last executing test programs: 6m53.602374787s ago: executing program 3 (id=742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 6m53.501844378s ago: executing program 3 (id=744): syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x1, 0x105}, &(0x7f0000000400), &(0x7f0000000240)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x6a) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x0, 0xe, 0x31324d4e, 0x1, 0xa, [{0x7, 0x8001}, {0x8, 0xffffff67}, {0x615, 0x59}, {0x8, 0x53}, {0x1ff}, {0x7fffffff, 0xcca}, {0x81, 0x1}, {0x46, 0x4}], 0x9, 0x7, 0x8, 0x0, 0x2}}) (fail_nth: 2) 6m52.416454007s ago: executing program 3 (id=747): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='lgroup_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x1, 0x0, 0x6, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x40}, 0x40, 0x7800, 0xffff7fff, 0x7}}) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r5, 0x1, 0x0, @void}, 0x10) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000000)) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r6, r3, 0x4, r3}, 0x10) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async, rerun: 64) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080)={0x3a, @local, 0x4e24, 0x3, 'dh\x00', 0x3f, 0x3, 0x18}, 0x2c) (async, rerun: 64) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) sendmsg$xdp(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x2c, 0x5, r2, 0x35}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000200)="223a51f21fd258bb2325f359013aa75db77655b59b361168708593ce5770c1f6eb2c412d9d4cfa61e2c1a8f093f76220cd88c962316193f533d7370f662499d36478a284e025262a9a77a04d8b477a4dc7f97871de4395614ab58349ada66b9b71f6bcebf1558d8970ab5baeeb7314d949f0bc681f16cddad1f2597e3a53593bec2aaf4dc3e62e6cf3f0869acab15c40015cae1e1d720ef45a6c50cbf61c53fb34e09296b990ec3d8d347310a84c7c52bcb630586313ab6f", 0xb8}, {&(0x7f00000002c0)="796201e623d5df5fdcdf38b9a7b4fa0403faf9dd9d75a35533bd5f33cf1fc07774133338afba1f57ec17e87b7dc5307bcc7471edb4a4dea6d6ab57f26bbbae0bab51861549e561d3ebfb00a74d4f3f79d644037db449b53ca943b9300d59079321efb874083b7ebe67073ec3a69d89ed5f71994cb873bd55dd2777ce0b8f3651330c5eedd46ab7bb61a779b9bd1c26eab74407d212546f0b5a1e6f5a2d04ef95b8b50cc8b3f297acbb3ee9f42aa0eaf92f633050fefc0c9c327e0ee32cf50f", 0xbf}, {&(0x7f0000000380)="d55ac4f8b5917d3c56ab5282d27946b82b35be67408ea0eb8ebfeb3668e1924513ec33a673f83afaf33334793cff78965d8a0a6b3b5807d31ca5101f03d68e9ec7cbc1f27caecd313a118484019b0a7905bfb1fcd30a319efc9d553c764abd356857e33cdf9793b3b1fcbe8fa0e572d911da4b53e251d74be41912837f0c60c6e8c5b091b9f20d3fc894542d3e6e319b6e734b61", 0x94}, {&(0x7f0000000440)="ce9dcdffaa387c05a39761b121eb6666b72166fe0b6bca2d728fe2f12152fafefc15b1aa549750c8662b07598cb05c6eaf5a74f5119b5183903ece812c5ec1469171befdd7200054d3abbff44da5612b2d762b7e52f74996f25d", 0x5a}, {&(0x7f00000004c0)="474c48f2505164af34b8509f24273b2a3d3a397f7870c6ed9d0039c1f6f5274cc217c2dfd04cdf29ba", 0x29}, {&(0x7f0000000500)="52ff99370ac46ec611b85963d6b56cd9bf61b32d1ee4d77d90557de9fc86ad1f01f9fb0128264a5d60a515bc7ab2c102b2a015b1afe5cee3fe15e276de80d65dd241abdbab21cd17cc689145c210156e91a9593febfeb505c2a5572bdf6bdc8f2c0c0e2be6780a683822", 0x6a}, {&(0x7f0000000600)="90b4ad423b8167c2115520eb388bf1edb7d0338291492bc09d4092874582f9ae3c77fe8034d655771e23c5eaf085bf83e0dd61aa3f9d10783f12e7779377dad064c53954e0ab37328707c5a1c630a41c47a209a587b4e3ff49bd4739bf0d3c50f74458516008aa8a4ea5e45d838485e619384f6765a5fee7af5486b5f6efed9d932aeaebdc9af9801b61b14d8400fd3fd10d98aecb5fdf0724bf3c998d6805147127e83d6453084364e2dd203fbd49f88f6b78a272534ad9da22c071baf568e32ce9de6ffff5089d5aa559408c9a25624447975c7699ca432d22248f5098b5f02438019290a8ec694b0c5bd6b89ff9275555285ac54fcc", 0xf7}], 0x7, 0x0, 0x0, 0xc855}, 0x20000080) (async, rerun: 64) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) (async) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 32) syz_fuse_handle_req(r0, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b6732ced59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b4dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, 0xee01, 0x0, 0x1000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0xaeb, 0x7}, {0xf, 0x8}, 0x701, 0xa, 0x8, 0x6}}}}) (rerun: 32) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r11, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 6m52.122693529s ago: executing program 3 (id=751): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x40040, 0x80) mknodat(r0, &(0x7f0000000340)='./file1/../file0\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) keyctl$set_reqkey_keyring(0xe, 0x3) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 6m51.925299843s ago: executing program 3 (id=753): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/vmcoreinfo', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x9, 0x200, 0x6, 0x8, 0xb9, 0x0}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$PPPIOCGIDLE64(r4, 0x8010743f, &(0x7f0000000340)) prctl$PR_SET_PTRACER(0x59616d61, r3) read$msr(r2, &(0x7f000004b680)=""/102400, 0x19000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0xffffffff, {0x54}}, 0x14}}, 0x0) (fail_nth: 1) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f00000000c0)) landlock_restrict_self(r7, 0x0) setresuid(0xee01, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x3) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB]) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r8], 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0xc00c0) 6m50.691327776s ago: executing program 3 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000004c80)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000540)=""/216, 0xd8}], 0x7}, 0x80000000}, {{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=""/84, 0x54}, 0x8}, {{&(0x7f0000000840)=@ax25={{0x3, @netrom}, [@rose, @bcast, @netrom, @bcast, @netrom, @remote, @default]}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000a40)=""/214, 0xd6}, {&(0x7f0000000b40)=""/125, 0x7d}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000740)=""/28, 0x1c}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x9}, 0x9}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000000e40)=""/247, 0xf7}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/102, 0x66}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/115, 0x73}], 0x6, &(0x7f0000001100)=""/76, 0x4c}, 0xc931}, {{&(0x7f0000001180)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/30, 0x1e}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)}], 0x3, &(0x7f0000001300)=""/231, 0xe7}, 0x51}, {{&(0x7f0000001400)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000001480)=""/93, 0x5d}, {&(0x7f0000001500)=""/64, 0x40}, {&(0x7f0000001540)=""/175, 0xaf}, {&(0x7f0000001600)=""/168, 0xa8}, {&(0x7f00000016c0)=""/130, 0x82}, {&(0x7f0000001780)=""/127, 0x7f}, {&(0x7f0000004880)=""/158, 0x9e}, {&(0x7f0000004940)=""/238, 0xee}, {&(0x7f0000004a40)=""/125, 0x7d}], 0x9, &(0x7f0000004b80)=""/240, 0xf0}, 0x6}], 0x6, 0x40002001, &(0x7f0000001800)={0x0, 0x989680}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa4, 0x3c, 0xc7, 0x10, 0x40a, 0x2, 0x7b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0xef, 0x2, 0x0, 0xdf, 0xcb, 0xa4}}]}}]}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 6m50.159602693s ago: executing program 32 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000004c80)=[{{&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000200)=""/247, 0xf7}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000400)=""/40, 0x28}, {&(0x7f0000000540)=""/216, 0xd8}], 0x7}, 0x80000000}, {{0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=""/84, 0x54}, 0x8}, {{&(0x7f0000000840)=@ax25={{0x3, @netrom}, [@rose, @bcast, @netrom, @bcast, @netrom, @remote, @default]}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/225, 0xe1}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000a40)=""/214, 0xd6}, {&(0x7f0000000b40)=""/125, 0x7d}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000740)=""/28, 0x1c}, {&(0x7f0000000bc0)=""/196, 0xc4}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x9}, 0x9}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000000e40)=""/247, 0xf7}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000000f40)=""/102, 0x66}, {&(0x7f0000000fc0)}, {&(0x7f0000001000)=""/115, 0x73}], 0x6, &(0x7f0000001100)=""/76, 0x4c}, 0xc931}, {{&(0x7f0000001180)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/30, 0x1e}, {&(0x7f0000001240)=""/56, 0x38}, {&(0x7f0000001280)}], 0x3, &(0x7f0000001300)=""/231, 0xe7}, 0x51}, {{&(0x7f0000001400)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000004ac0)=[{&(0x7f0000001480)=""/93, 0x5d}, {&(0x7f0000001500)=""/64, 0x40}, {&(0x7f0000001540)=""/175, 0xaf}, {&(0x7f0000001600)=""/168, 0xa8}, {&(0x7f00000016c0)=""/130, 0x82}, {&(0x7f0000001780)=""/127, 0x7f}, {&(0x7f0000004880)=""/158, 0x9e}, {&(0x7f0000004940)=""/238, 0xee}, {&(0x7f0000004a40)=""/125, 0x7d}], 0x9, &(0x7f0000004b80)=""/240, 0xf0}, 0x6}], 0x6, 0x40002001, &(0x7f0000001800)={0x0, 0x989680}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x202}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa4, 0x3c, 0xc7, 0x10, 0x40a, 0x2, 0x7b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0x0, 0x8, [{{0x9, 0x4, 0xef, 0x2, 0x0, 0xdf, 0xcb, 0xa4}}]}}]}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) socket$inet6(0xa, 0x800, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)={0x44, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x0) 49.425284751s ago: executing program 2 (id=2318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x0, 0x0, 0x8001}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_getevents(r1, 0x3, 0x3, &(0x7f0000000240)=[{}, {}, {}], 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x62f42, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x81800) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f000000a6c0)=[{{0x0, 0x1f000000, 0x0}}], 0x500, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xa, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240), 0xfff, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r6}, 0x38) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x27) r7 = syz_clone(0x4212200, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0x13) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x400) ptrace(0x10, r7) ptrace$setopts(0x4202, r7, 0xe96, 0x455b843fbdb64c65) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x9) r8 = getpid() setrlimit(0x7, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), 0x0, 0x700}, 0x20) sched_setscheduler(r8, 0x2, 0x0) sched_setaffinity(r8, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x200000) 49.185321569s ago: executing program 2 (id=2319): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000f1a000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) mlock(&(0x7f0000ff9000/0x7000)=nil, 0x7000) socket$l2tp(0x2, 0x2, 0x73) 45.335655624s ago: executing program 2 (id=2326): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0x8, 0x4, 0x2, 0x8c, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) setrlimit(0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff0f}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x18}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=[0x0], 0x0, 0x36, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) 44.132726902s ago: executing program 2 (id=2330): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x60800, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) io_setup(0x6, &(0x7f0000001380)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000080)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000040)={0x18, r2, 0x3, 0x0, &(0x7f0000000000)=[{0x100000001, 0xbb7}, {0x2, 0x1}, {0x5c597ced, 0x2}]}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 42.31153076s ago: executing program 2 (id=2337): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x60402) syz_open_dev$evdev(&(0x7f0000000100), 0xd249, 0x28800) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x7, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, &(0x7f0000002200), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x9df6c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000002dc0)=[{{&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)=""/199, 0xc7}, {&(0x7f0000000580)=""/163, 0xa3}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000640)=""/234, 0xea}, {&(0x7f0000000740)=""/233, 0xe9}], 0x5}, 0x9}, {{&(0x7f00000008c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000a00)=""/96, 0x60}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x3, &(0x7f0000001ac0)=""/218, 0xda}, 0x1}, {{&(0x7f0000001bc0)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/184, 0xb8}, {&(0x7f0000002d00)=""/15, 0xf}], 0x3, &(0x7f0000002d80)}, 0x7}], 0x3, 0x2000, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) r5 = syz_open_dev$loop(0x0, 0x6, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x4, 0x2000000000001]}}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x8) 41.819461893s ago: executing program 0 (id=2340): r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x88f, 0x400000) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000100)={r1}) r3 = syz_open_dev$media(&(0x7f0000000080), 0x4, 0x8000) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x1, 0x0, &(0x7f0000000200)=[{}], 0x5, 0x0, &(0x7f0000000280)=[{}, {}, {}, {}, {0x0, 0x80000000}], 0x7, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000980)={0x0, 0x6, 0x0, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000740)=[{}, {}], 0x9, 0x0, &(0x7f0000000840)=[{0x0, 0x80000000, 0x0, {0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f00000000c0)=[{}]}) r6 = syz_open_dev$media(&(0x7f0000000e00), 0x8, 0x80) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000b40)={0x80000000, &(0x7f0000000a00), &(0x7f0000000ac0)=[{}, {{0x80000000}}]}) r8 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000340)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{0x80000000, 0x0}, {0x80000000, 0x0}}]}) syz_usb_connect$uac1(0x5, 0xb3, &(0x7f0000000bc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x8, 0x90, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x3, 0xff, "04f592ab9bc90b"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x4, "84", "b6e229"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x1002}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x2, 0x0, 0x7, "2cc191b7"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x2, 0x40, "1544740c"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x20, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0xda137862d3641da8, 0x7, 0xb, 0x9, {0x7, 0x25, 0x1, 0x5, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x6, 0x5, {0x7, 0x25, 0x1, 0x1, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000dc0)={0xa, &(0x7f0000000c80)={0xa, 0x6, 0x201, 0x6, 0x0, 0xc1, 0x10, 0x3}, 0x5, &(0x7f0000000cc0)={0x5, 0xf, 0x5}, 0x1, [{0xbe, &(0x7f0000000d00)=@string={0xbe, 0x3, "b3b22d288e9106b0268088ea3042611b0d45052cb54ec8cdedc4532f71899335e1dccbdb6f75f7004f4592f05cefeafb2153cb82bf54e43fe55246c8d9ede27ab2f9a3cf6f7f7ec646b79076f1c656ca84eeb30c22fb4b17b5f802d7c968351ffc6cda617e89da67e0e7f0d0d1ba6b4215be46c166fee37f92e22fe1305efbf4c4bd45d914fcdfa67995668630db1bb16e2590f7d061c2dcd7ad2d73d2163fc09793673f4ec6da941e0ff1bd7d5b9d96121afc4869466910b83886e2"}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f00000001c0)={{r10, r9, 0x1, [0x0, 0xf7df]}, {r10, r11, 0x7, [0x6]}, 0x1, [0x8, 0x3df]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r13, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r12, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@l2, 0x80, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, &(0x7f0000001540)=""/193, 0xc1}, 0x4}], 0x1, 0x102, 0x0) socket(0x10, 0x3, 0x0) r14 = socket$alg(0x26, 0x5, 0x0) bind$alg(r14, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r14, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r15 = accept4(r14, 0x0, 0x0, 0x80800) sendmmsg$alg(r15, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000b80)={{r4, r5, 0x8, [0x3, 0x7fff]}, {r7, r11, 0x4, [0x40, 0x49b00000]}, 0x10000004, [0x8, 0x7]}) 41.349161812s ago: executing program 2 (id=2343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x408200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036677265000018000280050008003d00000004001200060003001f00000008000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = gettid() r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="61030602061bf3a2ff0ca57b2b117ac5fe02"], 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x101104, 0x0) ioctl$PTP_SYS_OFFSET(r10, 0x43403d05, &(0x7f00000003c0)={0x2}) 38.214001981s ago: executing program 0 (id=2359): syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e1d, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000001240)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f00000001c0)={0x2}) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$video(&(0x7f0000000240), 0x76f7, 0x7b1ff99503486ca1) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000400), &(0x7f00000001c0)={0x0, 0xfb, 0x61, 0x4, 0x9, "639d8b000000004000", "838cf2a8269eb2c586a68c86cf173a9153ee2a4c826bd4100eaa697897066709c271ad2024f4ab52bd075c342d1062ef19ecf9ee8a0071cef6faae8ad494d13ad9ecffff59dc6a4a662a828b"}, 0x61, 0x2) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)='}', 0x1, r4) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) socket$inet6(0xa, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x5109b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_LOCAL={0x8, 0x6, @rand_addr=0x64010101}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r6}, 0x0, 0x0, 0x0) 36.834207412s ago: executing program 4 (id=2366): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$usbfs(r0, &(0x7f00000003c0)=""/182, 0xb6) (async) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)=@multiplanar_mmap={0x1, 0x4, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x5, 0x8, 0xf, 0x0, 0xf, 0x8, "5480d51d"}, 0x2, 0x1, {&(0x7f0000000000)=[{0x2, 0x7a, {0x8001}, 0x131f}, {0x4, 0x7, {0x6}, 0x7c2c903f}]}, 0xe}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open(&(0x7f00000003c0)='./file0\x00', 0x40000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 36.609680307s ago: executing program 4 (id=2367): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x40, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4d83}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffffffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x8000) 36.546068394s ago: executing program 4 (id=2368): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000842}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x44}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x9, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x5) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = epoll_create(0x20) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r9 = syz_io_uring_setup(0x5d2, &(0x7f0000000600)={0x0, 0xf779, 0x80, 0x1, 0x21e}, &(0x7f0000000400)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r9, 0x6efc, 0x3900, 0xb, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x1c) readv(r8, &(0x7f0000000240)=[{&(0x7f0000000480)=""/76, 0x4c}], 0x1) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x80000000}) syz_io_uring_setup(0x497, &(0x7f0000000580)={0x0, 0x7079, 0x400, 0x3, 0xec}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket(0x23, 0x2, 0x1) 35.64712639s ago: executing program 0 (id=2373): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x93, 0x89, 0xfffffff6, 0x38, @mcast2, @empty, 0x7, 0x40, 0x4, 0x2}}) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0x4, {{0x2, 0x4e24, @rand_addr=0x64010102}}}, 0x88) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20, @local}, 0x114, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x3, 0x2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}]}, 0x54}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_pidfd_open(r2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@RTM_DELMDB={0x58, 0x55, 0x100, 0x70bd28, 0x25dfdbfd, {0x7, r0}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x2, {@ip4=@local}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x1, {@ip4=@loopback}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x10) 35.471741595s ago: executing program 0 (id=2374): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003200000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001"], 0x54}}, 0x0) 35.393699076s ago: executing program 4 (id=2375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) (async) r3 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000280)={0x40000004}) (async) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0xff80}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 35.393405683s ago: executing program 0 (id=2376): setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) io_setup(0x5, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000002400)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201510329fbf04038074045cec60102030109023d0002020610780907d40901786d3d400905010000020904020904e20002b22618bb0905010000027c9e09070585e3"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r4, 