0x6}, {0x9, 0x5, 0xd, 0x2, 0x40, 0x5f, 0xa0, 0x9a}, {0x9, 0x5, 0x5, 0x3, 0x20, 0xa, 0x10, 0x10}}}}}}]}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000180)={0x3, @win={{0x8, 0x1000}, 0x7, 0x400000, 0x0, 0x6, 0x0, 0x9}}) r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 5m50.816027155s ago: executing program 5 (id=495): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x37303250, 0x0, 0x8, [{0x0, 0xfffffffd}, {0x0, 0x9}, {0x0, 0x188a}, {0xffff7fff}, {0x8}, {0x0, 0x19c}, {0xfffffffc, 0x80001}]}}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200000004009a1c6e8c41001a1d000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f0000000700)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r2, @ANYBLOB="e1d37668d005da014846a77d5b10c83e9b22fa9c86f241cc2ab867dd16c253a1c5fa4c1e01503b7135148e047b1458ceec030bf2031036892bb11f8442e2c222bfacde98b38eb1ea15c626c6033854456c2dd7150971a8ea7d0fd5243bd12a953a8c58fb04e20190701da61a3a501f70c94a6f0c80d2334bb1273f85a25c363380bf9c6e46dc7ffbd0fb5ea9838930e2f512a301bb7e556f6972b5", @ANYRES16=r7, @ANYBLOB="3e10c62cdde9319a694414e1550748fbec16e3c7d3d2534174bad405ef07e528bd26cc54eac7bb67ca2a32c63212ca196076b3f6bbc4bf5f6eaf", @ANYRES64=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x103}, 0x94) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x3f, 0x5, 0x401c0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x2, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) r9 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r9, 0x40049366, 0x0) 5m49.786206167s ago: executing program 5 (id=497): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x5) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1843, 0x0, 0x2000000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fffffbff00000000000080a0affd2f7bc2abc9addd6105fba3e29d42136987b6dc41dc5fa7dd57c621a47d0ee9c8d4c5"], 0x48) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r6, 0xc040128b, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b2000/0x1000)=nil, &(0x7f00005ce000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000922000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) 5m49.416924817s ago: executing program 2 (id=499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000080)={0x104, 0x2, {0xffffffffffffffff, 0x3, 0x4, 0x3, 0xffffffff}, 0x4}) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x7f, 0x0) read$msr(r5, &(0x7f0000000140)=""/177, 0xb1) 5m48.542565627s ago: executing program 2 (id=501): prlimit64(0x0, 0x3, &(0x7f0000000400)={0x405fc3, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000200000002000000070000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f8ffff00000000000000000000000000007a0000023f0000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000ebf21f8222f7090c8f4ce03ee4bc52000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x131, 0x0, 0x1, [{0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="d389b739db16900fa694084e33a5324f88a328d6"]}]}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a82c900442f00fc020000000000000000000000000000fe8000000000000000000000000000aa042088be0000000000000800000086dd080088be0000000010000000d5d5ab0100000000000000080022eb00000000200000000200000000000000000000000800655800"], 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x2c, 0x803, 0xfffffffd) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0800000012000000200012800e0001006970366772650000700000000c000280060002000104"], 0x40}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0x3, 0x4, {0x5, @pix_mp={0x12, 0x85be7, 0x33424752, 0x6, 0x3, [{0x80000004, 0x7}, {0x7ff, 0x4}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x6, 0x489aa92e}, {0x9}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x1}}, 0xfffffffd}) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5m42.989156436s ago: executing program 2 (id=508): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xf, 0x2, 0x400, 0x0, 0x9, 0x6}, {0x9, 0x5, 0xd, 0x2, 0x40, 0x5f, 0xa0, 0x9a}, {0x9, 0x5, 0x5, 0x3, 0x20, 0xa, 0x10, 0x10}}}}}}]}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 5m40.400113686s ago: executing program 2 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000180)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "a1ee206bf1c7506f731484b6a8ad6ba5fec73600c960a5e1e5c011531c7d96f6", "5f8d1da3bea3c456fef675c1b12460de", {"f9e400d5e0eec96a2ba94b486b52a6d4", "3942bc09e9bc342016741b7f661232b2"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@random="a1286ad57389", @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x2, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty, {[@lsrr={0x83, 0x7, 0xe0, [@rand_addr=0x64010102]}]}}, {0x4, 0x4e24, 0x10, 0x0, @opaque="b5ace4c70521b9b4"}}}}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) syz_emit_ethernet(0x2e, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x1, 0x20, 0x0, 0x97, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) (async) r6 = socket(0x2c, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00000000000000", @ANYRES32, @ANYBLOB="000000000071d30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp=r6}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) (async) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000140)=0xff) (async) open_tree(r6, &(0x7f00000000c0)='./file0\x00', 0x9001) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) 5m40.253821348s ago: executing program 2 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00098008000f008848"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5m34.400045188s ago: executing program 33 (id=497): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x1ff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r3 = syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x680) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x5) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000c80), 0x200007, 0x8482) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1843, 0x0, 0x2000000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat(r5, &(0x7f0000000180)='./file0\x00', 0xd40, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fffffbff00000000000080a0affd2f7bc2abc9addd6105fba3e29d42136987b6dc41dc5fa7dd57c621a47d0ee9c8d4c5"], 0x48) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CHANGE_FD(r6, 0xc040128b, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00002b2000/0x1000)=nil, &(0x7f00005ce000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000922000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) 5m24.849976252s ago: executing program 34 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x29, 0x11, 0x0, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c00098008000f008848"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m35.826165005s ago: executing program 1 (id=1176): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES64], 0x0}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000240)=""/163) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x511201, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x8, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x6}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) r5 = socket(0x2, 0x3, 0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) connect$l2tp(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) socket(0x10, 0x3, 0x0) 2m33.041009087s ago: executing program 1 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "288449de69ca3ee79bec5ca132c5f1e1a68c0ef27b716b3efecc054dd2d53b8f", "1b6b9686c764c9946364ebea8a23cb901b9e3b0ce82bff226af55c26d86fc282", "99a98e3cac1b8da3aa4e2df0e338eebbf2a3f7aa74126e0285a7001ad339a400", "2725f1e0313d394925e277f1f75ecff5f504f4d7e00094c715afdeda773d8546", "41da5547772c178f00baae1ce68da832385fb6230e25596c8199a6d6fdc89cab", "1ade427a4e93350233d46820", 0x5, 0x5, 0x6, 0xb, 0x3ff}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={0x0, &(0x7f0000000280), 0x0, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000300)=[0x0], &(0x7f0000000340)}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 2m30.716521502s ago: executing program 1 (id=1195): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x6df}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1600, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) 2m29.807281307s ago: executing program 1 (id=1199): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2m28.21303246s ago: executing program 1 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='>', 0x1, 0x20004891, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) listen(0xffffffffffffffff, 0xda8d) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x0, 0x800) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x5, 0xb1, 0x8, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000580)={0x2, 0x0, @ioapic={0x4000, 0xb, 0xfffffffe, 0xfffffffc, 0x0, [{0xc, 0x10, 0x8, '\x00', 0xb4}, {0x83, 0xd, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0x40}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x7, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0xa7, '\x00', 0x1}, {0x9, 0xdc, 0x6, '\x00', 0x7}, {0x1, 0xd, 0x15, '\x00', 0x8}, {0x8, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8d, 0x80, '\x00', 0xe0}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0x0, '\x00', 0xfd}, {0x6, 0x9b, 0x42, '\x00', 0x23}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x4}, {0xf, 0x6, 0x6}, {0x9, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0x15, 0xfd, 0x7, '\x00', 0x2}, {0x92, 0x6, 0xfa, '\x00', 0x42}]}}) 2m27.111747866s ago: executing program 1 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0)="5cbacbd181f2ed01cca6f4f4862323baf158a6ee6d9a9a8ed58cb6b0fde396c9be290d0c643eddbff6c945cf64eaf7418efc0f5bf04d0300ba0f48ec") bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r5], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r6) io_setup(0x8, &(0x7f0000001e00)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffff5, 0x682140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x1831, r9, 0x100000000) 2m11.498473411s ago: executing program 35 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x0, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000000), &(0x7f00000003c0)="5cbacbd181f2ed01cca6f4f4862323baf158a6ee6d9a9a8ed58cb6b0fde396c9be290d0c643eddbff6c945cf64eaf7418efc0f5bf04d0300ba0f48ec") bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r5], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r6) io_setup(0x8, &(0x7f0000001e00)) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffff5, 0x682140) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x1831, r9, 0x100000000) 9.842067772s ago: executing program 7 (id=1705): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x7, 0x81, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r2, 0x400, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x3921) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x8a883, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r3, 0x125f, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f2, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) 8.718871044s ago: executing program 6 (id=1708): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000380)={'tunl0\x00', r3, 0x40, 0x7800, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x2c, 0x14, 0x66, 0x4, 0x40, 0x2f, 0x0, @broadcast, @multicast1}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4c0081) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000080)={0x200, r0, 'id0\x00'}) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)={0x0, 0x14}, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 8.391917037s ago: executing program 7 (id=1711): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x5, 0x0, 0x4) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r7 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r7) 7.13072245s ago: executing program 0 (id=1717): r0 = msgget$private(0x0, 0x66a) msgsnd(r0, &(0x7f0000000000)={0x0, "a6d10f7358ecab6beb4df5a0f6dedb5cde803f08dcb09d53c520454e12c233021e3562e4c183c54c2a1781b6a6ab684c6ec35edbcd39085f33a3497794701cbbcf1593e89145969f90d9927746c071187a762fa4cf3631efa1643aa0731b0414e04219022cfc355667cdce8b809947232370fbef8f3cc9a7003491adf9e6f2c8a4e95eaf532f4a7b71b52c8b37de579632055605dcd7e78674834369031c80ca399d4e6025b48019"}, 0xb0, 0x800) syz_usb_connect$uac1(0x3, 0xd6, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x3, 0x0, 0x34, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x8}, [@extension_unit={0x7, 0x24, 0x8, 0x5, 0x10, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x101, 0x4, 0x0, 0x101, 0x6, 0xd4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xc, 0x1, 0x3, 0x4, "aec161", "ef9408"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x1, 0x1, 0x0, 0x3, "61a9ace9f8c45983"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x33, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x3, 0x6, "63b9a2cb2f9ec7a1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf, 0x83, 0xa, {0x7, 0x25, 0x1, 0x2, 0xf, 0x7fff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x2, 0xfc, "afee91"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x86}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x1ff, 0x2b}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x4, 0x3, {0x7, 0x25, 0x1, 0x82, 0x2, 0xe}}}}}}}]}}, 0x0) 6.791024647s ago: executing program 0 (id=1721): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000475000/0x2000)=nil, 0x2000) (async) mlock(&(0x7f0000475000/0x2000)=nil, 0x2000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0) mkdirat(0xffffffffffffffff, 0x0, 0x108) (async) mkdirat(0xffffffffffffffff, 0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x9, 0x0) mount$afs(&(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2020, &(0x7f00000005c0)={[{@flock_openafs}, {@dyn}, {@flock_openafs}], [{@uid_gt}, {@smackfsfloor={'smackfsfloor', 0x3d, 'J&'}}, {@measure}]}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x2, 0xffffffffffffffb3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4004000) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x42) (async) r5 = creat(&(0x7f0000000240)='./file1\x00', 0x42) r6 = fanotify_init(0xf00, 0x2) fanotify_mark(r6, 0x105, 0x8971, r5, 0x0) (async) fanotify_mark(r6, 0x105, 0x8971, r5, 0x0) syz_clone(0x10000000, &(0x7f00000004c0)="537f38c29e02daca5efdc23732f4e20d45021c3d5ca508b801bdcaf80ae43d830b96b4b7074a14aea1d73c6b76c5279610b0c3d4ea8b0acd923a4a26bacfcfb8e052872db87c1295761f6dd908930992e30d0717ea128c79a972cb72aa3bb168621a49e268185fbb5cb2c0abd583ce8acbe65a0b2d0530acdf3eaacaf9af8c297e69afa8fdbed76ee934e25e5c86d72cebcef86305f3f75c44a7ba0670395ba341ea116ba7bcb9fb0b2534271a982044b39e7dc57b3e4538058db9cc94c1056d0da4224fb13f3b530515f046", 0xcc, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)="dde669ba665a6ff98bacc3f1bb003fe14aed25b7a85a5f534a0167313a2937b5303d2058411359db5f13949bd58c001844a47ce05599fb37e4d64e0e570bdaeeaa17ee6b326c27c0") (async) syz_clone(0x10000000, &(0x7f00000004c0)="537f38c29e02daca5efdc23732f4e20d45021c3d5ca508b801bdcaf80ae43d830b96b4b7074a14aea1d73c6b76c5279610b0c3d4ea8b0acd923a4a26bacfcfb8e052872db87c1295761f6dd908930992e30d0717ea128c79a972cb72aa3bb168621a49e268185fbb5cb2c0abd583ce8acbe65a0b2d0530acdf3eaacaf9af8c297e69afa8fdbed76ee934e25e5c86d72cebcef86305f3f75c44a7ba0670395ba341ea116ba7bcb9fb0b2534271a982044b39e7dc57b3e4538058db9cc94c1056d0da4224fb13f3b530515f046", 0xcc, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)="dde669ba665a6ff98bacc3f1bb003fe14aed25b7a85a5f534a0167313a2937b5303d2058411359db5f13949bd58c001844a47ce05599fb37e4d64e0e570bdaeeaa17ee6b326c27c0") readv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/50, 0xff97}], 0x1) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') (async) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1e) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x20, r1, 0xd0b, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.632338806s ago: executing program 8 (id=1722): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x48c280, 0x0) dup(r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r2, 0x560c, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0x48c280, 0x0) (async) dup(r0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$TCSETA(r2, 0x560c, 0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) (async) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x2) (async) 5.232845847s ago: executing program 3 (id=1723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010725bd7000fcdbdfb303"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) 5.197783122s ago: executing program 6 (id=1724): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff690000000000010000001800000002000200861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={0x0}, 0x1) fanotify_init(0x1a, 0x800) r2 = fsopen(0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x8, 0x3, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x6a, 0x3, 0x0, 0x0) syz_clone3(0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x24044050) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'caif0\x00', 0x10}) 5.095722675s ago: executing program 3 (id=1725): fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r1, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x1800) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000300), &(0x7f0000000340)=0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/206, 0xce}, {&(0x7f0000000600)=""/185, 0xb9}, {&(0x7f00000006c0)=""/157, 0x9d}, {&(0x7f0000000780)=""/77, 0x4d}, {&(0x7f0000000800)=""/178, 0xb2}, {&(0x7f00000008c0)=""/244, 0xf4}], 0x7, &(0x7f0000000a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x38}, 0x40002042) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000ac0)={0x0, 0xfffffffe}) r7 = dup(r0) sendmsg$sock(r7, &(0x7f0000000e40)={&(0x7f0000000b00)=@sco, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b80)="721619443cbebd789ba4d35cb3143825bd15ea7defaec4ade14a2ced21bb081367fcc9cf5f8ee702878b526411987cfc4eb12f86a506dfa695f0ce5506d175e7ab1142ec0849a7bc2aa5c0a04f5e389642a548255f5e5bd7f3228090f70499db7081aab0aadd2cb89a06bf2ff47af49970ddb6614f57606bdadb8f5ef416d69914150462d2b3123d4d57c4eec62a", 0x8e}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="a5efa7f57e5dbf", 0x7}, {&(0x7f0000000cc0)="7dd6e91b95f00e440c7f0beb5e7e6ef54f67f2a5f87f514520007e88c6da31ed413b5e838be15596e15033281e305cec438ff13f926db7e15a7e6b", 