last executing test programs: 7m28.892223268s ago: executing program 3 (id=156): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_io_uring_setup(0x23c, 0x0, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) capset(0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x20000000e2) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x3fe, 0x0) 7m27.840016713s ago: executing program 3 (id=159): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f00)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(0xffffffffffffffff, 0x8b32, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m26.530681271s ago: executing program 3 (id=162): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000040)={0xa6c, 0x0, 0x6001, 0x4, 0x0, 0x3, 0x9}) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @broadcast}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m26.36292328s ago: executing program 3 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x2d, 0x0, 0x90) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x154) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x10002, 0x0) chdir(&(0x7f0000000280)='./file0/../file0/../file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x700, 0x1, 0x40000000}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x118, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) writev(r1, &(0x7f0000000040)=[{0x0}], 0x1) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r8 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r5, 0x3f72, 0x74f1, 0x0, 0x0, 0x39) 7m25.449399746s ago: executing program 3 (id=166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc, 0x1f}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7m23.447923064s ago: executing program 3 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0, 0x14}}, 0x8040) dup(r3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x101ff, 0x6, 0xf000, 0x2000, &(0x7f0000814000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000800000010c0001400000000000000008080005"], 0xe8}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c000000020000000000000000000004010000000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES8=r4, @ANYRES64=r9], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x82200, 0x20, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000040)={0x20002, 0x0, [0x7, 0xffffffffffffffff, 0x4, 0x7f, 0x5, 0x6, 0x2a3, 0xe]}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000002f40)=""/4065, 0x0, 0xfe1, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r11, 0x0, 0x2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m22.315586384s ago: executing program 32 (id=173): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={0x0, 0x14}}, 0x8040) dup(r3) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/nbd8', 0x31d043, 0x43) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000004c0)={0x101ff, 0x6, 0xf000, 0x2000, &(0x7f0000814000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000800000010c0001400000000000000008080005"], 0xe8}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c000000020000000000000000000004010000000000"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYRES8=r4, @ANYRES64=r9], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x82200, 0x20, '\x00', 0x0, 0x25, r10, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000040)={0x20002, 0x0, [0x7, 0xffffffffffffffff, 0x4, 0x7f, 0x5, 0x6, 0x2a3, 0xe]}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, &(0x7f0000002f40)=""/4065, 0x0, 0xfe1, 0x1, 0x1, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r11, 0x0, 0x2}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x58}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3m4.436809968s ago: executing program 2 (id=1024): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000200)=[{'OGAIN', @val={' \'', 'Line Capture Switch'}}, {'OGAIN', @void}], 0x37) close(r1) 3m3.121757833s ago: executing program 2 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002bc0)={0x2020}, 0x2020) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x290603, 0x0) readv(r2, &(0x7f0000002700)=[{&(0x7f0000001180)=""/250, 0xfa}], 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="0a8b9d49323898b7b9c805d2ec9bb5ee5e33e85d62be5ebc22c75d27b7ad3e", 0x1f, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 3m1.852582828s ago: executing program 2 (id=1034): socket(0x27, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0181, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x3, 0x0, @void, @value}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xc, 0x9, 0xfff}, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r6}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) ioperm(0x2b, 0xa9, 0x3) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r6, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r8, 0x0) syz_open_dev$usbmon(&(0x7f0000000380), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r8, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x24, 0x1407, 0x80c, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) write$RDMA_USER_CM_CMD_GET_EVENT(r8, &(0x7f0000000140)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000080)={0x3, 0x100, 0x180, 0x0}) 2m58.796187285s ago: executing program 2 (id=1048): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x800, 0x0, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000080)}, 0x20) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x2, 0x1, 0x2, @loopback, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x8000, 0x79ad, 0x1}}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000200)={@empty, 0x7e, r3}) r4 = syz_clone(0x200000, &(0x7f0000000240)="efe26b0a3661158d8714627c45c99b08414a7b579a5e8522c53265f060c1f24f5a5503838d2e355866f6656ba1b61e77ae7ae1e3beb44a05d617", 0x3a, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="eeda82204c0d9dec52d3ccd0e239fcd2149eacb5509109a7d164d91fa2a8606a9bc785ea91ef5f35233f6d03f9b3465205cd9bacef26107719ecd255bd83393f9989dd4abc722ff7fa4cdbde28424ef19de466cc5466f87f37bfd60165c7f230a64a271800e70974894c3af7025aed5e14b5a36509195fc178f5cf673b63c27f57b7784d328ac48689bd8b53f19b8a2ef35ed22178c0b3d6af61e9a889ca933ca1") sched_setaffinity(r4, 0x8, &(0x7f00000003c0)) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000400)=0x4ed, 0x4) connect$caif(r0, &(0x7f0000000440)=@util={0x25, "bc74f6c8ea71083edb0cf88f0b7e49f8"}, 0x18) bind$bt_hci(r0, &(0x7f0000000480)={0x1f, 0x0, 0x1}, 0x6) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000600)={[&(0x7f0000000500)='().\x00', &(0x7f0000000540)='syztnl1\x00', &(0x7f0000000580)='-/./\x00', &(0x7f00000005c0)='\xff\xff']}, &(0x7f0000000740)={[&(0x7f0000000640)='/selinux/user\x00', &(0x7f0000000680)='^*\x00', &(0x7f00000006c0)='ip6_vti0\x00', &(0x7f0000000700)='\x00']}) sendmsg$kcm(r0, &(0x7f0000001a40)={&(0x7f0000000780)=@in={0x2, 0x4e20, @broadcast}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000800)="8047bcafd9", 0x5}, {&(0x7f0000000840)="833b5594c097ac2dfa5c98398b6aa97f2838d5b920068cc884ea981df8111e8a2d2d1b0403c6bf3e7721488f3a4ae9a1fb901776999983a4da8ad1acb7f5e9442586a7ac78e8705dc59f658f8a7d3c86462e3c77621360a678cff260ee4b4b94d3a7a1129b258e5a37b4403bf352c76c650d31df9ba401dd41c708dcaf70a6483c835b11db6b761c31eea85263c8c118a97d57c92a48807d20e95f24593ccb85c71bc8eb7a0fd6ea091e3d2c4b2a96922aec88757efba6a96f3e8192aaa68840cbf27c4edd2623763f04b0f6215b1f90897c19ea9c75f375404d785d036b0d0a703eb7563a98726b", 0xe8}, {&(0x7f0000000940)="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", 0x1000}], 0x3, &(0x7f0000001980)=[{0x88, 0x101, 0x9, "43b706df6a7d239504cbd0b5176920875b63d2fbc320d95b0b62f8d96475074facbc58e6c8fff486be33f84de284ed70d3ae1eedaf8d6afb920f4d48c1f0061803cecc95f3b2985b5e547cedac8ac26307f0812b7da0dc99c0cf0ba0d7c042bf5a1fe3f623a1c73106f3d7c6a6a0f80167cd5a23"}], 0x88}, 0x4040881) lstat(&(0x7f0000001bc0)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c80)={{{@in6=@mcast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@initdev}}, &(0x7f0000001d80)=0xe8) r7 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r1, {0x0}}, './file0\x00'}) read$FUSE(r0, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f0000001a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001b80), 0x20000, &(0x7f0000003e40)={[{@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x9}}, {@uid={'uid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0xf}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mode}, {@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, r7}}, {@mode={'mode', 0x3d, 0x1b}}], [{@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_lt={'uid<', r9}}, {@uid_gt={'uid>', r10}}, {@smackfshat={'smackfshat', 0x3d, 'syztnl1\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '!(\\-]\',]#('}}, {@dont_hash}, {@fsname={'fsname', 0x3d, 'syztnl1\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@&'}}, {@obj_user={'obj_user', 0x3d, 'ip6_vti0\x00'}}]}) r11 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000004000), 0x2, 0x0) r12 = openat$mice(0xffffffffffffff9c, &(0x7f0000004040), 0x388000) ioctl$AUTOFS_DEV_IOCTL_READY(r12, 0xc0189376, &(0x7f0000004080)={{0x1, 0x1, 0x18, r11, {0xd}}, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f00000041c0)={@empty, 0x9c27666e, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x20) ioctl$TCGETA(r8, 0x5405, &(0x7f0000004200)) socket$caif_stream(0x25, 0x1, 0x4) mount(&(0x7f0000004240)=@md0, &(0x7f0000004280)='./file0\x00', &(0x7f00000042c0)='exofs\x00', 0x82, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000004340)={&(0x7f0000004300)='jbd2_shrink_checkpoint_list\x00', r8, 0x0, 0x8}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000004380)={{0x1, 0x1, 0x18, r1, {0x800, 0x6584}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) 2m58.584953349s ago: executing program 2 (id=1050): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001140)={0x14, 0x2b, 0xb, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20080c40) r1 = socket(0x10, 0x80003, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r2, 0x121500) setresuid(0xffffffffffffffff, 0x0, 0xee01) socketpair$unix(0x2d, 0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m58.312517898s ago: executing program 2 (id=1053): io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0xf0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(r0, &(0x7f0000000040)=0x9, r1, &(0x7f00000001c0)=0xf, 0x8, 0x3) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x607b, 0x1000, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x15, 0x0, 0xe1fa, 0x0, &(0x7f00000000c0)="f7d17994252a87959a7e4527233d5da825cd03225e2e8ce55d5b41fcb893fdedfb34a3e08c3c597d742a6865d2ff39484780d224ab893a7e26894aedbf2c8ce73b9ffc0ed387f36d8dc9d87fe861a5ea05c5279aecb8559131c84cc4143a23e34baebff785724f8b98a16618820898b78a562e2c71", 0xfff, 0x0, 0x0, {0x2, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m42.407809699s ago: executing program 33 (id=1053): io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0xf0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) splice(r0, &(0x7f0000000040)=0x9, r1, &(0x7f00000001c0)=0xf, 0x8, 0x3) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x607b, 0x1000, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x15, 0x0, 0xe1fa, 0x0, &(0x7f00000000c0)="f7d17994252a87959a7e4527233d5da825cd03225e2e8ce55d5b41fcb893fdedfb34a3e08c3c597d742a6865d2ff39484780d224ab893a7e26894aedbf2c8ce73b9ffc0ed387f36d8dc9d87fe861a5ea05c5279aecb8559131c84cc4143a23e34baebff785724f8b98a16618820898b78a562e2c71", 0xfff, 0x0, 0x0, {0x2, r5}}) io_uring_enter(r2, 0x3516, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.980328382s ago: executing program 4 (id=1531): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000009c0)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x10000}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x33f57d586bad36f8, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8f5, 0x100000000000000) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)=@can, 0x80, 0x0, 0x0, &(0x7f0000000800)=""/175, 0xaf}, 0x2001) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x80002, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 10.972877984s ago: executing program 0 (id=1532): syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f7001020301090212000100000000090401"], 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) 9.413634799s ago: executing program 1 (id=1536): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.364432123s ago: executing program 6 (id=1537): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0xe02, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) write(r5, &(0x7f0000000000)="0a000000010000", 0x7) 9.127833101s ago: executing program 1 (id=1539): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='macvlan1\x00', 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 8.592144413s ago: executing program 1 (id=1540): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa242, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0xf7e) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000300)) r3 = socket(0x26, 0x800, 0x401) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000013c0)={'ip6tnl0\x00', &(0x7f0000001340)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x6, 0x0, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x6, 0x1, 0x2, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001440)={'sit0\x00', &(0x7f0000001400)={'ip_vti0\x00', 0x0, 0x700, 0x7, 0x2, 0x2, {{0x7, 0x4, 0x2, 0x22, 0x1c, 0x64, 0x0, 0x58, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x1c, [@broadcast]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000001480)={0x44, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x2048011) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(r8, 0x0, 0x4c, 0x8001) setrlimit(0x40000000000008, &(0x7f0000000000)) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r10, 0xc01064d1, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r12, @ANYBLOB="0a00340002020202020200000a000600080211000000000008004a0008ac0f00040049"], 0x54}}, 0x4004) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000100)=0x3, 0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 7.983428146s ago: executing program 0 (id=1541): ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000002c0)={0xeeef0000, 0x2000, 0x9, 0x7, 0x4a}) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001280)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eab556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.010306569s ago: executing program 4 (id=1543): r0 = io_uring_setup(0x70fb, &(0x7f0000000140)={0x0, 0x1000, 0x10, 0x4800004, 0x3b7}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r3 = socket(0xb, 0x80000, 0xfffffffe) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) write$dsp(r1, &(0x7f0000000280)='e', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000000580)=""/102400, 0x19000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, 0x0, 0x0, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000005c0)}, 0x3422a61a}], 0x1, 0x10102, 0x0) read$FUSE(r6, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/227, 0xe3) close_range(r0, 0xffffffffffffffff, 0x0) 6.967436743s ago: executing program 6 (id=1544): get_robust_list(0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)) 6.808432741s ago: executing program 6 (id=1545): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f00000001c0)=ANY=[@ANYBLOB="0556"], 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x8b7, 0x43) connect$unix(0xffffffffffffffff, 0x0, 0xffffffffffffff57) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x90) chdir(0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000002240)={{0x20000000004, 0x9}, {0x5, 0x7}, 0xffffffff, 0x2}) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000006c0)=ANY=[@ANYRES64=r4, @ANYBLOB, @ANYBLOB="11020000008a750adda1c900000000000001003bc83c0f13936b3fd4b959d5cd5d09c7940caf78b61f321bb684084d5b05ada2497316edc2ebecbec9900e56a89da196b7c7046dcf5073f1d4dea20b64a9b529f91107f879e1af45bd406d73f0b683a799248327673061af09a0b988c3e670cc4f0547fae55f9438eb5ef294800100f1008840526e27abcefd1987a44b8edd5f7d478333cf60e9f5507b9b0c7f77f2ac0f517c83bf7e2d75ddae35b8f8fec77c3496c3a12bad1ccab586165d0aa1b5c198f032d13fe010d7d5a2354077211ec6ee32f63b2e70ba5a2c9f852da2edaa05fcc4431bfc631b510ce3cd858566dba3dae8544880"]) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) 6.01628917s ago: executing program 4 (id=1546): syz_clone(0x80880000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[], 0x30}}, 0x40050) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf5, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000001480)=""/4096, 0x1000}, 0x10002) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r2, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x10, 0x800, 0x3) socket$can_j1939(0x1d, 0x2, 0x7) fsopen(&(0x7f0000000400)='xfs\x00', 0x0) 5.959064624s ago: executing program 6 (id=1547): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000077d4f42000000000fede0102030109021b00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.680964066s ago: executing program 0 (id=1549): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000680)={0x0, @bt={0xba, 0x1, 0x1, 0x0, 0xfff, 0x8, 0x28a7, 0x10001, 0x0, 0x6, 0x6, 0x8374, 0x73f3fe77, 0x7, 0x1, 0xa, {0x56c6, 0x1}, 0xc, 0x51}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r6 = semget$private(0x0, 0x5, 0x0) semop(r6, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5e13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x7fd, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x7], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0xff, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x409, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) readv(r7, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) write$input_event(r7, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000200)) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01bf061438b1fd685b241f002dbd7000", @ANYBLOB="14005e80080002000000000008000100020000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) 5.048900791s ago: executing program 1 (id=1550): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1f}, {}, {0xfff3}}}, 0x24}}, 0x0) 4.944389109s ago: executing program 4 (id=1551): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x10, 0x80003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r5 = syz_open_pts(r4, 0x121500) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x3) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002000090002000000", @ANYRES32=r6, @ANYBLOB="b821c4c2681deb04c56211986e3880fdc5d66fb563ba29151b727e7a4145bb52f9162cd7e44764c04b09ee8b054c34261add17b93dba200e51e442c07ebc4a614a9856ea5ce0f4fa5d921b29843fe9990abd3a2bd357784610c95dd0e92e75e12c8ce8f978142d1ee02b390feeffd5442337ad4fc66b6c04acba72366b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setreuid(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='afs_cm_no_server_u\x00', r8, 0x0, 0x7}, 0xffffffffffffff79) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 4.231913962s ago: executing program 5 (id=1552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xd1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002bc0)={0x2020}, 0x2020) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x290603, 0x0) readv(r2, &(0x7f0000002700)=[{&(0x7f0000001180)=""/250, 0xfa}], 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c) sendto$inet6(r5, &(0x7f00000000c0)="0a8b9d49323898b7b9c805d2ec9bb5ee5e33e85d62be5ebc22c75d27b7ad3e", 0x1f, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x100}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 4.137247888s ago: executing program 0 (id=1553): io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000f4000000000000"], 0x48) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x40020}, 0x20040800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x24, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) 3.532475381s ago: executing program 1 (id=1554): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0xe02, 0x70bd26, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x63, &(0x7f00000001c0)=[@cr4={0x1, 0x200900}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) syz_usb_connect$cdc_ncm(0x6, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a44000010203010902640002010000000904000001020d000008240600010d4bb505240000000d240f0100000000000000000006241a000000052401000009058103000000fb00090401"], 0x0) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100800201020824050503"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2f, &(0x7f0000000100)=ANY=[@ANYBLOB="2f03bac6c75bef54b57901ce9c63dae3933f2b25"]}]}) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) write(r5, &(0x7f0000000000)="0a000000010000", 0x7) 3.330443896s ago: executing program 5 (id=1555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x0, 0x2, {0x0}, 0x10000003}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r8 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x33, 0x39, 0x36, 0x0, 0x34, 0x33, 0x31, 0x64, 0xc1e688e9b2ae2fc6, 0x61, 0x62, 0x0, 0x63, 0x0, 0x65, 0x5a]}, &(0x7f00000004c0)={0x0, "d1cc36a7f7b46969adcac737ee43395966a4b96ab99dc9152669484465687559a61e3f08e687f5d5f57378ce2ac54ba0e89c8cf04799789b72dd85718f8733af", 0x20}, 0x48, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)='{.