0x80304d65, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r6) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2c, r7, 0x1, 0x70bd25, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') getpid() r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 35.318859608s ago: executing program 4 (id=2377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x2}, @const={0x1}, @restrict={0x7, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x5f, 0x30, 0x5f, 0x5f, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f0000000200)=""/69, 0x46, 0x45, 0x0, 0x2}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002a00)={0xd, {"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", 0x1000}}, 0x1006) r5 = msgget(0x0, 0x200) msgctl$MSG_INFO(r5, 0xc, &(0x7f00000000c0)=""/22) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000007100100025bd7000fcdbdf2507000000", @ANYRES32=r6, @ANYBLOB="0c00910180050003000100000036ff01800600020010000000030001800500030001000000100001800c00048008000200110000e4c167f49a339bdc85fb5baa28ad3f2ac553f99a582fa25cf4214529356c7f3c25be35844d84bdb0b26a7ca718006c6744b768d7639478994feb6a130f7d14b13e6adcc2a1ae2da48c7624726270908cda683633e2ec58fd785ca080f10321deda"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 35.237199814s ago: executing program 4 (id=2378): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, 0x0, 0x0) r1 = dup(r0) ioctl$VT_RESIZE(r1, 0x5609, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0x8, 0x5000, 0x91, &(0x7f0000000040)="9fb096d3bfa29ffbd4c49d11776a96063753d621b3b0023989c6c21533626475df5daaf6fd6edd05352edf4ff1c07ffb20ee518ea917930e5b9ac054c245cba0e013beea57afc5896254c3e4e5bf1edfb2cced013656c076c5dff1e77131df27147e505e061b23d38edd82134cd3d17f525be9f86518195b403f8edf2ae3b7d0b6082bdb516b4ea1e2a6cd86b266d1594e"}, {0x0, 0xb400, 0xe3, &(0x7f0000000100)="0299b69e1626aa4200061a1cfb9b21cc0c46cacf2eff9ab3ebb974562e39cbe897d4fafdc998c10bad6e90eb777040f06923b9ed41ca1c693d223b511c91357e1b08d819dfdcb631c74dc0886c3c10781989bf98c61dfe3be5908e07feddf33ff09bc3b7fff6eab64d1136498fba3f28cec7e3ddaaabf7933195ef7f61784341d9a4c204e99d525ed2c45fe43757965359ae36c3707157636213ff5f74ac782bfe4eaa2f0b8a4ab6f9fae2e3244618c43f4b52bf054a0cbb25f2f350fcb258d1cdb3a0dc1e30728c30cd53142a10bd9ad9ee9ea2741d9037474de1c3024930c238daa9"}, {0x8, 0x4000, 0x1, &(0x7f0000000200)="c3"}], 0x3}) 33.359029341s ago: executing program 0 (id=2383): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) close_range(r1, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) (async) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) (async) close_range(r1, r2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private}}}}) (async) 26.27432653s ago: executing program 33 (id=2343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x408200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff00000000fcdbdf2500005865", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036677265000018000280050008003d00000004001200060003001f00000008000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = gettid() r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) write$nci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="61030602061bf3a2ff0ca57b2b117ac5fe02"], 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000380), 0x101104, 0x0) ioctl$PTP_SYS_OFFSET(r10, 0x43403d05, &(0x7f00000003c0)={0x2}) 21.629978118s ago: executing program 1 (id=2459): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140), 0x13f, 0x8}}, 0x20) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x400, &(0x7f0000000280)='-#\x00') r4 = userfaultfd(0x80001) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYRESHEX], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r6, 0x0, 0x3}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r7, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000019c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(r9, 0xa, &(0x7f0000000240)={0x6, 0xd7ff}, &(0x7f0000000300)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21.503386014s ago: executing program 1 (id=2461): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) select(0x28, 0x0, &(0x7f0000000080)={0x3}, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = shmget(0x1, 0x4000, 0x100, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r5 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x8000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@overlay={0x101, 0xb, 0x4, 0x8, 0xffffff73, {}, {0x2, 0x4, 0x0, 0x4, 0xca, 0x0, "8f2eb06e"}, 0x1000, 0x3, {}, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000f40)=ANY=[@ANYBLOB="dc030000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf258300000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x3dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4885) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21.439145227s ago: executing program 1 (id=2462): syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() semget$private(0x0, 0x4, 0x72e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {0x0}], 0x2) r6 = syz_pidfd_open(r0, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047d"], 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r6, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r8, 0x0) 19.785806579s ago: executing program 34 (id=2378): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, 0x0, 0x0) r1 = dup(r0) ioctl$VT_RESIZE(r1, 0x5609, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000240)=[{0x8, 0x5000, 0x91, &(0x7f0000000040)="9fb096d3bfa29ffbd4c49d11776a96063753d621b3b0023989c6c21533626475df5daaf6fd6edd05352edf4ff1c07ffb20ee518ea917930e5b9ac054c245cba0e013beea57afc5896254c3e4e5bf1edfb2cced013656c076c5dff1e77131df27147e505e061b23d38edd82134cd3d17f525be9f86518195b403f8edf2ae3b7d0b6082bdb516b4ea1e2a6cd86b266d1594e"}, {0x0, 0xb400, 0xe3, &(0x7f0000000100)="0299b69e1626aa4200061a1cfb9b21cc0c46cacf2eff9ab3ebb974562e39cbe897d4fafdc998c10bad6e90eb777040f06923b9ed41ca1c693d223b511c91357e1b08d819dfdcb631c74dc0886c3c10781989bf98c61dfe3be5908e07feddf33ff09bc3b7fff6eab64d1136498fba3f28cec7e3ddaaabf7933195ef7f61784341d9a4c204e99d525ed2c45fe43757965359ae36c3707157636213ff5f74ac782bfe4eaa2f0b8a4ab6f9fae2e3244618c43f4b52bf054a0cbb25f2f350fcb258d1cdb3a0dc1e30728c30cd53142a10bd9ad9ee9ea2741d9037474de1c3024930c238daa9"}, {0x8, 0x4000, 0x1, &(0x7f0000000200)="c3"}], 0x3}) 19.62164817s ago: executing program 5 (id=2468): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xbf5, 0xeeef0000, 0x0, r4, 0xc}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000177bea6fedb30e906ef7870c0000005a9008b067fbfcb6b5359124"], 0x0}, 0x0) 19.122994829s ago: executing program 5 (id=2469): r0 = syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r1, 0x1100100) keyctl$chown(0x6, r1, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x831, 0x2, {0x0}, {}, 0x4, 0x8}) prlimit64(r2, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x5, 0x24, 0x0, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x5, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x9, 0xfffffffe, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3, 0x8f, 0x6, 0x4, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x8000078, 0xea4, 0xa, 0x4, 0x4, 0x7d, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x8000009, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x40008, 0x5, 0x3, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0x0, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x45056a1f, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x2, 0x54fe12da, 0xbf, 0x5, 0x3, 0x7f, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x3, 0x5, 0x40000008, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x0, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x29, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r5 = socket(0x10, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x85}, 0x4081) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a010000000000000000000a0000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000050000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c0003801d000380140001007465616d300000000000000000000000080007"], 0xd8}}, 0x20000000) getsockopt$inet6_tcp_int(r7, 0x6, 0x17, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001800128008000100707070000c00028008000100", @ANYRES32=r6, @ANYBLOB='\b\x00'], 0x40}}, 0x0) 19.084934726s ago: executing program 5 (id=2470): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x560b, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) listen(r0, 0xf8ac) syz_emit_ethernet(0x52, &(0x7f0000000b40)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 19.033561938s ago: executing program 5 (id=2471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4200c2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a80000/0x1000)=nil, 0x1000, &(0x7f00000003c0)=""/139) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000380)={0x28, 0x2, r3, 0x0, &(0x7f0000ebd000/0x2000)=nil, 0x2000, 0x100000000000001}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = shmget$private(0x0, 0x800000, 0x100, &(0x7f0000800000/0x800000)=nil) shmctl$SHM_INFO(r4, 0xe, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006faa6e109713bd0066c5000000010902120001000000000904000000e62b3d00e2db21dcd41ea0559f58650c7635ac15a04e137de5bea881"], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x400004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000003fe29bae000000bd009500ed57531eba6eca114d"], &(0x7f0000000080)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10, 0x2) syz_open_dev$usbfs(&(0x7f0000000340), 0x3, 0x10000) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000240)=0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000822000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000540)="b9420300000f32c4a3f968630800b92f0200000f32400f00d36636f00fc195000000800f23fb66bad10466b80e0066ef838b00000000a8b96a0200000f320f01b932c30000", 0x45}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18.481453828s ago: executing program 5 (id=2472): syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) r0 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x62001) close(r0) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) chdir(&(0x7f00000000c0)='./file0\x00') r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000100)=""/19, 0x13}, &(0x7f0000000140), 0x40}, 0x20) mlockall(0x4) r2 = socket$kcm(0x29, 0x32704c39a7936bd9, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r3, 0x0, &(0x7f00000001c0), 0x80800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20024010) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x7, 0x1, 0x200, 0x2, {{0x27, 0x4, 0x3, 0x33, 0x9c, 0x68, 0x0, 0xe, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@generic={0xc6, 0x6, "06d7ca73"}, @ssrr={0x89, 0x23, 0x94, [@local, @empty, @multicast1, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x24}, @broadcast, @local]}, @cipso={0x86, 0x5d, 0x0, [{0x1, 0xa, "a863a44a78251a66"}, {0x7, 0x8, "91a6af7d032a"}, {0x7, 0x2}, {0x6, 0x9, "e606ad3398aa4f"}, {0x2, 0xe, "57776fbf7459c89b9e7ec6d6"}, {0x1, 0xc, "8fcce3bfd4c62691d7ae"}, {0x0, 0xa, "7c7426b6a6876b35"}, {0x5, 0xa, "4bc322ba030601f3"}, {0x2, 0xc, "b60e38c88a2843a0bb69"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x55, 0x9, 0x4, 0x31, @mcast2, @private1, 0x80, 0x20, 0x5, 0xa742}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r7, 0x100, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3af3e12f464ae02e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x40000) syz_80211_inject_frame(&(0x7f00000006c0)=@device_b, &(0x7f0000000700)=@ctrl_frame=@cf_end_cf_ack={{}, {0x7}, @device_b, @device_b}, 0x10) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f0000000740)=0x1) syz_clone3(&(0x7f0000002880)={0x840c0100, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0, {0x36}, &(0x7f0000000840)=""/4096, 0x1000, &(0x7f0000001840)=""/4096, &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r10, 0x2, 0x0) fstat(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000002900)='./file0/file0\x00', &(0x7f0000002940)='./file0\x00', &(0x7f0000002980), 0x400, &(0x7f0000002a40)={'trans=unix,', {[{@loose}, {@cache_readahead}, {@dfltgid={'dfltgid', 0x3d, r11}}, {@uname={'uname', 0x3d, 'caif0\x00'}}, {@noextend}, {@noextend}], [{@mask={'mask', 0x3d, 'MAY_READ'}}]}}) shmget(0x2, 0x3000, 0x78000000, &(0x7f0000ffd000/0x3000)=nil) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002ac0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f0000002b00)={0x8, 0x2, 0x4, 0x0, 0xfc}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000002b40)={0xa, 0x2, 0x1000, 0x2}, 0x8) 18.364555406s ago: executing program 1 (id=2473): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x30) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000016, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) open$dir(&(0x7f00000023c0)='./file0\x00', 0x0, 0x86) 18.336677744s ago: executing program 35 (id=2383): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) close_range(r1, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private}}}}) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff}, 0xc) (async) readv(r1, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x1) (async) close_range(r1, r2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @private}}}}) (async) 18.297325377s ago: executing program 1 (id=2475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x4, 0x7d5d}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r2, 0x8924, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f00000002c0)={r3, 0x3}) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000038000107dcffffff0000000002000000"], 0x14}}, 0x24008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000340)='svcrdma_decode_rqst\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r2], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @volatile={0x5}]}}, 0x0, 0x4a}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='xprt_retransmit\x00', r0, 0x0, 0xffff}, 0x18) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r8, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000100"/28], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r9, @ANYRES32=r0, @ANYBLOB=' \x00'/12, @ANYRES32, @ANYBLOB="f251d774aec8ac713fb578412b5d6431d754d6f6be9e62fa95512ba8c6d6395ae0aa353ae6c5fe904b1eda3fc1c363382576814afee8442beab9abbffc2a495cc521a8bec916a8c7656c184fe2732da7ca53d550262c5a30ac7c3d9c0778a328ec3f2ae8c9092298e8d6b01415ebb6020d5466dca66c935e39d4fb", @ANYRES64=0x0], 0x20) close(0x3) socket$igmp(0x2, 0x3, 0x2) close(r9) syz_usb_connect(0x0, 0x5cc, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x1b, 0x47, 0x16, 0x40, 0x5d1, 0x1001, 0x5a98, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ba, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd9, 0x73, 0x1, 0x5a, 0x7c, 0x47, 0xbf, [], [{{0x9, 0x5, 0xa, 0xc, 0x40, 0x8b, 0x6, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5d, 0x7}, @generic={0x41, 0x22, "544362e644626da54650de59de2bdc4cc24b9c7b82e9d04fbf9a15fae1d603355a1c23036a226ceadc0eee5c6125bb0b915a7fb3bb37f3f583812f4c93564e"}]}}]}}, {{0x9, 0x4, 0xcd, 0x10, 0xc, 0xf, 0x7c, 0x7b, 0x8, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "d0"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x879, 0x2, 0xb}}, @hid_hid={0x9, 0x21, 0x100, 0xd0, 0x1, {0x22, 0xeaf}}], [{{0x9, 0x5, 0xc, 0xc, 0x7f828b871b13cf7b, 0x5, 0xf8, 0x7, [@generic={0xab, 0x24, "7a304902081dd37015e84a5470b42605d2652f534d596687ffca7ec12f80e7b50f876ecae7e1f5b7ee6415284941a28073c00dc9968fccb0f2695a293d031f12b8f220cb9083786ef5f7b9929646f659550a8ac6d1821ac76743b37f5022a25f61511fc7a9eecadf971e7808eefbd4c1ed20bcbadee9b1fe339bc4c9e5aa442e8ef90394e0349e028026b956068c6403f9fa258c899c8c8921454fa744cd2bfb4f7e36190eb888ea12"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xff}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x4, 0xff, 0xd}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x2, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x2dca}]}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x85, 0x5, 0x4, [@generic={0x61, 0x6, "b05c4142f4ff895812e1718688aa67d8753f6b45da0230a6d9137f297f1415b1b2d925e68ccc079c101c4f86b94413b164e860cec292114d44fd6e4264cd713d1a884efc65ef72ec08619e38d310a39aa6198719b3c44d7d5dc62c187b3624"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0xd, 0x3, 0x5, [@generic={0x97, 0x11, "ccd3ef8287c4eaed7d291f8d186f6ad3c60c36d9265793710ec4240f271ae60caa034961509cb6b86f666b0ea22c266269f1d510dbc08d23a3e67a27a0e1de6b31635b3381109209de369690c241323a09311b458aacfc37bdb9678cbac30e0c8d97892af928a9e7beb3b6b2847046e4d7c26b61527651f9094f3ce5b74adf3d5a21e08de8baa062b145f7fc2af238c2f387b88541"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe0}, @generic={0x40, 0x22, "0c95c0847217722d2bf5c85bbc6bad7a69e9bb347a8c150d5003191fc68d0615c07c83cd6c34cca9858ef720e16fe0327dc1e1282018fb4b781ed9b17e34"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xfe, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xfe, 0xddb}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0xb6, 0x2, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfa0}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x2, 0x4, 0xfc, [@generic={0x80, 0xd, "2ebff407aba71abd815f0d73d81c37afe7c9d7db00cd92af46fe8ee308ec88ad142d7c0733dd06cb473568b3b942c2a41192e14d0556c6f9bd20d9264f5365e1707e314cfbb6317b4c5079b483497a7c819fd01d1262cab87dc78cd95a0abf467eec38ca219e0f79e9bdde20d50b23c6ca31840a864c05da95ed6d955811"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x2, 0xa, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x4, 0x400, 0xff, 0x8a, 0x2, [@generic={0xcd, 0x23, "b37c647d4809c5a1f79c2ec199281a96b4e496c9e6275bdcd783fa93daae1bb091493c8359e189b5a5620e22f3734aa004e264d3250d1ad181e5aacf3912c30084e78c4565f982ff29edc44b18767ff3592ce656072decb292f79ce4849f7b9cee68070bf0ba4bcb5e1146ec99f5bfc22ff7925f7fac8d9739deba3bb760eab634a69e79e0a6e19df11cca5e08ca6eb98fa9f1455743634072f3950b4040c19b65392f23841562ad7c10020e52ef307f5abbca354d38d5c21cc296b6570bcf386424d0ea2bfcfb130eedfd"}, @generic={0x1e, 0x5, "0cd66f38dae09e9b6511bbeb338af23b2e5c6f8267c92197f6a962c4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x400, 0x6, 0x20, 0x10, [@generic={0x33, 0x6, "9c3b027ab3414e1b7d49544c52bad421cd5cd108542fc28c7b8fa91e547064ba75fdb663b2537872c6a915536441bd0068"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe9, 0x2}]}}]}}, {{0x9, 0x4, 0x6f, 0xfc, 0x0, 0xff, 0x8a, 0x24, 0x4}}, {{0x9, 0x4, 0x4e, 0x7, 0x1, 0x39, 0xc2, 0x3f, 0x7, [@hid_hid={0x9, 0x21, 0xf1c2, 0x40, 0x1, {0x22, 0xe71}}, @hid_hid={0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x42}}], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0x6f, 0xe9, 0x3, [@generic={0xdb, 0x30, "27e167abb8f01aa457b0d821ae98f4da95b4be1eb8f116a7512d104bafb7bccc08105dcfcafe76c4e5b03240a5a7f599fdf3a6a26d3011610d35d635a4456aac4286de384fe88a7422e896847b9d2de81e113179a2f0ea5e24d151c79879f7ee833b094c11b70f89e3751f97938dd79c37c5d8a4cf26ed6488f19cfb3626403f2cf7d09192093c018add2aa89dfc422766760521b0ab00afbac9ceb376996effd4de9a47145ffcc395d92ef01ce34f62ba47d1c0004d90513420c828eaeef2cca195534bbd46faa54003e5b71947fa476bc1fb2748256453d1"}]}}]}}]}}]}}, 0x0) 17.889825334s ago: executing program 5 (id=2476): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x300}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 15.216966016s ago: executing program 1 (id=2477): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xbf5, 0xeeef0000, 0x0, r4, 0xc}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000177bea6fedb30e906ef7870c0000005a9008b067fbfcb6b5359124"], 0x0}, 0x0) 2.502271325s ago: executing program 36 (id=2476): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4, 0x0, 0x300}, [@typed={0x8, 0x9, 0x0, 0x0, @binary="38eac21a"}]}, 0x1c}}, 0x20000000) 0s ago: executing program 37 (id=2477): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0xbf5, 0xeeef0000, 0x0, r4, 0xc}) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002222000000177bea6fedb30e906ef7870c0000005a9008b067fbfcb6b5359124"], 0x0}, 0x0) kernel console output (not intermixed with test programs): z.0.1666'. [ 500.085834][ T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 500.246732][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 500.380287][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.393816][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.406435][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 500.865388][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 500.959737][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.980412][ T24] usb 5-1: config 0 descriptor?? [ 500.986058][ T24] usb 5-1: can't set config #0, error -71 [ 501.008876][ T24] usb 5-1: USB disconnect, device number 31 [ 501.449428][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.455994][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.640405][T12047] netlink: 'syz.1.1684': attribute type 4 has an invalid length. [ 502.406066][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1688'. [ 502.488955][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 502.488972][ T30] audit: type=1400 audit(1752036018.969:5153): avc: denied { create } for pid=12059 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 502.519642][T12060] netlink: 'syz.4.1689': attribute type 1 has an invalid length. [ 502.631155][T12060] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1689'. [ 502.660110][ T30] audit: type=1400 audit(1752036019.139:5154): avc: denied { write } for pid=12059 comm="syz.4.1689" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 502.778190][ T30] audit: type=1400 audit(1752036019.139:5155): avc: denied { open } for pid=12059 comm="syz.4.1689" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 502.910327][ T30] audit: type=1400 audit(1752036019.169:5156): avc: denied { ioctl } for pid=12059 comm="syz.4.1689" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 502.937754][ T30] audit: type=1400 audit(1752036019.339:5157): avc: denied { ioctl } for pid=12065 comm="syz.0.1691" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 503.034994][ T30] audit: type=1400 audit(1752036019.339:5158): avc: denied { set_context_mgr } for pid=12065 comm="syz.0.1691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 503.055825][ T30] audit: type=1400 audit(1752036019.499:5159): avc: denied { setopt } for pid=12067 comm="syz.4.