0x3b}, {&(0x7f0000000d00)="6632496aa9e96c944cf8e6e09c01748e3fcee4036cf4c97c932a66eab3b9960f3de90323fa64801fbf1f5ca19e862133da8289582ebd876c1b44837e4851a386903a940d8a80e01733e9e862f54212e70db6604f833e34334747c41badc62efdf2ab51fe4a754c17235fb0ac12e9979685d766e15ecc1693b94b2c1c7d", 0x7d}], 0x5, &(0x7f0000000e00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x18}, 0x20008040) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000001ec0)={@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {&(0x7f0000000e80)=""/4096, 0x1000}, &(0x7f0000001e80), 0x4}, 0xa0) r9 = fsmount(r4, 0x1, 0xcd) syz_io_uring_setup(0x7dfd, &(0x7f0000001f80)={0x0, 0x29c4, 0x40, 0x0, 0x10d, 0x0, r9}, &(0x7f0000002000), &(0x7f0000002040)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), r2) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x30, r10, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x30}}, 0x0) setsockopt$packet_int(r7, 0x107, 0xe, &(0x7f00000021c0)=0x10001, 0x4) pipe2$watch_queue(&(0x7f0000002200), 0x80) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f00000023c0)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x7c, r12, 0xa00, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x281a34e760872fc7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) bind$rds(r7, &(0x7f0000002400)={0x2, 0x4e23, @remote}, 0x10) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000002540)={0x1, 0x2, 0x1000, 0x9a, &(0x7f0000002440)="eac62c3b1ac1e655ceac2ea970de55aae4accebba41fb82e6a9082eeef309c835b2db5796fced9e1409ca761b1f1eb193a3dc9799a3224a78e74cf835123f45575efd6b63516b45f63601f71e9106001fc394a4295a6672326ada1c98351425a0737c05eec6436c354afc29cd18e86f39f7559f2eadbba7e5afe4aa1bbc44d6f9a885d8625aef1e820a088bb7fe0ad879282560f0d876a6b3dd2", 0x23, 0x0, &(0x7f0000002500)="6110d69e80db94aacafa6773419e982600b4d6c187ca98ef4b625971cf3ea7b25ef177"}) sendmsg$TIPC_CMD_SET_NODE_ADDR(r9, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8040094) open(&(0x7f00000026c0)='./file0\x00', 0x101200, 0x80) lsetxattr$system_posix_acl(&(0x7f0000002700)='./file0\x00', &(0x7f0000002740)='system.posix_acl_default\x00', &(0x7f0000002780)={{}, {0x1, 0x4}, [{0x2, 0x1, r5}], {0x4, 0x2}, [{0x8, 0x2, r6}, {0x8, 0x6, r6}, {0x8, 0xad3fa4247e36824b, r6}, {0x8, 0x4, r6}, {0x8, 0x0, r6}, {0x8, 0x0, r6}, {0x8, 0x0, r6}], {0x10, 0x4}, {0x20, 0x4}}, 0x64, 0x0) 5.020801682s ago: executing program 8 (id=1726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) memfd_secret(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r10, 0x8010640b, &(0x7f00001859c0)={0xfdfd, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000004100)={0x0, 0x0, &(0x7f00000040c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x840) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x4000010) 4.961580617s ago: executing program 3 (id=1727): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x6, 0x8, 0x400, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x7b, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_getattr(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008050}, 0x80) 4.595499184s ago: executing program 0 (id=1728): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4804) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004580)="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", 0x2000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) flistxattr(r8, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fa3d, 0x2000, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x4040000) syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001214010025bd7000fbdbdf2508004f00000000000800156e051200000800010000000000080003000100000008004b0013001f00"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x40084) epoll_create1(0x0) listen(r0, 0x3) 4.348801284s ago: executing program 7 (id=1729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa00000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x7, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000003c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x1}, 0x10}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) creat(&(0x7f00000001c0)='./file0\x00', 0xd931d3864d39dc41) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x1fd, &(0x7f0000000480)=0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f00000004c0)={0xfffffffe, 0x20011004, 0x4, 0x1, 0xf0, r7, &(0x7f00000000c0)='!', 0x1, 0x0, 0x0, 0x3}]) dup3(r7, r5, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 4.242862427s ago: executing program 6 (id=1730): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000040)) close_range(r0, r0, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x3b}, @l2cap_cid_signaling={{0x37}, [@l2cap_move_chan_rsp={{0xf, 0xc5, 0x4}, {0x85f, 0x9}}, @l2cap_conf_rsp={{0x5, 0x2, 0x2b}, {0x7d6, 0xfff, 0x9, [@l2cap_conf_ews={0x7, 0x2, 0x5}, @l2cap_conf_mtu={0x1, 0x2, 0x1ff}, @l2cap_conf_fcs={0x5, 0x1, 0x1}, @l2cap_conf_mtu={0x1, 0x2, 0x10}, @l2cap_conf_efs={0x6, 0x10, {0x1, 0x2, 0x2, 0x4, 0x0, 0x5}}, @l2cap_conf_mtu={0x1, 0x2, 0x8}]}}]}}, 0x40) ioctl$SNDCTL_FM_LOAD_INSTR(r0, 0x40285107) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x2, @empty, 'netdevsim0\x00'}}, 0x1e) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'mangle\x00', 0x0, [0x2, 0x2000000, 0x9f1, 0x4, 0x401]}, &(0x7f0000000240)=0x54) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100) sendmmsg$sock(r0, &(0x7f0000000880)=[{{&(0x7f00000002c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000340)="478a96696bcf261af1d6351c4cbc367d8ee98091071d61679d865256c8adbf1d167b73e9bef4bd1133ccc1ee6b99df0f0c2f98ce22d5bb4365858e35d4dd62dfae410db27bcea39f980171ed0d227b05ef9a1cc2b329c702b0b81b3258c84d6d2cb6a36921ac856c24c21a6686a5c2cad8add779dd3462380d9dc4bf2c2727359aafeb00b93cc5df5fab11fb37068c3006b3155994a20ea1359b154656033d6546e7781f08316cebfd2460c18772f1c1ac034a4c0f4644ac0625aad7f8781da327ebc7d597b8c2a8ef2553c8c6fa6c8b21bd9f8985d991224a8285a1b06cfe58ee2a8fde329d262445", 0xe9}, {&(0x7f0000000440)="822148a336099f58f7c66f0a6a5759b831c94e735222672defdbf13a14f08cba2836ad5df6148f30cc8c53641e33e0e15d05059329f05704ec3e4abd4b5acf92cacd470177d3f83f07bd8d7300715f45068d0cfe2d25536bc4d3af323383263c6995ef85a7ddb1323acad95ee706755310bdc26f9d8ae591042b3c8ccf84104569bc3b5b99ff1b2472b1a12628", 0x8d}], 0x2, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xdc1}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8000}}], 0x90}}, {{&(0x7f0000000600)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)="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", 0xfa}, {&(0x7f0000000780)="793c3f4b21ba050e592a3e78cbe463f5fdf1589e5b4d8756ec77b5b945023e586369133e3d32c9b8e1e99c7216b24cb07756ff195dcae3f4de8e759e99c7316e611d45aefe045449b813bd4a11b215ea7a03b76b04fc36e4529092b0dbd9", 0x5e}], 0x2, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}}], 0x2, 0x8000) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000900)=0x8, &(0x7f0000000940)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup/syz0\x00', 0x1ff) openat2$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x100, 0x1}, 0x18) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000b00)=0xc295) writev(r1, &(0x7f0000001d40)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="44081703c088b83729ee40484a219e130b8dcde8459a38ebf4d7f988807e261aacf808294b564b207eca2f210c7e927367f365bb07a48d5647d5a7f17c8f779d97f023c4a121b3f62f38d1fdb7dd40eb148c9ff08454b6ae8a44203873b04fcb4b188bc25c8c54c661f24b5865c05dba00179d6280c4", 0x76}, {&(0x7f0000001c40)="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", 0xfd}], 0x3) sched_setscheduler(0x0, 0x5, &(0x7f0000001d80)=0x10) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x24, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000041}, 0x20000000) 4.211699268s ago: executing program 8 (id=1731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x54f7bfe6}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x4000010) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6a}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x810) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="59c03b71bcc2"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ad5e0c3f891f"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="819e5cc9cf46"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="d74c4ffde18c"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8f98eff95e65"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e8f14cf2afe0"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000081) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x94, r2, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x6, 0xd}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x22f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3fe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) semget$private(0x0, 0x2, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, r5, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xf}, @NL80211_ATTR_HE_BSS_COLOR={0x28, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x38}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3c}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048881}, 0x20000010) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}}, 0x8801) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2f0f, 0x2d}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4c080) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3c5}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x42a}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4bc}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x81009431, &(0x7f0000000a40)) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b40), 0x200000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000b80)={{0x2, 0x3, 0x1, 0x1, 0x2}, 0x0, 0x2, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0x7fff, 0x4, 0xffff}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x40}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000806}, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000e00), r10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e80), r8) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x20, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}]}, 0x20}}, 0x4000844) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1c, 0x1, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0xe2e, '\x00', r12, r7, 0x3, 0x3, 0x4}, 0x50) mknod$loop(&(0x7f0000001040)='./file0\x00', 0x800, 0x1) 3.684714431s ago: executing program 6 (id=1732): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x22, 0x2, 0x2) recvmsg$kcm(r2, 0x0, 0x101) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x4, 0x2, {0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x39}, 0x2}}}, 0x32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000009b000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000100"/28], 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) open(&(0x7f0000000240)='./file1\x00', 0x1611c0, 0x0) 3.680136586s ago: executing program 3 (id=1733): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x6, 0x8, 0x400, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c6970001400078008"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008050}, 0x80) 3.625379574s ago: executing program 8 (id=1734): r0 = socket$kcm(0x10, 0x2, 0x0) ioperm(0x83, 0x6, 0x8) iopl(0x3) iopl(0x0) (async) iopl(0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000005000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 3.497553817s ago: executing program 0 (id=1735): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="000000000000000200000033b5533f7a30b9c2000080000000000000"], 0x50) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x20, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000adb000/0x7000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000774000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000513000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0000000ed0320002dbd7000fddbdf255095a900343c5b7c33841dd2e4b9238ad3ac5acd6114fe85d6909a838498a035dbfe922d0481a14a5a3bfcb0026c3a4611b704be78b122e2bb149ba2bb1c8ffa42925683e32092263c90cddb23688d04f260fdcfbe19c806f75a7bcc054ab605bf565f65dfdf15ad8dbf76d41d9c7f0ab509e595db9e3ca25deedb6f40f337bf926517ec0085cdc67d79ebf6cc4cbd03ec0d8b21c99db86caafe3029de360cb97dbf49befcf56aab7f7bc64efd7d2096290d3ebd0fa658fb48408a8947ba4668af765a8a56e87f46ba0ceb6a6392a5be5c0000"], 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x4c085) io_uring_setup(0x5, &(0x7f0000000580)={0x0, 0x3c1c, 0x1000, 0x13, 0x407a}) r4 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0x72d5, 0x8, 0x3, 0x6}, &(0x7f0000000400), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000001080)=[{0x2, 0x1, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)=""/115, 0x73}, {&(0x7f00000003c0)=""/30, 0x1e}], &(0x7f00000006c0)=[0x9a, 0x3, 0x3, 0x7, 0x43, 0x6, 0x5f]}, {0x3, 0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/17, 0x11}, {&(0x7f0000000740)=""/8, 0x8}, {&(0x7f0000000780)=""/92, 0x5c}], &(0x7f0000000840)=[0x8000000000000001, 0x400000000000]}, {0x1, 0x1, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/223, 0xdf}], &(0x7f00000009c0)}, {0x4, 0x1, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/113, 0x71}, {&(0x7f0000000a80)=""/104, 0x68}, {&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000bc0)=""/160, 0xa0}], &(0x7f0000000cc0)=[0x3]}, {0x5, 0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/133, 0x85}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/170, 0xaa}, {&(0x7f0000000e80)=""/36, 0x24}, {&(0x7f0000000ec0)=""/219, 0xdb}], &(0x7f0000001040)=[0x183, 0x15cc]}], 0x5) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x101, 0x3, 0x81, 0xfffffff3, 0xcc9, 0xf, 0x7, 0xa, 0x7, 0x58, 0x4, 0xfffffffe, 0x5, 0x6, 0x101, 0x0, 0x1a44a, 0x100003, 0x40000003, 0x99, 0xcaa7, 0x7f, 0x20001e58, 0x7, 0x0, 0x39, 0xc, 0x2, 0x0, 0xfffffff8]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, &(0x7f0000000440)=0x1f) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) shmctl$IPC_RMID(0x0, 0xffffffffffffff7f) r6 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000000)='#\x00\x00\x00\x00\x00\x00\x00\x00\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xcc:rC\xb3=\x17\x02/x\x84=\x17\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x00\x00\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\x00\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000300)=0x3d7) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) (async) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x10000440, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8, 0x80}}, 0x50) 2.744900672s ago: executing program 3 (id=1738): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) stat(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001200010328bd7000000000000000000000000000000800000000000001000000000000000000000000000000fcffffff03000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000baede3c4a300000001ccc1d8ba446d650dbd3c7a2f87b6121d45836600000080d26625d204c7ec61747c01e1c375f669bcb1cb4dcbd60b9802191a16f7676d2d304a1ce4951a8970bddee69103c640b3e49cc636abef8e62643939a3eac0ecb1b3a1143e386d554a46caed80db2f8ed6a431e859d4b3e510913243002e420037f1a98f861335b54dfbe9c3416283ec6380bbc30251aaae0fbcb520f099f1f6a7357d5d563894aa2ea07a04485d9e5bf4ff7fa14124c46f529e08990cb5b40dcee8c9afb0e08498f1be6d3409b8bc5379829eafa2b98a4ec5cc097ac12c92d5b931a7118fa3ab4ca20f65c162283da64cd35ce601e6e593f4cb626e21657f96a80c116898c56d28fc9d9e85c437061d55da1e2c74a415e38739866d3d1ed7b7dbfa44676811458d65ef84d1291ec8201cd8d350657dfdfaa63f"], 0x150}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="000000000000000000f0ff3c9f2d0cac1b9e8a79", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRES64=r2], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, 0x0, &(0x7f0000000a40)=@tcp6=r3}, 0x20) shutdown(r3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={'\x00', 0x8, 0x6, 0x2, 0x3, 0x3b, "f700e4000000e9ffffffffffffff00", "0500", "0100", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "010000ff3c97c443084000", "ff81000000008000"]}) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x3) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x5, 0x5, 0xbd0}, 0x10) memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x7fff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000000140)=""/60, 0x3c, 0x6) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r9, 0x0, 0x40030) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd499286199000000000000000000ba00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) close(0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(r4, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xbe2, &(0x7f0000000180)={0x0, 0x3507, 0x200, 0x2, 0x3c6, 0x0, r6}, &(0x7f0000000000), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd=r2, 0xc000000, &(0x7f0000000500)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000400)=""/117, 0x75}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000000480)=""/115, 0x73}], 0x6, 0x16}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.360987987s ago: executing program 8 (id=1740): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r2 = openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x100, 0x88}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6509}, @ldst={0x3, 0x0, 0x0, 0x4, 0x8, 0xfffffffffffffffc, 0xffffffffffffffff}, @generic={0x0, 0x3, 0x4, 0x5, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x73}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2369}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x400, 0x51, &(0x7f0000000280)=""/81, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x200}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[r3, 0x1, r4], &(0x7f0000000500)=[{0x0, 0x5, 0x5, 0x9}], 0x10, 0x7dde}, 0x94) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.25987014s ago: executing program 6 (id=1741): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) syz_usb_connect$sierra_net(0x4, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000000), &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={0x0}, 0x1) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 1.89374882s ago: executing program 3 (id=1742): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(r1) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r5, 0x0, 0x1}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x3, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120150026948d31b5fb3977c71175e77770008ef171e723dc6010203010902120001f640"], &(0x7f0000000680)={0x0, 0x0, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}}) 396.897157ms ago: executing program 6 (id=1743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r5, &(0x7f0000000600)=[{&(0x7f0000000380)=""/50, 0xfffffffffffffd92}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000640)=""/112, 0x70}], 0x3, 0x7ff, 0x200000b0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000b80)="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", 0xc00}], 0x2}, 0x4048081) close(0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000000000000304ecf6654b8dccdd351acfcc05fd6de8ab2138c909d6b82e2d269d3164f56b71011fb462dd884c9d5f8a693ddbcbd14e2e992de2edf3d37da4a66f0d5c4a4345f31b75f344257526d15cab5d998a2f7100505cd411afdc450d477cefc18fad9f3695ba8f0b3e0e12116a3b1a63568115bd8d2d939b38a33085b419caa9ac8d60e65afec79258b3b68f35ed0deeeb58889f56c3c92d80a13deb149e3178e"]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 73.963392ms ago: executing program 7 (id=1744): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x6, 0x8, 0x400, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c69c1acf8805944823a7f"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) keyctl$search(0xa, 0x0, &(0x7f0000000080)='.request_key_auth\x00', 0x0, 0xfffffffffffffffd) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0xff2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='illinois\x00', 0x9) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000120001030000000000000000000600004e2300000000000000000000810000000000000001000000fdffffff0000010000000000e327380f331d4ebaf9ec04d7c6"], 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), &(0x7f0000000040)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_getattr(0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 15.795149ms ago: executing program 0 (id=1745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2, 0x8}, {0x10, 0x80004, 0xb}], 0x10, 0x1}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20014000}, 0x20008000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=1746): socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000030000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) kernel console output (not intermixed with test programs): : Adding to iommu group 0 [ 423.546209][ T5925] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 423.562333][ T5953] usb 8-1: USB disconnect, device number 34 [ 423.623889][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.682226][ T5925] usb 2-1: config 0 descriptor?? [ 423.710510][T10887] fido_id[10887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 423.888831][ T5925] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 424.500211][T10856] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 424.822834][T10892] lo speed is unknown, defaulting to 1000 [ 424.880717][T10893] rdma_rxe: rxe_newlink: failed to add lo [ 424.901996][T10892] lo speed is unknown, defaulting to 1000 [ 424.995532][T10892] lo speed is unknown, defaulting to 1000 [ 425.684161][ T5989] usb 2-1: USB disconnect, device number 47 [ 425.727345][ T5925] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 425.893314][T10892] infiniband sz1: set down [ 425.898054][ T44] lo speed is unknown, defaulting to 1000 [ 425.904019][T10892] infiniband sz1: added lo [ 425.909085][T10892] sz1: rxe_create_cq: returned err = -12 [ 425.915566][T10892] infiniband sz1: Couldn't create ib_mad CQ [ 425.921929][T10892] infiniband sz1: Couldn't open port 1 [ 425.970655][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 425.987390][T10892] RDS/IB: sz1: added [ 425.990106][ T5925] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 426.009405][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.015658][T10892] smc: adding ib device sz1 with port count 1 [ 426.049285][T10892] smc: ib device sz1 port 1 has pnetid [ 426.058502][ T5925] usb 4-1: config 0 descriptor?? [ 426.093366][ T44] lo speed is unknown, defaulting to 1000 [ 426.104667][T10892] lo speed is unknown, defaulting to 1000 [ 426.210099][ T5989] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 426.432576][ T5989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.447710][ T5989] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 426.511344][ T5989] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.520751][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.530657][ T5989] usb 2-1: Product: syz [ 426.544225][ T5925] koneplus 0003:1E7D:2E22.000E: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 426.570453][ T5989] usb 2-1: Manufacturer: syz [ 426.585810][ T5989] usb 2-1: SerialNumber: syz [ 426.628722][ T5989] usb 2-1: bad CDC descriptors [ 426.679894][ T44] usb 4-1: USB disconnect, device number 32 [ 426.785000][T10911] fido_id[10911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 426.870909][ T5989] usb 2-1: USB disconnect, device number 48 [ 427.019708][T10892] lo speed is unknown, defaulting to 1000 [ 427.125648][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 427.125664][ T30] audit: type=1400 audit(1757538218.050:1105): avc: denied { ioctl } for pid=10912 comm="syz.6.1139" path="socket:[31855]" dev="sockfs" ino=31855 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 427.305724][ T30] audit: type=1400 audit(1757538218.230:1106): avc: denied { create } for pid=10917 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.365267][ T30] audit: type=1400 audit(1757538218.280:1107): avc: denied { create } for pid=10917 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.397083][ T30] audit: type=1400 audit(1757538218.280:1108): avc: denied { bind } for pid=10917 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.473209][ T30] audit: type=1400 audit(1757538218.290:1109): avc: denied { listen } for pid=10917 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.532567][T10892] lo speed is unknown, defaulting to 1000 [ 427.545482][ T30] audit: type=1400 audit(1757538218.290:1110): avc: denied { accept } for pid=10917 comm="syz.3.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 427.574030][ T30] audit: type=1400 audit(1757538218.290:1111): avc: denied { name_bind } for pid=10917 comm="syz.3.1141" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 427.727731][T10932] sg_read: process 1049 (syz.3.1144) changed security contexts after opening file descriptor, this is not allowed. [ 427.741074][ T30] audit: type=1400 audit(1757538218.650:1112): avc: denied { read write } for pid=10931 comm="syz.3.1144" name="sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.871477][ T30] audit: type=1400 audit(1757538218.650:1113): avc: denied { open } for pid=10931 comm="syz.3.1144" path="/dev/sg0" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 427.969225][ T30] audit: type=1400 audit(1757538218.720:1114): avc: denied { execute } for pid=10922 comm="syz.6.1142" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 428.414494][T10892] lo speed is unknown, defaulting to 1000 [ 428.669655][T10892] lo speed is unknown, defaulting to 1000 [ 428.920470][ T5953] kernel write not supported for file /input/mouse0 (pid: 5953 comm: kworker/1:7) [ 429.410246][ T5989] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 429.463025][T10892] lo speed is unknown, defaulting to 1000 [ 429.581684][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 429.617935][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 19653, setting to 64 [ 429.678792][ T5989] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 429.715576][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.760503][ T5989] usb 7-1: config 0 descriptor?? [ 429.766137][T10948] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 429.847322][ T5989] pegasus_notetaker 7-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 429.888707][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1154'. [ 429.900156][ T5925] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 430.048568][ T5918] usb 7-1: USB disconnect, device number 38 [ 430.072746][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 430.079584][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.093693][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.104060][ T5925] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 430.113367][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.126600][ T5989] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 430.146439][ T5925] usb 2-1: config 0 descriptor?? [ 430.279957][ T5953] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 430.291783][ T5989] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 430.301992][ T5989] usb 8-1: config 0 interface 0 has no altsetting 0 [ 430.463104][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.525704][ T5953] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 430.564391][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.775632][ T5953] usb 4-1: config 0 descriptor?? [ 430.781842][ T5989] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 430.821602][ T5925] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000F/input/input22 [ 430.833396][ T5989] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 430.872531][ T5989] usb 8-1: Product: syz [ 430.888096][ T5989] usb 8-1: Manufacturer: syz [ 431.028920][ T5953] smartjoyplus 0003:0925:8866.0010: unknown main item tag 0x5 [ 431.039885][ T5989] usb 8-1: SerialNumber: syz [ 431.162172][ T5953] smartjoyplus 0003:0925:8866.0010: hidraw0: USB HID v80.00 Device [HID 0925:8866] on usb-dummy_hcd.3-1/input0 [ 431.162263][ T5953] smartjoyplus 0003:0925:8866.0010: no output reports found [ 431.406949][ T5953] usb 4-1: USB disconnect, device number 33 [ 431.469520][ T5989] usb 8-1: config 0 descriptor?? [ 431.503022][ T5989] usb 8-1: selecting invalid altsetting 0 [ 431.545517][ T5925] input: HID 0458:5012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5012.000F/input/input23 [ 431.626906][ T5925] kye 0003:0458:5012.000F: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.1-1/input0 [ 431.747672][T10982] fido_id[10982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 431.758500][ T5925] usb 2-1: USB disconnect, device number 49 [ 432.438647][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 432.438666][ T30] audit: type=1400 audit(1757538223.040:1140): avc: denied { setopt } for pid=10983 comm="syz.1.1159" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 432.514444][ T30] audit: type=1400 audit(1757538223.050:1141): avc: denied { write } for pid=10983 comm="syz.1.1159" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 432.750845][T10997] fido_id[10997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 432.915000][ T30] audit: type=1400 audit(1757538223.840:1142): avc: denied { open } for pid=11003 comm="syz.6.1163" path="/dev/ptyr1" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 433.031110][ T30] audit: type=1400 audit(1757538223.880:1143): avc: denied { read write } for pid=11007 comm="syz.1.1164" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.142661][ T30] audit: type=1400 audit(1757538223.880:1144): avc: denied { open } for pid=11007 comm="syz.1.1164" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 433.159477][T11014] bridge0: port 1(veth0_to_bridge) entered blocking state [ 433.178927][T11014] bridge0: port 1(veth0_to_bridge) entered disabled state [ 433.193236][T11014] veth0_to_bridge: entered allmulticast mode [ 433.203986][T11014] veth0_to_bridge: entered promiscuous mode [ 433.220800][T11014] bridge0: port 1(veth0_to_bridge) entered blocking state [ 433.228015][T11014] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 433.330799][ T5989] usb 8-1: USB disconnect, device number 35 [ 433.343856][ T30] audit: type=1400 audit(1757538224.270:1145): avc: denied { write } for pid=11013 comm="syz.6.1165" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 433.434074][ T30] audit: type=1400 audit(1757538224.270:1146): avc: denied { ioctl } for pid=11013 comm="syz.6.1165" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 434.094448][T11035] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1167'. [ 434.615204][ T30] audit: type=1400 audit(1757538225.542:1147): avc: denied { accept } for pid=11040 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 434.643447][ T30] audit: type=1400 audit(1757538225.572:1148): avc: denied { write } for pid=11040 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 434.693495][ T30] audit: type=1400 audit(1757538225.572:1149): avc: denied { read } for pid=11040 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 434.886815][T11050] 9pnet_fd: Insufficient options for proto=fd [ 435.173526][T11060] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 435.582028][T11066] ptrace attach of "./syz-executor exec"[5854] was attempted by "./syz-executor exec"[11066] [ 435.820677][T11068] veth0_to_team: entered promiscuous mode [ 435.888299][T11072] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1178'. [ 436.689891][ T5925] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 436.841412][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 436.874278][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 436.909782][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 436.962770][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 437.007763][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.029737][ T5925] usb 4-1: Product: syz [ 437.049732][ T5925] usb 4-1: Manufacturer: syz [ 437.076944][ T5925] usb 4-1: SerialNumber: syz [ 437.092961][ T5925] usb 4-1: config 0 descriptor?? [ 437.126807][ T5925] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 437.159637][ T5925] em28xx 4-1:0.0: Video interface 0 found: isoc [ 437.531104][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.584502][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.692855][ T5925] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 438.082017][ T5925] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 438.112278][ T5925] em28xx 4-1:0.0: board has no eeprom [ 438.179849][ T5925] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 438.187967][ T5925] em28xx 4-1:0.0: Currently, V4L2 is not supported on this model [ 438.198409][ T9] em28xx 4-1:0.0: Binding DVB extension [ 438.207034][ T9] em28xx 4-1:0.0: no endpoint for DVB mode and transfer type 0 [ 438.305673][ T5925] usb 4-1: USB disconnect, device number 34 [ 438.311848][ T9] em28xx 4-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 438.393554][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 438.393570][ T30] audit: type=1400 audit(1757538229.322:1169): avc: denied { ioctl } for pid=11104 comm="syz.1.1185" path="socket:[32144]" dev="sockfs" ino=32144 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 438.518261][ T9] em28xx 4-1:0.0: Registering input extension [ 438.690321][ T5925] em28xx 4-1:0.0: Disconnecting em28xx [ 438.697584][ T5925] em28xx 4-1:0.0: Closing input extension [ 438.717399][ T5925] em28xx 4-1:0.0: Freeing device [ 439.860190][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.870084][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.567438][ T30] audit: type=1400 audit(1757538231.492:1170): avc: denied { setopt } for pid=11135 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.759402][ T30] audit: type=1400 audit(1757538231.492:1171): avc: denied { read } for pid=11135 comm="syz.1.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 440.820028][ T30] audit: type=1400 audit(1757538231.572:1172): avc: denied { create } for pid=11133 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 441.143300][ T30] audit: type=1400 audit(1757538232.062:1173): avc: denied { connect } for pid=11144 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 441.175611][T11147] 9pnet_fd: Insufficient options for proto=fd [ 441.710689][ T30] audit: type=1400 audit(1757538232.062:1174): avc: denied { write } for pid=11144 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 442.239757][ T30] audit: type=1400 audit(1757538232.322:1175): avc: denied { create } for pid=11148 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 442.317778][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1199'. [ 442.337307][ T30] audit: type=1400 audit(1757538233.242:1176): avc: denied { write } for pid=11148 comm="syz.1.1199" name="fib_trie" dev="proc" ino=4026532950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 442.619716][ T5925] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 442.790053][ T5925] usb 7-1: device descriptor read/64, error -71 [ 443.063816][ T5925] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 443.124222][ T30] audit: type=1400 audit(1757538234.052:1177): avc: denied { mount } for pid=11164 comm="syz.1.1202" name="/" dev="autofs" ino=32278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 443.147207][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.198421][ T30] audit: type=1400 audit(1757538234.052:1178): avc: denied { mounton } for pid=11164 comm="syz.1.1202" path="/236/file1/file0" dev="autofs" ino=32279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 443.380302][ T5925] usb 7-1: device descriptor read/64, error -71 [ 443.451850][T11168] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 443.471142][T11168] bridge0: entered allmulticast mode [ 443.540310][ T5925] usb usb7-port1: attempt power cycle [ 443.636095][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 443.636145][ T30] audit: type=1400 audit(1757538234.562:1183): avc: denied { read write } for pid=11171 comm="syz.3.1203" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 443.667805][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.849362][ T30] audit: type=1400 audit(1757538234.652:1184): avc: denied { open } for pid=11171 comm="syz.3.1203" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 443.909810][ T5925] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 443.926929][ T30] audit: type=1400 audit(1757538234.852:1185): avc: denied { create } for pid=11174 comm="syz.7.