+&\x00', 0x0) keyctl$negate(0xd, r8, 0xad0, r9) r10 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r10, 0x4, 0x1) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000243000/0x3000)=nil, 0x3000, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in=@loopback, 0xfffffffc, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x1ff, 0x0, 0x4}, {}, {0x2, 0x6, 0xff}, 0x70bd2d, 0x0, 0x2, 0x0, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd26, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) 3.214602356s ago: executing program 0 (id=1556): r0 = io_uring_setup(0x70fb, &(0x7f0000000140)={0x0, 0x1000, 0x10, 0x4800004, 0x3b7}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000480)=@assoc_value, 0x0) r3 = socket(0xb, 0x80000, 0xfffffffe) sendmmsg$inet(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, 0x0) write$dsp(r1, &(0x7f0000000280)='e', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@generic={0x89, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000000580)=""/102400, 0x19000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, 0x0, 0x0, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000005c0)}, 0x3422a61a}], 0x1, 0x10102, 0x0) read$FUSE(r6, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/227, 0xe3) close_range(r0, 0xffffffffffffffff, 0x0) 3.146749418s ago: executing program 4 (id=1557): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x224}) timer_create(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 2.334745648s ago: executing program 5 (id=1558): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r1, &(0x7f0000000040)=""/126, 0x7e) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xea) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r2, 0x0, 0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(&(0x7f0000000280)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='f2fs\x00', 0x10040, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) 1.406333503s ago: executing program 6 (id=1559): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0xc0cbcf50a4e0bec8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioperm(0x0, 0x401, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x581, 0x20000000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550c, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) getpeername(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={r5}) 1.375966074s ago: executing program 5 (id=1560): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) r4 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000500)='\x1a%wyt\xad\x8c\'\x87J\xb2s\xb8\x06\xdd\xc4\x11\xb1\t\xd7\xcd\xed0;\x93\x8f \xa0Y\x82\x05\xb5P\x95Gi\xe4\x8cE06TcZ\x8a>\x8dg\xf2\xedx\x9bB\x1c\xcfJO\xec\xd6oC\xc8\x00\x028D\xbaX\xd6j\xbf\x10C\x9e\x8e\xeb3An\xe3\'\xfe5\xdb\x92\xb4\xed\xd3\xb84\xd9.\xec\xde\xab\xd2\x90\xc0+A\t\xc4\xfe\xc8D\x1d\n\x17\xb8X\xfb:\v\xf8L}\xe2\x10\xdd\xe8\xfc\x80\x1dJ\xb2.*|\x10\x0e?5\xe1\xd1_\xb7\xb8\xa5\x92\x95P\x17\x87$:\x16\xaa\xfcY*\x94\fs\x1e\xa2\x9a\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='signal_deliver\x00', r5, 0x0, 0x3de}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) r7 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}) io_uring_enter(r7, 0x75fa, 0xe475, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) open(0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)) 1.375356262s ago: executing program 0 (id=1561): syz_clone(0x80880000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[], 0x30}}, 0x40050) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xf5, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1=0xe0000300}, @address_request}}}}, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000001480)=""/4096, 0x1000}, 0x10002) connect$packet(r2, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) shutdown(r2, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f00000000c0)={@multicast1, @empty, 0x0, "8a147ab429a268100a54c80e1e7a328017293a1441396d46117beb5ab1394be4", 0x200, 0x1, 0xb, 0x81}, 0x3c) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x10, 0x800, 0x3) socket$can_j1939(0x1d, 0x2, 0x7) fsopen(&(0x7f0000000400)='xfs\x00', 0x0) 416.666658ms ago: executing program 6 (id=1562): r0 = syz_open_dev$vim2m(0x0, 0xfffffffffffffa03, 0x2) r1 = socket(0x1e, 0x4, 0x6d9e) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a00000000000000000000000800"], 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a700000000000905", @ANYRES32], 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) dup(r3) sched_setscheduler(r4, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121) dup(0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) socket$phonet(0x23, 0x2, 0x1) dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102376, 0x18fe8) syz_usb_disconnect(0xffffffffffffffff) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x4) pipe(&(0x7f00000000c0)) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0x30) sendfile(r5, r6, 0x0, 0xfffffffffffffff4) 359.317091ms ago: executing program 5 (id=1563): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x408400, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r0, 0x7c81, 0x0) statx(r0, &(0x7f0000000080)='./file0\x00', 0x1000, 0x942, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001480)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) getgroups(0x5, &(0x7f00000014c0)=[0xee00, 0xee01, 0x0, 0x0, 0xffffffffffffffff]) read$FUSE(r0, &(0x7f0000001500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000003540)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) stat(&(0x7f0000003580)='./file0\x00', &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000036c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc, &(0x7f0000001440)=[{&(0x7f00000001c0)={0x11e4, 0x10, 0x700, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x43, 0x0, 0x0, @uid=r1}, @nested={0x11cb, 0xb8, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="5381348e1b9c07150efabd85197585ade71de6343794acbb8cad35a1fb4e1ab35fee7869c237084d0311fd1667a8a85a6db67ce716995086b380704b971bbd61fb4b0ee3bd72baee3bc2de3b217c9a6b67c27244fca9d92def6dffe4add657b1572f89818d8b2ba5cb2e7df79e3b8580576347a4eccf69269def2123ca6b98afc39ada941425e49a69613a0f176761ca5e7d36b39b71bd8102126e0b22319f45884488703a2ff2ee5d8b695506310aa8e5986f937a915f9278443778b60959cda60049417a2d85676b4aec37149d", @typed={0x8, 0x13c, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x151, 0x0, 0x0, @u32=0x5}, @typed={0xc, 0xed, 0x0, 0x0, @u64=0x8001}, @nested={0x4, 0x1e}, @generic="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", @generic="3e54e71b5225de151980a616ae6a1c88bf47d127e195a5fa7a797a68ec043461250fdc8076b454630d60828e67d3455361d7eddaee4229e1623addf559f072470c4a0a6e8df127a61935a038eca74919c5af66dbd9ccd544fbfaf0bdd6b3b75d758e0d4bff304f3c548c848c5216cca9cca6c443ab4798768ad09f7ccde662a6658b1246cc5b6316c1be15ca7298fc932d0956430fa44822ef3b9cfcf4867aac04049ed9e20b44a9ab2338814ae6c5080b88c761ca2510e34d9191176c1638f20064066dd4", @typed={0x8, 0x98, 0x0, 0x0, @pid}, @typed={0x4, 0xc3}]}]}, 0x11e4}, {&(0x7f00000013c0)={0x50, 0x30, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0xa2, 0x0, 0x0, @pid=r2}, @typed={0x12, 0x10, 0x0, 0x0, @str='/dev/ubi_ctrl\x00'}, @nested={0x1c, 0x105, 0x0, 0x1, [@nested={0x4, 0xaf}, @typed={0x14, 0x11e, 0x0, 0x0, @ipv6=@mcast1}]}, @typed={0x8, 0xe, 0x0, 0x0, @str='7-}\x00'}]}, 0x50}], 0x2, &(0x7f0000003640)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}], 0x68, 0x48000}, 0x4820) splice(r0, &(0x7f0000003700)=0x6, r7, &(0x7f0000003740)=0x5, 0xdd10, 0x1) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000003780)=0x100) write$6lowpan_enable(r7, &(0x7f00000037c0)='0', 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000003800)={0x2, {0x2, 0x9, 0x5, 0xe635, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000003880)={'syztnl0\x00', &(0x7f0000003840)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0xffff9611, 0x8, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x64, 0x0, 0x0, 0x2f, 0x0, @local, @private=0xa010102, {[@ra={0x94, 0x4}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000038c0)=@base={0xa, 0x6, 0x1c, 0x8, 0x2010, r3, 0x9, '\x00', r10, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) listen(r3, 0x0) syz_open_dev$sndctrl(&(0x7f0000003940), 0x7, 0x404001) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r7, 0x3ba0, &(0x7f0000003a40)={0x48, 0x4, 0x0, 0x0, 0x8b, &(0x7f0000003980)="a4d1c697dd0a4e877c15a44438f75a20cd819fbd38ec090dd81906b3296fcf5b2193dd57da9cbaab2d7ea6209b0d14bcb506e60d51a194e94bf5e0156259273d3b9d6847e8ed82ab32113ba41b4a9c1baa1642d5151dde7f086fdedce622338407f455e79fd241a1f33f0c02cfee488ade657a9f8923e1230c67ad7bdab9f246dc45ae78cdae47f26e09a4", 0xd}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) bpf$LINK_DETACH(0x22, &(0x7f0000003b00)=r3, 0x4) ioctl$TCSETS(r0, 0x5402, &(0x7f0000003b40)={0x10000, 0x1ff, 0xb998, 0x8, 0xf, "ce97feea273e125f4b3441e2f24e6b79546a57"}) fcntl$addseals(r11, 0x409, 0x4) pselect6(0x40, &(0x7f0000003b80)={0xa, 0x88, 0x0, 0x51947ed1, 0x7, 0x2, 0x51c, 0x3}, &(0x7f0000003bc0)={0x4, 0x5, 0x4, 0x30, 0x9, 0xb, 0x7, 0x2}, &(0x7f0000003c00)={0x1, 0x2, 0xa, 0x4, 0x7, 0xe0, 0x1, 0x4}, &(0x7f0000003c40)={0x0, 0x3938700}, &(0x7f0000003cc0)={&(0x7f0000003c80)={[0x5]}, 0x8}) r12 = syz_open_dev$sndctrl(&(0x7f0000003d00), 0xfff, 0x11d0c0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r12, 0x40405515, &(0x7f0000003d40)={0x9, 0x1, 0x4, 0x100, '\x00', 0x5}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000003d80)) getsockopt$inet6_buf(r3, 0x29, 0x32, &(0x7f0000003e40)=""/251, &(0x7f0000003f40)=0xfb) sendto$inet6(r3, &(0x7f0000003f80)="411e5a5068d59f8d3ca239ca523de70483bdefd87c2cf7fd444bcc2753c4e6d0996037643c8fab53d5e96fca807c035a0488301876eb04b16fae1d6a92ff2c00c4465787f466f1a9351f1e022cef5e063183d4", 0x53, 0x4, 0x0, 0x0) 148.388926ms ago: executing program 5 (id=1564): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000052000102"], 0x14}}, 0x40044c4) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xfcc}], 0x2, 0x2040, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400003a00000052000100000000000000"], 0x14}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet6(0xa, 0x3, 0x7) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$inet(r7, &(0x7f00000002c0), 0x0, 0x880, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x10, &(0x7f0000000580)=0x7, 0x4) 77.805196ms ago: executing program 1 (id=1565): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = inotify_init() fgetxattr(r3, &(0x7f0000003500)=@known='system.posix_acl_access\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x40000, 0x1, {0x0, 0x0, 0x0, r4, 0x38}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004804}, 0x24004004) prlimit64(0x0, 0x7, &(0x7f0000000340)={0x0, 0x9}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0xfffffed4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0xa, 0x0, 0x3}, 0x1, 0x1, 0x80000001, 0x6, 0x2, 0x1c, 0x14, 0xa, 0x5, 0x7f, {0xc609, 0x5, 0x80, 0x5, 0x6, 0xf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2}, 0x0) 0s ago: executing program 4 (id=1566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x0, 0x2, {0x0}, 0x10000003}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x0, 0x0, &(0x7f0000000c40)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010300000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r8 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x33, 0x39, 0x36, 0x0, 0x34, 0x33, 0x31, 0x64, 0xc1e688e9b2ae2fc6, 0x61, 0x62, 0x0, 0x63, 0x0, 0x65, 0x5a]}, &(0x7f00000004c0)={0x0, "d1cc36a7f7b46969adcac737ee43395966a4b96ab99dc9152669484465687559a61e3f08e687f5d5f57378ce2ac54ba0e89c8cf04799789b72dd85718f8733af", 0x20}, 0x48, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)='{.+&\x00', 0x0) keyctl$negate(0xd, r8, 0xad0, r9) r10 = memfd_create(&(0x7f00000005c0)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) lseek(r10, 0x4, 0x1) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x3f}}, {@in=@loopback, 0xfffffffc, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x1ff, 0x0, 0x4}, {}, {0x2, 0x6, 0xff}, 0x70bd2d, 0x0, 0x2, 0x0, 0x0, 0xb0}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd26, 0x70bd2d, 0x70bd2b, 0x4, [0x0]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) kernel console output (not intermixed with test programs): ile permissive=1 [ 349.907748][ T30] audit: type=1400 audit(1747453677.684:1051): avc: denied { open } for pid=9572 comm="syz.1.920" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.932087][ T30] audit: type=1400 audit(1747453677.724:1052): avc: denied { ioctl } for pid=9572 comm="syz.1.920" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 349.988028][ T30] audit: type=1400 audit(1747453677.724:1053): avc: denied { getopt } for pid=9572 comm="syz.1.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 350.734010][ T30] audit: type=1400 audit(1747453678.784:1055): avc: denied { create } for pid=9574 comm="syz.2.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 351.179087][ T30] audit: type=1326 audit(1747453678.074:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2718e969 code=0x7ffc0000 [ 351.628686][ T30] audit: type=1326 audit(1747453679.224:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9580 comm="syz.1.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae2718e969 code=0x7ffc0000 [ 351.652018][ C0] vkms_vblank_simulate: vblank timer overrun [ 351.679929][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.923'. [ 351.779917][ T971] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 352.548510][ T971] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 352.688819][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.698943][ T971] usb 1-1: Product: syz [ 352.703228][ T971] usb 1-1: Manufacturer: syz [ 352.707863][ T971] usb 1-1: SerialNumber: syz [ 352.758702][ T971] usb 1-1: config 0 descriptor?? [ 353.548206][ T971] airspy 1-1:0.0: Board ID: 05 [ 353.556509][ T971] airspy 1-1:0.0: Firmware version:  [ 353.757444][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 353.757455][ T30] audit: type=1400 audit(1747453681.814:1082): avc: denied { write } for pid=9604 comm="syz.4.928" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.941344][ T9608] kvm: kvm [9604]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xff0000000000 [ 353.952165][ T971] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 353.970567][ T971] airspy 1-1:0.0: Registered as swradio24 [ 353.979035][ T971] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 354.081304][ T971] usb 1-1: USB disconnect, device number 20 [ 354.657398][ T30] audit: type=1400 audit(1747453682.714:1083): avc: denied { execute } for pid=9604 comm="syz.4.928" path="/195/blkio.bfq.io_merged_recursive" dev="tmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 355.113437][ T9624] syz_tun: entered allmulticast mode [ 356.157736][ T9623] syz_tun: left allmulticast mode [ 356.565983][ T30] audit: type=1400 audit(1747453684.624:1084): avc: denied { write } for pid=9637 comm="syz.4.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 356.749439][ T30] audit: type=1400 audit(1747453684.804:1085): avc: denied { setattr } for pid=9644 comm="syz.2.938" name="" dev="pipefs" ino=3791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 356.789733][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 357.114441][ T9649] sp0: Synchronizing with TNC [ 357.132081][ T30] audit: type=1400 audit(1747453684.864:1086): avc: denied { bind } for pid=9644 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.299710][ T30] audit: type=1400 audit(1747453684.864:1087): avc: denied { write } for pid=9644 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 357.322430][ T9649] [U] [ 357.415309][ T30] audit: type=1400 audit(1747453685.474:1088): avc: denied { ioctl } for pid=9650 comm="syz.0.940" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 357.455207][ T30] audit: type=1400 audit(1747453685.514:1089): avc: denied { ioctl } for pid=9639 comm="syz.1.936" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 357.814217][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.858828][ T9666] 9pnet_fd: Insufficient options for proto=fd [ 358.879936][ T30] audit: type=1400 audit(1747453686.914:1090): avc: denied { create } for pid=9665 comm="syz.4.