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 504.001975][ T30] audit: type=1400 audit(1752036020.479:5160): avc: denied { create } for pid=12072 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 504.026117][ T30] audit: type=1400 audit(1752036020.479:5161): avc: denied { connect } for pid=12072 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 504.053977][ T30] audit: type=1400 audit(1752036020.479:5162): avc: denied { name_connect } for pid=12072 comm="syz.1.1694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 504.145286][T12078] overlayfs: failed to clone upperpath [ 504.228316][T12079] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 505.463268][T12106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49936 sclass=netlink_route_socket pid=12106 comm=syz.4.1700 [ 507.530303][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 507.530340][ T30] audit: type=1400 audit(1752036024.009:5178): avc: denied { read } for pid=12137 comm="syz.1.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.680005][T12140] netlink: 'syz.5.1713': attribute type 1 has an invalid length. [ 507.688177][T12140] netlink: 'syz.5.1713': attribute type 4 has an invalid length. [ 507.695943][T12140] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1713'. [ 507.937668][ T30] audit: type=1400 audit(1752036024.419:5179): avc: denied { create } for pid=12142 comm="syz.1.1715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 508.649365][ T30] audit: type=1400 audit(1752036025.129:5180): avc: denied { write } for pid=12152 comm="syz.2.1716" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 509.546833][T12164] 9pnet_fd: Insufficient options for proto=fd [ 509.619511][ T30] audit: type=1400 audit(1752036026.099:5181): avc: denied { connect } for pid=12166 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 509.659736][T12169] ptrace attach of "./syz-executor exec"[5824] was attempted by "./syz-executor exec"[12169] [ 509.674896][ T30] audit: type=1400 audit(1752036026.119:5182): avc: denied { write } for pid=12166 comm="syz.2.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 509.796601][ T30] audit: type=1400 audit(1752036026.239:5183): avc: denied { bind } for pid=12168 comm="syz.4.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 509.907806][ T30] audit: type=1400 audit(1752036026.239:5184): avc: denied { read write } for pid=12168 comm="syz.4.1721" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 510.042231][ T30] audit: type=1400 audit(1752036026.239:5185): avc: denied { open } for pid=12168 comm="syz.4.1721" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 510.219381][ T30] audit: type=1400 audit(1752036026.689:5186): avc: denied { create } for pid=12175 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 510.280237][ T30] audit: type=1400 audit(1752036026.689:5187): avc: denied { bind } for pid=12175 comm="syz.0.1724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 510.304675][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 510.431557][T12179] netlink: 'syz.4.1725': attribute type 1 has an invalid length. [ 510.439307][T12179] netlink: 'syz.4.1725': attribute type 4 has an invalid length. [ 510.447054][T12179] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1725'. [ 510.552292][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 510.729221][ T5834] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 510.732519][T12189] input: syz0 as /devices/virtual/input/input27 [ 512.579435][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 512.579450][ T30] audit: type=1400 audit(1752036029.059:5196): avc: denied { create } for pid=12219 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 512.605138][ T5940] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 513.267032][ T30] audit: type=1400 audit(1752036029.079:5197): avc: denied { create } for pid=12219 comm="syz.0.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 513.294475][ T30] audit: type=1400 audit(1752036029.369:5198): avc: denied { mount } for pid=12219 comm="syz.0.1736" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 513.333092][ T30] audit: type=1400 audit(1752036029.459:5199): avc: denied { ioctl } for pid=12219 comm="syz.0.1736" path="socket:[34300]" dev="sockfs" ino=34300 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 513.357868][ C0] vkms_vblank_simulate: vblank timer overrun [ 513.415745][ T5940] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.432635][T12219] delete_channel: no stack [ 513.471373][ T5940] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.590471][ T5940] usb 5-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 513.595761][ T30] audit: type=1400 audit(1752036029.469:5200): avc: denied { read write } for pid=12219 comm="syz.0.1736" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 513.615711][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.749124][ T5940] usb 5-1: config 0 descriptor?? [ 513.757177][ T30] audit: type=1400 audit(1752036029.469:5201): avc: denied { open } for pid=12219 comm="syz.0.1736" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 513.781023][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.323340][ T30] audit: type=1400 audit(1752036029.799:5202): avc: denied { ioctl } for pid=12215 comm="syz.2.1735" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 514.347955][ C0] vkms_vblank_simulate: vblank timer overrun [ 514.450046][ T30] audit: type=1400 audit(1752036029.999:5203): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 514.498054][T12231] delete_channel: no stack [ 514.813945][ T5940] usb 5-1: string descriptor 0 read error: -71 [ 514.826652][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 514.833328][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 514.875999][ T5940] usb 5-1: USB disconnect, device number 32 [ 514.924629][ T30] audit: type=1400 audit(1752036031.399:5204): avc: denied { bind } for pid=12245 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 514.956218][ T117] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 514.989025][ T30] audit: type=1400 audit(1752036031.439:5205): avc: denied { connect } for pid=12245 comm="syz.4.1740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 515.008762][ C0] vkms_vblank_simulate: vblank timer overrun [ 515.125842][ T117] usb 1-1: Using ep0 maxpacket: 8 [ 515.134070][ T117] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 515.147361][ T117] usb 1-1: config 0 has no interface number 0 [ 515.167959][ T117] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 515.179505][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.208177][ T117] usb 1-1: Product: syz [ 515.236013][ T117] usb 1-1: Manufacturer: syz [ 515.244215][ T117] usb 1-1: SerialNumber: syz [ 515.258919][ T117] usb 1-1: config 0 descriptor?? [ 515.543733][T12258] netlink: 'syz.5.1742': attribute type 4 has an invalid length. [ 515.660896][T12255] ptrace attach of "./syz-executor exec"[8657] was attempted by "í7oþ\x0c½áŽ\x22c\x1bt ØúäNdØ=ÿ/j\x0d¨F’\x22ð†¶nŸ>·$IêÅ*1}äŽUì4K\x0aÕžÄ;$ÒÝV(ÆÿZÃÃHt‰=Ø9S¢EçãÎÑ´]æ™ßë«WÒz߯Ӽ8ËJöá²ÊÆÕ½JÄWvßÑÿõ®O\x0dó}†§ðù¸‰iáí¶Ñ±Xv°Õø—ßT…÷9ø-Îä,„K¬UðcâxoìúµÍi]Âý‚^ÐUÕéZ%ª¹2ë/1—`!m°“?û½{†0ÿVÌõD±‘(£{]P ²£æ›\x0dÎ)«Ò¡˜pgUKCUs«„»15?WÍ“Æ1¡·@æÄu|S®©âb+I»CÚ¨ï-}É&™½\x1bª.óc !ªÌ!\x0a²âáÿ8//\x0a#úGw/ÁSa~M™Î<Â\x0b\x07}›eJt2³Ô¦r\x5c‹œêþ1&<ùZ [_æVq±ñ·½ZÄÜGt}øÞÛŒ™\x0a\x0aÓáÍŽÀí¥Š_„ψ¶-Gã7®JçI’YªjônmÓ’ry'’¢Ua_–Á3Dü”J\x0cU}\x07ÇP7búžlæÞq`ì^¯±Tr[Xàó¬IÓ™÷<¥¯¯·*¹–µI«› \x1bÌ‚S`\x22 ãêñj?§ävpyÛ`EqñšÌð|\x09íìæ¥^ø¾U|Yd\x22²dÞZ ¢5½ýAt‚‘׎ƒŸµ©{ä¡\x09·ØoK4W`°Å]±Û98çš›\x0a¨ØbÕÎ…äê5èòÛB×m€^$vH÷EÈÐQ™h* ‘ yÔYý>ãøË\x1b½;Ð`¾:ÀôAðçÂÄÒ«#Ú—m~•r­D½NõÐc:Js¥ÙÙ\x1bª¤'{il¶YÖæ¤Uó‘ó2à§Áu×UGøFp‰îAJB׊b\x5cvtú߶ÑR†©)ÐÔ»·ªoÉÖÌ0¤ÉÓ€NÖgš]²¥‡f‰Ü\x0df£2oR J x69Û¿Nk,0\x22Åid½Ù´]ëO™YÙDob¼;{ûº¹i¯EäB±ã³ÄÿÈÐ6Fýùþð\x09¾.ܺ4©ÇY%Ø5¡¼[¿\x0bY\x0c‚UÿIK¡gƒ*ð›TÚæ ›*µ…¡Nã® [ 516.636800][T12269] FAULT_INJECTION: forcing a failure. [ 516.636800][T12269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.742004][T12269] CPU: 0 UID: 0 PID: 12269 Comm: syz.4.1745 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 516.742029][T12269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.742040][T12269] Call Trace: [ 516.742044][T12269] [ 516.742048][T12269] dump_stack_lvl+0x16c/0x1f0 [ 516.742068][T12269] should_fail_ex+0x512/0x640 [ 516.742085][T12269] _copy_from_user+0x2e/0xd0 [ 516.742102][T12269] copy_msghdr_from_user+0x98/0x160 [ 516.742118][T12269] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 516.742140][T12269] ___sys_sendmsg+0xfe/0x1d0 [ 516.742154][T12269] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.742169][T12269] ? __lock_acquire+0x622/0x1c90 [ 516.742198][T12269] __sys_sendmsg+0x16d/0x220 [ 516.742212][T12269] ? __pfx___sys_sendmsg+0x10/0x10 [ 516.742236][T12269] do_syscall_64+0xcd/0x4c0 [ 516.742252][T12269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.742263][T12269] RIP: 0033:0x7feec2d8e929 [ 516.742272][T12269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.742282][T12269] RSP: 002b:00007feec3c65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.742293][T12269] RAX: ffffffffffffffda RBX: 00007feec2fb6080 RCX: 00007feec2d8e929 [ 516.742300][T12269] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 516.742306][T12269] RBP: 00007feec3c65090 R08: 0000000000000000 R09: 0000000000000000 [ 516.742312][T12269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.742318][T12269] R13: 0000000000000000 R14: 00007feec2fb6080 R15: 00007ffd923336e8 [ 516.742331][T12269] [ 517.237379][T12276] binder: Bad value for 'max' [ 517.788294][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 517.788307][ T30] audit: type=1400 audit(1752036034.039:5218): avc: denied { accept } for pid=12281 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 517.904913][ T30] audit: type=1400 audit(1752036034.039:5219): avc: denied { getopt } for pid=12281 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 518.171687][ T117] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 518.204904][ T117] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 518.385208][ T30] audit: type=1400 audit(1752036034.809:5220): avc: denied { write } for pid=12288 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 519.032354][ T30] audit: type=1400 audit(1752036034.819:5221): avc: denied { getopt } for pid=12288 comm="syz.5.1752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 519.380002][ T117] usb 1-1: USB disconnect, device number 43 [ 519.914635][T12290] delete_channel: no stack [ 520.317073][ T30] audit: type=1400 audit(1752036036.769:5222): avc: denied { setopt } for pid=12302 comm="syz.1.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 520.448654][ T30] audit: type=1400 audit(1752036036.769:5223): avc: denied { bind } for pid=12302 comm="syz.1.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 520.502882][T12313] FAULT_INJECTION: forcing a failure. [ 520.502882][T12313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.557893][ T30] audit: type=1400 audit(1752036036.769:5224): avc: denied { name_bind } for pid=12302 comm="syz.1.1756" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 520.559940][T12313] CPU: 1 UID: 0 PID: 12313 Comm: syz.0.1759 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 520.559964][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.559973][T12313] Call Trace: [ 520.559979][T12313] [ 520.559985][T12313] dump_stack_lvl+0x16c/0x1f0 [ 520.560012][T12313] should_fail_ex+0x512/0x640 [ 520.560036][T12313] _copy_from_user+0x2e/0xd0 [ 520.560058][T12313] copy_msghdr_from_user+0x98/0x160 [ 520.560080][T12313] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 520.560115][T12313] ___sys_sendmsg+0xfe/0x1d0 [ 520.560137][T12313] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.560155][T12313] ? __lock_acquire+0x622/0x1c90 [ 520.560196][T12313] __sys_sendmsg+0x16d/0x220 [ 520.560216][T12313] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.560250][T12313] do_syscall_64+0xcd/0x4c0 [ 520.560273][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.560288][T12313] RIP: 0033:0x7fd00598e929 [ 520.560301][T12313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.560315][T12313] RSP: 002b:00007fd0037f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.560330][T12313] RAX: ffffffffffffffda RBX: 00007fd005bb5fa0 RCX: 00007fd00598e929 [ 520.560340][T12313] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 520.560350][T12313] RBP: 00007fd0037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 520.560359][T12313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.560368][T12313] R13: 0000000000000000 R14: 00007fd005bb5fa0 R15: 00007ffc9fae3b68 [ 520.560388][T12313] [ 521.211305][ T30] audit: type=1400 audit(1752036036.769:5225): avc: denied { node_bind } for pid=12302 comm="syz.1.1756" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 521.986136][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 522.370140][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 522.388832][ T24] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 522.506058][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.517194][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.526381][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.540099][ T24] usb 5-1: Product: syz [ 522.555691][ T24] usb 5-1: Manufacturer: syz [ 522.580035][ T24] usb 5-1: SerialNumber: syz [ 522.600956][T12329] netlink: 'syz.1.1758': attribute type 30 has an invalid length. [ 523.015779][ T5826] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 523.165774][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 523.174623][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.195850][ T5826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.211590][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 523.224891][ T5826] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 523.240023][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.252621][ T5826] usb 1-1: config 0 descriptor?? [ 523.377906][ T30] audit: type=1400 audit(1752036039.859:5226): avc: denied { write } for pid=12344 comm="syz.2.1770" lport=42721 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 523.382588][T12345] netlink: 'syz.2.1770': attribute type 1 has an invalid length. [ 523.472584][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.591551][T12347] bond0: (slave gretap1): making interface the new active one [ 523.607149][T12322] Bluetooth: hci3: command 0x0406 tx timeout [ 523.667488][T12347] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 523.691863][ T30] audit: type=1400 audit(1752036040.159:5227): avc: denied { ioctl } for pid=12336 comm="syz.0.1767" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 523.752773][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 523.823095][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 523.855823][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 523.912894][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 523.964478][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 524.007284][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 524.138057][ T5826] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 524.167117][ T5826] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 524.184532][ T5826] microsoft 0003:045E:07DA.0012: no inputs found [ 524.301076][T12357] ip6erspan1: entered allmulticast mode [ 524.612397][ T5826] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway [ 524.698659][ T5826] usb 1-1: USB disconnect, device number 44 [ 524.733312][ T24] usb 5-1: 0:2 : does not exist [ 524.772601][ T24] usb 5-1: USB disconnect, device number 33 [ 525.840160][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1778'. [ 526.100254][ T30] audit: type=1400 audit(1752036042.309:5228): avc: denied { write } for pid=12368 comm="syz.2.1778" name="if_inet6" dev="proc" ino=4026533271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 526.185695][ T30] audit: type=1400 audit(1752036042.609:5229): avc: denied { create } for pid=12367 comm="syz.0.1777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 527.225813][ T30] audit: type=1400 audit(1752036043.629:5230): avc: denied { ioctl } for pid=12387 comm="syz.0.1783" path="socket:[33699]" dev="sockfs" ino=33699 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 527.315736][ T5940] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 527.610967][ T30] audit: type=1400 audit(1752036044.059:5231): avc: denied { mount } for pid=12396 comm="syz.5.1785" name="/" dev="autofs" ino=34613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 527.761559][T12387] delete_channel: no stack [ 527.955994][ T5940] usb 5-1: Using ep0 maxpacket: 8 [ 527.966113][ T5940] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 528.036372][ T5940] usb 5-1: config 0 has no interface number 0 [ 528.058089][ T5940] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 528.075720][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.527479][ T5940] usb 5-1: Product: syz [ 528.531688][ T5940] usb 5-1: Manufacturer: syz [ 528.536493][ T5940] usb 5-1: SerialNumber: syz [ 528.604103][ T5940] usb 5-1: config 0 descriptor?? [ 528.608066][ T30] audit: type=1400 audit(1752036045.019:5232): avc: denied { setopt } for pid=12403 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 528.826372][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1789'. [ 528.880562][ T5940] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 528.941693][ T30] audit: type=1400 audit(1752036045.369:5233): avc: denied { create } for pid=12411 comm="syz.0.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 528.975687][ T5940] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 529.017539][ T5940] usb 5-1: USB disconnect, device number 34 [ 529.062607][ T30] audit: type=1400 audit(1752036045.549:5234): avc: denied { getopt } for pid=12421 comm="syz.5.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 529.095352][ T30] audit: type=1400 audit(1752036045.569:5235): avc: denied { setopt } for pid=12421 comm="syz.5.1791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 529.518141][ T30] audit: type=1400 audit(1752036045.989:5236): avc: denied { map } for pid=12426 comm="syz.4.1793" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.598767][ T30] audit: type=1400 audit(1752036045.989:5237): avc: denied { execute } for pid=12426 comm="syz.4.1793" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 529.854205][T12423] mmap: syz.2.1792 (12423): VmData 37859328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 530.203571][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 530.213766][ T30] audit: type=1400 audit(1752036046.679:5238): avc: denied { bind } for pid=12438 comm="syz.2.1796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 530.769305][ T30] audit: type=1400 audit(1752036047.259:5239): avc: denied { sys_module } for pid=12440 comm="syz.4.1797" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 531.618274][ T30] audit: type=1400 audit(1752036048.099:5240): avc: denied { listen } for pid=12456 comm="syz.5.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 532.474137][T12448] delete_channel: no stack [ 532.611553][ T30] audit: type=1400 audit(1752036049.089:5241): avc: denied { write } for pid=12463 comm="syz.4.1804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 533.790314][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 533.790330][ T30] audit: type=1800 audit(1752036050.269:5243): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1805" name="nullb0" dev="tmpfs" ino=1329 res=0 errno=0 [ 533.872085][ T30] audit: type=1400 audit(1752036050.329:5244): avc: denied { bind } for pid=12476 comm="syz.4.