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 443.938671][ T5925] usb 7-1: device descriptor read/8, error -71 [ 444.104894][ T30] audit: type=1400 audit(1757538234.922:1186): avc: denied { getopt } for pid=11174 comm="syz.7.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 444.209689][ T5925] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 444.230086][ T5925] usb 7-1: device descriptor read/8, error -71 [ 444.341085][ T30] audit: type=1400 audit(1757538234.982:1187): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 444.366075][ T5925] usb usb7-port1: unable to enumerate USB device [ 444.407648][ T30] audit: type=1400 audit(1757538234.982:1188): avc: denied { unmount } for pid=5854 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 444.834446][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1210'. [ 444.980030][ T30] audit: type=1400 audit(1757538235.882:1189): avc: denied { create } for pid=11196 comm="syz.7.1211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 445.295491][ T30] audit: type=1400 audit(1757538236.222:1190): avc: denied { watch watch_reads } for pid=11200 comm="syz.3.1212" path="/282" dev="tmpfs" ino=1493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 445.359821][T11201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 445.381304][ T30] audit: type=1400 audit(1757538236.272:1191): avc: denied { unlink } for pid=8559 comm="syz-executor" name="file0" dev="tmpfs" ino=566 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 445.809933][ T5989] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 445.961735][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.976353][ T5989] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 445.985961][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.006766][ T5989] usb 4-1: config 0 descriptor?? [ 446.109814][ T30] audit: type=1400 audit(1757538236.952:1192): avc: denied { mount } for pid=11216 comm="syz.6.1217" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 446.304190][T11229] tmpfs: Unknown parameter '00000000000000000000' [ 446.840823][T11234] program syz.3.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.877946][T11236] bond1: entered promiscuous mode [ 446.904143][T11236] bond1: entered allmulticast mode [ 447.020998][T11236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.249980][ T5940] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 447.423421][ T5940] usb 7-1: config 1 interface 0 has no altsetting 0 [ 447.454953][ T5940] usb 7-1: New USB device found, idVendor=0596, idProduct=0502, bcdDevice= 0.40 [ 447.466568][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.482389][ T5940] usb 7-1: Product: syz [ 447.499166][ T5940] usb 7-1: Manufacturer: syz [ 447.510477][ T5940] usb 7-1: SerialNumber: syz [ 447.756893][ T5940] usbhid 7-1:1.0: can't add hid device: -71 [ 447.774560][ T5940] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 447.800593][ T5940] usb 7-1: USB disconnect, device number 43 [ 448.780787][T11249] overlayfs: missing 'workdir' [ 448.796732][T11249] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 448.805782][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 448.805800][ T30] audit: type=1400 audit(1757538239.722:1201): avc: denied { mac_admin } for pid=11246 comm="syz.6.1224" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 448.878429][ T30] audit: type=1400 audit(1757538239.742:1202): avc: denied { relabelto } for pid=11246 comm="syz.6.1224" name="file1" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 448.915916][ T30] audit: type=1400 audit(1757538239.742:1203): avc: denied { associate } for pid=11246 comm="syz.6.1224" name="file1" dev="tmpfs" ino=580 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:userio_device_t:s0" [ 449.046259][ T5989] usbhid 4-1:0.0: can't add hid device: -71 [ 449.103628][ T5989] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 449.134113][ T5989] usb 4-1: USB disconnect, device number 35 [ 449.604501][ T30] audit: type=1400 audit(1757538240.532:1204): avc: denied { rmdir } for pid=8441 comm="syz-executor" name="file1" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:userio_device_t:s0" [ 449.734998][ T30] audit: type=1400 audit(1757538240.652:1205): avc: denied { create } for pid=11262 comm="syz.6.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.757296][ T30] audit: type=1400 audit(1757538240.662:1206): avc: denied { setopt } for pid=11262 comm="syz.6.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 449.780287][ T5989] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 449.929861][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 449.942853][ T5989] usb 4-1: config 8 has an invalid interface number: 167 but max is 1 [ 449.958182][ T5989] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 449.969849][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 450.012459][ T30] audit: type=1400 audit(1757538240.942:1207): avc: denied { read } for pid=11264 comm="syz.7.1229" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 450.059658][ T5989] usb 4-1: config 8 has an invalid interface number: 53 but max is 1 [ 450.397825][ T9] usb 7-1: device descriptor read/64, error -71 [ 450.466678][ T5989] usb 4-1: config 8 has no interface number 0 [ 450.498293][ T5989] usb 4-1: config 8 has no interface number 1 [ 450.504872][ T5989] usb 4-1: config 8 interface 167 altsetting 7 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 450.525631][ T30] audit: type=1400 audit(1757538240.942:1208): avc: denied { open } for pid=11264 comm="syz.7.1229" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 450.529916][ T5989] usb 4-1: config 8 interface 167 altsetting 7 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 450.655122][ T5989] usb 4-1: config 8 interface 167 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.667234][ T5989] usb 4-1: config 8 interface 167 altsetting 7 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 450.678326][ T5989] usb 4-1: config 8 interface 167 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 450.689092][ T5989] usb 4-1: config 8 interface 167 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 450.703893][ T5989] usb 4-1: config 8 interface 53 altsetting 4 endpoint 0x3 has invalid wMaxPacketSize 0 [ 450.714022][ T5989] usb 4-1: config 8 interface 53 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 450.724984][ T9] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 450.734430][ T5989] usb 4-1: config 8 interface 53 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 450.742252][ T30] audit: type=1400 audit(1757538241.672:1209): avc: denied { bind } for pid=11270 comm="syz.0.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 450.745562][ T5989] usb 4-1: config 8 interface 53 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 450.764395][ C0] vkms_vblank_simulate: vblank timer overrun [ 450.785574][ T5989] usb 4-1: config 8 interface 167 has no altsetting 0 [ 450.793553][ T5989] usb 4-1: config 8 interface 53 has no altsetting 0 [ 450.804251][ T5989] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01b8, bcdDevice=22.4c [ 450.812426][ T30] audit: type=1400 audit(1757538241.672:1210): avc: denied { name_bind } for pid=11270 comm="syz.0.1231" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 450.813946][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.847547][ T5989] usb 4-1: Product: Ћ [ 450.853251][ T5989] usb 4-1: Manufacturer: ⮮䐈聟癕⮿ݕ꡽ݮ啒鄊빼젞辞㆕륂塱瓰ꉫᇗ鋈㍍ܥ湻褪⊇ [ 450.864728][ T9] usb 7-1: device descriptor read/64, error -71 [ 450.873197][ T5989] usb 4-1: SerialNumber: ц [ 450.889139][T11259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 450.909759][ T5925] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 450.980216][ T9] usb usb7-port1: attempt power cycle [ 451.072613][ T5925] usb 8-1: unable to get BOS descriptor or descriptor too short [ 451.081074][ T5925] usb 8-1: not running at top speed; connect to a high speed hub [ 451.092248][ T5925] usb 8-1: config 17 has an invalid interface number: 8 but max is 1 [ 451.100479][ T5925] usb 8-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 451.109470][ T5925] usb 8-1: config 17 has no interface number 0 [ 451.117462][ T5925] usb 8-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 27491, setting to 64 [ 451.128737][ T5925] usb 8-1: config 17 interface 8 has no altsetting 0 [ 451.137909][ T5925] usb 8-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 451.147086][ T5925] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.155124][ T5925] usb 8-1: Product: 㘖䎟춟촯І㎟䗅嗫ꪻ⛟겪㪶酻ꕍ㐟퇺꫓䒓⚨奚ⰸ煰焺ꗬ犥䳷쏈升靭鍄ﺧ悿兘䫜篌捨괱཮世ŗ癹㻋Ь漆勩 [ 451.172537][ T5925] usb 8-1: Manufacturer: ж [ 451.177073][ T5925] usb 8-1: SerialNumber: syz [ 451.186196][T11269] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 451.319684][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 451.342027][ T9] usb 7-1: device descriptor read/8, error -71 [ 451.406719][ T5925] usb 8-1: selecting invalid altsetting 0 [ 451.425060][ T5925] usb 8-1: USB disconnect, device number 36 [ 451.452713][ T8300] udevd[8300]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 451.581337][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 451.602862][ T9] usb 7-1: device descriptor read/8, error -71 [ 451.624878][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1233'. [ 451.710498][ T9] usb usb7-port1: unable to enumerate USB device [ 452.162231][T11288] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1235'. [ 452.491717][ T5989] ftdi_sio 4-1:8.167: FTDI USB Serial Device converter detected [ 452.517868][ T5989] ftdi_sio ttyUSB0: unknown device type: 0x224c [ 452.551164][T11297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.552037][ T5989] ftdi_sio 4-1:8.53: FTDI USB Serial Device converter detected [ 452.573639][ T5989] ftdi_sio ttyUSB1: unknown device type: 0x224c [ 452.618635][ T5989] usb 4-1: USB disconnect, device number 36 [ 452.670540][ T5989] ftdi_sio 4-1:8.167: device disconnected [ 452.688064][ T5989] ftdi_sio 4-1:8.53: device disconnected [ 452.960444][ T5953] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 452.970858][T11309] /dev/nullb0: Can't lookup blockdev [ 453.065262][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 453.074362][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 453.089303][ T5989] libceph: connect (1)[c::]:6789 error -101 [ 453.098610][ T5989] libceph: mon0 (1)[c::]:6789 connect error [ 453.109647][ T5953] usb 8-1: Using ep0 maxpacket: 16 [ 453.117246][T11303] ceph: No mds server is up or the cluster is laggy [ 453.117923][ T5953] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.135680][ T5953] usb 8-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 453.182540][ T5953] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.229788][ T5932] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 453.246514][ T5953] usb 8-1: config 0 descriptor?? [ 453.420816][ T5932] usb 7-1: Using ep0 maxpacket: 16 [ 453.428125][ T5932] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 453.438488][ T5932] usb 7-1: config 0 has no interface number 0 [ 453.445941][ T5932] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.461974][ T5953] usbhid 8-1:0.0: can't add hid device: -71 [ 453.467980][ T5953] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 453.476268][ T5932] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 453.500992][ T5953] usb 8-1: USB disconnect, device number 37 [ 453.518110][ T5932] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 453.527443][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 453.535917][ T5932] usb 7-1: Product: syz [ 453.540420][ T5932] usb 7-1: SerialNumber: syz [ 453.575546][ T5932] usb 7-1: config 0 descriptor?? [ 453.601065][ T5932] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 453.612535][ T5932] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input25 [ 454.070078][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 454.080788][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 454.080811][ T30] audit: type=1400 audit(1757538244.992:1224): avc: denied { setopt } for pid=11323 comm="syz.0.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 454.110726][T11325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 454.562660][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 454.572369][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 454.579433][ T5932] usb 7-1: USB disconnect, device number 48 [ 454.585399][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 454.585417][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 454.606004][ T5932] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 454.776064][T11333] overlayfs: failed to clone upperpath [ 455.599029][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 455.770043][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 455.784239][ T9] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 455.796045][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.819028][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 455.829223][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.849489][ T9] usb 4-1: config 0 descriptor?? [ 455.854822][ T30] audit: type=1400 audit(1757538246.772:1225): avc: denied { ioctl } for pid=11341 comm="syz.6.1251" path="socket:[32635]" dev="sockfs" ino=32635 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 455.879624][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.050160][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 456.063109][T11344] dvmrp0: entered allmulticast mode [ 456.073528][ T30] audit: type=1400 audit(1757538247.002:1226): avc: denied { ioctl } for pid=11343 comm="syz.7.1252" path="socket:[32646]" dev="sockfs" ino=32646 ioctlcmd=0x64bf scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 456.199761][T11347] ubi: mtd0 is already attached to ubi31 [ 456.549756][ T30] audit: type=1400 audit(1757538247.122:1227): avc: denied { append } for pid=11341 comm="syz.6.1251" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 457.935629][ T30] audit: type=1400 audit(1757538248.352:1228): avc: denied { setopt } for pid=11354 comm="syz.7.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 457.971707][ T30] audit: type=1400 audit(1757538248.472:1229): avc: denied { mounton } for pid=11358 comm="syz.0.1256" path="/324/file0" dev="tmpfs" ino=1769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 458.060747][ T30] audit: type=1326 audit(1757538248.932:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.7.1255" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64ea38eba9 code=0x0 [ 458.119868][ T1208] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 458.259850][ T1208] usb 7-1: device descriptor read/64, error -71 [ 458.300576][ T44] usb 4-1: USB disconnect, device number 37 [ 458.619775][ T1208] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 458.759756][ T1208] usb 7-1: device descriptor read/64, error -71 [ 458.870021][ T1208] usb usb7-port1: attempt power cycle [ 459.600112][ T30] audit: type=1400 audit(1757538250.132:1231): avc: denied { write } for pid=11382 comm="syz.3.1261" path="socket:[33260]" dev="sockfs" ino=33260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 459.679879][ T1208] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 459.700171][ T1208] usb 7-1: device descriptor read/8, error -71 [ 460.000357][ T1208] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 460.031538][ T1208] usb 7-1: device descriptor read/8, error -71 [ 460.149903][ T1208] usb usb7-port1: unable to enumerate USB device [ 460.201081][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 460.274905][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.286856][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.296224][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.313757][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.327190][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.371547][ T30] audit: type=1400 audit(1757538251.292:1232): avc: denied { mounton } for pid=11394 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 460.410444][ T5868] Bluetooth: hci6: unexpected event for opcode 0x042d [ 460.423047][ T9] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 460.440746][ T5868] Bluetooth: hci6: unexpected event for opcode 0x042d [ 460.443211][ T9] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.458765][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 460.465792][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 460.475344][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.488802][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.500851][ T44] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 460.561780][ T9] usb 4-1: config 0 descriptor?? [ 460.579508][T11408] sctp: [Deprecated]: syz.6.1267 (pid 11408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 460.579508][T11408] Use struct sctp_sack_info instead [ 460.593357][T11394] lo speed is unknown, defaulting to 1000 [ 460.789636][ T44] usb 8-1: Using ep0 maxpacket: 8 [ 460.799458][ T44] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 460.811183][ T44] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 460.827264][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.837802][ T44] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 460.863184][ T44] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 460.903095][ T44] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 460.926831][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.990092][T11393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.011316][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.074190][T11393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.172153][ T44] usb 8-1: GET_CAPABILITIES returned 0 [ 461.188234][ T44] usbtmc 8-1:16.0: can't read capabilities [ 461.197858][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 461.210112][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.269857][ T9] usb 4-1: USB disconnect, device number 38 [ 461.327686][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.355121][T11426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11426 comm=syz.3.1271 [ 461.395094][ T1208] usb 8-1: USB disconnect, device number 38 [ 461.446891][T11429] tmpfs: Bad value for 'huge' [ 461.468581][ T30] audit: type=1400 audit(1757538252.372:1233): avc: denied { map } for pid=11423 comm="syz.3.1271" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 461.546717][ T30] audit: type=1400 audit(1757538252.372:1234): avc: denied { execute } for pid=11423 comm="syz.3.1271" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 461.707418][ T30] audit: type=1400 audit(1757538252.632:1235): avc: denied { accept } for pid=11421 comm="syz.6.