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 359.351042][ T9672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'. [ 360.789748][ T9687] syz_tun: entered allmulticast mode [ 360.880510][ T30] audit: type=1400 audit(1747453688.944:1091): avc: denied { sqpoll } for pid=9688 comm="syz.0.951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 361.228596][ T9680] syz_tun: left allmulticast mode [ 362.477013][ T30] audit: type=1400 audit(1747453690.534:1092): avc: denied { create } for pid=9749 comm="syz.5.955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 363.039961][ T30] audit: type=1400 audit(1747453690.534:1093): avc: denied { write } for pid=9749 comm="syz.5.955" path="socket:[24629]" dev="sockfs" ino=24629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 363.435708][ T30] audit: type=1400 audit(1747453691.494:1094): avc: denied { nlmsg_write } for pid=9766 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 365.806158][ T30] audit: type=1400 audit(1747453693.864:1095): avc: denied { unlink } for pid=9776 comm="syz.0.960" name="#b" dev="tmpfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 365.806564][ T9777] overlayfs: conflicting lowerdir path [ 365.828350][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.844916][ T9819] bridge0: entered promiscuous mode [ 369.899306][ T9819] macvlan2: entered promiscuous mode [ 369.943390][ T9824] lo: entered allmulticast mode [ 370.155528][ T9835] bridge1: entered promiscuous mode [ 370.713520][ T9821] lo: left allmulticast mode [ 370.841377][ T9845] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 370.866901][ T9845] netlink: 228 bytes leftover after parsing attributes in process `syz.0.975'. [ 371.697088][ T5812] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 372.634526][ T30] audit: type=1400 audit(1747453699.894:1096): avc: denied { kexec_image_load } for pid=9855 comm="syz.5.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 372.725082][ T30] audit: type=1400 audit(1747453700.784:1097): avc: denied { bind } for pid=9862 comm="syz.0.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 372.745251][ C1] vkms_vblank_simulate: vblank timer overrun [ 373.856755][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 374.164631][ T9] usb 6-1: config 0 has no interfaces? [ 374.223596][ T9] usb 6-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 374.244244][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.255897][ T9880] syz_tun: entered allmulticast mode [ 374.286845][ T9] usb 6-1: Product: syz [ 374.296939][ T9] usb 6-1: Manufacturer: syz [ 374.310346][ T9] usb 6-1: SerialNumber: syz [ 374.334158][ T9] usb 6-1: config 0 descriptor?? [ 374.683207][ T5959] usb 6-1: USB disconnect, device number 9 [ 374.968322][ T9879] syz_tun: left allmulticast mode [ 375.293607][ T9899] netlink: 'syz.4.990': attribute type 10 has an invalid length. [ 375.318003][ T9899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.339007][ T9899] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 375.729923][ T971] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 376.338373][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 376.362696][ T971] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 376.376074][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.402430][ T971] usb 3-1: Product: syz [ 376.533404][ T971] usb 3-1: Manufacturer: syz [ 376.538044][ T971] usb 3-1: SerialNumber: syz [ 376.589423][ T971] usb 3-1: config 0 descriptor?? [ 376.809914][ T30] audit: type=1400 audit(1747453704.834:1098): avc: denied { create } for pid=9907 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 376.829485][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.860453][ T971] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 376.938662][ T30] audit: type=1400 audit(1747453704.964:1099): avc: denied { getopt } for pid=9907 comm="syz.4.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 377.076313][ T971] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 377.083921][ T971] visor 3-1:0.0: probe with driver visor failed with error -32 [ 377.578776][ T30] audit: type=1400 audit(1747453705.254:1100): avc: denied { mount } for pid=9911 comm="syz.5.995" name="/" dev="rpc_pipefs" ino=25661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 377.715982][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 378.118784][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.179180][ T24] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 378.354946][ T24] usb 6-1: New USB device strings: Mfr=14, Product=0, SerialNumber=0 [ 378.400925][ T24] usb 6-1: Manufacturer: syz [ 378.416081][ T24] usb 6-1: config 0 descriptor?? [ 378.434224][ T24] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 378.457804][ T24] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 378.644218][ T24] usb 6-1: USB disconnect, device number 10 [ 378.811652][ T24] ftdi_sio 6-1:0.0: device disconnected [ 378.838495][ T5862] usb 3-1: USB disconnect, device number 20 [ 379.109625][ T30] audit: type=1400 audit(1747453707.164:1101): avc: denied { bind } for pid=9936 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 379.251821][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1003'. [ 379.331432][ T9937] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1547 sclass=netlink_xfrm_socket pid=9937 comm=syz.4.1003 [ 379.743319][ T5863] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 380.097432][ T30] audit: type=1400 audit(1747453707.204:1102): avc: denied { listen } for pid=9936 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.118953][ T30] audit: type=1400 audit(1747453707.254:1103): avc: denied { accept } for pid=9936 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.140395][ T30] audit: type=1400 audit(1747453707.304:1104): avc: denied { connect } for pid=9936 comm="syz.4.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 380.160017][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.217723][ T30] audit: type=1326 audit(1747453707.564:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1282b8e969 code=0x7ffc0000 [ 380.241141][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.289891][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 380.301877][ T5863] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 380.320288][ T30] audit: type=1400 audit(1747453707.694:1106): avc: denied { write } for pid=9944 comm="syz.5.1005" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 380.349916][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.399893][ T971] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 380.748330][ T30] audit: type=1326 audit(1747453708.154:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f1282b8e969 code=0x7ffc0000 [ 380.787444][ T30] audit: type=1326 audit(1747453708.154:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1282b8e969 code=0x7ffc0000 [ 380.830784][ T5863] usb 1-1: config 0 descriptor?? [ 380.849029][ T5863] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 380.929884][ T30] audit: type=1326 audit(1747453708.154:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9934 comm="syz.2.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1282b8e969 code=0x7ffc0000 [ 380.997237][ T9955] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1007'. [ 381.060196][ T9943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.070005][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 381.114859][ T9943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.420443][ T5863] gspca_nw80x: reg_w err -110 [ 381.426479][ T5863] nw80x 1-1:0.0: probe with driver nw80x failed with error -110 [ 381.477674][ T5812] Bluetooth: hci2: unexpected event for opcode 0x040e [ 381.999243][ T9966] tipc: Started in network mode [ 382.028702][ T9966] tipc: Node identity 66cad4efc2b3, cluster identity 4711 [ 382.053709][ T9966] tipc: Enabled bearer , priority 0 [ 382.087353][ T9966] tipc: Disabling bearer [ 382.146536][ T30] audit: type=1400 audit(1747453710.204:1110): avc: denied { setopt } for pid=9954 comm="syz.4.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 382.447224][ T971] usb 3-1: unable to get BOS descriptor or descriptor too short [ 382.468643][ T971] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 382.477469][ T971] usb 3-1: can't read configurations, error -71 [ 382.511515][ T9976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1014'. [ 382.523225][ T5863] usb 1-1: USB disconnect, device number 21 [ 382.663136][ T5862] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 382.870289][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 382.905453][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short [ 382.914807][ T5862] usb 5-1: config 1 has an invalid interface number: 121 but max is 0 [ 382.928187][ T5862] usb 5-1: config 1 has no interface number 0 [ 382.936377][ T5862] usb 5-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 382.949309][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.957550][ T5862] usb 5-1: Product: syz [ 382.961814][ T5862] usb 5-1: Manufacturer: syz [ 383.126327][ T5862] usb 5-1: SerialNumber: syz [ 383.187947][ T9989] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1019'. [ 383.197324][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 383.229359][ T5862] hub 5-1:1.121: bad descriptor, ignoring hub [ 383.617091][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.629982][ T5862] hub 5-1:1.121: probe with driver hub failed with error -5 [ 383.649522][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 383.723533][ T9992] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1012'. [ 383.756239][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.016344][ T24] usb 6-1: config 0 descriptor?? [ 384.675396][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 384.682212][ T30] audit: type=1400 audit(1747453712.354:1115): avc: denied { create } for pid=9996 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.119919][ T30] audit: type=1400 audit(1747453712.394:1116): avc: denied { connect } for pid=9996 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.443518][ T30] audit: type=1400 audit(1747453712.424:1117): avc: denied { bind } for pid=9996 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.568000][ T30] audit: type=1400 audit(1747453712.444:1118): avc: denied { write } for pid=9996 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.635929][ T30] audit: type=1400 audit(1747453712.444:1119): avc: denied { read } for pid=9996 comm="syz.1.1020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 385.665644][ T30] audit: type=1400 audit(1747453713.224:1120): avc: denied { append } for pid=10006 comm="syz.1.1022" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 385.740302][ T971] usb 5-1: USB disconnect, device number 13 [ 385.869123][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 385.884372][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 386.001869][ T24] usb 6-1: USB disconnect, device number 11 [ 386.115810][ T30] audit: type=1400 audit(1747453714.174:1121): avc: denied { create } for pid=10016 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.224851][ T30] audit: type=1400 audit(1747453714.284:1122): avc: denied { setopt } for pid=10016 comm="syz.1.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.282503][ T30] audit: type=1400 audit(1747453714.284:1123): avc: denied { ioctl } for pid=10016 comm="syz.1.1025" path="socket:[25921]" dev="sockfs" ino=25921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 386.320084][T10024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1027'. [ 387.040972][ T971] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 387.422459][T10043] input: syz1 as /devices/virtual/input/input27 [ 387.681897][ T971] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 387.690335][ T971] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 387.925938][ T971] usb 2-1: config 0 has no interface number 0 [ 388.003105][ T971] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 388.186958][ T971] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 388.331103][ T971] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 388.391619][ T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.414508][ T971] usb 2-1: config 0 descriptor?? [ 388.819930][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 389.570040][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 389.574484][ T971] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input28 [ 389.773646][ T30] audit: type=1400 audit(1747453717.654:1124): avc: denied { firmware_load } for pid=10065 comm="syz.0.1039" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 389.808340][ T971] input: failed to attach handler kbd to device input28, error: -5 [ 389.821051][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.850327][ T971] usb 2-1: USB disconnect, device number 17 [ 389.859785][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.152060][ T24] usb 3-1: Product: syz [ 390.167219][ T24] usb 3-1: Manufacturer: syz [ 390.184519][ T24] usb 3-1: SerialNumber: syz [ 390.203311][ T24] usb 3-1: config 0 descriptor?? [ 390.270290][T10077] tipc: Enabled bearer , priority 0 [ 390.384467][T10080] tipc: Disabling bearer [ 390.412977][ T30] audit: type=1400 audit(1747453718.474:1125): avc: denied { read } for pid=10051 comm="syz.2.1034" name="usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 390.463968][ T24] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 390.494600][ T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 390.541897][ T30] audit: type=1400 audit(1747453718.474:1126): avc: denied { open } for pid=10051 comm="syz.2.1034" path="/dev/usbmon2" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 390.598638][ T24] usb 3-1: USB disconnect, device number 23 [ 391.095087][T10089] /dev/nullb0: Can't open blockdev [ 391.399446][ T971] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 391.569948][ T971] usb 1-1: Using ep0 maxpacket: 8 [ 391.598058][ T971] usb 1-1: config 1 interface 0 altsetting 11 bulk endpoint 0x1 has invalid maxpacket 32 [ 391.609525][ T971] usb 1-1: config 1 interface 0 altsetting 11 bulk endpoint 0x82 has invalid maxpacket 1023 [ 391.621277][ T971] usb 1-1: config 1 interface 0 has no altsetting 0 [ 391.629736][ T971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 391.641974][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.663524][ T971] usb 1-1: Product: syz [ 391.667700][ T971] usb 1-1: Manufacturer: 漇叜ﺂ藋છ犜갣㓆⿦ᣛᾠ簭罄뀃锘Ꞙ嗆챐ﭾ㶥겤인閄㹞≾撋ﾠ䐶筂撖擆膏᪸뿭갇䈹㓄쪵皱蟊姃⟢Ȫ㴩섫彁ퟵ⩨玼諌乵쾎ꉔ埇㢺飖㑗ᨔ [ 391.719918][ T971] usb 1-1: SerialNumber: syz [ 391.778805][T10089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.795800][T10089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 392.664345][ T30] audit: type=1400 audit(1747453719.984:1127): avc: denied { override_creds } for pid=10107 comm="syz.2.1053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 394.605145][ T971] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 11 proto 1 vid 0x0525 pid 0xA4A8 [ 394.642258][ T971] usb 1-1: USB disconnect, device number 22 [ 394.663567][ T971] usblp0: removed [ 394.695674][T10122] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.913221][ T30] audit: type=1400 audit(1747453722.974:1128): avc: denied { ioctl } for pid=10126 comm="syz.5.1058" path="socket:[26126]" dev="sockfs" ino=26126 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 397.734652][T10151] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 397.742749][T10151] netlink: 784 bytes leftover after parsing attributes in process `syz.1.1063'. [ 397.903387][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 398.237106][ T30] audit: type=1400 audit(1747453726.284:1129): avc: denied { connect } for pid=10154 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 398.263877][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 398.409952][ T5959] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 398.670891][ T24] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 398.688826][ T24] usb 1-1: config 1 has no interface number 0 [ 398.698407][ T30] audit: type=1400 audit(1747453726.294:1130): avc: denied { bind } for pid=10154 comm="syz.5.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 398.753065][ T5959] usb 5-1: config 0 interface 0 has no altsetting 0 [ 398.786543][ T5959] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 398.811228][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 398.825405][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.877147][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.891282][ T24] usb 1-1: Product: syz [ 398.918739][ T5959] usb 5-1: config 0 descriptor?? [ 398.924275][ T24] usb 1-1: Manufacturer: syz [ 398.928934][ T24] usb 1-1: SerialNumber: syz [ 399.004389][ T24] hub 1-1:1.121: bad descriptor, ignoring hub [ 399.011703][ T24] hub 1-1:1.121: probe with driver hub failed with error -5 [ 399.542393][ T5959] (null): keene_cmd_main failed (-110) [ 399.568049][ T5959] video4linux radio48: keene_cmd_main failed (-32) [ 399.575500][ T5959] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 399.670443][ T5959] usb 5-1: USB disconnect, device number 14 [ 399.848746][ T5863] usb 1-1: USB disconnect, device number 23 [ 399.999119][T10169] program syz.5.1069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.050043][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 400.219882][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 400.231601][ T24] usb 2-1: config 64 has an invalid interface number: 4 but max is 0 [ 400.269873][ T24] usb 2-1: config 64 has no interface number 0 [ 400.288599][ T24] usb 2-1: config 64 interface 4 has no altsetting 0 [ 400.297715][ T24] usb 2-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 400.309928][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.318064][ T24] usb 2-1: Product: syz [ 400.325951][ T24] usb 2-1: Manufacturer: syz [ 400.331476][ T24] usb 2-1: SerialNumber: syz [ 400.932668][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1070'. [ 402.261860][T10189] lo speed is unknown, defaulting to 1000 [ 402.587398][T10198] netlink: 'syz.5.1076': attribute type 10 has an invalid length. [ 402.661260][T10198] veth0_macvtap: left promiscuous mode [ 402.691160][T10198] batman_adv: batadv0: Adding interface: macvtap0 [ 402.786285][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1076'. [ 402.912514][ T24] qmi_wwan 2-1:64.4: probe with driver qmi_wwan failed with error -22 [ 402.927248][T10198] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.952614][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.419991][T10198] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 403.438722][ T24] usb 2-1: USB disconnect, device number 18 [ 406.192611][ T30] audit: type=1400 audit(1747453734.254:1131): avc: denied { create } for pid=10233 comm="syz.1.