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.946742][ T30] audit: type=1400 audit(1752036050.329:5245): avc: denied { name_bind } for pid=12476 comm="syz.4.1806" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 533.984776][ T30] audit: type=1400 audit(1752036050.329:5246): avc: denied { node_bind } for pid=12476 comm="syz.4.1806" saddr=fe80::bb src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 534.478062][ T30] audit: type=1400 audit(1752036050.959:5247): avc: denied { view } for pid=12496 comm="syz.2.1812" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 534.950964][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 534.989561][ T30] audit: type=1400 audit(1752036051.459:5248): avc: denied { append } for pid=12496 comm="syz.2.1812" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 535.116046][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 535.126214][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 535.140880][ T24] usb 5-1: config 0 has no interface number 0 [ 536.058520][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 536.073872][T12506] xt_hashlimit: overflow, try lower: 17286/0 [ 536.082336][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.094609][ T30] audit: type=1400 audit(1752036052.569:5249): avc: denied { read write } for pid=12508 comm="syz.0.1816" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.096769][ T24] usb 5-1: Product: syz [ 536.126980][ T30] audit: type=1400 audit(1752036052.569:5250): avc: denied { open } for pid=12508 comm="syz.0.1816" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.160971][ T30] audit: type=1400 audit(1752036052.609:5251): avc: denied { ioctl } for pid=12508 comm="syz.0.1816" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 536.191669][ T24] usb 5-1: Manufacturer: syz [ 536.207330][ T24] usb 5-1: SerialNumber: syz [ 536.381725][ T24] usb 5-1: config 0 descriptor?? [ 536.541162][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 536.797896][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 536.826136][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 536.900078][ T30] audit: type=1400 audit(1752036053.379:5252): avc: denied { setopt } for pid=12520 comm="syz.2.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 537.004328][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.033507][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.137554][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.155729][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.178042][T12491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 538.005307][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 538.006161][ T5940] usb 5-1: USB disconnect, device number 35 [ 538.040280][T12542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63256 sclass=netlink_route_socket pid=12542 comm=syz.1.1827 [ 538.065435][ T5940] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 538.115155][ T5940] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 538.138472][ T5940] quatech2 5-1:0.51: device disconnected [ 538.366186][T12545] bridge0: entered promiscuous mode [ 538.628145][T12545] bridge0: port 3(macsec1) entered blocking state [ 538.634744][T12545] bridge0: port 3(macsec1) entered disabled state [ 538.641384][T12545] macsec1: entered allmulticast mode [ 538.655912][T12545] bridge0: entered allmulticast mode [ 538.674589][T12545] macsec1: left allmulticast mode [ 538.679836][T12545] bridge0: left allmulticast mode [ 538.700417][T12545] bridge0: left promiscuous mode [ 538.763075][T12554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=12554 comm=syz.0.1830 [ 538.822760][T12549] could not allocate digest TFM handle digest_null [ 538.903457][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 538.913782][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 538.913796][ T30] audit: type=1400 audit(1752036055.379:5254): avc: denied { ioctl } for pid=12556 comm="syz.4.1831" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 539.473433][ T30] audit: type=1400 audit(1752036055.949:5255): avc: denied { block_suspend } for pid=12569 comm="syz.1.1833" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 539.983000][ T30] audit: type=1400 audit(1752036056.399:5256): avc: denied { write } for pid=12572 comm="syz.0.1835" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 540.091210][T12581] netlink: 'syz.2.1836': attribute type 1 has an invalid length. [ 540.099151][T12581] netlink: 'syz.2.1836': attribute type 4 has an invalid length. [ 540.106987][T12581] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1836'. [ 541.546789][T12594] 9pnet: p9_errstr2errno: server reported unknown error 6Ûz9’f00000000000000000004 [ 541.599222][T12595] tmpfs: Unknown parameter '/' [ 541.692984][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 541.700858][ T30] audit: type=1400 audit(1752036058.079:5257): avc: denied { mounton } for pid=12593 comm="syz.4.1840" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 541.845676][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 541.852307][ T24] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 541.862289][ T24] usb 3-1: config 11 has no interface number 0 [ 541.868907][ T24] usb 3-1: config 11 interface 95 has no altsetting 0 [ 541.890330][ T24] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 541.899911][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.911322][ T24] usb 3-1: Product: syz [ 541.921002][ T24] usb 3-1: Manufacturer: syz [ 541.932286][ T24] usb 3-1: SerialNumber: syz [ 542.617294][ T30] audit: type=1400 audit(1752036058.869:5258): avc: denied { sqpoll } for pid=12601 comm="syz.4.1843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 543.209126][ T24] usb 3-1: USB disconnect, device number 35 [ 543.387023][ T30] audit: type=1400 audit(1752036059.869:5259): avc: denied { create } for pid=12611 comm="syz.1.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 543.442198][ T30] audit: type=1400 audit(1752036059.869:5260): avc: denied { setopt } for pid=12611 comm="syz.1.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 543.519815][T12620] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 543.678779][ T30] audit: type=1400 audit(1752036060.159:5261): avc: denied { read } for pid=12626 comm="syz.0.1850" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 543.864904][T12636] syz_tun: entered allmulticast mode [ 543.878592][ T30] audit: type=1400 audit(1752036060.359:5262): avc: denied { bind } for pid=12635 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 543.899580][T12635] syz_tun: left allmulticast mode [ 544.495346][ T30] audit: type=1400 audit(1752036060.959:5263): avc: denied { audit_write } for pid=12640 comm="syz.1.1853" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 545.547577][ T30] audit: type=1400 audit(1752036061.979:5264): avc: denied { mounton } for pid=12655 comm="syz.2.1859" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 546.855665][T12686] netlink: 'syz.0.1864': attribute type 4 has an invalid length. [ 547.481563][T12696] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 547.489555][T12696] netlink: 'syz.4.1868': attribute type 4 has an invalid length. [ 547.497464][T12696] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1868'. [ 547.516050][ T5826] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 547.761337][ T30] audit: type=1400 audit(1752036064.239:5265): avc: denied { create } for pid=12698 comm="syz.4.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 547.900952][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 547.921193][ T5826] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 548.428214][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.451982][ T5826] usb 1-1: Product: syz [ 548.467755][ T5826] usb 1-1: Manufacturer: syz [ 548.485329][ T5826] usb 1-1: SerialNumber: syz [ 548.503767][ T5826] usb 1-1: config 0 descriptor?? [ 548.511706][ T5826] gspca_main: sq905-2.14.0 probing 2770:9120 [ 548.825658][ T5911] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 549.355680][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 549.367651][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.385780][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.395540][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 549.425145][ T5911] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 549.438506][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.464319][ T5911] usb 3-1: config 0 descriptor?? [ 549.839403][ T5826] gspca_sq905: bulk read fail (-22) len 0/4 [ 549.848549][ T5826] sq905 1-1:0.0: probe with driver sq905 failed with error -5 [ 550.048869][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.073924][T12722] overlayfs: failed to clone upperpath [ 550.080087][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.098576][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 550.133670][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.146027][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 550.183383][ T30] audit: type=1400 audit(1752036066.659:5266): avc: denied { name_bind } for pid=12710 comm="syz.1.1873" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 550.211853][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.225650][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.228722][T12692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=12692 comm=syz.0.1867 [ 550.232886][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.232913][ T5911] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 550.380781][ T5950] usb 1-1: USB disconnect, device number 45 [ 550.407507][ T5911] microsoft 0003:045E:07DA.0013: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 550.421566][ T5911] microsoft 0003:045E:07DA.0013: no inputs found [ 550.886198][ T5911] microsoft 0003:045E:07DA.0013: could not initialize ff, continuing anyway [ 550.898955][ T5911] usb 3-1: USB disconnect, device number 36 [ 551.001036][ T30] audit: type=1400 audit(1752036067.479:5267): avc: denied { wake_alarm } for pid=12733 comm="syz.0.1879" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.022888][T12734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1879'. [ 551.338048][T12739] binder: Bad value for 'max' [ 551.357006][T12724] team0 (unregistering): Port device team_slave_0 removed [ 551.847193][T12724] team0 (unregistering): Port device team_slave_1 removed [ 551.875766][ T30] audit: type=1400 audit(1752036068.349:5268): avc: denied { write } for pid=12740 comm="syz.2.1882" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 551.942437][ T30] audit: type=1400 audit(1752036068.349:5269): avc: denied { read write } for pid=12740 comm="syz.2.1882" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 551.968700][ T30] audit: type=1400 audit(1752036068.349:5270): avc: denied { open } for pid=12740 comm="syz.2.1882" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 552.185854][ T5826] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 552.466207][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 552.482622][ T5826] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 552.505219][ T5826] usb 3-1: config 0 has no interface number 0 [ 552.540366][ T5826] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 552.564327][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.607254][ T5826] usb 3-1: Product: syz [ 552.625696][ T5826] usb 3-1: Manufacturer: syz [ 552.635513][ T5826] usb 3-1: SerialNumber: syz [ 552.657493][ T5826] usb 3-1: config 0 descriptor?? [ 553.481488][ T5826] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 553.500213][ T5826] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 553.552235][ T5826] usb 3-1: USB disconnect, device number 37 [ 553.894219][ T5911] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 554.045791][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 554.059253][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.093422][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.128069][ T5911] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.178828][ T5911] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.192300][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.212921][ T5911] usb 5-1: config 0 descriptor?? [ 554.223745][ T30] audit: type=1400 audit(1752036070.699:5271): avc: denied { setopt } for pid=12768 comm="syz.5.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 554.635775][ T5883] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 554.788194][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 554.802819][ T5883] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 554.826287][ T5883] usb 3-1: config 0 has no interface number 0 [ 554.835488][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.843651][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.852236][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.860441][ T5883] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 554.869660][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.878122][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.885429][ T5883] usb 3-1: Product: syz [ 554.890116][ T5883] usb 3-1: Manufacturer: syz [ 554.894825][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.908198][ T5883] usb 3-1: SerialNumber: syz [ 554.915099][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.933917][ T5883] usb 3-1: config 0 descriptor?? [ 554.944249][ T5911] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 554.955656][ T5883] smsc95xx v2.0.0 [ 554.980981][ T5911] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 555.003912][ T5911] microsoft 0003:045E:07DA.0014: no inputs found [ 555.017099][ T5911] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 555.084787][ T5911] usb 5-1: USB disconnect, device number 36 [ 555.416195][ T5940] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 555.575763][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 555.582096][ T5940] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.605634][ T5940] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 555.631961][ T5940] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 555.645764][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.656976][ T5940] usb 1-1: Product: syz [ 555.665854][ T5940] usb 1-1: Manufacturer: syz [ 555.670520][ T5940] usb 1-1: SerialNumber: syz [ 555.690202][ T5940] usb 1-1: config 0 descriptor?? [ 556.064377][ T5883] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 556.075395][ T5883] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 556.095737][ T5883] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 556.106771][ T5883] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 556.117833][ T5883] usb 3-1: USB disconnect, device number 38 [ 556.161219][ T30] audit: type=1400 audit(1752036072.639:5272): avc: denied { create } for pid=12808 comm="syz.5.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 556.461018][T12821] bridge1: entered promiscuous mode [ 556.467889][T12821] bridge1: entered allmulticast mode [ 556.485271][T12821] team0: Port device bridge1 added [ 556.752921][T12830] netlink: 'syz.4.1915': attribute type 26 has an invalid length. [ 557.160639][T12834] netlink: 1300 bytes leftover after parsing attributes in process `syz.0.1900'. [ 557.664686][ T30] audit: type=1400 audit(1752036074.139:5273): avc: denied { shutdown } for pid=12837 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.671460][T12839] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 557.702921][ T30] audit: type=1400 audit(1752036074.149:5274): avc: denied { ioctl } for pid=12837 comm="syz.5.1917" path="socket:[36373]" dev="sockfs" ino=36373 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.707695][T12839] ref_ctr increment failed for inode: 0x591 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880765d0000 [ 557.858052][ T30] audit: type=1804 audit(1752036074.149:5275): pid=12839 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1917" name="file0" dev="tmpfs" ino=1425 res=1 errno=0 [ 557.972946][ T5834] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 558.400822][T12845] overlay: ./file0 is not a directory [ 558.685702][ T30] audit: type=1400 audit(1752036075.139:5276): avc: denied { map } for pid=12842 comm="syz.4.1918" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.771796][ T30] audit: type=1400 audit(1752036075.149:5277): avc: denied { execute } for pid=12842 comm="syz.4.1918" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 558.933707][T12853] netlink: 'syz.5.1920': attribute type 3 has an invalid length. [ 558.946910][T12853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1920'. [ 559.370573][ T30] audit: type=1400 audit(1752036075.849:5278): avc: denied { accept } for pid=12862 comm="syz.5.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 560.600726][T12868] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1925'. [ 560.610160][ T5940] usb 1-1: USB disconnect, device number 46 [ 560.857280][ T30] audit: type=1400 audit(1752036077.319:5279): avc: denied { unlink } for pid=12870 comm="syz.0.1926" name="#18" dev="tmpfs" ino=1947 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 560.955058][T12876] netem: change failed [ 561.509758][ T24] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 561.554413][ T30] audit: type=1400 audit(1752036077.329:5280): avc: denied { mount } for pid=12870 comm="syz.0.1926" name="/" dev="overlay" ino=1941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 561.620695][ T30] audit: type=1800 audit(1752036077.449:5281): pid=12876 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1926" name="bus" dev="overlay" ino=1949 res=0 errno=0 [ 562.220632][ T30] audit: type=1400 audit(1752036078.509:5282): avc: denied { ioctl } for pid=12878 comm="syz.5.1928" path="socket:[36419]" dev="sockfs" ino=36419 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 562.250789][ T24] usb 3-1: no configurations [ 562.264644][T12882] xt_hashlimit: size too large, truncated to 1048576 [ 562.271717][ T24] usb 3-1: can't read configurations, error -22 [ 562.409936][ T30] audit: type=1400 audit(1752036078.889:5283): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 562.435831][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 562.474500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.480919][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.664824][T12891] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1930'. [ 562.721463][ T24] usb 3-1: no configurations [ 562.733244][ T24] usb 3-1: can't read configurations, error -22 [ 562.754537][ T24] usb usb3-port1: attempt power cycle [ 563.185750][ T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 563.224974][ T24] usb 3-1: no configurations [ 563.229799][ T24] usb 3-1: can't read configurations, error -22 [ 563.475773][ T24] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 563.506999][ T24] usb 3-1: no configurations [ 563.511643][ T24] usb 3-1: can't read configurations, error -22 [ 563.522248][ T24] usb usb3-port1: unable to enumerate USB device [ 563.539561][ T5883] libceph: connect (1)[c::]:6789 error -22 [ 563.548433][ T5883] libceph: mon0 (1)[c::]:6789 connect error [ 563.556416][T12905] ceph: No mds server is up or the cluster is laggy [ 564.192965][ T30] audit: type=1326 audit(1752036080.659:5284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12916 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03be18e929 code=0x7ffc0000 [ 564.222222][T12917] sctp: [Deprecated]: syz.5.1939 (pid 12917) Use of int in maxseg socket option. [ 564.222222][T12917] Use struct sctp_assoc_value instead [ 564.253823][ T24] IPVS: starting estimator thread 0... [ 564.279720][ T30] audit: type=1326 audit(1752036080.659:5285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12916 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03be18e929 code=0x7ffc0000 [ 564.311160][ T30] audit: type=1326 audit(1752036080.659:5286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12916 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03be18d3df code=0x7ffc0000 [ 564.331324][T12921] lo speed is unknown, defaulting to 1000 [ 564.335662][ T30] audit: type=1326 audit(1752036080.659:5287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12916 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03be18e929 code=0x7ffc0000 [ 564.363983][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.376850][T12919] IPVS: using max 77 ests per chain, 184800 per kthread [ 564.384214][ T5940] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 564.482108][ T30] audit: type=1326 audit(1752036080.669:5288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12916 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f03be18e929 code=0x7ffc0000 [ 564.612259][ T5940] usb 3-1: config 1 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 145, changing to 11 [ 564.634848][ T5940] usb 3-1: config 1 interface 0 altsetting 65 bulk endpoint 0x82 has invalid maxpacket 8 [ 564.645371][ T5940] usb 3-1: config 1 interface 0 altsetting 65 bulk endpoint 0x3 has invalid maxpacket 16 [ 564.667621][ T5940] usb 3-1: config 1 interface 0 has no altsetting 0 [ 564.682463][ T5940] usb 3-1: string descriptor 0 read error: -22 [ 564.688860][ T5940] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.700571][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.848908][T12913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 564.874354][T12913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.319213][T12921] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 565.327164][T12913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.327230][ T30] audit: type=1326 audit(1752036080.669:5289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12916 comm="syz.5.1939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03be18e929 code=0x7ffc0000 [ 565.334351][T12913] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 565.364902][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.385362][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 565.413060][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 565.630229][ T5940] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -32 [ 565.695881][ T5940] usb 3-1: USB disconnect, device number 43 [ 565.821380][T12950] ip6erspan0: entered allmulticast mode [ 566.735045][T12965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=12965 comm=syz.5.1955 [ 566.748143][T12965] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=12965 comm=syz.5.1955 [ 566.935455][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 566.935470][ T30] audit: type=1400 audit(1752036083.409:5354): avc: denied { read } for pid=12966 comm="syz.2.1957" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 566.981825][ T30] audit: type=1400 audit(1752036083.459:5355): avc: denied { map } for pid=12966 comm="syz.2.1957" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 567.014614][ T30] audit: type=1400 audit(1752036083.459:5356): avc: denied { execute } for pid=12966 comm="syz.2.1957" path="/dev/sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 567.039633][ T30] audit: type=1400 audit(1752036083.459:5357): avc: denied { ioctl } for pid=12966 comm="syz.2.1957" path="/dev/sg0" dev="devtmpfs" ino=746 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 567.215867][ T5826] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 567.343424][T12976] netlink: 'syz.0.1961': attribute type 7 has an invalid length. [ 567.361795][T12976] : entered promiscuous mode [ 567.376830][ T5826] usb 3-1: device descriptor read/64, error -71 [ 567.637075][ T5826] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 567.858786][ T5826] usb 3-1: device descriptor read/64, error -71 [ 568.040184][ T5826] usb usb3-port1: attempt power cycle [ 568.385728][ T5826] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 568.552041][ T5826] usb 3-1: device descriptor read/8, error -71 [ 568.805657][ T5826] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 568.826297][ T5826] usb 3-1: device descriptor read/8, error -71 [ 568.906643][ T30] audit: type=1400 audit(1752036085.389:5358): avc: denied { write } for pid=13003 comm="syz.4.1970" name="sg0" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 568.940537][ T5826] usb usb3-port1: unable to enumerate USB device [ 568.980395][ T30] audit: type=1400 audit(1752036085.439:5359): avc: denied { mounton } for pid=13003 comm="syz.4.1970" path="/379/file0" dev="tmpfs" ino=1987 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 569.023143][ T30] audit: type=1400 audit(1752036085.489:5360): avc: denied { mounton } for pid=12998 comm="syz.0.1968" path="/371/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 569.045630][ C1] vkms_vblank_simulate: vblank timer overrun [ 570.880854][ T30] audit: type=1400 audit(1752036087.359:5361): avc: denied { setopt } for pid=13043 comm="syz.4.1982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 572.906615][T13068] ip6t_rpfilter: unknown options [ 573.258973][ T30] audit: type=1400 audit(1752036089.739:5362): avc: denied { mount } for pid=13071 comm="syz.0.1990" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 573.552284][ T30] audit: type=1400 audit(1752036090.029:5363): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 574.510183][ T30] audit: type=1400 audit(1752036090.989:5364): avc: denied { mount } for pid=13090 comm="syz.5.1996" name="/" dev="ramfs" ino=37379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 574.591913][T13089] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1995'. [ 575.453040][T13113] macsec0: entered promiscuous mode [ 575.458365][T13113] macsec0: entered allmulticast mode [ 575.468039][T13113] veth1_macvtap: entered allmulticast mode [ 575.474758][T13113] macsec0: left promiscuous mode [ 575.480469][T13113] macsec0: left allmulticast mode [ 575.485523][T13113] veth1_macvtap: left allmulticast mode [ 576.155692][ T117] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 576.283192][T13123] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2003'. [ 576.746850][ T117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.762147][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 576.790498][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 576.825780][ T117] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 576.860206][ T117] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 576.899130][ T117] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 577.580700][ T117] usb 1-1: Manufacturer: syz [ 577.785476][ T117] usb 1-1: config 0 descriptor?? [ 577.932576][T13144] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13144 comm=syz.4.2010 [ 578.498076][T13162] team_slave_0: entered allmulticast mode [ 579.067734][ T30] audit: type=1400 audit(1752036095.549:5365): avc: denied { read } for pid=13108 comm="syz.0.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 579.096353][ T117] rc_core: IR keymap rc-hauppauge not found [ 579.112221][ T117] Registered IR keymap rc-empty [ 579.127261][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.162623][T13168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2015'. [ 579.179077][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2015'. [ 579.189553][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.321138][ T117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 579.357654][ T117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input30 [ 579.616819][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.636423][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.798344][ T5826] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 579.815682][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.843109][ T30] audit: type=1400 audit(1752036096.319:5366): avc: denied { ioctl } for pid=13186 comm="syz.4.2022" path="socket:[38155]" dev="sockfs" ino=38155 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 579.877213][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.928914][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 579.964073][T13190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=13190 comm=syz.4.2022 [ 580.156174][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.232734][ T30] audit: type=1400 audit(1752036096.359:5367): avc: denied { write } for pid=13186 comm="syz.4.2022" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 580.256498][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.326336][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.383655][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.456735][ T117] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 580.500346][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 580.560073][ T117] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 580.642464][ T117] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 580.761478][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 580.769182][ T5826] usb 3-1: can't read configurations, error -61 [ 580.785930][ T117] usb 1-1: USB disconnect, device number 47 [ 580.907318][ T5826] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 580.911494][ T30] audit: type=1400 audit(1752036097.379:5368): avc: denied { read write } for pid=13195 comm="syz.4.2025" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 581.095794][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 581.297228][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 581.344518][ T5826] usb 3-1: can't read configurations, error -61 [ 581.346362][ T30] audit: type=1400 audit(1752036097.379:5369): avc: denied { open } for pid=13195 comm="syz.4.2025" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 581.378709][ T5826] usb usb3-port1: attempt power cycle [ 581.595389][T13203] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 581.595955][T13204] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 581.775685][ T5826] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 581.846543][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 581.853436][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 581.876524][ T5826] usb 3-1: can't read configurations, error -61 [ 581.935094][ T30] audit: type=1400 audit(1752036098.409:5370): avc: denied { create } for pid=13207 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 581.965018][ T30] audit: type=1400 audit(1752036098.439:5371): avc: denied { bind } for pid=13207 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 582.025783][ T1206] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 582.045721][ T5826] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 582.066518][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 582.073813][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 582.085657][ T5826] usb 3-1: can't read configurations, error -61 [ 582.110873][ T5826] usb usb3-port1: unable to enumerate USB device [ 582.332885][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 582.341049][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.359441][ T1206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.362403][T13208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2029'. [ 582.369658][ T1206] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 582.407906][ T1206] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 582.417144][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.823020][ T30] audit: type=1400 audit(1752036099.299:5372): avc: denied { listen } for pid=13207 comm="syz.4.2029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 582.836998][ T1206] usb 1-1: config 0 descriptor?? [ 583.277929][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2033'. [ 583.438720][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.460517][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.464910][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2036'. [ 583.494407][T13232] vlan0: entered allmulticast mode [ 583.509451][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.512650][T13232] geneve1: entered allmulticast mode [ 583.522248][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.532110][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.542489][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.554901][ T1206] microsoft 0003:045E:07DA.0015: unknown main item tag 0x0 [ 583.693230][ T1206] microsoft 0003:045E:07DA.0015: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 584.175226][ T1206] microsoft 0003:045E:07DA.0015: no inputs found [ 584.186987][ T1206] microsoft 0003:045E:07DA.0015: could not initialize ff, continuing anyway [ 584.200879][ T1206] usb 1-1: USB disconnect, device number 48 [ 584.363358][T13233] delete_channel: no stack [ 584.495761][ T5883] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 584.593746][T13246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2040'. [ 584.658963][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.686366][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.741848][ T5883] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 584.777790][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.865680][T12322] Bluetooth: hci0: command 0x0406 tx timeout [ 585.106357][ T5883] usb 5-1: config 0 descriptor?? [ 585.797077][ T5883] aquacomputer_d5next 0003:0C70:F014.0016: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0 [ 585.986171][T13275] xt_TCPMSS: Only works on TCP SYN packets [ 586.106195][ T1206] usb 5-1: USB disconnect, device number 37 [ 586.405892][ T30] audit: type=1400 audit(1752036102.859:5373): avc: denied { ioctl } for pid=13266 comm="syz.2.2048" path="socket:[37810]" dev="sockfs" ino=37810 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 586.811421][T13273] delete_channel: no stack [ 588.512361][ T30] audit: type=1400 audit(1752036104.989:5374): avc: denied { mount } for pid=13301 comm="syz.5.2059" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 588.603607][ T30] audit: type=1400 audit(1752036105.059:5375): avc: denied { search } for pid=13301 comm="syz.5.2059" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 588.703875][T13296] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.712818][T13296] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.721728][T13296] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.730599][T13296] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.786338][T13296] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.795453][T13296] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.804384][T13296] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.813249][T13296] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.925028][ T30] audit: type=1400 audit(1752036105.399:5376): avc: denied { write } for pid=13312 comm="syz.4.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 590.172628][ T117] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 590.404784][T13320] delete_channel: no stack [ 590.564280][ T30] audit: type=1400 audit(1752036107.039:5377): avc: denied { setopt } for pid=13332 comm="syz.1.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.588071][ T117] usb 1-1: device descriptor read/64, error -71 [ 590.672464][ T30] audit: type=1400 audit(1752036107.149:5378): avc: denied { create } for pid=13341 comm="syz.4.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 590.714534][ T30] audit: type=1400 audit(1752036107.169:5379): avc: denied { ioctl } for pid=13341 comm="syz.4.2075" path="socket:[39007]" dev="sockfs" ino=39007 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 590.835630][ T117] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 591.785672][ T117] usb 1-1: device descriptor read/64, error -71 [ 591.821664][T13355] overlay: Unknown parameter 'dont_measure' [ 592.529024][T13360] ip6erspan0: entered allmulticast mode [ 592.541123][ T117] usb usb1-port1: attempt power cycle [ 594.014607][T13367] delete_channel: no stack [ 594.202365][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2088'. [ 594.454839][ T30] audit: type=1400 audit(1752036110.889:5380): avc: denied { ioctl } for pid=13380 comm="syz.0.2086" path="socket:[38569]" dev="sockfs" ino=38569 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 594.505808][ T1206] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 594.548642][T13398] lo speed is unknown, defaulting to 1000 [ 594.672134][ T1206] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 594.685348][ T1206] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 594.700851][ T1206] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.722140][ T1206] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.735524][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.750290][ T1206] usb 3-1: Product: syz [ 594.757722][ T1206] usb 3-1: Manufacturer: syz [ 594.765521][ T1206] usb 3-1: SerialNumber: syz [ 595.108349][T13409] IPVS: Error connecting to the multicast addr [ 596.026179][T13415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.033413][T13415] IPv6: NLM_F_CREATE should be set when creating new route [ 597.546989][T13418] delete_channel: no stack [ 597.667407][ T1206] usb 3-1: 0:2 : does not exist [ 597.703184][ T1206] usb 3-1: USB disconnect, device number 52 [ 598.309151][ T30] audit: type=1400 audit(1752036114.769:5381): avc: denied { execute } for pid=13437 comm="syz.0.2105" path="/dev/audio1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 598.477208][T13457] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2110'. [ 598.570412][T13461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2111'. [ 598.618333][ T30] audit: type=1400 audit(1752036115.099:5382): avc: denied { create } for pid=13458 comm="syz.5.2111" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 598.908138][ T30] audit: type=1400 audit(1752036115.389:5383): avc: denied { setopt } for pid=13462 comm="syz.1.2112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 599.612076][ T30] audit: type=1400 audit(1752036116.089:5384): avc: denied { bind } for pid=13470 comm="syz.5.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 600.346460][ T117] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 600.394914][ T30] audit: type=1400 audit(1752036116.869:5385): avc: denied { watch } for pid=13482 comm="syz.5.2120" path="/322" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 600.410149][ T1206] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 600.953192][ T1206] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 600.995663][ T117] usb 5-1: Using ep0 maxpacket: 16 [ 601.025124][ T30] audit: type=1400 audit(1752036116.869:5386): avc: denied { watch_sb watch_reads } for pid=13482 comm="syz.5.2120" path="/322" dev="tmpfs" ino=1734 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 601.076523][ T117] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.116321][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 601.129655][T13489] binder: Bad value for 'max' [ 601.173831][ T117] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 601.205651][ T30] audit: type=1400 audit(1752036117.679:5387): avc: denied { create } for pid=13490 comm="syz.1.2123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 601.226440][ T117] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 601.270319][ T30] audit: type=1400 audit(1752036117.729:5388): avc: denied { accept } for pid=13492 comm="syz.5.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 601.282138][ T117] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.291119][ C1] vkms_vblank_simulate: vblank timer overrun [ 601.318760][ T117] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 601.330546][ T117] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 601.343070][ T117] usb 5-1: Manufacturer: syz [ 601.352136][ T117] usb 5-1: config 0 descriptor?? [ 602.405732][ T30] audit: type=1400 audit(1752036118.879:5389): avc: denied { write } for pid=13511 comm="syz.5.2128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 602.467673][ T1206] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 602.505616][ T117] rc_core: IR keymap rc-hauppauge not found [ 602.511559][ T117] Registered IR keymap rc-empty [ 602.525855][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 602.545723][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 602.567493][ T117] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 602.568277][T13518] netlink: 'syz.5.2130': attribute type 1 has an invalid length. [ 602.588270][T13518] netlink: 'syz.5.2130': attribute type 4 has an invalid length. [ 602.596066][T13518] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2130'. [ 602.706840][ T117] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 602.723773][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 602.754552][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 602.764538][ T1206] usb 3-1: Using ep0 maxpacket: 32 [ 602.899205][ T1206] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 602.900084][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.103089][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 603.135599][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 603.145372][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 603.145706][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.197772][ T1206] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 603.208883][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.226562][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.278584][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 603.686058][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.067794][ T1206] usb 3-1: string descriptor 0 read error: -71 [ 604.074129][ T1206] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 604.083633][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.096677][ T1206] usb 3-1: config 0 descriptor?? [ 604.102129][ T1206] usb 3-1: can't set config #0, error -71 [ 604.107964][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.109284][ T1206] usb 3-1: USB disconnect, device number 53 [ 604.135507][ T117] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 604.187462][ T30] audit: type=1326 audit(1752036120.669:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13542 comm="syz.4.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec2d8e929 code=0x7ffc0000 [ 604.196907][ T117] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 604.266946][ T30] audit: type=1326 audit(1752036120.699:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13542 comm="syz.4.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec2d8e929 code=0x7ffc0000 [ 604.291019][ T30] audit: type=1326 audit(1752036120.699:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13542 comm="syz.4.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feec2d8e929 code=0x7ffc0000 [ 604.335641][ T30] audit: type=1326 audit(1752036120.699:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13542 comm="syz.4.