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 461.723009][T11394] lo speed is unknown, defaulting to 1000 [ 461.994304][ T30] audit: type=1400 audit(1757538252.912:1236): avc: denied { create } for pid=11432 comm="syz.3.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 462.086628][T11433] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 462.174865][ T13] bridge_slave_1: left allmulticast mode [ 462.188647][ T13] bridge_slave_1: left promiscuous mode [ 462.232573][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.267979][ T13] bridge_slave_0: left allmulticast mode [ 462.283169][ T13] bridge_slave_0: left promiscuous mode [ 462.303189][ T30] audit: type=1400 audit(1757538253.232:1237): avc: denied { getopt } for pid=11439 comm="syz.3.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 462.323602][T11442] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1275'. [ 462.326944][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.365175][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1275'. [ 462.410429][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1275'. [ 462.430156][ T5868] Bluetooth: hci1: command tx timeout [ 463.214553][ T30] audit: type=1400 audit(1757538254.142:1238): avc: denied { read } for pid=11451 comm="syz.6.1277" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.261636][ T30] audit: type=1400 audit(1757538254.142:1239): avc: denied { open } for pid=11451 comm="syz.6.1277" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 463.764593][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.802806][ T13] bond_slave_0: left promiscuous mode [ 463.819977][ T13] bond_slave_0: left allmulticast mode [ 463.837828][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.861143][ T13] bond_slave_1: left promiscuous mode [ 463.876040][ T13] bond_slave_1: left allmulticast mode [ 463.990798][ T13] bond0 (unregistering): Released all slaves [ 464.163974][ T13] tipc: Left network mode [ 464.348631][ T30] audit: type=1400 audit(1757538255.232:1240): avc: denied { view } for pid=11461 comm="syz.0.1280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 464.539717][ T5868] Bluetooth: hci1: command tx timeout [ 465.209750][T11394] chnl_net:caif_netlink_parms(): no params data found [ 465.496195][ T30] audit: type=1400 audit(1757538256.422:1241): avc: denied { mount } for pid=11481 comm="syz.7.1284" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 465.684955][ T30] audit: type=1400 audit(1757538256.612:1242): avc: denied { unmount } for pid=8559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 466.180820][ T30] audit: type=1400 audit(1757538257.102:1243): avc: denied { getattr } for pid=11494 comm="syz.0.1286" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=33558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 466.261427][ T30] audit: type=1400 audit(1757538257.142:1244): avc: denied { connect } for pid=11496 comm="syz.7.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 466.377803][ T30] audit: type=1400 audit(1757538257.302:1245): avc: denied { bind } for pid=11504 comm="syz.6.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.403230][T11505] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1289'. [ 466.411304][T11394] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.431044][ T30] audit: type=1400 audit(1757538257.302:1246): avc: denied { write } for pid=11504 comm="syz.6.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 466.463592][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.483485][T11394] bridge_slave_0: entered allmulticast mode [ 466.582450][ T5868] Bluetooth: hci1: command tx timeout [ 466.596215][T11394] bridge_slave_0: entered promiscuous mode [ 466.626311][T11394] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.684352][T11394] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.698852][T11394] bridge_slave_1: entered allmulticast mode [ 466.721502][T11394] bridge_slave_1: entered promiscuous mode [ 466.920779][ T13] hsr_slave_0: left promiscuous mode [ 466.937893][ T13] hsr_slave_1: left promiscuous mode [ 467.027937][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.036398][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.046741][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.062081][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.195994][ T13] veth1_vlan: left promiscuous mode [ 467.206925][T11532] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1296'. [ 467.221283][ T13] veth0_vlan: left promiscuous mode [ 467.359994][ T5953] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 467.383132][ T30] audit: type=1400 audit(1757538258.312:1247): avc: denied { ioctl } for pid=11533 comm="syz.7.1297" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 467.460323][ T30] audit: type=1326 audit(1757538258.392:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11533 comm="syz.7.1297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64ea38eba9 code=0x0 [ 467.550859][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 467.559997][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.586705][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.609779][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.665398][ T5953] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 467.699307][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.734182][ T5953] usb 4-1: config 0 descriptor?? [ 468.087720][ T30] audit: type=1400 audit(1757538259.012:1249): avc: denied { setopt } for pid=11538 comm="syz.6.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 468.248162][ T5953] HID 045e:07da: Invalid code 65791 type 1 [ 468.279291][ T5953] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0011/input/input26 [ 468.359462][ T5953] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 468.659894][ T5868] Bluetooth: hci1: command tx timeout [ 468.680063][ T5940] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 468.833926][ T9] usb 4-1: USB disconnect, device number 39 [ 468.840770][ T30] audit: type=1400 audit(1757538259.762:1250): avc: denied { ioctl } for pid=11517 comm="syz.3.1292" path="/dev/input/event4" dev="devtmpfs" ino=3434 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 468.873051][ T5940] usb 8-1: Using ep0 maxpacket: 8 [ 468.888755][ T5940] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 468.898035][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.910560][ T5940] usb 8-1: Product: syz [ 468.914752][ T5940] usb 8-1: Manufacturer: syz [ 468.920005][ T5940] usb 8-1: SerialNumber: syz [ 468.928099][ T5940] usb 8-1: config 0 descriptor?? [ 468.941723][ T5940] gspca_main: se401-2.14.0 probing 047d:5003 [ 469.198044][ T13] team_slave_1 (unregistering): left promiscuous mode [ 469.218827][ T13] team_slave_1 (unregistering): left allmulticast mode [ 469.252849][ T13] team0 (unregistering): Port device team_slave_1 removed [ 469.328661][ T13] team_slave_0 (unregistering): left promiscuous mode [ 469.335599][ T13] team_slave_0 (unregistering): left allmulticast mode [ 469.365733][ T13] team0 (unregistering): Port device team_slave_0 removed [ 469.374357][ T6049] smc: removing ib device syz! [ 469.741057][ T5940] input: se401 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input27 [ 469.858530][ T5940] usb 8-1: USB disconnect, device number 39 [ 470.220377][ T1208] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 470.333334][T11394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.345814][T11394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.370290][T11527] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1295'. [ 470.405652][ T1208] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 470.440489][ T1208] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.521277][ T1208] usb 4-1: config 0 descriptor?? [ 470.561034][ T1208] pwc: Creative Labs Webcam 5 detected. [ 470.703307][T11570] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1305'. [ 470.804055][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 470.804072][ T30] audit: type=1400 audit(1757538261.732:1254): avc: denied { mount } for pid=11560 comm="syz.3.1304" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 470.839525][T11561] ubi: mtd0 is already attached to ubi31 [ 470.875198][T11577] vivid-000: disconnect [ 470.883923][T11576] vivid-000: reconnect [ 470.979149][T11394] team0: Port device team_slave_0 added [ 470.996067][T11563] netlink: 180 bytes leftover after parsing attributes in process `syz.7.1305'. [ 471.024922][ T1208] pwc: Failed to set LED on/off time (-71) [ 471.031740][ T1208] pwc: send_video_command error -71 [ 471.036949][ T1208] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 471.045157][ T1208] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 471.050260][T11394] team0: Port device team_slave_1 added [ 471.056276][ T1208] usb 4-1: USB disconnect, device number 40 [ 471.817994][ T30] audit: type=1400 audit(1757538262.742:1255): avc: denied { read } for pid=11584 comm="syz.3.1312" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 472.039880][ T30] audit: type=1400 audit(1757538262.742:1256): avc: denied { open } for pid=11584 comm="syz.3.1312" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 472.068783][ T30] audit: type=1400 audit(1757538262.752:1257): avc: denied { setattr } for pid=11583 comm="syz.6.1310" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 472.333367][T11588] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 472.348457][T11588] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.372448][T11394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.383092][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.383433][T11588] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.409073][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.453479][T11588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 472.462441][T11394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.540598][T11394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.565665][T11394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.591667][ C0] vkms_vblank_simulate: vblank timer overrun [ 472.598282][T11394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.854920][T11588] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 473.257434][T11394] hsr_slave_0: entered promiscuous mode [ 473.385710][T11394] hsr_slave_1: entered promiscuous mode [ 473.996882][T11394] debugfs: 'hsr0' already exists in 'hsr' [ 474.069715][T11394] Cannot create hsr debugfs directory [ 474.423245][ T5172] Bluetooth: hci3: command 0x0405 tx timeout [ 474.429263][ T5868] Bluetooth: hci6: command 0x0c1a tx timeout [ 474.499663][ T5172] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.521724][ T30] audit: type=1400 audit(1757538265.442:1258): avc: denied { sqpoll } for pid=11621 comm="syz.3.1317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 474.784596][ T5953] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 475.058740][ T5953] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 475.130063][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.257856][ T5953] usb 4-1: config 0 descriptor?? [ 475.293976][ T5953] cp210x 4-1:0.0: cp210x converter detected [ 475.335722][T11638] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 476.290865][ T5953] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 476.340841][T11637] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 476.639798][ T5172] Bluetooth: hci1: command 0x0c1a tx timeout [ 476.837082][ T30] audit: type=1800 audit(1757538267.712:1259): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1324" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 477.393331][T11394] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.428125][T11394] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.474398][T11394] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 477.545002][T11394] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 477.714909][ T30] audit: type=1326 audit(1757538268.632:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11621 comm="syz.3.1317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc697f8eba9 code=0x7fc00000 [ 477.827551][ T5953] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 477.841501][ T5953] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 477.935725][ T5953] usb 4-1: cp210x converter now attached to ttyUSB0 [ 477.964379][T11394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.987816][ T5953] usb 4-1: USB disconnect, device number 41 [ 478.030239][ T5953] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 478.038546][ T5953] cp210x 4-1:0.0: device disconnected [ 478.058034][T11394] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.115241][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.122347][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.186452][ T6049] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.193557][ T6049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.215084][ T30] audit: type=1400 audit(1757538269.142:1261): avc: denied { egress } for pid=5940 comm="kworker/1:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 478.321036][ T30] audit: type=1400 audit(1757538269.142:1262): avc: denied { sendto } for pid=5940 comm="kworker/1:6" daddr=ff02::16 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 478.324869][T11394] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.343129][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.498881][ T30] audit: type=1400 audit(1757538269.392:1263): avc: denied { read write } for pid=11674 comm="syz.3.1328" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 478.519592][T11394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.645669][ T30] audit: type=1400 audit(1757538269.392:1264): avc: denied { open } for pid=11674 comm="syz.3.1328" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 478.680984][ T5172] Bluetooth: hci1: command 0x0c1a tx timeout [ 478.719544][ T30] audit: type=1400 audit(1757538269.402:1265): avc: denied { create } for pid=11674 comm="syz.3.1328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 478.741675][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.984174][ T30] audit: type=1400 audit(1757538269.522:1266): avc: denied { ioctl } for pid=11674 comm="syz.3.1328" path="socket:[34517]" dev="sockfs" ino=34517 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 479.008901][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.596477][ T30] audit: type=1400 audit(1757538270.522:1267): avc: denied { bind } for pid=11691 comm="syz.7.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 479.673951][T11394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.632298][T11394] veth0_vlan: entered promiscuous mode [ 480.643375][T11394] veth1_vlan: entered promiscuous mode [ 480.702579][T11394] veth0_macvtap: entered promiscuous mode [ 480.738807][T11394] veth1_macvtap: entered promiscuous mode [ 480.852576][T11394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.883298][T11394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.925546][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.979687][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.109418][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.152890][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.355446][T11714] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 481.364341][T11714] bridge1: entered allmulticast mode [ 481.369774][ T30] audit: type=1400 audit(1757538272.282:1268): avc: denied { ioctl } for pid=11712 comm="syz.7.1334" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 481.585749][ T8287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.741113][ T8287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.887809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.906341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.937567][ T30] audit: type=1400 audit(1757538272.862:1269): avc: denied { mounton } for pid=11394 comm="syz-executor" path="/root/syzkaller.yKF3wq/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 482.081851][ T30] audit: type=1400 audit(1757538272.922:1270): avc: denied { mounton } for pid=11394 comm="syz-executor" path="/root/syzkaller.yKF3wq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 482.235477][ T30] audit: type=1400 audit(1757538272.932:1271): avc: denied { create } for pid=11728 comm="syz.6.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.559748][ T30] audit: type=1400 audit(1757538272.932:1272): avc: denied { mounton } for pid=11394 comm="syz-executor" path="/root/syzkaller.yKF3wq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 482.625739][ T30] audit: type=1400 audit(1757538272.942:1273): avc: denied { setopt } for pid=11728 comm="syz.6.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 482.788264][ T30] audit: type=1400 audit(1757538272.952:1274): avc: denied { unmount } for pid=11394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 482.891491][ T30] audit: type=1400 audit(1757538272.962:1275): avc: denied { mounton } for pid=11394 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 483.280220][ T30] audit: type=1400 audit(1757538272.962:1276): avc: denied { mount } for pid=11394 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 483.334344][ T30] audit: type=1400 audit(1757538272.962:1277): avc: denied { mounton } for pid=11394 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 483.457411][ T30] audit: type=1400 audit(1757538273.862:1278): avc: denied { ioctl } for pid=11741 comm="syz.6.1341" path="socket:[35527]" dev="sockfs" ino=35527 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 485.073990][ T5172] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 485.846305][T11791] overlayfs: failed to clone upperpath [ 486.930342][T11807] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[11807] [ 487.439495][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 487.439514][ T30] audit: type=1400 audit(1757538278.362:1282): avc: denied { shutdown } for pid=11801 comm="syz.0.