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 406.213391][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.459021][ T30] audit: type=1400 audit(1747453734.514:1132): avc: denied { sys_module } for pid=10233 comm="syz.1.1087" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 406.480131][ C1] vkms_vblank_simulate: vblank timer overrun [ 406.600084][ T30] audit: type=1400 audit(1747453734.654:1133): avc: denied { bind } for pid=10252 comm="syz.5.1091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.312943][T10265] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 408.396336][ T30] audit: type=1400 audit(1747453736.004:1134): avc: denied { bind } for pid=10270 comm="syz.0.1097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 409.459347][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.468295][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.478211][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.486222][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.499178][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.562405][T10287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.595141][ T30] audit: type=1400 audit(1747453737.644:1135): avc: denied { mounton } for pid=10289 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 410.074757][T10289] lo speed is unknown, defaulting to 1000 [ 410.896795][T10302] FAULT_INJECTION: forcing a failure. [ 410.896795][T10302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.910079][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.0.1104 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 410.910113][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.910121][T10302] Call Trace: [ 410.910125][T10302] [ 410.910132][T10302] dump_stack_lvl+0x16c/0x1f0 [ 410.910151][T10302] should_fail_ex+0x512/0x640 [ 410.910169][T10302] _copy_from_user+0x2e/0xd0 [ 410.910186][T10302] copy_msghdr_from_user+0x98/0x160 [ 410.910200][T10302] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 410.910215][T10302] ? __pfx__kstrtoull+0x10/0x10 [ 410.910230][T10302] ___sys_sendmsg+0xfe/0x1d0 [ 410.910242][T10302] ? __pfx____sys_sendmsg+0x10/0x10 [ 410.910261][T10302] ? find_held_lock+0x2b/0x80 [ 410.910284][T10302] __sys_sendmmsg+0x200/0x420 [ 410.910298][T10302] ? __pfx___sys_sendmmsg+0x10/0x10 [ 410.910331][T10302] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 410.910354][T10302] ? fput+0x70/0xf0 [ 410.910367][T10302] ? ksys_write+0x1b9/0x240 [ 410.910383][T10302] ? __pfx_ksys_write+0x10/0x10 [ 410.910402][T10302] __x64_sys_sendmmsg+0x9c/0x100 [ 410.910414][T10302] ? lockdep_hardirqs_on+0x7c/0x110 [ 410.910430][T10302] do_syscall_64+0xcd/0x260 [ 410.910449][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.910462][T10302] RIP: 0033:0x7f57f098e969 [ 410.910471][T10302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.910482][T10302] RSP: 002b:00007f57f1880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 410.910492][T10302] RAX: ffffffffffffffda RBX: 00007f57f0bb6080 RCX: 00007f57f098e969 [ 410.910499][T10302] RDX: 00000000ffffff80 RSI: 0000200000004100 RDI: 0000000000000008 [ 410.910506][T10302] RBP: 00007f57f1880090 R08: 0000000000000000 R09: 0000000000000000 [ 410.910512][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.910518][T10302] R13: 0000000000000000 R14: 00007f57f0bb6080 R15: 00007fff5c5fd818 [ 410.910532][T10302] [ 411.630208][ T5827] Bluetooth: hci5: command tx timeout [ 412.190001][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 412.792513][T10289] chnl_net:caif_netlink_parms(): no params data found [ 413.539153][T10289] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.559237][T10289] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.566620][T10289] bridge_slave_0: entered allmulticast mode [ 413.573733][T10289] bridge_slave_0: entered promiscuous mode [ 413.581083][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.588276][T10289] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.602021][T10289] bridge_slave_1: entered allmulticast mode [ 413.633156][T10289] bridge_slave_1: entered promiscuous mode [ 413.709868][ T53] Bluetooth: hci5: command tx timeout [ 413.743605][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.844378][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.869993][ T5959] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 414.129907][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 414.146931][T10289] team0: Port device team_slave_0 added [ 414.248094][ T5959] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 414.261788][ T5959] usb 2-1: config 0 has no interface number 0 [ 414.288178][ T5959] usb 2-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 414.324106][T10289] team0: Port device team_slave_1 added [ 414.435273][ T5959] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 414.620162][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 414.685184][ T5959] usb 2-1: Product: syz [ 414.695844][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.707028][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.749423][ T5959] usb 2-1: SerialNumber: syz [ 414.779478][ T5959] usb 2-1: config 0 descriptor?? [ 414.835775][ T5959] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 414.848648][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.904336][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.947181][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.033715][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.048789][T10332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.137208][T10332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.214372][ T971] usb 2-1: USB disconnect, device number 19 [ 415.249480][T10289] hsr_slave_0: entered promiscuous mode [ 415.255655][T10289] hsr_slave_1: entered promiscuous mode [ 415.264882][T10289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.305001][T10289] Cannot create hsr debugfs directory [ 415.449914][ T5959] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 415.572311][ T5863] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 415.660306][ T5959] usb 6-1: Using ep0 maxpacket: 16 [ 415.704233][ T5959] usb 6-1: config 119 has an invalid interface number: 69 but max is 2 [ 415.749871][ T5959] usb 6-1: config 119 has an invalid interface number: 195 but max is 2 [ 415.759151][ T5959] usb 6-1: config 119 has an invalid interface number: 28 but max is 2 [ 415.770287][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 415.786144][ T5863] usb 1-1: config 1 has an invalid interface number: 64 but max is 0 [ 415.801154][ T53] Bluetooth: hci5: command tx timeout [ 415.809982][ T5959] usb 6-1: config 119 has an invalid descriptor of length 127, skipping remainder of the config [ 415.827389][ T5959] usb 6-1: config 119 has no interface number 0 [ 415.833748][ T5959] usb 6-1: config 119 has no interface number 1 [ 415.837556][ T5863] usb 1-1: config 1 has no interface number 0 [ 415.840693][ T5959] usb 6-1: config 119 has no interface number 2 [ 415.853483][ T5959] usb 6-1: config 119 interface 69 altsetting 219 has an invalid descriptor for endpoint zero, skipping [ 415.864679][ T5863] usb 1-1: config 1 interface 64 altsetting 129 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 415.864709][ T5863] usb 1-1: config 1 interface 64 altsetting 129 has a duplicate endpoint with address 0x1, skipping [ 415.875991][ T5959] usb 6-1: config 119 interface 69 altsetting 219 has a duplicate endpoint with address 0x1, skipping [ 415.921764][T10289] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.955946][ T5959] usb 6-1: config 119 interface 69 altsetting 219 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 416.055331][T10354] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1118'. [ 416.106981][T10289] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 416.130062][ T5959] usb 6-1: config 119 interface 69 altsetting 219 endpoint 0x8 has invalid maxpacket 1064, setting to 1024 [ 416.149912][ T5959] usb 6-1: config 119 interface 69 altsetting 219 has an invalid descriptor for endpoint zero, skipping [ 416.163456][ T5863] usb 1-1: config 1 interface 64 has no altsetting 0 [ 416.568610][ T5959] usb 6-1: config 119 interface 69 altsetting 219 has 9 endpoint descriptors, different from the interface descriptor's value: 16 [ 416.583017][ T5959] usb 6-1: too many endpoints for config 119 interface 195 altsetting 147: 117, using maximum allowed: 30 [ 416.595155][ T5959] usb 6-1: config 119 interface 195 altsetting 147 has an invalid descriptor for endpoint zero, skipping [ 416.606689][ T5959] usb 6-1: config 119 interface 195 altsetting 147 has a duplicate endpoint with address 0xB, skipping [ 416.632128][T10289] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 416.636454][ T5863] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0013, bcdDevice=29.32 [ 416.638819][ T5959] usb 6-1: config 119 interface 195 altsetting 147 has a duplicate endpoint with address 0xB, skipping [ 416.677093][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.702800][ T5863] usb 1-1: Product: 엨㡏E〺笹玻랏㥯빷運熌ﲞ鲳釬殏ᱻ戒鼪္ [ 416.713138][T10289] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 416.720565][ T5959] usb 6-1: config 119 interface 195 altsetting 147 endpoint 0x3 has invalid maxpacket 544, setting to 64 [ 416.738807][ T5959] usb 6-1: config 119 interface 195 altsetting 147 has a duplicate endpoint with address 0x3, skipping [ 416.750010][ T5959] usb 6-1: config 119 interface 195 altsetting 147 has 7 endpoint descriptors, different from the interface descriptor's value: 117 [ 416.786005][ T5959] usb 6-1: config 119 interface 28 altsetting 6 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 416.843115][ T5863] usb 1-1: Manufacturer: У [ 416.847759][ T5863] usb 1-1: SerialNumber: 索蒚귲簢搎؜蕷ᰟ⬷ᱽৎ畏쎡洞绺젿簢움縲뚉轖閫鸃璥㐀댈슂⌧⟹藎撄㼴꾻셁꜎۠鳘㓎蠏묺鈜㽜ቸ઴雔小렶 [ 416.867003][ T5959] usb 6-1: config 119 interface 28 altsetting 6 has a duplicate endpoint with address 0x82, skipping [ 416.867032][ T5959] usb 6-1: config 119 interface 69 has no altsetting 0 [ 416.919654][T10289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.958762][ T5959] usb 6-1: config 119 interface 195 has no altsetting 0 [ 416.968850][ T5959] usb 6-1: config 119 interface 28 has no altsetting 0 [ 417.022233][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 417.058839][ T5959] usb 6-1: New USB device found, idVendor=2040, idProduct=1800, bcdDevice=cd.47 [ 417.063775][T10289] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.089571][T10350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'. [ 417.115185][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.303915][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short [ 417.326051][ T24] usb 2-1: config 1 has an invalid interface number: 121 but max is 0 [ 417.425734][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.433763][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.470088][ T5959] usb 6-1: Product: ᫇勧煔琴ࠌ☩∷㶚衼캉㾡ꔻ㍇䘒禌ഭ䆨袃犾훜㓒驣뇖峭᥶렛䟽㰿圾觢⠌탲ᚏ䊖ᮥ憪탞緖䷕䊹쬐沉᪥䡛ራ঎㟉䦐龐ꌺ⨆剺ꕺ툖η鑏 [ 417.491581][ T24] usb 2-1: config 1 has no interface number 0 [ 417.534216][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.537252][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 417.541362][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.568865][T10365] lo speed is unknown, defaulting to 1000 [ 417.610180][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.618241][ T5959] usb 6-1: Manufacturer: ꋎ䟾ꔍ蒗鴿萆꧵䐧㇧霴쿪䢜楐♤ལ뛋俟䏦桾ꘉ⒖앀텉糼䘔؎띙ᘥళ많㓖頷퐈⎐窂슘戚腫麐曟츯련헟ഇ썃ৣ趷럾鬪㭪똽ﺝ쩵돌䊣碩鵠⤽굊짡荺䀸ꥻ⹧痵昢踨킴๭刿䓪篮풧 [ 417.646350][ T24] usb 2-1: Product: syz [ 417.651098][ T24] usb 2-1: Manufacturer: syz [ 417.655696][ T24] usb 2-1: SerialNumber: syz [ 417.660490][ T5959] usb 6-1: SerialNumber: 倕捏⬤솯늫舡㖼⊥簾桙࡝鵥ℽ躠ʱ噪頚䉩뎗䘂⮿Გ䷋䗐ฺ흼ձ뺀曾嶍쥢脲엇噪紧珒䣷燺蚱䑝㿿영媂퓅髏䚪蹀돥갰뿏㖩ꙣ賫富┟儖௽䗶ጧ㷕ޠ炚牋繃嶉애雝 [ 417.716235][ T24] hub 2-1:1.121: bad descriptor, ignoring hub [ 417.722516][ T24] hub 2-1:1.121: probe with driver hub failed with error -5 [ 417.734888][T10346] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 417.872729][ T53] Bluetooth: hci5: command tx timeout [ 418.668887][T10376] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1120'. [ 418.979786][ T5959] smsusb:smsusb_probe: board id=6, interface number 69 [ 419.094548][ T5959] smsusb:smsusb_probe: board id=6, interface number 195 [ 419.135581][ T5959] smsusb:smsusb_probe: board id=6, interface number 28 [ 419.549961][ T5959] usb 6-1: USB disconnect, device number 12 [ 419.740298][ T9] usb 2-1: USB disconnect, device number 20 [ 419.904104][ T5863] usb 1-1: USB disconnect, device number 24 [ 419.933358][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.026817][ T30] audit: type=1400 audit(1747453748.081:1136): avc: denied { ioctl } for pid=10388 comm="syz.0.1126" path="socket:[27375]" dev="sockfs" ino=27375 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.107266][ T30] audit: type=1400 audit(1747453748.121:1137): avc: denied { write } for pid=10388 comm="syz.0.1126" path="socket:[27374]" dev="sockfs" ino=27374 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.140104][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 420.211187][ T30] audit: type=1400 audit(1747453748.131:1138): avc: denied { read } for pid=10388 comm="syz.0.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 420.331542][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 420.394042][ T9] usb 6-1: config 1 has an invalid interface number: 121 but max is 0 [ 420.410148][ T9] usb 6-1: config 1 has no interface number 0 [ 420.440902][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 420.784563][T10400] input: syz1 as /devices/virtual/input/input29 [ 420.891507][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.901318][ T9] usb 6-1: Product: syz [ 420.905567][ T9] usb 6-1: Manufacturer: syz [ 420.910368][ T9] usb 6-1: SerialNumber: syz [ 420.951340][T10400] syz.4.1124: attempt to access beyond end of device [ 420.951340][T10400] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 420.964636][T10400] XFS (nbd4): SB validate failed with error -5. [ 420.978664][ T9] hub 6-1:1.121: bad descriptor, ignoring hub [ 420.985485][ T9] hub 6-1:1.121: probe with driver hub failed with error -5 [ 421.070936][T10289] veth0_vlan: entered promiscuous mode [ 421.087577][T10289] veth1_vlan: entered promiscuous mode [ 421.106778][T10289] veth0_macvtap: entered promiscuous mode [ 421.138685][T10289] veth1_macvtap: entered promiscuous mode [ 421.204981][T10289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.281544][T10289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.396404][T10412] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1125'. [ 421.474043][T10289] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.729871][T10289] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.738948][T10289] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.759895][T10289] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.870180][ T5863] usb 6-1: USB disconnect, device number 13 [ 423.086489][ T9705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.103448][ T9705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.115457][ T9705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.123805][ T9705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.184727][ T30] audit: type=1400 audit(1747453751.211:1139): avc: denied { mounton } for pid=10289 comm="syz-executor" path="/root/syzkaller.MQyWuD/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 423.221262][ T30] audit: type=1400 audit(1747453751.211:1140): avc: denied { mount } for pid=10289 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 423.262891][ T30] audit: type=1400 audit(1747453751.221:1141): avc: denied { mounton } for pid=10289 comm="syz-executor" path="/root/syzkaller.MQyWuD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 423.356070][ T30] audit: type=1400 audit(1747453751.221:1142): avc: denied { mounton } for pid=10289 comm="syz-executor" path="/root/syzkaller.MQyWuD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 423.506495][ T30] audit: type=1400 audit(1747453751.241:1143): avc: denied { mounton } for pid=10289 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 423.530775][ T30] audit: type=1400 audit(1747453751.241:1144): avc: denied { mount } for pid=10289 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 423.555256][ T30] audit: type=1400 audit(1747453751.241:1145): avc: denied { mounton } for pid=10289 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 424.443078][T10443] netlink: 'syz.0.1136': attribute type 4 has an invalid length. [ 424.499892][ T5863] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 424.813632][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 424.822295][ T5863] usb 6-1: config 1 has an invalid interface number: 121 but max is 0 [ 424.832632][ T5863] usb 6-1: config 1 has no interface number 0 [ 424.856298][ T5863] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 424.871835][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.908076][ T5863] usb 6-1: Product: syz [ 424.922823][ T5863] usb 6-1: Manufacturer: syz [ 424.935085][ T5863] usb 6-1: SerialNumber: syz [ 424.954686][ T5863] hub 6-1:1.121: bad descriptor, ignoring hub [ 425.024708][ T5863] hub 6-1:1.121: probe with driver hub failed with error -5 [ 425.175677][T10452] input: syz1 as /devices/virtual/input/input30 [ 425.274320][T10455] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1135'. [ 425.568363][T10452] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 425.650430][T10461] input: syz1 as /devices/virtual/input/input31 [ 425.665817][ T24] usb 6-1: USB disconnect, device number 14 [ 425.942271][T10461] syz.4.1137: attempt to access beyond end of device [ 425.942271][T10461] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 426.009940][T10461] XFS (nbd4): SB validate failed with error -5. [ 427.266942][T10479] vivid-000: disconnect [ 427.585152][T10476] vivid-000: reconnect [ 428.018827][ T53] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 428.119973][ T5959] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 429.019877][ T5959] usb 2-1: Using ep0 maxpacket: 16 [ 429.059291][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 429.096888][ T5959] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 429.283393][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.743687][T10501] xt_TPROXY: Can be used only with -p tcp or -p udp [ 430.035513][ T5959] usb 2-1: config 0 descriptor?? [ 430.646917][T10486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.840780][T10486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.876540][ T5959] usbhid 2-1:0.0: can't add hid device: -71 [ 430.898455][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 430.945548][ T5959] usb 2-1: USB disconnect, device number 21 [ 431.328302][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 431.328319][ T30] audit: type=1400 audit(1747453759.381:1148): avc: denied { name_bind } for pid=10512 comm="syz.0.1154" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 431.450959][T10528] tmpfs: Bad value for 'mpol' [ 431.520355][ T30] audit: type=1400 audit(1747453759.581:1149): avc: denied { create } for pid=10529 comm="syz.1.