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feec2d8e929 code=0x7ffc0000 [ 604.359497][ T117] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 604.489749][ T117] usb 5-1: USB disconnect, device number 38 [ 605.245027][T13558] overlayfs: failed to clone upperpath [ 605.307633][T13557] netlink: 'syz.4.2139': attribute type 1 has an invalid length. [ 605.315891][T13557] netlink: 'syz.4.2139': attribute type 4 has an invalid length. [ 605.323685][T13557] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2139'. [ 605.473669][T13568] netlink: 'syz.0.2144': attribute type 1 has an invalid length. [ 605.783551][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 605.783588][ T30] audit: type=1400 audit(1752036122.259:5402): avc: denied { mount } for pid=13564 comm="syz.2.2145" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 605.784534][T13568] netlink: 'syz.0.2144': attribute type 4 has an invalid length. [ 605.825613][T13568] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2144'. [ 605.845672][ T30] audit: type=1400 audit(1752036122.279:5403): avc: denied { remount } for pid=13564 comm="syz.2.2145" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 606.105894][ T117] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 606.327176][ T117] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 606.344688][ T117] usb 3-1: config 0 has no interface number 0 [ 606.350903][ T117] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 606.365501][ T117] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 606.374777][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.386627][ T117] usb 3-1: config 0 descriptor?? [ 606.412776][ T117] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input32 [ 606.601901][ T117] usb 3-1: USB disconnect, device number 54 [ 607.254687][ T30] audit: type=1400 audit(1752036123.719:5404): avc: denied { unmount } for pid=5836 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 607.618379][T13602] FAULT_INJECTION: forcing a failure. [ 607.618379][T13602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.631558][T13602] CPU: 0 UID: 0 PID: 13602 Comm: syz.0.2155 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 607.631581][T13602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 607.631592][T13602] Call Trace: [ 607.631600][T13602] [ 607.631607][T13602] dump_stack_lvl+0x16c/0x1f0 [ 607.631637][T13602] should_fail_ex+0x512/0x640 [ 607.631665][T13602] _copy_from_user+0x2e/0xd0 [ 607.631690][T13602] copy_msghdr_from_user+0x98/0x160 [ 607.631714][T13602] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 607.631741][T13602] ? __lock_acquire+0xb8a/0x1c90 [ 607.631764][T13602] ___sys_sendmsg+0xfe/0x1d0 [ 607.631788][T13602] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.631809][T13602] ? __lock_acquire+0x622/0x1c90 [ 607.631856][T13602] __sys_sendmsg+0x16d/0x220 [ 607.631879][T13602] ? __pfx___sys_sendmsg+0x10/0x10 [ 607.631919][T13602] do_syscall_64+0xcd/0x4c0 [ 607.631944][T13602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.631962][T13602] RIP: 0033:0x7fd00598e929 [ 607.631977][T13602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.631993][T13602] RSP: 002b:00007fd0037b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.632010][T13602] RAX: ffffffffffffffda RBX: 00007fd005bb6160 RCX: 00007fd00598e929 [ 607.632022][T13602] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000008 [ 607.632032][T13602] RBP: 00007fd0037b4090 R08: 0000000000000000 R09: 0000000000000000 [ 607.632043][T13602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.632053][T13602] R13: 0000000000000000 R14: 00007fd005bb6160 R15: 00007ffc9fae3b68 [ 607.632077][T13602] [ 608.473181][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.622368][ T30] audit: type=1400 audit(1752036125.099:5405): avc: denied { connect } for pid=13604 comm="syz.1.2157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 609.505860][ T30] audit: type=1400 audit(1752036125.859:5406): avc: denied { create } for pid=13626 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 609.821813][ T30] audit: type=1400 audit(1752036125.859:5407): avc: denied { setopt } for pid=13626 comm="syz.0.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 609.982208][ T30] audit: type=1400 audit(1752036126.459:5408): avc: denied { ioctl } for pid=13634 comm="syz.2.2163" path="socket:[39559]" dev="sockfs" ino=39559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 610.165747][ T5940] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 610.501150][ T5940] usb 1-1: Using ep0 maxpacket: 16 [ 610.511471][ T117] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 610.531347][ T5940] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 610.582200][ T5940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 610.677335][ T5940] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 610.686565][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.694567][ T5940] usb 1-1: Product: syz [ 610.698809][ T5940] usb 1-1: Manufacturer: syz [ 610.703415][ T5940] usb 1-1: SerialNumber: syz [ 610.710196][ T5940] usb 1-1: config 0 descriptor?? [ 610.717503][ T5940] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 610.775624][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.787109][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.798057][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 610.807152][ T5940] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 610.814207][ T117] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 610.931413][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.096497][ T117] usb 3-1: config 0 descriptor?? [ 611.310208][ T117] usbhid 3-1:0.0: can't add hid device: -71 [ 611.318505][ T117] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 611.328476][ T117] usb 3-1: USB disconnect, device number 55 [ 611.334873][ T5940] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 611.345807][T13633] program syz.0.2164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 611.346668][ T5940] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 611.801387][ T5940] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 611.810873][ T5940] em28xx 1-1:0.0: No AC97 audio processor [ 611.824028][ T5940] usb 1-1: USB disconnect, device number 52 [ 611.831493][ T5940] em28xx 1-1:0.0: Disconnecting em28xx [ 611.841979][ T5940] em28xx 1-1:0.0: Freeing device [ 611.895704][ T117] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 612.067286][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 612.078622][ T117] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.088493][ T117] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 612.097656][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.108271][ T117] usb 3-1: config 0 descriptor?? [ 612.114415][ T117] hub 3-1:0.0: USB hub found [ 612.180354][T13657] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2172'. [ 612.425115][ T117] hub 3-1:0.0: 1 port detected [ 613.151541][T13666] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 613.165355][T13666] Error validating options; rc = [-22] [ 614.054661][ T117] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 614.064094][ T117] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 614.081908][ T117] usbhid 3-1:0.0: can't add hid device: -32 [ 614.088540][ T117] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 614.983343][T13665] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 615.180409][T13675] 9pnet_fd: Insufficient options for proto=fd [ 615.367124][ T30] audit: type=1326 audit(1752036131.849:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13684 comm="syz.1.2181" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x0 [ 615.467429][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2182'. [ 615.502834][ T30] audit: type=1400 audit(1752036131.969:5410): avc: denied { cmd } for pid=13689 comm="syz.0.2184" path="socket:[40096]" dev="sockfs" ino=40096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 615.507594][ T5950] usb 3-1: USB disconnect, device number 56 [ 615.548800][T13691] ip6gre1: entered promiscuous mode [ 615.702118][T13706] netlink: 'syz.5.2187': attribute type 21 has an invalid length. [ 615.880163][ T5950] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 615.915751][ T1206] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 616.055931][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 616.086990][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.098254][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.131232][ T1206] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 616.145583][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 616.160894][ T1206] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.235602][ T1206] usb 5-1: config 0 has no interfaces? [ 616.241211][ T5950] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 616.273116][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.282623][ T1206] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 616.297588][ T5950] usb 3-1: config 0 descriptor?? [ 616.303070][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.345977][ T1206] usb 5-1: Product: syz [ 616.350253][ T1206] usb 5-1: Manufacturer: syz [ 616.354962][ T1206] usb 5-1: SerialNumber: syz [ 616.377361][T13730] netlink: 'syz.0.2195': attribute type 1 has an invalid length. [ 616.378680][ T1206] usb 5-1: config 0 descriptor?? [ 616.390705][T13730] netlink: 'syz.0.2195': attribute type 4 has an invalid length. [ 616.416125][T13730] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2195'. [ 616.741900][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.762133][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.778633][ T117] usb 5-1: USB disconnect, device number 39 [ 616.785678][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.853057][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.874948][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.896117][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.913317][ T5950] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 616.929080][ T5950] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 616.955796][ T5950] microsoft 0003:045E:07DA.0018: no inputs found [ 616.977383][ T5950] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 617.035227][ T5950] usb 3-1: USB disconnect, device number 57 [ 617.231873][T13749] pimreg: entered allmulticast mode [ 618.265719][ T5950] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 618.571540][ T5950] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 618.966429][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.991383][ T30] audit: type=1400 audit(1752036135.469:5411): avc: denied { setcurrent } for pid=13769 comm="syz.0.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 619.000702][ T5950] usb 3-1: config 0 descriptor?? [ 619.134852][ T30] audit: type=1401 audit(1752036135.499:5412): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 619.265643][ T30] audit: type=1400 audit(1752036135.739:5413): avc: denied { write } for pid=13766 comm="syz.2.2209" path="socket:[40971]" dev="sockfs" ino=40971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 619.650045][ T30] audit: type=1400 audit(1752036136.129:5414): avc: denied { bind } for pid=13789 comm="syz.5.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 619.703875][T13790] 9p: Unknown access argument (: -22 [ 619.793071][T13790] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2216'. [ 619.843300][T13790] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2216'. [ 619.889378][ T30] audit: type=1400 audit(1752036136.369:5415): avc: denied { write } for pid=13789 comm="syz.5.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 619.893459][ T5950] usb 3-1: Cannot set autoneg [ 619.914082][ T5950] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 619.945476][ T5950] usb 3-1: USB disconnect, device number 58 [ 619.987089][ T30] audit: type=1400 audit(1752036136.469:5416): avc: denied { map } for pid=13792 comm="syz.4.2217" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 620.049559][ T30] audit: type=1400 audit(1752036136.529:5417): avc: denied { call } for pid=13792 comm="syz.4.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 620.068892][T13793] binder: 13792:13793 ioctl c0306201 200000000280 returned -14 [ 621.741836][T13807] ucma_write: process 1270 (syz.2.2222) changed security contexts after opening file descriptor, this is not allowed. [ 623.701118][ T30] audit: type=1400 audit(1752036140.069:5418): avc: denied { connect } for pid=13817 comm="syz.4.2226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 623.908343][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.914695][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.626828][ T5950] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 624.717165][ T30] audit: type=1400 audit(1752036141.199:5419): avc: denied { write } for pid=13834 comm="syz.1.2231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 624.794289][T13839] binder: Bad value for 'max' [ 624.825625][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 624.973065][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.984125][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.994209][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 626.136325][ T5950] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 626.260570][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.274320][ T5950] usb 3-1: config 0 descriptor?? [ 626.292641][T12322] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 626.370780][ T30] audit: type=1400 audit(1752036142.849:5420): avc: denied { write } for pid=13852 comm="syz.5.2236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 627.035584][ T5950] microsoft 0003:045E:07DA.0019: collection stack underflow [ 627.058235][ T5950] microsoft 0003:045E:07DA.0019: item 0 4 0 12 parsing failed [ 627.077437][ T5950] microsoft 0003:045E:07DA.0019: parse failed [ 627.090427][ T5950] microsoft 0003:045E:07DA.0019: probe with driver microsoft failed with error -22 [ 627.935495][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 628.039021][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 628.965648][ T5950] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 629.254906][ T30] audit: type=1400 audit(1752036145.729:5421): avc: denied { mount } for pid=13902 comm="syz.1.2250" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 629.285437][ T5883] usb 3-1: USB disconnect, device number 59 [ 629.403921][ T5950] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 629.430317][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.657841][ T30] audit: type=1400 audit(1752036145.989:5422): avc: denied { getopt } for pid=13908 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 629.786326][ T5950] usb 1-1: config 0 descriptor?? [ 630.934908][T13933] comedi comedi0: dt2817: I/O port conflict (0x4,5) [ 631.136779][ T5950] usb 1-1: Cannot set autoneg [ 631.141614][ T5950] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 631.156740][T13937] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2259'. [ 631.193134][ T5950] usb 1-1: USB disconnect, device number 53 [ 631.865373][ T30] audit: type=1400 audit(1752036148.339:5423): avc: granted { setsecparam } for pid=13951 comm="syz.0.2264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 631.977103][ T5950] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 632.521054][ T5950] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 632.542408][ T5950] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 632.562141][ T5950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 632.578648][ T5950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 632.597382][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.645395][ T5950] usb 3-1: Product: syz [ 632.649907][ T5950] usb 3-1: Manufacturer: syz [ 632.655096][ T5950] usb 3-1: SerialNumber: syz [ 632.905419][T13964] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2268'. [ 634.795638][ T117] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 634.913757][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2273'. [ 635.628125][ T5950] usb 3-1: 0:2 : does not exist [ 635.657264][ T5950] usb 3-1: USB disconnect, device number 60 [ 635.706909][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.734509][ T117] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.784674][T13993] tipc: Started in network mode [ 635.789682][T13993] tipc: Node identity ba10ac6b04a5, cluster identity 4711 [ 635.797560][T13993] tipc: Enabled bearer , priority 0 [ 635.810559][T13993] syzkaller0: entered promiscuous mode [ 635.816123][T13993] syzkaller0: entered allmulticast mode [ 635.908448][ T117] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 635.988825][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.017037][ T117] usb 1-1: config 0 descriptor?? [ 636.253348][ T5950] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 636.678606][T14006] lo speed is unknown, defaulting to 1000 [ 636.933553][ T30] audit: type=1400 audit(1752036152.859:5424): avc: denied { connect } for pid=13998 comm="syz.5.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 636.955243][ T5826] tipc: Node number set to 3199577195 [ 637.021824][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 637.032662][ T5950] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 637.053650][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.067078][ T117] hid-led 0003:27B8:01ED.001A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0 [ 637.082272][T13988] tipc: Resetting bearer [ 637.181196][ T117] hid-led 0003:27B8:01ED.001A: ThingM blink(1) v1 initialized [ 637.226796][T13988] tipc: Disabling bearer [ 637.244538][ T5950] usb 5-1: config 0 descriptor?? [ 637.255084][ T30] audit: type=1400 audit(1752036153.739:5425): avc: denied { write } for pid=14008 comm="syz.5.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 637.274533][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.282564][ T5950] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 637.419491][ T117] usb 1-1: USB disconnect, device number 54 [ 637.796474][ T5950] gspca_nw80x: reg_w err -110 [ 637.802943][ T5950] nw80x 5-1:0.0: probe with driver nw80x failed with error -110 [ 637.913750][T13996] sp0: Synchronizing with TNC [ 637.933244][T13996] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2277'. [ 638.215289][T14022] can0: slcan on ptm1. [ 639.274797][ T30] audit: type=1400 audit(1752036154.839:5426): avc: denied { bind } for pid=14018 comm="syz.0.2284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 639.417663][ T30] audit: type=1400 audit(1752036154.899:5427): avc: denied { ioctl } for pid=14018 comm="syz.0.2284" path="socket:[41342]" dev="sockfs" ino=41342 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 639.527271][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2285'. [ 639.573691][ T5940] usb 5-1: USB disconnect, device number 40 [ 639.629012][T14033] erspan0: entered promiscuous mode [ 639.716559][T14018] can0 (unregistered): slcan off ptm1. [ 639.914934][ T30] audit: type=1400 audit(1752036156.389:5428): avc: denied { accept } for pid=14045 comm="syz.0.2291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 640.237188][T14055] xt_l2tp: missing protocol rule (udp|l2tpip) [ 640.447313][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 640.456532][T14059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2295'. [ 640.501482][T14059] 9pnet_virtio: no channels available for device syz [ 641.727341][T14067] trusted_key: encrypted_key: insufficient parameters specified [ 641.927502][ T30] audit: type=1400 audit(1752036158.409:5429): avc: denied { relabelfrom } for pid=14068 comm="syz.2.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 641.975769][ T5950] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 641.999429][ T30] audit: type=1400 audit(1752036158.409:5430): avc: denied { relabelto } for pid=14068 comm="syz.2.