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 488.413244][ T30] audit: type=1400 audit(1757538278.612:1283): avc: denied { connect } for pid=11816 comm="syz.6.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 488.837313][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1359'. [ 489.139968][ T30] audit: type=1400 audit(1757538280.042:1284): avc: denied { read write } for pid=11829 comm="syz.3.1361" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 489.349718][ T30] audit: type=1400 audit(1757538280.042:1285): avc: denied { open } for pid=11829 comm="syz.3.1361" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 489.496436][ T30] audit: type=1400 audit(1757538280.042:1286): avc: denied { ioctl } for pid=11829 comm="syz.3.1361" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 489.587624][ T30] audit: type=1400 audit(1757538280.272:1287): avc: denied { setopt } for pid=11831 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 490.012449][ T30] audit: type=1400 audit(1757538280.942:1288): avc: denied { unmount } for pid=8441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 490.095843][ T30] audit: type=1326 audit(1757538281.022:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc697f8eba9 code=0x7ffc0000 [ 490.124051][ T30] audit: type=1326 audit(1757538281.022:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc697f8eba9 code=0x7ffc0000 [ 490.159158][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.335753][ T30] audit: type=1326 audit(1757538281.022:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11848 comm="syz.3.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc697f8eba9 code=0x7ffc0000 [ 492.995055][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 492.995072][ T30] audit: type=1400 audit(1757538283.912:1333): avc: denied { read write } for pid=11890 comm="syz.8.1377" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 493.096875][ T30] audit: type=1400 audit(1757538283.912:1334): avc: denied { open } for pid=11890 comm="syz.8.1377" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 493.174286][T11897] 9pnet: Could not find request transport: .I®fd [ 493.190428][ T30] audit: type=1400 audit(1757538283.962:1335): avc: denied { nlmsg_write } for pid=11892 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 494.040098][T11915] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1381'. [ 494.496790][ T30] audit: type=1400 audit(1757538285.422:1336): avc: denied { mount } for pid=11919 comm="syz.0.1382" name="/" dev="ramfs" ino=36022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 494.523710][T11920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1382'. [ 494.545943][T11920] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 494.555876][ T30] audit: type=1400 audit(1757538285.472:1337): avc: denied { mounton } for pid=11919 comm="syz.0.1382" path="/bus" dev="ramfs" ino=36027 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 494.581510][T11920] overlayfs: failed to set xattr on upper [ 494.587221][T11920] overlayfs: ...falling back to redirect_dir=nofollow. [ 494.609951][T11920] overlayfs: ...falling back to index=off. [ 494.617872][T11920] overlayfs: ...falling back to uuid=null. [ 494.624342][T11920] overlayfs: ...falling back to xino=off. [ 494.631589][ T30] audit: type=1400 audit(1757538285.562:1338): avc: denied { mount } for pid=11919 comm="syz.0.1382" name="/" dev="overlay" ino=36026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 496.117206][ T30] audit: type=1400 audit(1757538287.042:1339): avc: denied { append } for pid=11933 comm="syz.3.1388" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 496.368189][ T30] audit: type=1400 audit(1757538287.292:1340): avc: denied { read write } for pid=11940 comm="syz.6.1390" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 496.368243][ T30] audit: type=1400 audit(1757538287.292:1341): avc: denied { open } for pid=11940 comm="syz.6.1390" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 496.456781][T11942] SELinux: Context system_u:object_r:console_device_t:s0 is not valid (left unmapped). [ 496.540985][ T30] audit: type=1400 audit(1757538287.382:1342): avc: denied { relabelto } for pid=11932 comm="syz.8.1387" name="6" dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:console_device_t:s0" [ 496.869891][ T44] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 497.115079][T11943] netlink: 'syz.6.1390': attribute type 13 has an invalid length. [ 497.139882][ T44] usb 8-1: Using ep0 maxpacket: 8 [ 497.174609][T11943] gretap0: refused to change device tx_queue_len [ 497.181287][T11943] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 497.265999][ T44] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 497.266037][ T44] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 497.266065][ T44] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.266092][ T44] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.266132][ T44] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.266156][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.392292][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1392'. [ 497.542766][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1393'. [ 497.624156][T11956] netlink: 'syz.6.1393': attribute type 1 has an invalid length. [ 497.979297][ T44] usb 8-1: GET_CAPABILITIES returned 0 [ 497.979337][ T44] usbtmc 8-1:16.0: can't read capabilities [ 498.063785][ T44] usb 8-1: USB disconnect, device number 40 [ 498.989669][ T5940] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 499.297703][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 499.297736][ T30] audit: type=1400 audit(1757538290.202:1346): avc: denied { ioctl } for pid=11967 comm="syz.8.1396" path="socket:[36236]" dev="sockfs" ino=36236 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 499.681247][ T5940] usb 8-1: Using ep0 maxpacket: 32 [ 499.735838][ T5940] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.766485][ T5940] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 499.776549][ T5940] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 499.901267][ T5940] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.934425][ T5940] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.944249][ T5940] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.953794][ T5940] usb 8-1: Product: syz [ 499.959196][ T5940] usb 8-1: Manufacturer: syz [ 499.967060][ T5940] usb 8-1: SerialNumber: syz [ 500.627051][ T30] audit: type=1400 audit(1757538291.502:1347): avc: denied { bind } for pid=11973 comm="syz.6.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 500.652563][ T30] audit: type=1400 audit(1757538291.502:1348): avc: denied { name_bind } for pid=11973 comm="syz.6.1399" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 500.677665][ T30] audit: type=1400 audit(1757538291.502:1349): avc: denied { node_bind } for pid=11973 comm="syz.6.1399" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 501.299839][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.306544][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.838933][ T30] audit: type=1400 audit(1757538292.762:1350): avc: denied { getopt } for pid=11999 comm="syz.3.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 501.949760][T12001] lo speed is unknown, defaulting to 1000 [ 501.973424][T12002] can: request_module (can-proto-5) failed. [ 501.973787][T12001] lo speed is unknown, defaulting to 1000 [ 502.006348][ T30] audit: type=1400 audit(1757538292.932:1351): avc: denied { unlink } for pid=11964 comm="syz.7.1397" name="#19" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 502.028685][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.068343][ T30] audit: type=1400 audit(1757538292.982:1352): avc: denied { create } for pid=11964 comm="syz.7.1397" name="#1b" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 502.117573][ T5940] cdc_ncm 8-1:1.0: bind() failure [ 502.287990][ T5940] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 502.308194][ T30] audit: type=1400 audit(1757538293.002:1353): avc: denied { link } for pid=11964 comm="syz.7.1397" name="#1b" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 502.333255][ T30] audit: type=1400 audit(1757538293.012:1354): avc: denied { rename } for pid=11964 comm="syz.7.1397" name="#1c" dev="tmpfs" ino=804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 502.368749][ T5940] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 502.427527][ T5940] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 502.458261][ T5940] usb 8-1: USB disconnect, device number 41 [ 502.547507][ T30] audit: type=1400 audit(1757538293.462:1355): avc: denied { lock } for pid=12009 comm="syz.3.1407" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 502.576541][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.515526][T12024] lo speed is unknown, defaulting to 1000 [ 503.533458][T12024] lo speed is unknown, defaulting to 1000 [ 505.143871][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 505.341913][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.350983][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 505.372268][ T9] usb 4-1: config 1 has no interface number 1 [ 505.527346][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.730314][T12051] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 505.757555][T12051] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 506.198369][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.221751][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.249736][ T9] usb 4-1: Product: syz [ 506.310601][ T9] usb 4-1: Manufacturer: syz [ 506.322491][ T9] usb 4-1: SerialNumber: syz [ 506.570961][ T9] usb 4-1: 2:1 : invalid UAC_AS_GENERAL desc [ 506.651310][ T9] usb 4-1: USB disconnect, device number 42 [ 506.807229][ T8308] udevd[8308]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.877567][T12064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.885101][T12064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.990553][T12064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.024724][T12064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.569697][ T9] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 508.749664][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 508.997567][T12093] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1428'. [ 509.039642][ T9] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 509.258468][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 509.288829][ T9] usb usb4-port1: attempt power cycle [ 509.669861][ T9] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 509.760522][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 509.899744][ T9] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 509.930509][ T9] usb 4-1: Invalid ep0 maxpacket: 64 [ 509.936043][ T9] usb usb4-port1: unable to enumerate USB device [ 510.039812][ T1208] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 510.098246][T12097] overlayfs: failed to clone upperpath [ 510.229834][ T1208] usb 8-1: Using ep0 maxpacket: 32 [ 510.240956][ T1208] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 510.272789][ T1208] usb 8-1: config 0 has no interface number 0 [ 510.278931][ T1208] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 510.719258][ T1208] usb 8-1: config 0 interface 196 has no altsetting 0 [ 510.728449][ T1208] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 510.744033][ T1208] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.753151][ T1208] usb 8-1: Product: syz [ 510.757340][ T1208] usb 8-1: Manufacturer: syz [ 510.769691][ T1208] usb 8-1: SerialNumber: syz [ 510.780925][ T1208] usb 8-1: config 0 descriptor?? [ 510.790447][T12095] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 511.731155][ T1208] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 513.277071][ T1208] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached [ 513.477688][T12120] bond0: (slave team0): Releasing backup interface [ 513.563390][T12120] bridge_slave_0: left allmulticast mode [ 513.590986][T12120] bridge_slave_0: left promiscuous mode [ 513.603691][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.873281][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 513.873296][ T30] audit: type=1400 audit(1757538304.802:1358): avc: denied { ioctl } for pid=12155 comm="syz.8.1442" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 513.882015][T12156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 513.994096][ T44] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 514.119586][ T30] audit: type=1400 audit(1757538305.042:1359): avc: denied { read } for pid=12161 comm="syz.6.1444" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 514.317121][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.340980][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.341051][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.355491][ T44] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.381164][T12120] bond0: (slave bond_slave_0): Releasing backup interface [ 514.391117][T12120] bond0: (slave bond_slave_1): Releasing backup interface [ 514.392992][ T44] usb 4-1: config 1 interface 1 has no altsetting 1 [ 514.409021][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.428983][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.438675][ T44] usb 4-1: Product: syz [ 514.443925][T12120] team0: Port device team_slave_0 removed [ 514.446031][ T44] usb 4-1: Manufacturer: syz [ 514.455318][ T44] usb 4-1: SerialNumber: syz [ 514.460871][T12120] team0: Port device team_slave_1 removed [ 514.478017][ T44] usb 4-1: selecting invalid altsetting 1 [ 514.557814][ T5940] usb 8-1: USB disconnect, device number 42 [ 514.804631][ T44] cdc_ncm 4-1:1.0: bind() failure [ 514.811991][ T5940] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected [ 514.824171][ T44] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 514.833682][ T44] cdc_ncm 4-1:1.1: bind() failure [ 514.850171][ T44] usb 4-1: USB disconnect, device number 47 [ 516.306997][ T30] audit: type=1400 audit(1757538307.232:1360): avc: denied { add_name } for pid=12187 comm="syz.3.1451" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.392990][ T30] audit: type=1400 audit(1757538307.262:1361): avc: denied { create } for pid=12187 comm="syz.3.1451" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 516.545850][ T30] audit: type=1400 audit(1757538307.272:1362): avc: denied { associate } for pid=12187 comm="syz.3.1451" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 517.159786][ T5989] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 517.184997][ T30] audit: type=1400 audit(1757538308.112:1363): avc: denied { map } for pid=12203 comm="syz.3.1452" path="socket:[36549]" dev="sockfs" ino=36549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 517.211800][T12215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1452'. [ 517.289832][ T5989] usb 8-1: device descriptor read/64, error -71 [ 517.540102][ T5989] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 517.679927][ T5989] usb 8-1: device descriptor read/64, error -71 [ 517.821601][ T5989] usb usb8-port1: attempt power cycle [ 518.409730][ T5989] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 518.443231][ T5989] usb 8-1: device descriptor read/8, error -71 [ 518.607903][T12239] openvswitch: netlink: EtherType 50a is less than min 600 [ 518.749853][ T5989] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 518.759836][ T30] audit: type=1400 audit(1757538309.682:1364): avc: denied { ioctl } for pid=12236 comm="syz.6.1463" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 518.806524][ T5989] usb 8-1: device descriptor read/8, error -71 [ 518.920002][ T5989] usb usb8-port1: unable to enumerate USB device [ 520.124634][ T30] audit: type=1400 audit(1757538311.052:1365): avc: denied { ioctl } for pid=12249 comm="syz.7.1468" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 520.216415][T12258] binder: 12249:12258 ioctl c0306201 200000000000 returned -22 [ 520.312510][ T30] audit: type=1400 audit(1757538311.112:1366): avc: denied { set_context_mgr } for pid=12249 comm="syz.7.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 520.381835][T12251] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1468'. [ 521.046805][ T30] audit: type=1400 audit(1757538311.972:1367): avc: denied { listen } for pid=12267 comm="syz.7.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 521.877330][ T30] audit: type=1400 audit(1757538312.792:1368): avc: denied { setopt } for pid=12278 comm="syz.6.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 522.105726][ T30] audit: type=1400 audit(1757538313.032:1369): avc: denied { bind } for pid=12287 comm="syz.8.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 523.144613][T12311] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'. [ 523.220128][ T30] audit: type=1400 audit(1757538314.152:1370): avc: denied { getopt } for pid=12308 comm="syz.0.