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 431.730201][T10534] input: syz1 as /devices/virtual/input/input32 [ 431.926784][T10531] syz.4.1157: attempt to access beyond end of device [ 431.926784][T10531] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 431.941036][T10531] XFS (nbd4): SB validate failed with error -5. [ 431.960895][T10545] tipc: Started in network mode [ 431.965809][T10545] tipc: Node identity aa119c96fb88, cluster identity 4711 [ 431.975055][T10545] tipc: Enabled bearer , priority 0 [ 432.050976][ T5959] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 432.073360][T10545] tipc: Disabling bearer [ 432.239902][ T5959] usb 7-1: Using ep0 maxpacket: 32 [ 432.684713][ T5959] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 432.693795][ T5959] usb 7-1: config 0 interface 0 has no altsetting 1 [ 432.705068][ T5959] usb 7-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 432.729038][ T5959] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.743429][ T5959] usb 7-1: SerialNumber: syz [ 432.755081][ T5959] usb 7-1: config 0 descriptor?? [ 432.765728][ T5959] usb-storage 7-1:0.0: USB Mass Storage device detected [ 432.805599][ T5959] usb-storage 7-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 433.901545][T10563] Malformed UNC in devname [ 433.901545][T10563] [ 434.000088][T10563] CIFS: VFS: Malformed UNC in devname [ 434.882488][ T30] audit: type=1326 audit(1747453762.791:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 434.949293][ T24] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 435.262434][ T30] audit: type=1326 audit(1747453762.791:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 435.287852][ T30] audit: type=1326 audit(1747453762.851:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 435.317127][ T30] audit: type=1326 audit(1747453762.851:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 435.357544][ T30] audit: type=1326 audit(1747453762.851:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10567 comm="syz.4.1171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 435.470383][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 435.600000][ T24] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 435.814100][ T5827] Bluetooth: hci6: command 0x1003 tx timeout [ 435.917465][ T53] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 436.237872][ T24] usb 1-1: Invalid ep0 maxpacket: 64 [ 436.867185][ T24] usb usb1-port1: attempt power cycle [ 436.940403][ T5861] usb 7-1: USB disconnect, device number 2 [ 438.834508][ T30] audit: type=1400 audit(1747453766.841:1155): avc: denied { write } for pid=10589 comm="syz.0.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 439.563507][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.876038][ T30] audit: type=1400 audit(1747453767.921:1156): avc: denied { create } for pid=10600 comm="syz.6.1181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 441.337840][ T30] audit: type=1400 audit(1747453769.231:1157): avc: denied { execute_no_trans } for pid=10616 comm="syz.0.1185" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 441.787639][ T30] audit: type=1400 audit(1747453769.471:1158): avc: denied { ioctl } for pid=10616 comm="syz.0.1185" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 441.812645][ T30] audit: type=1400 audit(1747453769.481:1159): avc: denied { ioctl } for pid=10616 comm="syz.0.1185" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 441.853404][ T53] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 442.840146][T10625] usb usb1: usbfs: process 10625 (syz.0.1188) did not claim interface 1 before use [ 443.100603][ T30] audit: type=1400 audit(1747453771.031:1160): avc: denied { setopt } for pid=10623 comm="syz.6.1187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 443.395364][T10636] fuse: Unknown parameter 'fO?d' [ 444.161174][T10643] macsec1: entered promiscuous mode [ 444.161256][T10643] macsec1: entered allmulticast mode [ 444.349870][ T971] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 444.531224][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.570462][T10646] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 444.577892][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.709711][ T971] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 444.731008][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.760810][ T971] usb 1-1: config 0 descriptor?? [ 444.932172][T10652] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1196'. [ 444.950425][T10652] tipc: Enabling of bearer rejected, failed to enable media [ 445.528408][ T30] audit: type=1326 audit(1747453773.581:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10659 comm="syz.5.1201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa69418e969 code=0x0 [ 445.551293][ C1] vkms_vblank_simulate: vblank timer overrun [ 445.850172][ T5864] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 446.030054][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 446.038496][ T5864] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 446.056456][ T5864] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.078844][ T5864] usb 5-1: config 0 has no interface number 0 [ 446.097250][ T5864] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.108268][ T5864] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 446.126879][ T5864] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 446.157825][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.182759][ T5864] usb 5-1: config 0 descriptor?? [ 446.203481][ T5864] ldusb 5-1:0.55: Interrupt in endpoint not found [ 446.500771][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1199'. [ 447.229154][ T971] usbhid 1-1:0.0: can't add hid device: -71 [ 447.235227][ T971] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 447.247715][ T971] usb 1-1: USB disconnect, device number 28 [ 447.306025][T10679] nfs: Unknown parameter ' ' [ 447.314202][ T30] audit: type=1400 audit(1747453775.371:1162): avc: denied { connect } for pid=10675 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 447.602040][ T30] audit: type=1400 audit(1747453775.371:1163): avc: denied { bind } for pid=10675 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 447.624261][ T30] audit: type=1400 audit(1747453775.371:1164): avc: denied { listen } for pid=10675 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 447.688065][ T30] audit: type=1400 audit(1747453775.371:1165): avc: denied { accept } for pid=10675 comm="syz.1.1205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 448.970494][ T5861] usb 5-1: USB disconnect, device number 15 [ 449.242570][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1208'. [ 451.189714][T10709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.275986][ T30] audit: type=1400 audit(1747453779.338:1166): avc: denied { write } for pid=10710 comm="syz.4.1216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 452.345162][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1217'. [ 452.493416][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.662949][T10721] bridge_slave_1 (unregistering): left allmulticast mode [ 452.670070][T10721] bridge_slave_1 (unregistering): left promiscuous mode [ 452.677086][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.911754][ T30] audit: type=1400 audit(1747453781.978:1167): avc: denied { listen } for pid=10751 comm="syz.6.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 454.011633][T10754] xt_ipcomp: unknown flags 12 [ 454.053835][ T30] audit: type=1400 audit(1747453781.978:1168): avc: denied { accept } for pid=10751 comm="syz.6.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 455.080153][ T30] audit: type=1400 audit(1747453782.098:1169): avc: denied { read } for pid=10755 comm="syz.5.1228" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 455.104451][ T30] audit: type=1400 audit(1747453782.098:1170): avc: denied { open } for pid=10755 comm="syz.5.1228" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 455.985136][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'. [ 456.239982][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 456.389993][ T5861] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 456.617871][ T971] IPVS: starting estimator thread 0... [ 456.939392][ T24] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 456.951309][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.962426][ T24] usb 5-1: config 0 descriptor?? [ 457.029910][T10779] IPVS: using max 42 ests per chain, 100800 per kthread [ 457.043886][ T5861] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 457.053239][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.144155][ T5861] usb 2-1: Product: syz [ 457.148380][ T5861] usb 2-1: Manufacturer: syz [ 457.168586][ T5861] usb 2-1: SerialNumber: syz [ 457.192237][ T5861] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 457.212821][ T5959] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 457.404503][ T24] usb 5-1: Cannot set MAC address [ 457.589971][ T24] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 457.624925][ T24] usb 5-1: USB disconnect, device number 16 [ 457.656798][ T971] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 457.920776][ T24] usb 2-1: USB disconnect, device number 22 [ 457.971274][ T971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 458.180764][ T971] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 458.282664][ T5959] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 458.302843][ T971] usb 1-1: config 1 has no interface number 0 [ 458.302957][ T5959] ath9k_htc: Failed to initialize the device [ 458.325558][ T971] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 458.341382][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.362882][ T971] usb 1-1: Product: syz [ 458.367051][ T971] usb 1-1: Manufacturer: syz [ 458.397353][ T971] usb 1-1: SerialNumber: syz [ 458.431756][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 458.450712][ T971] hub 1-1:1.121: bad descriptor, ignoring hub [ 458.456779][ T971] hub 1-1:1.121: probe with driver hub failed with error -5 [ 458.846376][T10792] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1236'. [ 459.060045][ T5861] usb 1-1: USB disconnect, device number 29 [ 459.306508][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1239'. [ 459.369475][T10799] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1239'. [ 460.286049][T10809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61184 sclass=netlink_route_socket pid=10809 comm=syz.0.1242 [ 460.706402][ T30] audit: type=1400 audit(1747453788.728:1171): avc: denied { read } for pid=10812 comm="syz.5.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 460.729768][T10814] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1243'. [ 460.777845][ T30] audit: type=1400 audit(1747453788.788:1172): avc: denied { ioctl } for pid=10811 comm="syz.6.1243" path="socket:[29348]" dev="sockfs" ino=29348 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 460.846764][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'. [ 460.964526][ T30] audit: type=1400 audit(1747453788.808:1173): avc: denied { write } for pid=10812 comm="syz.5.1245" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 461.487885][ T30] audit: type=1400 audit(1747453789.158:1174): avc: denied { create } for pid=10822 comm="syz.0.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 461.490209][T10828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1248'. [ 462.979553][T10850] input: syz1 as /devices/virtual/input/input33 [ 463.109365][T10850] syz.5.1252: attempt to access beyond end of device [ 463.109365][T10850] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 463.122687][T10850] XFS (nbd5): SB validate failed with error -5. [ 463.384493][ T5864] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 463.973288][ T5864] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 464.078434][ T5864] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 464.136255][ T5864] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 464.163283][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.177656][ T5864] usb 1-1: Product: syz [ 464.237032][ T5864] usb 1-1: Manufacturer: syz [ 464.254077][ T5864] usb 1-1: SerialNumber: syz [ 465.104603][ T5863] usb 1-1: USB disconnect, device number 30 [ 465.277018][T10877] tipc: Enabled bearer , priority 0 [ 465.499292][T10882] tipc: Disabling bearer [ 466.010135][ T5863] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 466.189811][ T30] audit: type=1326 audit(1747453794.248:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10896 comm="syz.1.1264" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae2718e969 code=0x0 [ 466.212778][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.399856][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 466.410894][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 466.423791][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 466.510644][ T971] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 466.534752][ T5863] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.199241][ T53] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 467.214920][ T5863] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 467.224044][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.276944][ T5863] usb 5-1: config 0 descriptor?? [ 467.287715][T10894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 467.297662][ T5863] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 467.310800][ T971] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.362564][ T971] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 467.499572][T10890] netlink: 'syz.4.1261': attribute type 5 has an invalid length. [ 467.544195][ T971] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.557456][ T971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.871934][ T971] usb 2-1: Product: syz [ 468.110117][ T971] usb 2-1: Manufacturer: syz [ 468.543054][ T971] usb 2-1: SerialNumber: syz [ 468.613267][ T9] usb 5-1: USB disconnect, device number 17 [ 468.613282][ C1] pxrc 5-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 468.630960][ T971] cdc_mbim 2-1:1.0: skipping garbage [ 468.958966][T10897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 470.006361][T10897] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 470.129992][ T971] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 470.150280][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.160228][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.163164][ T971] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 470.209289][ T971] wwan wwan0: port wwan0mbim0 attached [ 470.320391][ T971] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, fa:7f:6e:95:20:1c [ 470.358991][ T971] usb 2-1: USB disconnect, device number 23 [ 470.407991][ T971] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 470.419825][T10940] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 471.726416][ T53] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 471.804664][ T971] wwan wwan0: port wwan0mbim0 disconnected [ 473.313033][ T971] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 473.440088][T10967] block device autoloading is deprecated and will be removed. [ 473.449998][ T971] usb 2-1: device descriptor read/64, error -71 [ 476.862359][ T30] audit: type=1400 audit(1747453804.928:1176): avc: denied { write } for pid=11005 comm="syz.6.1292" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 476.948748][ T30] audit: type=1400 audit(1747453804.968:1177): avc: denied { map } for pid=11005 comm="syz.6.1292" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 477.094252][T11012] netlink: 'syz.0.1294': attribute type 2 has an invalid length. [ 477.879885][ T30] audit: type=1400 audit(1747453805.938:1178): avc: denied { ioctl } for pid=11026 comm="syz.6.1298" path="socket:[30471]" dev="sockfs" ino=30471 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 477.904684][ C1] vkms_vblank_simulate: vblank timer overrun [ 478.799535][ T30] audit: type=1400 audit(1747453806.858:1179): avc: denied { bind } for pid=11031 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.880849][ T30] audit: type=1400 audit(1747453806.858:1180): avc: denied { listen } for pid=11031 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 478.937067][ T30] audit: type=1400 audit(1747453806.898:1181): avc: denied { getopt } for pid=11031 comm="syz.4.