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 642.233778][ T5950] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 642.246284][ T5950] usb 5-1: config 0 has no interface number 0 [ 642.305072][ T5950] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 642.356879][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.381048][ T5950] usb 5-1: config 0 descriptor?? [ 642.398844][ T5950] usb 5-1: selecting invalid altsetting 1 [ 642.416474][ T5950] dvb_ttusb_budget: ttusb_init_controller: error [ 642.423070][ T5950] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 642.700166][T14083] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[14083] [ 643.072233][ T30] audit: type=1400 audit(1752036159.169:5431): avc: denied { append } for pid=14065 comm="syz.4.2297" name="i2c-1" dev="devtmpfs" ino=3322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 643.106366][T14079] netlink: 'syz.1.2303': attribute type 3 has an invalid length. [ 643.260429][ T5950] DVB: Unable to find symbol cx22700_attach() [ 643.441654][ T30] audit: type=1400 audit(1752036159.899:5432): avc: denied { ioctl } for pid=14090 comm="syz.0.2306" path="socket:[41567]" dev="sockfs" ino=41567 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 643.467718][ T5950] DVB: Unable to find symbol tda10046_attach() [ 643.690023][ T5950] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 643.761090][ T5950] usb 5-1: USB disconnect, device number 41 [ 643.866330][ T30] audit: type=1400 audit(1752036160.339:5433): avc: denied { connect } for pid=14098 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 643.903540][T14100] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2308'. [ 643.937553][ T30] audit: type=1400 audit(1752036160.399:5434): avc: denied { bind } for pid=14098 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 643.972258][T14101] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 644.030191][ T30] audit: type=1400 audit(1752036160.399:5435): avc: denied { listen } for pid=14098 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 644.092628][ T30] audit: type=1400 audit(1752036160.399:5436): avc: denied { accept } for pid=14098 comm="syz.4.2309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 644.460326][ T30] audit: type=1400 audit(1752036160.939:5437): avc: denied { watch } for pid=14108 comm="syz.1.2313" path="/528" dev="tmpfs" ino=2820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 645.211016][ T30] audit: type=1400 audit(1752036161.689:5438): avc: denied { ioctl } for pid=14118 comm="syz.0.2316" path="socket:[42083]" dev="sockfs" ino=42083 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 645.416936][T14126] x_tables: duplicate underflow at hook 2 [ 645.425924][T12322] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 646.138421][T14132] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2319'. [ 646.155954][ T5950] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 647.075747][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 647.090832][ T5950] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 647.132538][ T5950] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 647.153376][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.167541][T14123] MPI: mpi too large (187712 bits) [ 647.175176][ T5950] usb 5-1: Product: syz [ 647.202345][ T5950] usb 5-1: Manufacturer: syz [ 647.211679][ T5950] usb 5-1: SerialNumber: syz [ 647.253838][ T5950] usb 5-1: config 0 descriptor?? [ 647.474026][ T117] usb 5-1: USB disconnect, device number 42 [ 647.778798][T12322] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 649.562926][ T30] audit: type=1400 audit(1752036166.039:5439): avc: denied { create } for pid=14151 comm="syz.1.2327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 650.647752][ T30] audit: type=1400 audit(1752036166.039:5440): avc: denied { mount } for pid=14151 comm="syz.1.2327" name="/" dev="configfs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 650.742870][T14152] lo speed is unknown, defaulting to 1000 [ 650.965754][ T117] usb 3-1: new low-speed USB device number 61 using dummy_hcd [ 651.015618][ T5950] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 651.085063][ T30] audit: type=1400 audit(1752036167.559:5441): avc: denied { getopt } for pid=14179 comm="syz.0.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 651.139744][ T117] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 651.164430][ T117] usb 3-1: config 0 has no interface number 0 [ 651.197277][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.211071][ T117] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 651.274926][ T117] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 651.333722][ T117] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 651.393954][ T117] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.411535][ T117] usb 3-1: config 0 descriptor?? [ 651.426428][T14170] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 651.457707][ T117] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 651.605791][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 651.651001][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 651.685845][ T30] audit: type=1400 audit(1752036168.149:5442): avc: denied { remount } for pid=14186 comm="syz.0.2336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 651.687932][ T117] usb 3-1: USB disconnect, device number 61 [ 651.721905][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 651.755591][ T5950] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.764756][ T30] audit: type=1400 audit(1752036168.219:5443): avc: denied { read } for pid=14184 comm="syz.1.2335" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 651.800795][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.902909][ T5950] usb 5-1: config 0 descriptor?? [ 651.923351][T14174] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 652.341995][ T5950] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 652.357788][ T5950] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 652.374465][ T5950] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 652.392385][ T5950] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 652.407647][ T5950] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 652.435240][ T5950] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 652.479754][ T30] audit: type=1400 audit(1752036168.959:5444): avc: denied { append } for pid=14192 comm="syz.2.2337" name="event3" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 652.552563][ T117] usb 5-1: USB disconnect, device number 43 [ 653.195749][ T5950] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 653.434842][T14211] overlayfs: failed to clone upperpath [ 653.477968][ T5950] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 653.486920][ T5950] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 653.497319][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.508711][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.518738][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.526902][ T5950] usb 1-1: Product: syz [ 653.529127][ T59] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x1b [ 653.531211][ T5950] usb 1-1: Manufacturer: syz [ 653.567441][ T5950] usb 1-1: SerialNumber: syz [ 653.973976][ T30] audit: type=1400 audit(1752036170.449:5445): avc: denied { mount } for pid=14218 comm="syz.4.2345" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 654.029566][T14219] input: syz0 as /devices/virtual/input/input35 [ 654.076872][T14220] netlink: 'syz.4.2345': attribute type 25 has an invalid length. [ 654.091414][T14220] netlink: 'syz.4.2345': attribute type 9 has an invalid length. [ 654.239156][ T30] audit: type=1400 audit(1752036170.719:5446): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 654.504342][T14232] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=82 sclass=netlink_tcpdiag_socket pid=14232 comm=syz.4.2350 [ 655.427389][T14247] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 656.065797][ T1206] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 656.072552][T12322] Bluetooth: hci0: command 0x0406 tx timeout [ 656.095004][ T1206] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 656.511250][ T5950] usb 1-1: 0:2 : does not exist [ 656.550948][ T5950] usb 1-1: USB disconnect, device number 55 [ 656.975840][ T5950] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 657.135255][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 657.142043][ T5950] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 657.160422][ T5950] usb 1-1: config 0 has no interface number 0 [ 657.190741][ T5950] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 657.201603][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.229141][ T5950] usb 1-1: Product: syz [ 657.236787][ T5950] usb 1-1: Manufacturer: syz [ 657.252487][ T5950] usb 1-1: SerialNumber: syz [ 657.335886][ T5950] usb 1-1: config 0 descriptor?? [ 657.754638][T14276] tmpfs: Unknown parameter 'Zsrquota_block_hardlimit' [ 657.859195][T14278] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2365'. [ 657.915630][T14278] macvlan0: entered promiscuous mode [ 657.939471][T14278] netlink: 'syz.1.2365': attribute type 1 has an invalid length. [ 657.962070][T14278] netlink: 'syz.1.2365': attribute type 2 has an invalid length. [ 657.978888][ T30] audit: type=1400 audit(1752036174.459:5447): avc: denied { read } for pid=14279 comm="syz.4.2366" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 658.016057][T14281] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 658.037633][ T30] audit: type=1400 audit(1752036174.459:5448): avc: denied { open } for pid=14279 comm="syz.4.2366" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 658.392571][ T5950] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 658.399561][ T5950] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 658.410487][ T5950] usb 1-1: USB disconnect, device number 56 [ 658.466073][T12322] Bluetooth: hci1: command 0x0406 tx timeout [ 658.472180][ T1206] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 658.479061][ T1206] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 658.622875][T14297] lo speed is unknown, defaulting to 1000 [ 658.727544][ T30] audit: type=1400 audit(1752036175.149:5449): avc: denied { create } for pid=14296 comm="syz.1.2371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 659.645593][ T5940] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 660.333161][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short [ 660.353247][ T5940] usb 1-1: not running at top speed; connect to a high speed hub [ 660.362646][ T5940] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 660.371011][ T5940] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 660.381632][ T5940] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 660.390946][ T5940] usb 1-1: config 2 has no interface number 0 [ 660.397493][ T5940] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 660.408739][ T5940] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 660.420121][ T5940] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 660.431670][ T5940] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 660.442644][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.450753][ T5940] usb 1-1: Product: syz [ 660.454938][ T5940] usb 1-1: Manufacturer: syz [ 660.459636][ T5940] usb 1-1: SerialNumber: syz [ 660.545718][T12322] Bluetooth: hci4: command 0x0406 tx timeout [ 660.545941][ T1206] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 660.563057][ T1206] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 660.775031][ T5940] usb 1-1: USB disconnect, device number 57 [ 661.603944][ T30] audit: type=1400 audit(1752036178.079:5450): avc: denied { remount } for pid=14354 comm="syz.1.2388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 661.816757][ T30] audit: type=1400 audit(1752036178.299:5451): avc: denied { setopt } for pid=14360 comm="syz.5.2391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 661.871813][T14363] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2392'. [ 662.049893][T14367] xt_l2tp: v2 doesn't support IP mode [ 662.180981][ T30] audit: type=1326 audit(1752036178.659:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 662.208563][ T30] audit: type=1326 audit(1752036178.659:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 662.264952][ T30] audit: type=1326 audit(1752036178.689:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 662.290971][ T30] audit: type=1326 audit(1752036178.689:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 662.315434][ T30] audit: type=1326 audit(1752036178.689:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.1.2395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 662.443685][T14379] netlink: 'syz.5.2397': attribute type 1 has an invalid length. [ 662.454230][T14379] netlink: 'syz.5.2397': attribute type 4 has an invalid length. [ 662.462858][T14379] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2397'. [ 662.625691][T12322] Bluetooth: hci3: command 0x0406 tx timeout [ 662.631541][ T1206] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 662.638787][ T1206] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 662.755181][T14386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 663.295261][T14388] x_tables: duplicate underflow at hook 1 [ 663.525453][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 663.525470][ T30] audit: type=1800 audit(1752036179.999:5494): pid=14401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2406" name="nullb0" dev="tmpfs" ino=1329 res=0 errno=0 [ 663.532120][T14400] batadv_slave_1: entered promiscuous mode [ 663.570086][T14400] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2405'. [ 663.580792][T14399] batadv_slave_1: left promiscuous mode [ 665.879224][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2421'. [ 665.891241][T14440] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.900068][T14440] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.908794][T14440] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.917772][T14440] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 665.928729][T14440] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.937640][T14440] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.946501][T14440] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.955352][T14440] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 668.142137][ T30] audit: type=1400 audit(1752036184.619:5495): avc: denied { create } for pid=14467 comm="syz.5.2431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 668.169656][ T30] audit: type=1400 audit(1752036184.639:5496): avc: denied { sys_admin } for pid=14467 comm="syz.5.2431" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 669.224303][T14491] 9pnet_fd: Insufficient options for proto=fd [ 669.691466][ T30] audit: type=1326 audit(1752036186.169:5497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.716147][ T30] audit: type=1326 audit(1752036186.169:5498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.756911][ T30] audit: type=1326 audit(1752036186.169:5499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.780901][ T30] audit: type=1326 audit(1752036186.169:5500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.811427][ T30] audit: type=1326 audit(1752036186.169:5501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.835470][ T30] audit: type=1326 audit(1752036186.169:5502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.859059][ T30] audit: type=1326 audit(1752036186.169:5503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.882755][ T30] audit: type=1326 audit(1752036186.169:5504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.906968][ T30] audit: type=1326 audit(1752036186.169:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 669.948535][ T30] audit: type=1326 audit(1752036186.169:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14507 comm="syz.1.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e5b58e929 code=0x7ffc0000 [ 671.018883][T14520] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 672.441341][T14540] cgroup: Name too long [ 673.051819][T14547] PID 14547 killed due to inadequate hugepage pool [ 673.139666][T14547] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2458'. [ 673.149160][T14547] netlink: 'syz.5.2458': attribute type 2 has an invalid length. [ 673.156924][T14547] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2458'. [ 676.258437][T14583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.348472][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.354773][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.787864][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.794169][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.227945][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.234261][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.555620][ T31] INFO: task kworker/1:2:1206 blocked for more than 143 seconds. [ 816.563384][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 816.571233][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.580052][ T31] task:kworker/1:2 state:D stack:23528 pid:1206 tgid:1206 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 816.592314][ T31] Workqueue: events rfkill_op_handler [ 816.597893][ T31] Call Trace: [ 816.601164][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 816.604080][ T31] __schedule+0x116a/0x5de0 [ 816.608809][ T31] ? __lock_acquire+0x622/0x1c90 [ 816.613770][ T31] ? __pfx___schedule+0x10/0x10 [ 816.615909][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 816.615920][ T30] audit: type=1400 audit(1752036333.089:5546): avc: denied { write } for pid=5814 comm="syz-executor" path="pipe:[4266]" dev="pipefs" ino=4266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 816.619251][ T31] ? find_held_lock+0x2b/0x80 [ 816.665277][ T31] ? schedule+0x2d7/0x3a0 [ 816.695151][ T31] schedule+0xe7/0x3a0 [ 816.711112][ T31] schedule_preempt_disabled+0x13/0x30 [ 816.717559][ T31] __mutex_lock+0x6c7/0xb90 [ 816.722078][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 816.726711][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 816.731739][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 816.736838][ T31] ? netif_close+0xa2/0x230 [ 816.741339][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 816.746440][ T31] ? nfc_dev_down+0x2d/0x2e0 [ 816.751033][ T31] nfc_dev_down+0x2d/0x2e0 [ 816.755517][ T31] nfc_rfkill_set_block+0x39/0xe0 [ 816.760549][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 816.766283][ T31] rfkill_set_block+0x1fb/0x550 [ 816.771131][ T31] rfkill_epo+0x8e/0x1d0 [ 816.775353][ T31] rfkill_op_handler+0x262/0x280 [ 816.780364][ T31] process_one_work+0x9cf/0x1b70 [ 816.785305][ T31] ? __pfx_process_one_work+0x10/0x10 [ 816.790876][ T31] ? assign_work+0x1a0/0x250 [ 816.795680][ T31] worker_thread+0x6c8/0xf10 [ 816.800277][ T31] ? __kthread_parkme+0x19e/0x250 [ 816.805285][ T31] ? __pfx_worker_thread+0x10/0x10 [ 816.810542][ T31] kthread+0x3c5/0x780 [ 816.814615][ T31] ? __pfx_kthread+0x10/0x10 [ 816.819783][ T31] ? rcu_is_watching+0x12/0xc0 [ 816.824556][ T31] ? __pfx_kthread+0x10/0x10 [ 816.829412][ T31] ret_from_fork+0x5d7/0x6f0 [ 816.834008][ T31] ? __pfx_kthread+0x10/0x10 [ 816.838619][ T31] ret_from_fork_asm+0x1a/0x30 [ 816.843409][ T31] [ 816.846596][ T31] INFO: task kworker/1:3:5826 blocked for more than 143 seconds. [ 816.854305][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 816.861954][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.870716][ T31] task:kworker/1:3 state:D stack:22904 pid:5826 tgid:5826 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 816.887186][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 816.893897][ T31] Call Trace: [ 816.897392][ T31] [ 816.900319][ T31] __schedule+0x116a/0x5de0 [ 816.905074][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 816.910055][ T31] ? __pfx___schedule+0x10/0x10 [ 816.914921][ T31] ? find_held_lock+0x2b/0x80 [ 816.919659][ T31] ? schedule+0x2d7/0x3a0 [ 816.923987][ T31] schedule+0xe7/0x3a0 [ 816.928245][ T31] schedule_preempt_disabled+0x13/0x30 [ 816.933710][ T31] __mutex_lock+0x6c7/0xb90 [ 816.939016][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 816.945360][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 816.950407][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 816.956302][ T31] ? finish_task_switch.isra.0+0x221/0xc10 [ 816.962133][ T31] ? rfkill_global_led_trigger_worker+0x1b/0x160 [ 816.968496][ T31] rfkill_global_led_trigger_worker+0x1b/0x160 [ 816.974654][ T31] process_one_work+0x9cf/0x1b70 [ 816.979657][ T31] ? __pfx_process_one_work+0x10/0x10 [ 816.985035][ T31] ? assign_work+0x1a0/0x250 [ 816.989641][ T31] worker_thread+0x6c8/0xf10 [ 816.994232][ T31] ? __kthread_parkme+0x19e/0x250 [ 816.999320][ T31] ? __pfx_worker_thread+0x10/0x10 [ 817.004443][ T31] kthread+0x3c5/0x780 [ 817.008696][ T31] ? __pfx_kthread+0x10/0x10 [ 817.013282][ T31] ? rcu_is_watching+0x12/0xc0 [ 817.018167][ T31] ? __pfx_kthread+0x10/0x10 [ 817.022758][ T31] ret_from_fork+0x5d7/0x6f0 [ 817.027551][ T31] ? __pfx_kthread+0x10/0x10 [ 817.032140][ T31] ret_from_fork_asm+0x1a/0x30 [ 817.036973][ T31] [ 817.040034][ T31] INFO: task syz.2.2343:14208 blocked for more than 143 seconds. [ 817.050760][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 817.058477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.067271][ T31] task:syz.2.2343 state:D stack:26280 pid:14208 tgid:14208 ppid:5836 task_flags:0x400040 flags:0x00004006 [ 817.079244][ T31] Call Trace: [ 817.082515][ T31] [ 817.085534][ T31] __schedule+0x116a/0x5de0 [ 817.090518][ T31] ? __pfx___schedule+0x10/0x10 [ 817.095375][ T31] ? find_held_lock+0x2b/0x80 [ 817.100110][ T31] ? schedule+0x2d7/0x3a0 [ 817.104440][ T31] schedule+0xe7/0x3a0 [ 817.108598][ T31] schedule_preempt_disabled+0x13/0x30 [ 817.114075][ T31] __mutex_lock+0x6c7/0xb90 [ 817.118634][ T31] ? rfkill_unregister+0xec/0x2c0 [ 817.123656][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 817.128703][ T31] ? device_del+0x6b6/0x9f0 [ 817.133206][ T31] ? __pfx_device_del+0x10/0x10 [ 817.138105][ T31] ? rfkill_unregister+0xec/0x2c0 [ 817.143124][ T31] rfkill_unregister+0xec/0x2c0 [ 817.148093][ T31] nfc_unregister_device+0x94/0x330 [ 817.153295][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 817.159193][ T31] virtual_ncidev_close+0x4b/0xa0 [ 817.164220][ T31] __fput+0x3ff/0xb70 [ 817.168263][ T31] task_work_run+0x14d/0x240 [ 817.172887][ T31] ? __pfx_task_work_run+0x10/0x10 [ 817.178066][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 817.183807][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 817.189351][ T31] do_syscall_64+0x3f6/0x4c0 [ 817.193943][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.199864][ T31] RIP: 0033:0x7f19c7b8e929 [ 817.204282][ T31] RSP: 002b:00007ffd4a4be528 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 817.212731][ T31] RAX: 0000000000000000 RBX: 00007f19c7db7ba0 RCX: 00007f19c7b8e929 [ 817.220750][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 817.228770][ T31] RBP: 00007f19c7db7ba0 R08: 00000000000001e0 R09: 0000001a4a4be81f [ 817.236761][ T31] R10: 00007f19c7db7ac0 R11: 0000000000000246 R12: 000000000009fb7b [ 817.244718][ T31] R13: 00007f19c7db6160 R14: ffffffffffffffff R15: 00007ffd4a4be640 [ 817.252782][ T31] [ 817.255866][ T31] INFO: task syz.4.2378:14317 blocked for more than 144 seconds. [ 817.263583][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 817.271459][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.280178][ T31] task:syz.4.2378 state:D stack:27880 pid:14317 tgid:14316 ppid:5824 task_flags:0x400040 flags:0x00004004 [ 817.292146][ T31] Call Trace: [ 817.295484][ T31] [ 817.298424][ T31] __schedule+0x116a/0x5de0 [ 817.302944][ T31] ? __lock_acquire+0x622/0x1c90 [ 817.307967][ T31] ? __pfx___schedule+0x10/0x10 [ 817.312836][ T31] ? find_held_lock+0x2b/0x80 [ 817.317576][ T31] ? schedule+0x2d7/0x3a0 [ 817.321913][ T31] schedule+0xe7/0x3a0 [ 817.326045][ T31] schedule_preempt_disabled+0x13/0x30 [ 817.331513][ T31] __mutex_lock+0x6c7/0xb90 [ 817.336087][ T31] ? rfkill_register+0x3a/0xb40 [ 817.340935][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 817.346040][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 817.351416][ T31] ? __init_waitqueue_head+0xca/0x150 [ 817.356848][ T31] ? rfkill_register+0x3a/0xb40 [ 817.361712][ T31] rfkill_register+0x3a/0xb40 [ 817.366418][ T31] nfc_register_device+0x11f/0x3c0 [ 817.371557][ T31] nci_register_device+0x7f1/0xb80 [ 817.376703][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 817.382344][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 817.387792][ T31] virtual_ncidev_open+0x141/0x220 [ 817.392910][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 817.398686][ T31] misc_open+0x35d/0x420 [ 817.402929][ T31] ? __pfx_misc_open+0x10/0x10 [ 817.407732][ T31] chrdev_open+0x234/0x6a0 [ 817.412157][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 817.417154][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 817.423924][ T31] do_dentry_open+0x744/0x1c10 [ 817.428872][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 817.433840][ T31] vfs_open+0x82/0x3f0 [ 817.437966][ T31] path_openat+0x1de4/0x2cb0 [ 817.442597][ T31] ? __pfx_path_openat+0x10/0x10 [ 817.447609][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 817.452557][ T31] do_filp_open+0x20b/0x470 [ 817.457126][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 817.462253][ T31] ? alloc_fd+0x471/0x7d0 [ 817.466668][ T31] do_sys_openat2+0x11b/0x1d0 [ 817.471344][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 817.476571][ T31] ? find_held_lock+0x2b/0x80 [ 817.481254][ T31] ? handle_mm_fault+0x2ab/0xd10 [ 817.486241][ T31] __x64_sys_openat+0x174/0x210 [ 817.491114][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 817.496547][ T31] ? do_user_addr_fault+0x843/0x1370 [ 817.501856][ T31] do_syscall_64+0xcd/0x4c0 [ 817.506461][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.512351][ T31] RIP: 0033:0x7feec2d8e929 [ 817.516803][ T31] RSP: 002b:00007feec3c86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 817.525213][ T31] RAX: ffffffffffffffda RBX: 00007feec2fb5fa0 RCX: 00007feec2d8e929 [ 817.533219][ T31] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 817.541251][ T31] RBP: 00007feec2e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 817.549279][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.557285][ T31] R13: 0000000000000001 R14: 00007feec2fb5fa0 R15: 00007ffd923336e8 [ 817.565277][ T31] [ 817.568373][ T31] INFO: task syz.0.2383:14344 blocked for more than 144 seconds. [ 817.576143][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 817.583770][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.592678][ T31] task:syz.0.2383 state:D stack:28888 pid:14344 tgid:14342 ppid:5827 task_flags:0x400040 flags:0x00004004 [ 817.604661][ T31] Call Trace: [ 817.607989][ T31] [ 817.610919][ T31] __schedule+0x116a/0x5de0 [ 817.615470][ T31] ? __lock_acquire+0x622/0x1c90 [ 817.620413][ T31] ? __pfx___schedule+0x10/0x10 [ 817.625266][ T31] ? find_held_lock+0x2b/0x80 [ 817.630017][ T31] ? schedule+0x2d7/0x3a0 [ 817.634348][ T31] schedule+0xe7/0x3a0 [ 817.638459][ T31] schedule_preempt_disabled+0x13/0x30 [ 817.643923][ T31] __mutex_lock+0x6c7/0xb90 [ 817.648490][ T31] ? misc_open+0x63/0x420 [ 817.652821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 817.657868][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 817.662892][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 817.673719][ T31] ? __pfx_misc_open+0x10/0x10 [ 817.678540][ T31] ? misc_open+0x63/0x420 [ 817.682871][ T31] misc_open+0x63/0x420 [ 817.687077][ T31] ? __pfx_misc_open+0x10/0x10 [ 817.691840][ T31] chrdev_open+0x234/0x6a0 [ 817.696296][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 817.701238][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 817.708107][ T31] do_dentry_open+0x744/0x1c10 [ 817.712882][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 817.717862][ T31] vfs_open+0x82/0x3f0 [ 817.721938][ T31] path_openat+0x1de4/0x2cb0 [ 817.726589][ T31] ? __pfx_path_openat+0x10/0x10 [ 817.731544][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 817.736533][ T31] do_filp_open+0x20b/0x470 [ 817.741041][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 817.746181][ T31] ? alloc_fd+0x471/0x7d0 [ 817.750535][ T31] do_sys_openat2+0x11b/0x1d0 [ 817.755206][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 817.760481][ T31] __x64_sys_openat+0x174/0x210 [ 817.765334][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 817.770768][ T31] do_syscall_64+0xcd/0x4c0 [ 817.775285][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.781228][ T31] RIP: 0033:0x7fd00598e929 [ 817.785729][ T31] RSP: 002b:00007fd0037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 817.794140][ T31] RAX: ffffffffffffffda RBX: 00007fd005bb5fa0 RCX: 00007fd00598e929 [ 817.802159][ T31] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 817.810157][ T31] RBP: 00007fd005a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 817.818183][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.826193][ T31] R13: 0000000000000000 R14: 00007fd005bb5fa0 R15: 00007ffc9fae3b68 [ 817.834174][ T31] [ 817.837237][ T31] INFO: task syz.0.2383:14345 blocked for more than 144 seconds. [ 817.844957][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 817.852617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.861344][ T31] task:syz.0.2383 state:D stack:26568 pid:14345 tgid:14342 ppid:5827 task_flags:0x400140 flags:0x00004004 [ 817.873333][ T31] Call Trace: [ 817.876640][ T31] [ 817.879569][ T31] __schedule+0x116a/0x5de0 [ 817.884084][ T31] ? __lock_acquire+0x622/0x1c90 [ 817.889094][ T31] ? __pfx___schedule+0x10/0x10 [ 817.893952][ T31] ? find_held_lock+0x2b/0x80 [ 817.898655][ T31] ? schedule+0x2d7/0x3a0 [ 817.902990][ T31] schedule+0xe7/0x3a0 [ 817.907111][ T31] schedule_preempt_disabled+0x13/0x30 [ 817.912590][ T31] __mutex_lock+0x6c7/0xb90 [ 817.917137][ T31] ? misc_open+0x63/0x420 [ 817.921467][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 817.926558][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 817.931595][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 817.937450][ T31] ? __pfx_misc_open+0x10/0x10 [ 817.942212][ T31] ? misc_open+0x63/0x420 [ 817.946580][ T31] misc_open+0x63/0x420 [ 817.950735][ T31] ? __pfx_misc_open+0x10/0x10 [ 817.955555][ T31] chrdev_open+0x234/0x6a0 [ 817.959991][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 817.964937][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 817.971787][ T31] do_dentry_open+0x744/0x1c10 [ 817.976614][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 817.981557][ T31] vfs_open+0x82/0x3f0 [ 817.985665][ T31] path_openat+0x1de4/0x2cb0 [ 817.990264][ T31] ? __pfx_path_openat+0x10/0x10 [ 817.995188][ T31] ? __lock_acquire+0xb8a/0x1c90 [ 818.000191][ T31] do_filp_open+0x20b/0x470 [ 818.004713][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 818.009812][ T31] ? alloc_fd+0x471/0x7d0 [ 818.014169][ T31] do_sys_openat2+0x11b/0x1d0 [ 818.018922][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 818.024131][ T31] __x64_sys_openat+0x174/0x210 [ 818.029021][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 818.034414][ T31] do_syscall_64+0xcd/0x4c0 [ 818.038971][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.044863][ T31] RIP: 0033:0x7fd00598e929 [ 818.049309][ T31] RSP: 002b:00007fd0037d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 818.057776][ T31] RAX: ffffffffffffffda RBX: 00007fd005bb6080 RCX: 00007fd00598e929 [ 818.065800][ T31] RDX: 0000000000008000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 818.073776][ T31] RBP: 00007fd005a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 818.081805][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.089876][ T31] R13: 0000000000000000 R14: 00007fd005bb6080 R15: 00007ffc9fae3b68 [ 818.097920][ T31] [ 818.100964][ T31] INFO: task syz-executor:14487 blocked for more than 144 seconds. [ 818.109683][ T31] Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 [ 818.117371][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.126070][ T31] task:syz-executor state:D stack:28712 pid:14487 tgid:14487 ppid:1 task_flags:0x400040 flags:0x00004000 [ 818.138059][ T31] Call Trace: [ 818.141330][ T31] [ 818.144251][ T31] __schedule+0x116a/0x5de0 [ 818.148806][ T31] ? __lock_acquire+0x622/0x1c90 [ 818.153786][ T31] ? __pfx___schedule+0x10/0x10 [ 818.158706][ T31] ? find_held_lock+0x2b/0x80 [ 818.163387][ T31] ? schedule+0x2d7/0x3a0 [ 818.167768][ T31] schedule+0xe7/0x3a0 [ 818.171843][ T31] schedule_preempt_disabled+0x13/0x30 [ 818.177334][ T31] __mutex_lock+0x6c7/0xb90 [ 818.181854][ T31] ? misc_open+0x63/0x420 [ 818.186224][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 818.191257][ T31] ? __pfx_avc_has_perm+0x10/0x10 [ 818.196369][ T31] ? kobject_get_unless_zero+0x156/0x1e0 [ 818.202007][ T31] ? __pfx_misc_open+0x10/0x10 [ 818.206796][ T31] ? misc_open+0x63/0x420 [ 818.211135][ T31] misc_open+0x63/0x420 [ 818.215278][ T31] ? __pfx_misc_open+0x10/0x10 [ 818.220060][ T31] chrdev_open+0x234/0x6a0 [ 818.224482][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 818.229672][ T31] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 818.236634][ T31] do_dentry_open+0x744/0x1c10 [ 818.241416][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 818.246389][ T31] vfs_open+0x82/0x3f0 [ 818.250453][ T31] path_openat+0x1de4/0x2cb0 [ 818.255029][ T31] ? __pfx___up_read+0x10/0x10 [ 818.259837][ T31] ? __pfx_path_openat+0x10/0x10 [ 818.264779][ T31] do_filp_open+0x20b/0x470 [ 818.269363][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 818.274408][ T31] ? rcu_is_watching+0x12/0xc0 [ 818.279269][ T31] ? alloc_fd+0x471/0x7d0 [ 818.283618][ T31] do_sys_openat2+0x11b/0x1d0 [ 818.288357][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 818.293556][ T31] ? fd_install+0x244/0x750 [ 818.298113][ T31] __x64_sys_openat+0x174/0x210 [ 818.302965][ T31] ? __pfx___x64_sys_openat+0x10/0x10 [ 818.308466][ T31] ? do_user_addr_fault+0x843/0x1370 [ 818.313770][ T31] do_syscall_64+0xcd/0x4c0 [ 818.318335][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.324234][ T31] RIP: 0033:0x7ffb1e98d211 [ 818.328693][ T31] RSP: 002b:00007fff6b70d9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 818.337160][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ffb1e98d211 [ 818.345216][ T31] RDX: 0000000000000002 RSI: 00007ffb1ea11506 RDI: 00000000ffffff9c [ 818.353245][ T31] RBP: 00007ffb1ea11506 R08: 0000000000000000 R09: 00007ffb1f6ed6c0 [ 818.361281][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 818.369311][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 818.377309][ T31] [ 818.380360][ T31] [ 818.380360][ T31] Showing all locks held in the system: [ 818.388136][ T31] 1 lock held by khungtaskd/31: [ 818.392984][ T31] #0: ffffffff8e5c4e80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 818.402862][ T31] 4 locks held by kworker/1:2/1206: [ 818.408116][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 818.418627][ T31] #1: ffffc90003dafd10 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 818.429040][ T31] #2: ffffffff90804548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 818.438540][ T31] #3: ffff888030afb100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x2d/0x2e0 [ 818.447587][ T31] 2 locks held by getty/5590: [ 818.452256][ T31] #0: ffff88814df580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 818.462048][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 818.472297][ T31] 3 locks held by kworker/1:3/5826: [ 818.477627][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 818.488142][ T31] #1: ffffc90003fafd10 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 818.501072][ T31] #2: ffffffff90804548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 818.512542][ T31] 2 locks held by kworker/u8:14/11413: [ 818.518056][ T31] 2 locks held by syz.2.2343/14208: [ 818.523261][ T31] #0: ffff888030afb100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x60/0x330 [ 818.533103][ T31] #1: ffffffff90804548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xec/0x2c0 [ 818.543253][ T31] 3 locks held by syz.4.2378/14317: [ 818.548496][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.557001][ T31] #1: ffff888033e68100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0x9a/0x3c0 [ 818.566642][ T31] #2: ffffffff90804548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 818.576606][ T31] 1 lock held by syz.0.2383/14344: [ 818.581706][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.590186][ T31] 1 lock held by syz.0.2383/14345: [ 818.595300][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.603799][ T31] 1 lock held by syz-executor/14487: [ 818.609104][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.617585][ T31] 1 lock held by syz-executor/14575: [ 818.622858][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.631532][ T31] 1 lock held by syz-executor/14589: [ 818.637301][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.645819][ T31] 3 locks held by syz.5.2476/14592: [ 818.651457][ T31] #0: ffffffff904072b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.659903][ T31] #1: ffffffff90407368 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 818.669017][ T31] #2: ffffffff90804548 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x3a/0xb40 [ 818.679027][ T31] 2 locks held by syz.1.2477/14594: [ 818.684910][ T31] #0: ffffffff904072b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.693117][ T31] #1: ffffffff90407368 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x577/0x800 [ 818.702278][ T31] 1 lock held by syz-executor/14597: [ 818.707990][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.716478][ T31] 1 lock held by syz-executor/14599: [ 818.721755][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.730285][ T31] 1 lock held by syz-executor/14601: [ 818.735595][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.744055][ T31] 1 lock held by syz-executor/14603: [ 818.749439][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.757936][ T31] 1 lock held by syz-executor/14605: [ 818.763209][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.771813][ T31] 1 lock held by syz-executor/14607: [ 818.777139][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.785791][ T31] 1 lock held by syz-executor/14609: [ 818.791101][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.799611][ T31] 1 lock held by syz-executor/14611: [ 818.804885][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.813369][ T31] 1 lock held by syz-executor/14613: [ 818.818689][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.827225][ T31] 1 lock held by syz-executor/14615: [ 818.832510][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.840983][ T31] 1 lock held by syz-executor/14617: [ 818.846283][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.854736][ T31] 1 lock held by syz-executor/14619: [ 818.860045][ T31] #0: ffffffff8f302e68 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 818.868755][ T31] [ 818.871087][ T31] ============================================= [ 818.871087][ T31] [ 818.879758][ T31] NMI backtrace for cpu 1 [ 818.879777][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 818.879799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.879810][ T31] Call Trace: [ 818.879816][ T31] [ 818.879822][ T31] dump_stack_lvl+0x116/0x1f0 [ 818.879850][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 818.879870][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 818.879897][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 818.879919][ T31] watchdog+0xf70/0x12c0 [ 818.879944][ T31] ? __pfx_watchdog+0x10/0x10 [ 818.879961][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 818.879985][ T31] ? __kthread_parkme+0x19e/0x250 [ 818.880012][ T31] ? __pfx_watchdog+0x10/0x10 [ 818.880029][ T31] kthread+0x3c5/0x780 [ 818.880046][ T31] ? __pfx_kthread+0x10/0x10 [ 818.880066][ T31] ? rcu_is_watching+0x12/0xc0 [ 818.880088][ T31] ? __pfx_kthread+0x10/0x10 [ 818.880106][ T31] ret_from_fork+0x5d7/0x6f0 [ 818.880130][ T31] ? __pfx_kthread+0x10/0x10 [ 818.880147][ T31] ret_from_fork_asm+0x1a/0x30 [ 818.880177][ T31] [ 818.880183][ T31] Sending NMI from CPU 1 to CPUs 0: [ 818.998316][ C0] NMI backtrace for cpu 0 [ 818.998331][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 818.998348][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.998356][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 818.998378][ C0] Code: fb 6b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 e9 21 00 fb f4 7c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 818.998391][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 818.998403][ C0] RAX: 0000000003627c85 RBX: 0000000000000000 RCX: ffffffff8b882c79 [ 818.998412][ C0] RDX: 0000000000000000 RSI: ffffffff8de3251e RDI: ffffffff8c158f60 [ 818.998420][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 818.998429][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 818.998437][ C0] R13: ffffffff8e297780 R14: ffffffff90a97f50 R15: 0000000000000000 [ 818.998446][ C0] FS: 0000000000000000(0000) GS:ffff888124716000(0000) knlGS:0000000000000000 [ 818.998460][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.998469][ C0] CR2: 00007fe644ae7d60 CR3: 000000000e382000 CR4: 00000000003526f0 [ 818.998478][ C0] Call Trace: [ 818.998482][ C0] [ 818.998487][ C0] default_idle+0x13/0x20 [ 818.998506][ C0] default_idle_call+0x6d/0xb0 [ 818.998518][ C0] do_idle+0x391/0x510 [ 818.998535][ C0] ? __pfx_do_idle+0x10/0x10 [ 818.998551][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 818.998572][ C0] cpu_startup_entry+0x4f/0x60 [ 818.998588][ C0] rest_init+0x16b/0x2b0 [ 818.998600][ C0] ? acpi_subsystem_init+0x133/0x180 [ 818.998618][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 818.998637][ C0] start_kernel+0x3ee/0x4d0 [ 818.998655][ C0] x86_64_start_reservations+0x18/0x30 [ 818.998673][ C0] x86_64_start_kernel+0x130/0x190 [ 818.998691][ C0] common_startup_64+0x13e/0x148 [ 818.998709][ C0] [ 818.999349][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 819.198426][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 819.210223][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 819.220272][ T31] Call Trace: [ 819.223536][ T31] [ 819.226461][ T31] dump_stack_lvl+0x3d/0x1f0 [ 819.231046][ T31] panic+0x71c/0x800 [ 819.234936][ T31] ? __pfx_panic+0x10/0x10 [ 819.239345][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 819.244710][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 819.250683][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 819.256062][ T31] ? watchdog+0xdda/0x12c0 [ 819.260467][ T31] ? watchdog+0xdcd/0x12c0 [ 819.264871][ T31] watchdog+0xdeb/0x12c0 [ 819.269104][ T31] ? __pfx_watchdog+0x10/0x10 [ 819.273770][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.278968][ T31] ? __kthread_parkme+0x19e/0x250 [ 819.283994][ T31] ? __pfx_watchdog+0x10/0x10 [ 819.288671][ T31] kthread+0x3c5/0x780 [ 819.292750][ T31] ? __pfx_kthread+0x10/0x10 [ 819.297384][ T31] ? rcu_is_watching+0x12/0xc0 [ 819.302149][ T31] ? __pfx_kthread+0x10/0x10 [ 819.306726][ T31] ret_from_fork+0x5d7/0x6f0 [ 819.311314][ T31] ? __pfx_kthread+0x10/0x10 [ 819.315889][ T31] ret_from_fork_asm+0x1a/0x30 [ 819.320647][ T31] [ 819.323875][ T31] Kernel Offset: disabled [ 819.328178][ T31] Rebooting in 86400 seconds..