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 523.242773][T12309] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1481'. [ 523.348227][ T30] audit: type=1400 audit(1757538314.272:1371): avc: denied { setattr } for pid=12317 comm="syz.0.1484" name="NETLINK" dev="sockfs" ino=37669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 524.104407][T12325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 524.418898][ T5989] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 524.715594][ T5989] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.726723][ T5989] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.849772][ T5989] usb 4-1: config 0 interface 0 has no altsetting 0 [ 524.879766][ T5989] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 524.888872][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.251027][ T5989] usb 4-1: config 0 descriptor?? [ 525.466003][ T5989] ntrig 0003:1B96:0003.0012: item fetching failed at offset 5/7 [ 525.476210][ T5989] ntrig 0003:1B96:0003.0012: parse failed [ 525.486344][ T5989] ntrig 0003:1B96:0003.0012: probe with driver ntrig failed with error -22 [ 525.886625][ T5172] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 525.929868][ T1208] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 525.983075][T12355] rdma_rxe: rxe_newlink: failed to add syz_tun [ 526.000563][T12355] misc userio: No port type given on /dev/userio [ 526.364541][ T30] audit: type=1400 audit(1757538317.292:1372): avc: denied { ioctl } for pid=12353 comm="syz.6.1492" path="socket:[36723]" dev="sockfs" ino=36723 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 526.552677][ T1208] usb 8-1: Using ep0 maxpacket: 8 [ 526.559979][ T1208] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 526.576353][ T1208] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 526.608001][ T1208] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.642968][ T1208] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.664254][ T1208] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 526.675774][ T1208] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.951444][ T1208] usb 8-1: GET_CAPABILITIES returned 0 [ 526.956978][ T1208] usbtmc 8-1:16.0: can't read capabilities [ 527.095107][ T1208] usb 4-1: USB disconnect, device number 48 [ 527.223479][ T9] usb 8-1: USB disconnect, device number 47 [ 527.399507][T12365] nbd_handle_cmd: 2 callbacks suppressed [ 527.409653][T12365] block nbd0: Attempted send on invalid socket [ 527.416048][T12365] blk_print_req_error: 2 callbacks suppressed [ 527.416073][T12365] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 527.711182][ T30] audit: type=1400 audit(1757538318.432:1373): avc: denied { map } for pid=12360 comm="syz.8.1494" path="socket:[38046]" dev="sockfs" ino=38046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 527.772075][ T30] audit: type=1400 audit(1757538318.432:1374): avc: denied { read } for pid=12360 comm="syz.8.1494" path="socket:[38046]" dev="sockfs" ino=38046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 529.417189][ T30] audit: type=1400 audit(1757538320.322:1375): avc: denied { connect } for pid=12384 comm="syz.7.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 529.756822][ T30] audit: type=1400 audit(1757538320.412:1376): avc: denied { bind } for pid=12384 comm="syz.7.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 530.381407][ T5172] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 530.751546][T12415] tmpfs: Unknown parameter '00000000000000000000' [ 530.766932][T12378] syz.3.1497 (12378): drop_caches: 2 [ 531.772098][ T30] audit: type=1400 audit(1757538322.362:1377): avc: denied { getopt } for pid=12428 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 533.282171][ T30] audit: type=1400 audit(1757538324.192:1378): avc: denied { setopt } for pid=12426 comm="syz.0.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 533.705388][ T44] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 533.759839][ T5990] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 533.860058][ T44] usb 8-1: Using ep0 maxpacket: 32 [ 533.879426][ T44] usb 8-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 533.895798][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.926055][ T44] usb 8-1: config 0 descriptor?? [ 533.940395][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 533.993268][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.036718][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.130718][ T44] usb 8-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 534.321587][ T44] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 534.352117][ T5990] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 534.357077][ T44] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 534.368720][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.385496][ T44] usb 8-1: media controller created [ 534.394734][ T5990] usb 4-1: config 0 descriptor?? [ 534.414700][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.466399][ T44] usb 8-1: selecting invalid altsetting 1 [ 534.497626][ T44] set interface failed [ 534.501348][ T44] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 535.193088][ T44] error writing reg: 0xff, val: 0x00 [ 535.265993][ T44] dvb_usb_mxl111sf 8-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 535.388787][ T5990] corsair 0003:1B1C:1B02.0013: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 535.511722][ T44] usb 8-1: USB disconnect, device number 48 [ 537.143240][T12497] ALSA: mixer_oss: invalid OSS volume '' [ 537.153526][T12497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=528 sclass=netlink_route_socket pid=12497 comm=syz.8.1526 [ 538.948498][T12507] macvtap1: entered allmulticast mode [ 538.954081][T12507] veth0_macvtap: entered allmulticast mode [ 539.078472][T12475] syz.6.1520 (12475): drop_caches: 2 [ 539.200854][ T5990] corsair 0003:1B1C:1B02.0013: Failed to get K90 initial state (error -71). [ 539.287323][ T5990] usb 4-1: USB disconnect, device number 49 [ 540.879935][ T5932] usb 8-1: new low-speed USB device number 49 using dummy_hcd [ 541.275128][ T5932] usb 8-1: config index 0 descriptor too short (expected 6427, got 27) [ 541.284850][ T5932] usb 8-1: config 0 has an invalid interface number: 21 but max is 0 [ 541.312070][ T5932] usb 8-1: config 0 has no interface number 0 [ 541.381571][ T5932] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 541.424807][ T5932] usb 8-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 541.457346][T12565] futex_wake_op: syz.0.1537 tries to shift op by 32; fix this program [ 541.463513][ T5932] usb 8-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 541.485730][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.511913][ T5932] usb 8-1: config 0 descriptor?? [ 541.838576][ T5932] usb 8-1: USB disconnect, device number 49 [ 541.915627][ T30] audit: type=1400 audit(1757538332.842:1379): avc: denied { ioctl } for pid=12576 comm="syz.7.1545" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 542.050758][T12584] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.793847][T12590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=12590 comm=syz.6.1546 [ 543.715004][T12615] tipc: Enabled bearer , priority 0 [ 543.751681][ T5932] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 543.776856][ T5932] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 543.822426][T12615] syzkaller0: entered promiscuous mode [ 543.830510][T12612] SELinux: Context system_u:object_r:cert_t:s0 is not valid (left unmapped). [ 543.849747][ T30] audit: type=1400 audit(1757538334.772:1380): avc: denied { relabelto } for pid=12611 comm="syz.0.1554" name="file0" dev="tmpfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:cert_t:s0" [ 543.866726][T12615] syzkaller0: entered allmulticast mode [ 543.978925][ T30] audit: type=1400 audit(1757538334.772:1381): avc: denied { associate } for pid=12611 comm="syz.0.1554" name="file0" dev="tmpfs" ino=2125 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cert_t:s0" [ 544.049766][ T30] audit: type=1400 audit(1757538334.812:1382): avc: denied { rmdir } for pid=5852 comm="syz-executor" name="file0" dev="tmpfs" ino=2125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:cert_t:s0" [ 544.111147][T12618] tipc: Resetting bearer [ 544.160457][T12613] tipc: Resetting bearer [ 544.198126][T12613] tipc: Disabling bearer [ 544.513143][ T30] audit: type=1400 audit(1757538335.442:1383): avc: denied { accept } for pid=12638 comm="syz.7.1561" path="socket:[38453]" dev="sockfs" ino=38453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 545.609627][ T5932] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 545.731698][ T30] audit: type=1400 audit(1757538336.662:1384): avc: denied { mount } for pid=12652 comm="syz.7.1565" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 545.799718][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 545.806281][ T5932] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 545.816689][ T5932] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.827079][ T5932] usb 4-1: config 1 has no interface number 0 [ 545.833509][ T5932] usb 4-1: config 1 interface 206 altsetting 2 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 545.845433][ T5932] usb 4-1: config 1 interface 206 altsetting 2 bulk endpoint 0x8C has invalid maxpacket 16 [ 545.872469][ T5932] usb 4-1: config 1 interface 206 altsetting 2 endpoint 0x8 has invalid wMaxPacketSize 0 [ 545.885933][ T5932] usb 4-1: config 1 interface 206 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 0 [ 545.903495][ T5932] usb 4-1: config 1 interface 206 has no altsetting 0 [ 545.917964][ T5932] usb 4-1: New USB device found, idVendor=4113, idProduct=0400, bcdDevice=80.24 [ 545.930529][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.939744][ T5932] usb 4-1: Product: syz [ 545.947219][ T5932] usb 4-1: Manufacturer: syz [ 545.952783][ T5932] usb 4-1: SerialNumber: syz [ 545.967191][T12649] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 545.976048][ T5932] ipaq 4-1:1.206: PocketPC PDA converter detected [ 546.180148][ T5932] usb 4-1: PocketPC PDA converter now attached to ttyUSB0 [ 546.317705][ T30] audit: type=1326 audit(1757538337.242:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f22b8eba9 code=0x7fc00000 [ 546.341205][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.381233][ T9] usb 4-1: USB disconnect, device number 50 [ 546.406933][ T9] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 546.460745][ T9] ipaq 4-1:1.206: device disconnected [ 546.980894][ T30] audit: type=1326 audit(1757538337.912:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f22b8eba9 code=0x7fc00000 [ 547.462443][ T30] audit: type=1400 audit(1757538338.392:1387): avc: denied { block_suspend } for pid=12685 comm="syz.7.1574" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 547.769746][ T5990] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 548.233575][ T30] audit: type=1400 audit(1757538338.762:1388): avc: denied { write } for pid=12689 comm="syz.8.1575" name="file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 548.256022][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.335306][ T30] audit: type=1400 audit(1757538338.762:1389): avc: denied { open } for pid=12689 comm="syz.8.1575" path="/44/file0" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 548.358282][ T30] audit: type=1400 audit(1757538338.762:1390): avc: denied { ioctl } for pid=12689 comm="syz.8.1575" path="/44/file0" dev="tmpfs" ino=245 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 548.382595][ T30] audit: type=1400 audit(1757538339.152:1391): avc: denied { append } for pid=12691 comm="syz.6.1576" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 548.407593][ T30] audit: type=1400 audit(1757538339.162:1392): avc: denied { mount } for pid=12691 comm="syz.6.1576" name="/" dev="hugetlbfs" ino=39457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 548.521365][ T5990] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 548.539616][ T5990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.549683][ T30] audit: type=1400 audit(1757538339.192:1393): avc: denied { remount } for pid=12691 comm="syz.6.1576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 548.630919][ T5990] usb 8-1: config 0 descriptor?? [ 548.646066][ T30] audit: type=1400 audit(1757538339.342:1394): avc: denied { unmount } for pid=8441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 548.649499][ T5990] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 548.675130][T12700] lo speed is unknown, defaulting to 1000 [ 548.922086][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1577'. [ 548.998197][T12700] lo speed is unknown, defaulting to 1000 [ 549.111507][ T30] audit: type=1400 audit(1757538339.362:1395): avc: denied { unmount } for pid=8441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 549.281971][ T5990] gspca_stv06xx: I2C: Read error writing address: -71 [ 549.307197][ T5990] usb 8-1: USB disconnect, device number 50 [ 549.743201][T12709] tmpfs: Unknown parameter '00000000000000000000' [ 550.715098][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1585'. [ 551.029272][T12740] mkiss: ax0: crc mode is auto. [ 553.358689][ T44] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 553.830015][ T44] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.856356][ T44] usb 4-1: config 1 interface 0 has no altsetting 0 [ 553.874812][ T44] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 553.900204][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 553.908199][ T44] usb 4-1: SerialNumber: syz [ 554.329081][T12764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 554.815011][T12793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 556.741677][ T44] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 556.776821][ T44] usb 4-1: USB disconnect, device number 51 [ 556.862750][T12813] lo speed is unknown, defaulting to 1000 [ 556.880995][T12815] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1609'. [ 556.896326][T12813] lo speed is unknown, defaulting to 1000 [ 556.950003][T12815] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1609'. [ 557.018562][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 557.018580][ T30] audit: type=1326 audit(1757538347.942:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 557.069713][ T30] audit: type=1326 audit(1757538347.982:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 557.210935][ T30] audit: type=1326 audit(1757538347.982:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 557.260537][ T30] audit: type=1326 audit(1757538347.982:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 557.725684][ T30] audit: type=1326 audit(1757538347.982:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 557.762046][ T30] audit: type=1326 audit(1757538347.982:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 557.894565][ T30] audit: type=1400 audit(1757538348.822:1405): avc: denied { append } for pid=12810 comm="syz.8.1606" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 558.059337][ T30] audit: type=1326 audit(1757538348.982:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 558.182781][ T30] audit: type=1326 audit(1757538348.982:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12810 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 558.549788][T12840] openvswitch: netlink: Invalid VLAN frame [ 560.178026][T12860] fuse: Bad value for 'fd' [ 560.906174][T12874] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 561.018072][ T30] audit: type=1400 audit(1757538351.852:1408): avc: denied { relabelto } for pid=12869 comm="syz.3.1620" name="file0" dev="tmpfs" ino=1862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:" [ 561.246189][T12876] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1619'. [ 561.713846][T12895] SELinux: failed to load policy [ 562.689935][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.696318][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.349657][ T9] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 564.431939][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 564.431953][ T30] audit: type=1400 audit(1757538355.352:1413): avc: denied { bind } for pid=12909 comm="syz.3.1629" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 564.590629][ T30] audit: type=1400 audit(1757538355.352:1414): avc: denied { node_bind } for pid=12909 comm="syz.3.1629" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 564.610719][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.320012][ T9] usb 8-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 565.405868][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.608322][ T9] usb 8-1: Product: syz [ 565.659592][ T9] usb 8-1: Manufacturer: syz [ 565.664189][ T9] usb 8-1: SerialNumber: syz [ 565.787300][ T9] usb 8-1: config 0 descriptor?? [ 565.800113][ T9] usb 8-1: can't set config #0, error -71 [ 565.834278][ T9] usb 8-1: USB disconnect, device number 51 [ 566.157725][ T9] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 566.423195][ T9] usb 8-1: device descriptor read/64, error -71 [ 566.536152][ T30] audit: type=1400 audit(1757538357.462:1415): avc: denied { getopt } for pid=12939 comm="syz.8.1640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 566.556140][ T30] audit: type=1400 audit(1757538357.462:1416): avc: denied { remount } for pid=12939 comm="syz.8.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 566.659711][ T9] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 566.802767][ T9] usb 8-1: device descriptor read/64, error -71 [ 566.974592][ T9] usb usb8-port1: attempt power cycle [ 567.622029][ T9] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 567.661972][ T9] usb 8-1: device descriptor read/8, error -71 [ 567.788150][ T30] audit: type=1400 audit(1757538358.712:1417): avc: denied { unmount } for pid=11394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 567.912662][ T9] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 567.925622][T12962] overlayfs: failed to clone upperpath [ 567.962257][ T9] usb 8-1: device descriptor read/8, error -71 [ 568.100051][ T9] usb usb8-port1: unable to enumerate USB device [ 568.950879][T12988] pim6reg: entered allmulticast mode [ 568.957127][T12988] pim6reg: left allmulticast mode [ 569.922818][ T30] audit: type=1400 audit(1757538360.852:1418): avc: denied { connect } for pid=12998 comm="syz.6.1656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 569.957342][T12999] fuse: blksize only supported for fuseblk [ 571.265326][T13024] netlink: 'syz.7.1664': attribute type 10 has an invalid length. [ 571.277352][T13024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 571.286055][ T30] audit: type=1400 audit(1757538362.192:1419): avc: denied { bind } for pid=13023 comm="syz.7.