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 479.877800][ T30] audit: type=1400 audit(1747453807.938:1182): avc: denied { ioctl } for pid=11040 comm="syz.1.1302" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 479.902048][T11045] /dev/nullb0: Can't open blockdev [ 482.124827][T11059] usb usb8: usbfs: process 11059 (syz.0.1304) did not claim interface 0 before use [ 482.170757][ T30] audit: type=1400 audit(1747453810.208:1183): avc: denied { execute } for pid=11048 comm="syz.0.1304" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30499 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 483.873560][T11081] tipc: Enabled bearer , priority 0 [ 483.971241][T11081] tipc: Disabling bearer [ 484.079850][ T5863] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 484.080230][ T30] audit: type=1400 audit(1747453812.148:1184): avc: denied { ioctl } for pid=11084 comm="syz.0.1315" path="socket:[30528]" dev="sockfs" ino=30528 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 484.136090][ T53] Bluetooth: hci2: unexpected cc 0x1002 length: 9 < 65 [ 484.143164][ T53] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 484.154949][T11086] program syz.0.1315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 484.284662][ T5863] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 485.069883][ T5863] usb 2-1: config 0 interface 0 has no altsetting 0 [ 485.091482][ T5863] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 485.100643][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 485.108818][ T5863] usb 2-1: Product: syz [ 485.113012][ T5863] usb 2-1: Manufacturer: syz [ 485.117617][ T5863] usb 2-1: SerialNumber: syz [ 485.130516][ T5863] usb 2-1: config 0 descriptor?? [ 485.142808][ T5863] usb 2-1: selecting invalid altsetting 0 [ 485.853522][T11093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 486.065180][ T53] Bluetooth: hci5: link tx timeout [ 486.099173][ T53] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 486.202466][ T24] usb 2-1: USB disconnect, device number 26 [ 486.301484][ T5827] Bluetooth: hci5: link tx timeout [ 486.306623][ T5827] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 486.314368][ T5827] Bluetooth: hci5: link tx timeout [ 486.319475][ T5827] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 486.370414][ T30] audit: type=1400 audit(1747453814.388:1185): avc: denied { execute } for pid=11096 comm="syz.0.1319" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=30565 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 486.661518][ T5959] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 487.385774][ T5959] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 487.414683][ T5959] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.442329][ T5959] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.485415][ T5959] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.728228][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.734052][T11115] netlink: 212356 bytes leftover after parsing attributes in process `syz.1.1323'. [ 487.907540][T11115] lo speed is unknown, defaulting to 1000 [ 488.226621][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 488.327414][ T5959] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 488.336900][ T5959] usb 1-1: invalid MIDI out EP 0 [ 488.582290][ T5959] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 488.849583][T11128] input: syz1 as /devices/virtual/input/input35 [ 489.060170][T11128] syz.5.1326: attempt to access beyond end of device [ 489.060170][T11128] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 489.073918][T11128] XFS (nbd5): SB validate failed with error -5. [ 491.199705][ T9] usb 1-1: USB disconnect, device number 31 [ 493.057480][ T971] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 493.537402][ T971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.569675][ T971] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 493.603281][ T971] usb 1-1: config 1 has no interface number 0 [ 493.666344][ T971] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 493.696107][ T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.729575][ T971] usb 1-1: Product: syz [ 493.749961][ T971] usb 1-1: Manufacturer: syz [ 493.770322][ T971] usb 1-1: SerialNumber: syz [ 493.798286][ T971] hub 1-1:1.121: bad descriptor, ignoring hub [ 493.829427][ T971] hub 1-1:1.121: probe with driver hub failed with error -5 [ 494.608115][T11166] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1333'. [ 494.632745][ T30] audit: type=1400 audit(1747453822.458:1186): avc: denied { read } for pid=11188 comm="syz.5.1340" path="socket:[31753]" dev="sockfs" ino=31753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 494.900088][ T5861] usb 1-1: USB disconnect, device number 32 [ 496.093377][ T30] audit: type=1400 audit(1747453823.898:1187): avc: denied { map } for pid=11204 comm="syz.5.1347" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.117067][ C0] vkms_vblank_simulate: vblank timer overrun [ 496.206563][T11211] vivid-000: disconnect [ 496.215277][T11211] vivid-000: reconnect [ 496.362873][ T30] audit: type=1400 audit(1747453823.928:1188): avc: denied { execute } for pid=11204 comm="syz.5.1347" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 496.459892][ T30] audit: type=1400 audit(1747453824.228:1189): avc: denied { read } for pid=11204 comm="syz.5.1347" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 496.632167][ T30] audit: type=1400 audit(1747453824.228:1190): avc: denied { open } for pid=11204 comm="syz.5.1347" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 496.811650][T11206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.818466][T11206] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 497.002056][T11217] hub 9-0:1.0: USB hub found [ 497.009970][T11217] hub 9-0:1.0: 1 port detected [ 497.304153][T11206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 497.310386][T11206] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 497.441897][T11206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 497.447977][T11206] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 497.453958][T11206] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 498.119903][ T5959] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 498.289843][ T5959] usb 1-1: device descriptor read/64, error -71 [ 498.529856][ T5959] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 498.829858][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 498.879904][ T5959] usb 1-1: device descriptor read/64, error -71 [ 498.976068][ T30] audit: type=1400 audit(1747453827.018:1191): avc: denied { create } for pid=11231 comm="syz.4.1354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 498.996291][ T5959] usb usb1-port1: attempt power cycle [ 499.367015][T11246] ubi31: attaching mtd0 [ 499.372969][T11246] ubi31: scanning is finished [ 499.377633][T11246] ubi31: empty MTD device detected [ 499.390520][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 499.418581][ T5812] Bluetooth: hci4: ISO packet too small [ 499.418696][ T30] audit: type=1400 audit(1747453827.478:1192): avc: denied { ioctl } for pid=11245 comm="syz.5.1356" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 499.505284][T11246] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 499.512869][T11246] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 499.521359][T11246] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 499.528384][T11246] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 499.535925][T11246] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 499.542795][T11246] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 499.550847][T11246] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 709547944 [ 499.601956][T11246] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 499.636118][T11248] ubi31: background thread "ubi_bgt31d" started, PID 11248 [ 499.643410][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 499.643472][ T5812] Bluetooth: hci4: command 0x0405 tx timeout [ 499.829652][ T5959] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 500.009916][ T5959] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 500.062528][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 500.078202][ T5959] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 500.107124][ T5959] usb 1-1: config 1 has no interface number 0 [ 500.109864][T11256] kvm: kvm [11252]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000004b) [ 500.178768][ T5959] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 500.237753][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.254926][ T5959] usb 1-1: Product: syz [ 500.273188][ T5959] usb 1-1: Manufacturer: syz [ 500.278599][ T5959] usb 1-1: SerialNumber: syz [ 500.305502][ T5959] hub 1-1:1.121: bad descriptor, ignoring hub [ 500.325584][ T5959] hub 1-1:1.121: probe with driver hub failed with error -5 [ 500.560270][T11250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1357'. [ 500.691582][ T971] usb 1-1: USB disconnect, device number 36 [ 500.909935][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 500.993457][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.469918][ T5812] Bluetooth: hci3: command 0x0406 tx timeout [ 501.720718][ T5812] Bluetooth: hci5: command 0x0406 tx timeout [ 501.979818][ T971] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 502.129884][ T971] usb 6-1: Using ep0 maxpacket: 16 [ 502.198752][ T971] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 502.218270][ T971] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.232013][ T971] usb 6-1: Product: syz [ 502.238547][ T971] usb 6-1: Manufacturer: syz [ 502.248330][ T971] usb 6-1: SerialNumber: syz [ 502.263163][ T971] usb 6-1: config 0 descriptor?? [ 502.294932][T11290] lo: entered allmulticast mode [ 502.307450][ T971] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 502.329874][ T9] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 502.482224][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 502.541959][ T9] usb 1-1: config 1 interface 0 altsetting 207 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 502.660747][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 502.696349][ T9] usb 1-1: language id specifier not provided by device, defaulting to English [ 502.714027][ T9] usb 1-1: New USB device found, idVendor=1130, idProduct=3101, bcdDevice= 0.40 [ 502.723398][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.735841][ T9] usb 1-1: Manufacturer: 㬋ﮬ뜞䆌ᙳᾴ⢓䁪ᜃ램닆芚פֿᥘ掎묗䷄㪭毦祒ꂄ⪕㇗ሑ땃㢽꺗ꪒ悓䒬簾叼딶되羔⊽㍣︮疊㭶笠睪闣韩仔齄撎랙椱ᩊ๿匼娝疂䄨蛽홺嘬㶱〡糒솜琬嫳⒍鐌滃帔蚚幾캧㝢았깽╜틻㳃뜧ࠩ鏪躉렉옶辵钝芓徂㞝 [ 502.764285][ T5959] kernel write not supported for file /uhid (pid: 5959 comm: kworker/1:9) [ 502.774080][ T5896] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 502.865426][T11288] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 502.929847][ T5896] usb 7-1: Using ep0 maxpacket: 16 [ 502.946570][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.957717][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.982480][ T5896] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 502.997229][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.015661][ T5896] usb 7-1: Product: syz [ 503.020864][ T5896] usb 7-1: Manufacturer: syz [ 503.025453][ T5896] usb 7-1: SerialNumber: syz [ 503.035229][ T5896] usb 7-1: config 0 descriptor?? [ 503.042035][ T5896] appledisplay 7-1:0.0: Could not find int-in endpoint [ 503.049532][ T5896] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 503.242655][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 503.362655][ T5863] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 503.454685][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 503.467225][ T30] audit: type=1400 audit(1747453831.528:1193): avc: denied { write } for pid=11294 comm="syz.6.1372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 503.508126][ T9] usb 1-1: USB disconnect, device number 37 [ 503.538534][ T10] usb 7-1: USB disconnect, device number 3 [ 503.619817][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 503.626272][ T5863] usb 5-1: config 0 has an invalid interface number: 193 but max is 0 [ 503.634529][ T5863] usb 5-1: config 0 has no interface number 0 [ 503.640775][ T5863] usb 5-1: config 0 interface 193 has no altsetting 0 [ 503.652881][ T5863] usb 5-1: New USB device found, idVendor=058b, idProduct=0043, bcdDevice=1e.d8 [ 503.662145][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.671345][ T5863] usb 5-1: Product: syz [ 503.678775][ T5863] usb 5-1: Manufacturer: syz [ 503.689116][ T5863] usb 5-1: SerialNumber: syz [ 503.700566][ T5863] usb 5-1: config 0 descriptor?? [ 503.712232][ T5863] usb 5-1: Interface #193 referenced by multiple IADs [ 504.017236][T11300] netlink: 'syz.4.1373': attribute type 11 has an invalid length. [ 504.049938][T11300] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1373'. [ 504.089615][T11299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.430186][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 505.062470][ T5863] usb 5-1: USB disconnect, device number 18 [ 505.222795][ T971] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 505.259609][ T971] visor 6-1:0.0: probe with driver visor failed with error -71 [ 505.320221][ T971] usb 6-1: USB disconnect, device number 15 [ 505.584403][T11331] veth0_vlan: entered allmulticast mode [ 505.621179][T11331] veth0_vlan: left promiscuous mode [ 505.626449][T11331] veth0_vlan: left allmulticast mode [ 505.636164][T11331] veth0_vlan: entered promiscuous mode [ 505.718937][T11331] lo speed is unknown, defaulting to 1000 [ 506.204340][T11334] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1383'. [ 506.272225][T11334] pim6reg: entered allmulticast mode [ 506.988490][T11340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 507.368425][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1388'. [ 507.473570][T11347] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 507.500139][T11347] CIFS mount error: No usable UNC path provided in device string! [ 507.500139][T11347] [ 507.510350][T11347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 507.530040][ T30] audit: type=1400 audit(1747453835.418:1194): avc: denied { bind } for pid=11345 comm="syz.0.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 509.054213][ T30] audit: type=1400 audit(1747453837.118:1195): avc: denied { watch watch_reads } for pid=11365 comm="syz.6.1393" path="/49" dev="tmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 509.932383][T11379] random: crng reseeded on system resumption [ 509.939904][ T30] audit: type=1400 audit(1747453837.998:1196): avc: denied { append } for pid=11376 comm="syz.0.1396" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 511.492320][ T30] audit: type=1400 audit(1747453839.448:1197): avc: denied { remount } for pid=11390 comm="syz.5.1402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 512.599957][ T971] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 512.611677][T11405] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 512.618321][T11405] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 512.700445][T11405] vhci_hcd vhci_hcd.0: Device attached [ 512.965326][ T971] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 512.980122][ T5896] usb 34-1: SetAddress Request (2) to port 0 [ 512.988474][ T5896] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 513.013964][ T971] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 513.040752][ T971] usb 5-1: Product: syz [ 513.055552][ T971] usb 5-1: Manufacturer: syz [ 513.085143][ T971] usb 5-1: SerialNumber: syz [ 513.089889][ T5959] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 513.119034][ T971] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 513.322731][ T5959] usb 6-1: device descriptor read/64, error -71 [ 513.830996][T11406] vhci_hcd: connection reset by peer [ 513.843654][ T1318] vhci_hcd: stop threads [ 513.864385][ T1318] vhci_hcd: release socket [ 513.876064][ T1318] vhci_hcd: disconnect device [ 513.909968][ T5959] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 513.950154][ T971] vp7045: USB control message 'in' went wrong. [ 513.968066][ T971] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 514.009559][ T971] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 514.064260][ T30] audit: type=1400 audit(1747453842.128:1198): avc: denied { mount } for pid=11422 comm="syz.0.1409" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 514.074090][ T5959] usb 6-1: device descriptor read/64, error -71 [ 514.283842][ T5959] usb usb6-port1: attempt power cycle [ 514.398666][ T5861] usb 5-1: USB disconnect, device number 19 [ 514.404711][ T30] audit: type=1400 audit(1747453842.228:1199): avc: denied { write } for pid=11397 comm="syz.4.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 514.663300][ T5959] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 514.700258][ T5959] usb 6-1: device descriptor read/8, error -71 [ 514.939922][ T5959] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 515.020357][ T5959] usb 6-1: device descriptor read/8, error -71 [ 515.130100][ T5959] usb usb6-port1: unable to enumerate USB device [ 515.309284][T11442] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1413'. [ 516.409859][ T5863] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 516.769899][ T5863] usb 6-1: Using ep0 maxpacket: 8 [ 516.781556][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 517.236314][ T5863] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 517.256776][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.277840][ T5863] usb 6-1: config 0 descriptor?? [ 517.991757][ T5863] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 518.109580][ T5896] usb 34-1: device descriptor read/8, error -110 [ 518.415223][ T30] audit: type=1400 audit(1747453846.398:1200): avc: denied { write } for pid=11464 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 518.442174][ T30] audit: type=1400 audit(1747453846.508:1201): avc: denied { nlmsg_read } for pid=11464 comm="syz.1.1422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 518.701958][ T30] audit: type=1400 audit(1747453846.768:1202): avc: denied { write } for pid=11472 comm="syz.1.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 518.889865][ T971] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 518.904205][ T5863] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 519.101616][ T971] usb 7-1: Using ep0 maxpacket: 8 [ 519.113987][ T5896] usb usb34-port1: attempt power cycle [ 519.122677][ T971] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 519.194890][ T971] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 519.203359][ T9] usb 6-1: USB disconnect, device number 20 [ 519.213922][ T971] usb 7-1: config 0 has no interface number 0 [ 519.223736][ T5863] usb 1-1: unable to get BOS descriptor or descriptor too short [ 519.232324][ T971] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 519.232461][ T5863] usb 1-1: config 1 has an invalid interface number: 121 but max is 0 [ 519.254521][ T971] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 519.267397][ T5863] usb 1-1: config 1 has no interface number 0 [ 519.276851][ T971] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 519.295762][ T5863] usb 1-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 519.307505][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.319087][ T5863] usb 1-1: Product: syz [ 519.324535][ T971] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 519.338544][ T5863] usb 1-1: Manufacturer: syz [ 519.346260][ T971] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 519.356155][ T5863] usb 1-1: SerialNumber: syz [ 519.379386][ T971] usb 7-1: Product: syz [ 519.385286][ T5863] hub 1-1:1.121: bad descriptor, ignoring hub [ 519.395676][ T971] usb 7-1: Manufacturer: syz [ 519.400432][ T5863] hub 1-1:1.121: probe with driver hub failed with error -5 [ 519.412296][ T971] usb 7-1: config 0 descriptor?? [ 519.441013][T11471] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 519.768760][T11479] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1420'. [ 519.827718][ T5896] usb usb34-port1: unable to enumerate USB device [ 520.251399][ T971] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input36 [ 521.273525][ T30] audit: type=1400 audit(1747453849.318:1203): avc: denied { watch watch_reads } for pid=11488 comm="syz.4.1427" path="pipe:[33240]" dev="pipefs" ino=33240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 521.890144][ T5812] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 522.137893][ T971] usb 7-1: USB disconnect, device number 4 [ 522.143881][ C0] keyspan_remote 7-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 522.494579][ T5861] usb 1-1: USB disconnect, device number 38 [ 522.581857][ T30] audit: type=1400 audit(1747453850.648:1204): avc: denied { listen } for pid=11512 comm="syz.5.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 522.636925][ T30] audit: type=1400 audit(1747453850.698:1205): avc: denied { accept } for pid=11512 comm="syz.5.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 522.780014][ T5896] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 522.967627][ T5896] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 523.222103][T11522] input: syz1 as /devices/virtual/input/input37 [ 523.664355][ T5896] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 523.732603][ T5896] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.752422][T11522] syz.6.1437: attempt to access beyond end of device [ 523.752422][T11522] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 523.765538][T11522] XFS (nbd6): SB validate failed with error -5. [ 523.772271][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.987510][T11531] syzkaller1: entered promiscuous mode [ 523.993302][T11531] syzkaller1: entered allmulticast mode [ 524.176308][T11511] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 524.373019][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 524.386401][ T5896] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.503673][ T5896] usb 5-1: USB disconnect, device number 20 [ 524.609802][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 524.616409][ T9] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 524.625791][ T9] usb 1-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 524.669947][ T9] usb 1-1: config 0 has no interface number 0 [ 524.689912][ T9] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 524.721869][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 524.758868][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 524.809991][ T5861] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 524.822480][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 107, changing to 10 [ 524.848504][ T9] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 25209, setting to 1024 [ 524.873701][ T9] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 524.918355][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 524.948204][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.022869][ T5861] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 525.037120][ T5861] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 525.037951][ T9] usb 1-1: config 0 descriptor?? [ 525.047147][ T5861] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 525.062126][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.075727][T11537] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 525.096438][ T5861] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.103746][T11531] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 525.170380][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.361146][ T9] usb 1-1: USB disconnect, device number 39 [ 525.400083][ T30] audit: type=1400 audit(2000000001.430:1206): avc: denied { setopt } for pid=11538 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.412692][T11539] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 525.419829][ T30] audit: type=1400 audit(2000000001.440:1207): avc: denied { write } for pid=11538 comm="syz.5.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 525.855243][ T9] usb 7-1: USB disconnect, device number 5 [ 527.056930][ T5861] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 527.266662][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.371252][ T5861] usb 5-1: config 1 has an invalid interface number: 121 but max is 0 [ 527.396882][ T5861] usb 5-1: config 1 has no interface number 0 [ 527.416188][ T5861] usb 5-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 527.425637][T11563] tipc: Can't bind to reserved service type 2 [ 527.431859][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.455167][ T5861] usb 5-1: Product: syz [ 527.465619][ T5861] usb 5-1: Manufacturer: syz [ 527.486395][ T5861] usb 5-1: SerialNumber: syz [ 527.510907][ T5861] hub 5-1:1.121: bad descriptor, ignoring hub [ 527.611240][ T5861] hub 5-1:1.121: probe with driver hub failed with error -5 [ 527.649989][ T5959] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 527.860422][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 528.120508][ T5959] usb 6-1: unable to get BOS descriptor or descriptor too short [ 528.149253][ T5959] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 528.197642][ T5959] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 528.259904][ T5959] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 528.281611][T11551] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1443'. [ 528.316679][ T5959] usb 6-1: config 128 has no interface number 0 [ 528.370049][ T5959] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 528.389819][ T5959] usb 6-1: config 128 interface 127 has no altsetting 0 [ 528.409401][ T5959] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 528.430655][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.441787][ T5959] usb 6-1: Product: syz [ 528.446019][ T5959] usb 6-1: Manufacturer: syz [ 528.450947][ T5896] usb 5-1: USB disconnect, device number 21 [ 528.460038][ T5959] usb 6-1: SerialNumber: syz [ 528.479973][ T5861] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 528.602229][T11558] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 528.660275][T11564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'. [ 528.661204][ T5861] usb 1-1: config 0 has no interfaces? [ 528.682339][ T30] audit: type=1400 audit(2000000004.680:1208): avc: denied { mount } for pid=11560 comm="syz.1.1447" name="/" dev="ramfs" ino=34038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 528.814658][ T5861] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 528.824883][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.838246][ T5861] usb 1-1: Product: syz [ 528.842461][ T5861] usb 1-1: Manufacturer: syz [ 528.932300][ T5861] usb 1-1: SerialNumber: syz [ 528.957806][ T5861] usb 1-1: config 0 descriptor?? [ 528.977534][ T5959] usb 6-1: USB disconnect, device number 21 [ 529.111773][ T30] audit: type=1400 audit(2000000005.140:1209): avc: denied { ioctl } for pid=11581 comm="syz.6.1452" path="socket:[33489]" dev="sockfs" ino=33489 ioctlcmd=0x4b3b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.242309][ T5861] usb 1-1: USB disconnect, device number 40 [ 529.264581][ T30] audit: type=1400 audit(2000000005.170:1210): avc: denied { connect } for pid=11581 comm="syz.6.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 529.379875][ T971] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 529.561333][ T971] usb 7-1: Using ep0 maxpacket: 32 [ 529.701837][ T971] usb 7-1: config 8 has an invalid interface number: 81 but max is 0 [ 529.773315][ T971] usb 7-1: config 8 has an invalid descriptor of length 16, skipping remainder of the config [ 529.942277][ T971] usb 7-1: config 8 has no interface number 0 [ 530.081755][ T971] usb 7-1: config 8 interface 81 altsetting 0 endpoint 0x82 has invalid maxpacket 43528, setting to 1024 [ 530.590661][ T971] usb 7-1: config 8 interface 81 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 530.600803][ T971] usb 7-1: config 8 interface 81 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.616514][ T971] usb 7-1: New USB device found, idVendor=05ac, idProduct=020e, bcdDevice=82.aa [ 530.674975][ T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.701101][ T30] audit: type=1400 audit(2000000006.730:1211): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 530.731566][ T971] usb 7-1: Product: syz [ 530.746955][ T971] usb 7-1: Manufacturer: syz [ 530.771595][ T971] usb 7-1: SerialNumber: syz [ 531.515411][T11582] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 531.527544][ T971] appletouch 7-1:8.81: Could not find int-in endpoint [ 531.534746][ T971] appletouch 7-1:8.81: probe with driver appletouch failed with error -5 [ 531.547361][ T971] usbhid 7-1:8.81: couldn't find an input interrupt endpoint [ 531.767404][ T971] usb 7-1: USB disconnect, device number 6 [ 532.739848][ T5863] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 532.849790][ T30] audit: type=1400 audit(2000000008.870:1212): avc: denied { mount } for pid=11619 comm="syz.1.1463" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 534.058307][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short [ 534.117068][ T5863] usb 6-1: config 1 has an invalid interface number: 121 but max is 0 [ 534.125450][ T5863] usb 6-1: config 1 has no interface number 0 [ 534.687942][ T5863] usb 6-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 534.979974][ T30] audit: type=1400 audit(2000000011.000:1213): avc: denied { bind } for pid=11634 comm="syz.0.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 535.192691][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.200763][ T5863] usb 6-1: Product: syz [ 535.204929][ T5863] usb 6-1: Manufacturer: syz [ 535.209523][ T5863] usb 6-1: SerialNumber: syz [ 535.227838][ T30] audit: type=1400 audit(2000000011.080:1214): avc: denied { listen } for pid=11634 comm="syz.0.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 535.304464][ T5863] usb 6-1: can't set config #1, error -71 [ 535.320035][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 535.337989][ T5863] usb 6-1: USB disconnect, device number 22 [ 535.579792][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 535.593316][ T10] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 535.614547][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.641147][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 535.654976][ T10] usb 7-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 535.699227][ T10] usb 7-1: Product: syz [ 535.713244][ T10] usb 7-1: Manufacturer: syz [ 535.729236][T11649] tipc: Enabled bearer , priority 0 [ 535.732737][ T10] usb 7-1: config 0 descriptor?? [ 535.826953][T11650] tipc: Disabling bearer [ 535.864191][ T30] audit: type=1400 audit(2000000011.880:1215): avc: denied { append } for pid=11643 comm="syz.4.1468" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 535.981717][ T10] usb 7-1: USB disconnect, device number 7 [ 536.773278][ T5863] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 536.905310][T11670] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1475'. [ 536.998625][ T5863] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 537.025080][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.064812][ T5863] usb 6-1: Product: syz [ 537.072265][ T5863] usb 6-1: Manufacturer: syz [ 537.082781][ T5863] usb 6-1: SerialNumber: syz [ 537.100961][ T5863] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 537.120511][ T971] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 537.905508][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.001813][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.694714][ T971] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 538.720692][ T971] ath9k_htc: Failed to initialize the device [ 538.812147][ T30] audit: type=1400 audit(2000000014.820:1216): avc: denied { getopt } for pid=11673 comm="syz.0.1476" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 538.832703][ T971] usb 6-1: ath9k_htc: USB layer deinitialized [ 538.871082][ T10] usb 6-1: USB disconnect, device number 23 [ 539.949822][ T971] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 540.835832][ T971] usb 5-1: unable to get BOS descriptor or descriptor too short [ 541.129050][T11701] input: syz1 as /devices/virtual/input/input38 [ 541.839835][ T971] usb 5-1: config 1 has an invalid interface number: 121 but max is 0 [ 541.849568][ T971] usb 5-1: config 1 has no interface number 0 [ 541.870922][ T971] usb 5-1: New USB device found, idVendor=0582, idProduct=0007, bcdDevice=3e.97 [ 541.880063][ T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.889931][ T971] usb 5-1: Product: syz [ 541.894119][ T971] usb 5-1: Manufacturer: syz [ 541.898709][ T971] usb 5-1: SerialNumber: syz [ 541.997203][ T971] usb 5-1: can't set config #1, error -71 [ 542.019620][T11711] netlink: 'syz.1.1485': attribute type 2 has an invalid length. [ 542.025036][ T971] usb 5-1: USB disconnect, device number 22 [ 542.419868][ T971] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 542.499809][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 543.249793][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 543.262949][ T971] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 543.278316][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 543.294223][ T971] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.303243][ T5863] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 543.334029][ T10] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 543.356195][ T971] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.367673][ T10] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 543.384493][ T971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 543.396945][ T10] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 543.410440][ T971] usb 5-1: SerialNumber: syz [ 543.425981][ T10] usb 1-1: config 128 has no interface number 0 [ 543.439800][ T10] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 543.469771][ T10] usb 1-1: config 128 interface 127 has no altsetting 0 [ 543.482211][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 543.499776][ T5863] usb 2-1: Using ep0 maxpacket: 16 [ 543.505084][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.569965][ T10] usb 1-1: Product: syz [ 543.574244][ T10] usb 1-1: Manufacturer: syz [ 543.600565][ T5863] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 543.631521][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.643810][ T10] usb 1-1: SerialNumber: syz [ 543.655167][ T5863] usb 2-1: Product: syz [ 543.659526][T11709] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 543.788472][ T5863] usb 2-1: Manufacturer: syz [ 543.793428][ T5863] usb 2-1: SerialNumber: syz [ 543.812897][ T5863] usb 2-1: config 0 descriptor?? [ 543.820650][ T5863] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 543.899635][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.908565][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.030782][ T5863] usb 2-1: clie_3_5_startup: get config number failed: -32 [ 544.039200][ T10] usb 1-1: USB disconnect, device number 41 [ 544.076073][ T5863] visor 2-1:0.0: probe with driver visor failed with error -32 [ 544.586632][T11734] ./file0: Can't lookup blockdev [ 545.328418][ T971] usb 5-1: 0:2 : does not exist [ 545.344323][ T971] usb 5-1: unit 5 not found! [ 545.375070][ T971] usb 5-1: USB disconnect, device number 23 [ 546.542285][ T5863] usb 2-1: USB disconnect, device number 27 [ 546.954622][ T5861] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 547.483254][ T5861] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 548.449791][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.526278][ T5861] usb 7-1: config 0 descriptor?? [ 548.710656][ T5861] usb 7-1: can't set config #0, error -71 [ 548.740025][ T5861] usb 7-1: USB disconnect, device number 8 [ 549.261480][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 549.648685][ T971] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 549.692124][ T30] audit: type=1326 audit(2000000025.710:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 549.777482][ T30] audit: type=1326 audit(2000000025.750:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 549.841381][ T971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.859605][ T971] usb 1-1: config 0 has no interfaces? [ 549.866149][ T30] audit: type=1326 audit(2000000025.750:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 549.938467][ T971] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 549.971861][T11769] tmpfs: Bad value for 'nr_blocks' [ 549.989942][ T10] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 550.006660][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.028102][ T971] usb 1-1: config 0 descriptor?? [ 550.033386][ T30] audit: type=1326 audit(2000000025.760:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 550.169856][ T30] audit: type=1326 audit(2000000025.770:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 550.194028][ T30] audit: type=1326 audit(2000000025.780:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 550.243315][ T30] audit: type=1326 audit(2000000025.780:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 550.549922][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 550.561766][ T10] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 550.609870][ T10] usb 7-1: config 0 has no interface number 0 [ 550.616167][ T10] usb 7-1: config 0 interface 184 has no altsetting 0 [ 550.623072][ T30] audit: type=1326 audit(2000000025.780:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 550.702095][ T30] audit: type=1326 audit(2000000025.780:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11778 comm="syz.4.1504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99ad8e969 code=0x7ffc0000 [ 550.727724][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 550.820250][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.834703][ T10] usb 7-1: Product: syz [ 550.839766][ T30] audit: type=1400 audit(2000000026.830:1226): avc: denied { setopt } for pid=11773 comm="syz.0.1503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 550.840618][ T10] usb 7-1: Manufacturer: syz [ 550.868682][ T10] usb 7-1: SerialNumber: syz [ 551.038178][ T10] usb 7-1: config 0 descriptor?? [ 551.087799][T11794] geneve2: entered promiscuous mode [ 551.153213][ T10] smsc75xx v1.0.0 [ 