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 571.549777][ T5932] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 571.772731][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 571.989244][ T1208] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 572.024119][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.036912][ T5932] usb 4-1: config 8 has an invalid interface number: 24 but max is 0 [ 572.051493][ T5932] usb 4-1: config 8 has no interface number 0 [ 572.108208][ T5932] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 572.146763][ T5932] usb 4-1: config 8 interface 24 has no altsetting 0 [ 572.153997][ T1208] usb 8-1: Using ep0 maxpacket: 32 [ 572.163829][ T1208] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 572.172961][ T1208] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.188396][ T1208] usb 8-1: config 0 descriptor?? [ 572.315695][ T30] audit: type=1400 audit(1757538363.212:1420): avc: denied { shutdown } for pid=13037 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 572.391440][ T5932] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 572.417295][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.584815][ T30] audit: type=1400 audit(1757538363.212:1421): avc: denied { read } for pid=13037 comm="syz.6.1668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 572.604685][ T1208] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 572.620812][ T1208] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.634508][ T5932] usb 4-1: Product: syz [ 572.638682][ T5932] usb 4-1: Manufacturer: syz [ 572.650674][ T1208] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 573.120213][ T30] audit: type=1400 audit(1757538363.782:1422): avc: denied { mounton } for pid=13023 comm="syz.7.1664" path="/195/file0" dev="tmpfs" ino=1069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 573.129545][ T5932] usb 4-1: SerialNumber: syz [ 573.317108][ T1208] usb 8-1: media controller created [ 573.383132][ T30] audit: type=1400 audit(1757538364.132:1423): avc: denied { mounton } for pid=13023 comm="syz.7.1664" path="/195/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 573.473587][ T1208] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.568209][ T30] audit: type=1400 audit(1757538364.132:1424): avc: denied { read write } for pid=13023 comm="syz.7.1664" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 573.590293][ T30] audit: type=1400 audit(1757538364.132:1425): avc: denied { open } for pid=13023 comm="syz.7.1664" path="/195/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 573.612684][ T1208] az6027: usb out operation failed. (-71) [ 573.618731][ T1208] az6027: usb out operation failed. (-71) [ 573.624594][ T1208] stb0899_attach: Driver disabled by Kconfig [ 573.637786][ T1208] az6027: no front-end attached [ 573.637786][ T1208] [ 573.653677][ T1208] az6027: usb out operation failed. (-71) [ 573.690223][ T1208] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 573.740886][ T1208] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input29 [ 573.776911][ T1208] dvb-usb: schedule remote query interval to 400 msecs. [ 573.789596][ T1208] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 573.835955][ T1208] usb 8-1: USB disconnect, device number 56 [ 573.997894][ T1208] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 574.067063][ T5932] vmk80xx 4-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 574.730710][ T5932] usb 4-1: USB disconnect, device number 52 [ 575.509674][ T30] audit: type=1400 audit(1757538366.392:1426): avc: denied { mount } for pid=13055 comm="syz.8.1673" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 575.693084][ T30] audit: type=1400 audit(1757538366.402:1427): avc: denied { mounton } for pid=13055 comm="syz.8.1673" path="/62/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 575.839796][ T30] audit: type=1400 audit(1757538366.482:1428): avc: denied { accept } for pid=13058 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 576.027155][ T30] audit: type=1400 audit(1757538366.942:1429): avc: denied { unmount } for pid=11394 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 576.094458][ T5172] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 576.876457][T13093] tmpfs: Unknown parameter '00000000000000000000' [ 578.243380][ T30] audit: type=1400 audit(1757538369.148:1430): avc: denied { ioctl } for pid=13119 comm="syz.6.1691" path="socket:[40301]" dev="sockfs" ino=40301 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 578.588471][T13124] tmpfs: Unknown parameter '00000000000000000000' [ 579.662676][ T30] audit: type=1400 audit(1757538370.588:1431): avc: denied { mount } for pid=13131 comm="syz.7.1696" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 579.675064][T13133] overlayfs: missing 'lowerdir' [ 579.796070][T13142] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1699'. [ 579.839557][ T30] audit: type=1400 audit(1757538370.598:1432): avc: denied { mounton } for pid=13131 comm="syz.7.1696" path="/202/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 579.880949][T13142] overlayfs: failed to clone upperpath [ 580.038614][ T30] audit: type=1326 audit(1757538370.688:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.6.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336a18eba9 code=0x7ffc0000 [ 580.119652][ T30] audit: type=1326 audit(1757538370.688:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.6.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f336a18eba9 code=0x7ffc0000 [ 580.134677][T13143] netlink: 'syz.0.1699': attribute type 29 has an invalid length. [ 580.144589][ T30] audit: type=1326 audit(1757538370.688:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13134 comm="syz.6.1698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f336a18eba9 code=0x7ffc0000 [ 580.176617][T13143] netlink: 'syz.0.1699': attribute type 3 has an invalid length. [ 580.184553][T13143] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1699'. [ 580.407678][T13153] netlink: 76 bytes leftover after parsing attributes in process `syz.7.1702'. [ 581.476270][T13168] loop7: detected capacity change from 0 to 7 [ 581.627343][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.636532][ C1] buffer_io_error: 43 callbacks suppressed [ 581.636546][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.122246][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.131397][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.186608][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.195781][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.205773][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.214912][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.224107][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.233246][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.241580][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.250732][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.261837][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.270974][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.278827][T13168] ldm_validate_partition_table(): Disk read failed. [ 582.285970][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.295155][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.304146][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.313281][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.322239][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 582.331394][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 582.442146][T13168] Dev loop7: unable to read RDB block 0 [ 582.489102][T13168] loop7: unable to read partition table [ 582.496375][T13168] loop7: partition table beyond EOD, truncated [ 582.508320][T13168] loop_reread_partitions: partition scan of loop7 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 582.661928][T13172] ldm_validate_partition_table(): Disk read failed. [ 582.682653][T13172] Dev loop7: unable to read RDB block 0 [ 582.691737][T13172] loop7: unable to read partition table [ 582.698351][T13172] loop7: partition table beyond EOD, truncated [ 583.654558][T13205] 9pnet_fd: Insufficient options for proto=fd [ 583.929087][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 583.929104][ T30] audit: type=1400 audit(1757538374.708:1495): avc: denied { setopt } for pid=13189 comm="syz.7.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 584.103244][ T5172] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 585.553050][ T30] audit: type=1400 audit(1757538376.468:1496): avc: denied { watch } for pid=13221 comm="syz.0.1721" path="/427/file1" dev="tmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 585.588404][ T30] audit: type=1400 audit(1757538376.468:1497): avc: denied { watch_sb watch_reads } for pid=13221 comm="syz.0.1721" path="/427/file1" dev="tmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 585.612335][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.992934][ T30] audit: type=1400 audit(1757538376.928:1498): avc: denied { listen } for pid=13226 comm="syz.8.1722" path=2F37362FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 586.015979][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.160955][ T30] audit: type=1326 audit(1757538377.098:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.8.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 586.184427][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.206569][ T30] audit: type=1326 audit(1757538377.128:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.8.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 586.230150][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.239995][ T30] audit: type=1326 audit(1757538377.128:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.8.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 586.263457][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.364361][ T30] audit: type=1326 audit(1757538377.128:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.8.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 586.583347][ T30] audit: type=1326 audit(1757538377.128:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.8.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 586.724230][ T30] audit: type=1326 audit(1757538377.128:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13238 comm="syz.8.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95e638eba9 code=0x7ffc0000 [ 587.410141][ T5172] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 588.414430][T13281] fuse: Unknown parameter '000000000000000000030000000000000000000000500000000000000000000' [ 589.070291][T13296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.090619][ T44] libceph: connect (1)[b::]:6789 error -101 [ 591.106133][ T44] libceph: mon0 (1)[b::]:6789 connect error [ 591.129401][T13310] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1745'. [ 591.208682][T13316] page: refcount:515 mapcount:0 mapping:ffff8881442ea590 index:0x0 pfn:0x8ca00 [ 591.218301][T13316] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 591.226784][T13316] aops:hugetlbfs_aops ino:9e9e dentry name(?):"anon_hugepage" [ 591.234222][T13316] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 591.242347][T13316] page_type: f4(hugetlb) [ 591.246567][T13316] raw: 00fff00000000041 ffffc9000469fd68 ffffc9000469fd68 ffff8881442ea590 [ 591.255122][T13316] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 591.263672][T13316] head: 00fff00000000041 ffffc9000469fd68 ffffc9000469fd68 ffff8881442ea590 [ 591.272309][T13316] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 591.280945][T13316] head: 00fff00000000009 ffffea0002328001 0000000000000000 0000000000000000 [ 591.289588][T13316] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 591.298285][T13316] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 591.305541][T13316] page_owner tracks the page as allocated [ 591.311765][T13316] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 12796, tgid 12768 (syz.8.1595), ts 555120944122, free_ts 530254003138 [ 591.332501][T13316] post_alloc_hook+0x1c0/0x230 [ 591.337245][T13316] get_page_from_freelist+0x132b/0x38e0 [ 591.342757][T13316] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 591.348617][T13316] alloc_surplus_hugetlb_folio+0x1ad/0x4a0 [ 591.354407][T13316] alloc_hugetlb_folio+0xed4/0x1560 [ 591.359575][T13316] hugetlbfs_fallocate+0xa48/0x12e0 [ 591.364748][T13316] vfs_fallocate+0x5b1/0x10e0 [ 591.369391][T13316] ioctl_preallocate+0x1a0/0x210 [ 591.374299][T13316] do_vfs_ioctl+0x11f4/0x14f0 [ 591.378946][T13316] __x64_sys_ioctl+0x114/0x210 [ 591.383679][T13316] do_syscall_64+0xcd/0x4c0 [ 591.388153][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.394013][T13316] page last free pid 12397 tgid 12391 stack trace: [ 591.400475][T13316] free_unref_folios+0xa61/0x16b0 [ 591.405467][T13316] folios_put_refs+0x56f/0x740 [ 591.410197][T13316] shmem_undo_range+0x58f/0x1150 [ 591.415100][T13316] shmem_evict_inode+0x3a1/0xbe0 [ 591.420005][T13316] evict+0x3e3/0x920 [ 591.423870][T13316] iput+0x521/0x880 [ 591.427648][T13316] dentry_unlink_inode+0x29c/0x480 [ 591.432730][T13316] __dentry_kill+0x1d0/0x600 [ 591.437288][T13316] dput.part.0+0x4b1/0x9b0 [ 591.441672][T13316] dput+0x1f/0x30 [ 591.445274][T13316] __fput+0x51c/0xb70 [ 591.449224][T13316] task_work_run+0x150/0x240 [ 591.453785][T13316] do_exit+0x86f/0x2bf0 [ 591.457917][T13316] do_group_exit+0xd3/0x2a0 [ 591.462390][T13316] get_signal+0x2673/0x26d0 [ 591.466860][T13316] arch_do_signal_or_restart+0x8f/0x7d0 [ 591.472457][T13316] ------------[ cut here ]------------ [ 591.477877][T13316] kernel BUG at mm/filemap.c:154! [ 591.482882][T13316] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 591.489262][T13316] CPU: 1 UID: 0 PID: 13316 Comm: syz.3.1742 Not tainted syzkaller #0 PREEMPT(full) [ 591.498593][T13316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.508614][T13316] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 591.514736][T13316] Code: a7 1e c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 da 19 c9 ff 85 ed 7e 17 e8 91 1e c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 7a 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 591.534309][T13316] RSP: 0018:ffffc900056cf310 EFLAGS: 00010046 [ 591.540344][T13316] RAX: 0000000000080000 RBX: ffffea0002328000 RCX: ffffc90013f6f000 [ 591.548283][T13316] RDX: 0000000000080000 RSI: ffffffff81f2704e RDI: ffff888028618444 [ 591.556218][T13316] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 591.564159][T13316] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8881442ea590 [ 591.572100][T13316] R13: ffffea0002328030 R14: 0000000000000870 R15: ffffea0002328000 [ 591.580037][T13316] FS: 00007fc698d5a6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 591.588937][T13316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.595489][T13316] CR2: 00007fc698d59f98 CR3: 00000000792c9000 CR4: 00000000003526f0 [ 591.603431][T13316] Call Trace: [ 591.606691][T13316] [ 591.609594][T13316] filemap_remove_folio+0xf1/0x250 [ 591.614685][T13316] remove_inode_hugepages+0x74a/0xed0 [ 591.620026][T13316] ? bpf_ksym_find+0x127/0x1c0 [ 591.624768][T13316] ? kernel_text_address+0x8d/0x100 [ 591.629939][T13316] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 591.635810][T13316] ? up_write+0x1b2/0x520 [ 591.640115][T13316] hugetlbfs_fallocate+0xf3f/0x12e0 [ 591.645292][T13316] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 591.650903][T13316] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 591.656502][T13316] ? vfs_fallocate+0x5b1/0x10e0 [ 591.661320][T13316] vfs_fallocate+0x5b1/0x10e0 [ 591.665963][T13316] ? __pfx_vfs_fallocate+0x10/0x10 [ 591.671062][T13316] ? madvise_vma_behavior+0x2b20/0x2d60 [ 591.676584][T13316] madvise_vma_behavior+0x2ad7/0x2d60 [ 591.681939][T13316] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 591.687717][T13316] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 591.693406][T13316] ? __pfx_mas_prev+0x10/0x10 [ 591.698052][T13316] ? find_vma_prev+0xda/0x160 [ 591.702698][T13316] ? __pfx_find_vma_prev+0x10/0x10 [ 591.707781][T13316] madvise_walk_vmas+0x31f/0x9c0 [ 591.712690][T13316] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 591.718120][T13316] madvise_do_behavior+0x1e2/0x530 [ 591.723201][T13316] ? __pfx_madvise_do_behavior+0x10/0x10 [ 591.728800][T13316] ? down_read+0x13d/0x480 [ 591.733187][T13316] ? __lock_acquire+0x62e/0x1ce0 [ 591.738097][T13316] do_madvise+0x176/0x240 [ 591.742395][T13316] ? __pfx_do_madvise+0x10/0x10 [ 591.747216][T13316] ? handle_mm_fault+0x2ab/0xd10 [ 591.752128][T13316] ? do_user_addr_fault+0x843/0x1370 [ 591.757379][T13316] __x64_sys_madvise+0xa9/0x110 [ 591.762198][T13316] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.767362][T13316] do_syscall_64+0xcd/0x4c0 [ 591.771836][T13316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.777697][T13316] RIP: 0033:0x7fc697f8eba9 [ 591.782077][T13316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.801651][T13316] RSP: 002b:00007fc698d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 591.810030][T13316] RAX: ffffffffffffffda RBX: 00007fc6981d6450 RCX: 00007fc697f8eba9 [ 591.817968][T13316] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 591.825905][T13316] RBP: 00007fc698011e19 R08: 0000000000000000 R09: 0000000000000000 [ 591.833841][T13316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.841776][T13316] R13: 00007fc6981d64e8 R14: 00007fc6981d6450 R15: 00007ffca78ff378 [ 591.849718][T13316] [ 591.852705][T13316] Modules linked in: [ 591.856564][T13316] ---[ end trace 0000000000000000 ]--- [ 591.861982][T13316] RIP: 0010:filemap_unaccount_folio+0xef/0x8c0 [ 591.868108][T13316] Code: a7 1e c9 ff 89 ee 31 ff 4c 8d 6b 30 e8 da 19 c9 ff 85 ed 7e 17 e8 91 1e c9 ff 48 c7 c6 40 1d b9 8b 48 89 df e8 72 cf 11 00 90 <0f> 0b e8 7a 1e c9 ff 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 591.887697][T13316] RSP: 0018:ffffc900056cf310 EFLAGS: 00010046 [ 591.893729][T13316] RAX: 0000000000080000 RBX: ffffea0002328000 RCX: ffffc90013f6f000 [ 591.901667][T13316] RDX: 0000000000080000 RSI: ffffffff81f2704e RDI: ffff888028618444 [ 591.909605][T13316] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 591.917541][T13316] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8881442ea590 [ 591.925477][T13316] R13: ffffea0002328030 R14: 0000000000000870 R15: ffffea0002328000 [ 591.933416][T13316] FS: 00007fc698d5a6c0(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 591.942322][T13316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 591.948874][T13316] CR2: 00007fc698d59f98 CR3: 00000000792c9000 CR4: 00000000003526f0 [ 591.956813][T13316] Kernel panic - not syncing: Fatal exception [ 593.015774][T13316] Shutting down cpus with NMI [ 593.020682][T13316] Kernel Offset: disabled [ 593.024977][T13316] Rebooting in 86400 seconds..