551.183835][T11794] geneve2: entered allmulticast mode [ 551.231956][ T5959] usb 1-1: USB disconnect, device number 42 [ 551.699687][T11783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.843713][T11783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.108717][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 552.154830][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 552.203593][ T10] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 552.243178][ T10] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 552.280125][ T10] usb 7-1: USB disconnect, device number 9 [ 553.288670][T11808] syz_tun: entered allmulticast mode [ 553.455635][T11820] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1515'. [ 553.700324][T11823] input: syz1 as /devices/virtual/input/input39 [ 553.764019][T11822] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1516'. [ 555.469848][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 555.645104][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 555.645197][ T30] audit: type=1400 audit(2000000031.670:1228): avc: denied { getopt } for pid=11843 comm="syz.1.1522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 556.063020][T11855] input: syz1 as /devices/virtual/input/input40 [ 556.461065][T11858] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd6": -EINTR [ 556.704642][T11853] tipc: Enabled bearer , priority 0 [ 557.156441][T11853] tipc: Disabling bearer [ 558.774921][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 558.811784][T11877] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1527'. [ 559.670287][ T5863] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 559.879216][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 559.964156][ T5863] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 559.974020][ T5863] usb 1-1: config 0 has no interface number 0 [ 560.612940][ T5863] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 560.627220][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.659365][ T5863] usb 1-1: Product: syz [ 560.682313][ T5863] usb 1-1: Manufacturer: syz [ 560.719807][ T5863] usb 1-1: SerialNumber: syz [ 560.762334][ T5863] usb 1-1: config 0 descriptor?? [ 560.847353][ T5863] usb 1-1: selecting invalid altsetting 2 [ 560.867694][ T5863] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 561.350274][ T30] audit: type=1400 audit(2000000037.380:1229): avc: denied { read } for pid=11886 comm="syz.0.1532" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 561.351170][ T5959] usb 1-1: USB disconnect, device number 43 [ 561.455520][ T30] audit: type=1400 audit(2000000037.380:1230): avc: denied { open } for pid=11886 comm="syz.0.1532" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 561.480035][ C0] vkms_vblank_simulate: vblank timer overrun [ 561.630086][ T5863] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 561.790730][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 561.827147][ T5863] usb 7-1: unable to get BOS descriptor or descriptor too short [ 561.840717][ T5863] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 561.849181][ T5863] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 561.860921][T11918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1540'. [ 561.870194][ T5863] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 561.879373][ T5863] usb 7-1: config 128 has no interface number 0 [ 561.925083][ T5863] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 561.959790][ T5863] usb 7-1: config 128 interface 127 has no altsetting 0 [ 562.026335][ T5863] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 562.044206][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.080133][ T5863] usb 7-1: Product: syz [ 562.086639][ T5863] usb 7-1: Manufacturer: syz [ 562.102334][ T5863] usb 7-1: SerialNumber: syz [ 562.122426][T11915] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 562.434737][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.496120][T11924] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 562.516460][ T5863] usb 7-1: USB disconnect, device number 10 [ 562.699898][ T5959] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 562.870518][ T5959] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 562.923322][ T5959] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 562.937465][ T5959] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 562.957946][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.015304][ T5959] usb 6-1: Product: syz [ 563.036080][ T5959] usb 6-1: Manufacturer: syz [ 563.047696][ T5959] usb 6-1: SerialNumber: syz [ 563.329763][ T30] audit: type=1400 audit(2000000039.350:1231): avc: denied { read } for pid=11925 comm="syz.4.1543" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 563.427331][ T5959] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 563.626495][ T5959] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 563.773233][T11935] nfs: Unknown parameter ' ' [ 563.981973][ T5959] usb 6-1: USB disconnect, device number 24 [ 564.293334][T11937] syz_tun: entered allmulticast mode [ 564.923763][ T971] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 565.157851][ T30] audit: type=1400 audit(2000000041.180:1232): avc: denied { ioctl } for pid=11950 comm="syz.1.1550" path="socket:[36160]" dev="sockfs" ino=36160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 565.158500][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1550'. [ 565.183394][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.219919][ T971] usb 7-1: Using ep0 maxpacket: 32 [ 565.332234][T11954] input: syz1 as /devices/virtual/input/input41 [ 565.605145][T11951] bridge_slave_0: left allmulticast mode [ 565.610867][T11951] bridge_slave_0: left promiscuous mode [ 565.616674][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.632434][ T971] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.722585][ T971] usb 7-1: config 0 has no interfaces? [ 565.743232][T11954] syz.0.1549: attempt to access beyond end of device [ 565.743232][T11954] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 565.756431][T11954] XFS (nbd0): SB validate failed with error -5. [ 565.834099][ T971] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=de.fe [ 565.924047][ T971] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.247366][ T971] usb 7-1: Product: syz [ 566.355383][ T971] usb 7-1: Manufacturer: syz [ 566.489902][ T971] usb 7-1: SerialNumber: syz [ 566.650017][ T971] usb 7-1: config 0 descriptor?? [ 566.727118][T11969] tipc: Enabling of bearer rejected, failed to enable media [ 567.539891][ T5861] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 567.740911][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 567.799537][ T5861] usb 2-1: unable to get BOS descriptor or descriptor too short [ 567.881489][ T5861] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 567.934858][ T5861] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 568.095020][ T5861] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 568.235777][ T5861] usb 2-1: config 128 has no interface number 0 [ 568.349066][ T5861] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 568.595827][ T5861] usb 2-1: config 128 interface 127 has no altsetting 0 [ 568.619874][ T971] usb 7-1: USB disconnect, device number 11 [ 568.639350][ T5861] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 568.689776][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.731319][ T5861] usb 2-1: Product: syz [ 568.799912][ T5861] usb 2-1: Manufacturer: syz [ 568.910877][ T5861] usb 2-1: SerialNumber: syz [ 569.492510][T11973] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 569.826567][ T5861] usb 2-1: USB disconnect, device number 28 [ 570.120142][ T31] INFO: task syz.2.1053:10111 blocked for more than 143 seconds. [ 570.127906][ T31] Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 [ 570.139748][ T31] Blocked by coredump. [ 570.144349][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 570.158535][ T31] task:syz.2.1053 state:D stack:26008 pid:10111 tgid:10107 ppid:5814 task_flags:0x400548 flags:0x00024000 [ 570.612341][ T30] audit: type=1400 audit(2000000046.330:1233): avc: denied { accept } for pid=12009 comm="syz.5.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 570.659222][ T31] Call Trace: [ 570.670527][ T31] [ 570.673562][ T31] __schedule+0x116f/0x5de0 [ 570.678191][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 570.684553][ T31] ? __pfx___schedule+0x10/0x10 [ 570.689877][ T5863] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 570.699554][ T31] ? find_held_lock+0x2b/0x80 [ 570.853663][ T31] ? schedule+0x2d7/0x3a0 [ 570.909914][ T5863] usb 7-1: Using ep0 maxpacket: 32 [ 571.329242][ T31] schedule+0xe7/0x3a0 [ 571.333574][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 571.347132][ T31] schedule_timeout+0x257/0x290 [ 571.358663][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 571.369045][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.378372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 571.386837][ T31] __wait_for_common+0x2ff/0x4e0 [ 571.395605][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 571.409778][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 571.419748][ T31] ? find_held_lock+0x2b/0x80 [ 571.429223][ T31] ? io_wq_put_and_exit+0x22a/0x8d0 [ 571.437581][ T31] io_wq_put_and_exit+0x271/0x8d0 [ 571.442706][ T31] ? __pfx_xa_find_after+0x10/0x10 [ 571.448071][ T31] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 571.453936][ T31] ? __pfx___might_resched+0x10/0x10 [ 571.459275][ T31] io_uring_clean_tctx+0x10d/0x190 [ 571.464500][ T31] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 571.474301][ T31] ? percpu_counter_add_batch+0x17b/0x1f0 [ 571.476661][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 571.522264][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 571.549592][ T5863] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 571.588387][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 571.624962][ T5863] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.648524][ T31] io_uring_cancel_generic+0x67c/0x8e0 [ 571.666797][ T5863] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 571.675992][ T31] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 571.690791][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.692671][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 571.704884][ T31] ? rcu_is_watching+0x12/0xc0 [ 571.719008][ T31] ? io_uring_unreg_ringfd+0xbc/0x130 [ 571.724542][ T5863] usb 7-1: Product: syz [ 571.729127][ T31] do_exit+0x54c/0x2c30 [ 571.739248][ T5863] usb 7-1: Manufacturer: syz [ 571.745022][ T31] ? arch_scale_cpu_capacity+0x15/0xb0 [ 571.754808][ T5863] usb 7-1: SerialNumber: syz [ 571.767130][ T31] ? __pfx_do_exit+0x10/0x10 [ 571.775161][ T5863] usb 7-1: config 0 descriptor?? [ 571.783426][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 571.789256][ T31] ? find_held_lock+0x2b/0x80 [ 571.798001][ T31] do_group_exit+0xd3/0x2a0 [ 571.806748][ T31] get_signal+0x2673/0x26d0 [ 571.851739][ T31] ? trace_sched_exit_tp+0xde/0x130 [ 571.881163][ T31] ? __schedule+0x1186/0x5de0 [ 571.906673][ T31] ? __pfx_get_signal+0x10/0x10 [ 571.924570][ T31] arch_do_signal_or_restart+0x8f/0x7d0 [ 571.938685][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 571.958066][ T31] syscall_exit_to_user_mode+0x150/0x2a0 [ 571.968928][ T31] do_syscall_64+0xda/0x260 [ 571.982828][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.995226][ T31] RIP: 0033:0x7f1282b8e969 [ 572.003995][ T31] RSP: 002b:00007f1283a6c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 572.047128][ T31] RAX: 0000000000000800 RBX: 00007f1282db6080 RCX: 00007f1282b8e969 [ 572.096042][ T31] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 572.134491][ T31] RBP: 00007f1282c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 572.168650][ T31] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 572.270463][ T31] R13: 0000000000000000 R14: 00007f1282db6080 R15: 00007ffd07a91c28 [ 572.278922][ T31] [ 572.282938][ T31] [ 572.282938][ T31] Showing all locks held in the system: [ 572.431797][ T31] 1 lock held by khungtaskd/31: [ 572.470759][ T31] #0: ffffffff8e3bfc00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 572.495657][ T30] audit: type=1400 audit(2000000048.520:1234): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 572.496117][ T31] 2 locks held by getty/5570: [ 572.544969][ T31] #0: ffff8880324110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 572.569904][ T31] #1: ffffc900036d32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 572.595357][ T31] 1 lock held by syz-executor/5809: [ 572.607275][ T31] #0: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 572.647322][ T31] 3 locks held by kworker/u9:2/5812: [ 572.652953][ T9693] Bluetooth: hci6: Frame reassembly failed (-84) [ 572.681962][ T31] #0: ffff888027ffd948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 572.715318][ T31] #1: ffffc90004a07d18 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 572.757087][ T31] #2: ffff888082090d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_open+0x22/0x90 [ 572.790365][ T31] 1 lock held by iou-wrk-10111/10114: [ 572.807234][ T31] 2 locks held by syz.0.1561/12003: [ 572.825767][ T31] 4 locks held by syz.6.1562/12007: [ 572.844594][ T31] #0: ffff88805f8da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x153/0x2e0 [ 572.876981][ T31] #1: ffff88805f8dc0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x17d/0x2e0 [ 572.916176][ T31] #2: ffff888082f33990 (&hu->proto_lock){++++}-{0:0}, at: hci_uart_tty_close+0x162/0x2a0 [ 572.951493][ T31] #3: ffffffff8e3cb138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 572.986207][ T31] [ 573.001976][ T31] ============================================= [ 573.001976][ T31] [ 573.019671][ T31] NMI backtrace for cpu 1 [ 573.019686][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 573.019712][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.019722][ T31] Call Trace: [ 573.019728][ T31] [ 573.019734][ T31] dump_stack_lvl+0x116/0x1f0 [ 573.019764][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 573.019782][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 573.019806][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.019824][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 573.019847][ T31] watchdog+0xf70/0x12c0 [ 573.019870][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.019886][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 573.019912][ T31] ? __kthread_parkme+0x19e/0x250 [ 573.019947][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.019964][ T31] kthread+0x3c2/0x780 [ 573.019982][ T31] ? __pfx_kthread+0x10/0x10 [ 573.019997][ T31] ? __pfx_kthread+0x10/0x10 [ 573.020012][ T31] ? __pfx_kthread+0x10/0x10 [ 573.020027][ T31] ? __pfx_kthread+0x10/0x10 [ 573.020043][ T31] ? rcu_is_watching+0x12/0xc0 [ 573.020070][ T31] ? __pfx_kthread+0x10/0x10 [ 573.020088][ T31] ret_from_fork+0x45/0x80 [ 573.020106][ T31] ? __pfx_kthread+0x10/0x10 [ 573.020123][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.020159][ T31] [ 573.151496][ C1] vkms_vblank_simulate: vblank timer overrun [ 573.158022][ T31] Sending NMI from CPU 1 to CPUs 0: [ 573.163472][ C0] NMI backtrace for cpu 0 [ 573.163484][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 573.163501][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.163509][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 573.163530][ C0] Code: f5 61 02 e9 53 fc 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 df 1c 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 573.163542][ C0] RSP: 0018:ffffffff8e007e10 EFLAGS: 000002c6 [ 573.163553][ C0] RAX: 0000000002423503 RBX: 0000000000000000 RCX: ffffffff8b6d1419 [ 573.163561][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe28e5 RDI: ffffffff8bf48aa0 [ 573.163569][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 573.163577][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 573.163584][ C0] R13: ffffffff8e097740 R14: ffffffff90850010 R15: 0000000000000000 [ 573.163593][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 573.163606][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.163614][ C0] CR2: 0000001b2dee8ff8 CR3: 00000000353a9000 CR4: 00000000003526f0 [ 573.163623][ C0] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 573.163630][ C0] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 573.163641][ C0] Call Trace: [ 573.163645][ C0] [ 573.163649][ C0] default_idle+0x13/0x20 [ 573.163662][ C0] default_idle_call+0x6d/0xb0 [ 573.163672][ C0] do_idle+0x391/0x510 [ 573.163690][ C0] ? __pfx_do_idle+0x10/0x10 [ 573.163705][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 573.163724][ C0] cpu_startup_entry+0x4f/0x60 [ 573.163738][ C0] rest_init+0x16b/0x2b0 [ 573.163750][ C0] ? acpi_subsystem_init+0x133/0x180 [ 573.163768][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 573.163783][ C0] start_kernel+0x3e9/0x4d0 [ 573.163801][ C0] x86_64_start_reservations+0x18/0x30 [ 573.163820][ C0] x86_64_start_kernel+0xb0/0xc0 [ 573.163838][ C0] common_startup_64+0x13e/0x148 [ 573.163858][ C0] [ 573.375564][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 573.375581][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 573.375602][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 573.375611][ T31] Call Trace: [ 573.375617][ T31] [ 573.375623][ T31] dump_stack_lvl+0x3d/0x1f0 [ 573.375651][ T31] panic+0x71c/0x800 [ 573.375675][ T31] ? __pfx_panic+0x10/0x10 [ 573.375698][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 573.375716][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 573.375733][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 573.375748][ T31] ? watchdog+0xdda/0x12c0 [ 573.375764][ T31] ? watchdog+0xdcd/0x12c0 [ 573.375782][ T31] watchdog+0xdeb/0x12c0 [ 573.375801][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.375816][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 573.375839][ T31] ? __kthread_parkme+0x19e/0x250 [ 573.375862][ T31] ? __pfx_watchdog+0x10/0x10 [ 573.375878][ T31] kthread+0x3c2/0x780 [ 573.375894][ T31] ? __pfx_kthread+0x10/0x10 [ 573.375908][ T31] ? __pfx_kthread+0x10/0x10 [ 573.375922][ T31] ? __pfx_kthread+0x10/0x10 [ 573.375936][ T31] ? __pfx_kthread+0x10/0x10 [ 573.375950][ T31] ? rcu_is_watching+0x12/0xc0 [ 573.375970][ T31] ? __pfx_kthread+0x10/0x10 [ 573.375986][ T31] ret_from_fork+0x45/0x80 [ 573.376002][ T31] ? __pfx_kthread+0x10/0x10 [ 573.376017][ T31] ret_from_fork_asm+0x1a/0x30 [ 573.376049][ T31] [ 573.522246][ T31] Kernel Offset: disabled [ 573.526546][ T31] Rebooting in 86400 seconds..