last executing test programs: 9m49.268214599s ago: executing program 0 (id=351): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 9m49.192173549s ago: executing program 0 (id=352): socket$nl_netfilter(0x10, 0x3, 0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x0, "4d6b5ccb00"}) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/166, 0xa6}], 0x1) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0/../file0\x00'}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r3, &(0x7f00000002c0), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './file0/../file0\x00'}) getegid() read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r4, r5, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m48.108867781s ago: executing program 0 (id=354): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x28581, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd01"], 0xfdef) syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0xe244, 0x13580}, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb000000010902"], 0x0) syz_open_dev$midi(0x0, 0x500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0, @ANYRES16], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 9m41.896257681s ago: executing program 0 (id=369): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRES32=r0]) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="e38a67d63299f0a0f735fc39453967f818000000000000000000e0f2b50b3c0eb56650ec45e7f0ba1972c56759a71bffb75989cd4b35560ce619af30f3d989571924a5b277edcc3702ee297db295d4f723e7b59f7daa5ed9d1359e3010439900fca7704be8b0a466beec5421c429cfea68e6e8841e"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064d1, &(0x7f0000000280)={0x0, 0x0, 0x0}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0xfdef) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12019073ab"], 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r6) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000325"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r10]) ioctl$KVM_GET_VCPU_EVENTS(r11, 0xc048aeca, &(0x7f0000000080)) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 9m38.592291327s ago: executing program 0 (id=377): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (fail_nth: 7) 9m38.231553369s ago: executing program 0 (id=380): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f22", 0xfdef}], 0x1, 0x8, 0x7, 0x17) 9m22.789194516s ago: executing program 32 (id=380): creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f0000000200)=[{&(0x7f0000000340)="1f22", 0xfdef}], 0x1, 0x8, 0x7, 0x17) 2m34.811106666s ago: executing program 1 (id=1626): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x88f7, r4}, 0x14) sendmsg$nl_route(r1, 0x0, 0x24040840) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket(0x2a, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2m34.403309733s ago: executing program 1 (id=1627): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa00001c000000020011907800000000000000004e23000000089078"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000640)={@local, @remote, 0x0}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x44851) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2m34.044502215s ago: executing program 1 (id=1628): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 2m33.949597449s ago: executing program 1 (id=1630): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@index_on}]}) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RTC_IRQP_READ(r6, 0x8008700b, &(0x7f00000000c0)) setrlimit(0xa, &(0x7f0000000040)={0x0, 0xc08}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="050000007d000000430000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRESDEC=r0, @ANYBLOB="00004498c600"/24], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600), &(0x7f00000001c0), 0x71, r7}, 0x38) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) pipe(&(0x7f0000000240)) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x1098448, &(0x7f00000002c0)=ANY=[@ANYBLOB='tRans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRES32=r4, @ANYBLOB=',\x00']) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m33.791385951s ago: executing program 1 (id=1631): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000008140005000000000000000000006bfbad785eee3ca8b4978cca83522b7fbfb608a8eea0ff", @ANYRES32=0x1, @ANYRES16=r1, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESOCT=r5], 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000004c0)={0xc1, 0x7, 0x0, 'queue0\x00', 0x2}) read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x45a4, 0x0, 0x0, 0x0, 0x8c46}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = socket(0x10, 0x80002, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x4, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) recvmmsg$unix(r10, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1, &(0x7f0000000900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x20, 0x0) r13 = creat(&(0x7f0000000340)='./file0\x00', 0x14) r14 = getpid() syz_pidfd_open(r14, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000000c0), 0x1004001, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000349726644292307", @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',\x00']) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100110}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0xc814) 2m32.684490794s ago: executing program 1 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x8) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x4, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001500010300000000000000180b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) r5 = dup(0xffffffffffffffff) connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m17.669476507s ago: executing program 33 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x8) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x4, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001500010300000000000000180b000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) r5 = dup(0xffffffffffffffff) connect$802154_dgram(r5, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r5, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 10.760150078s ago: executing program 2 (id=2039): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000006340)=""/223, 0xdf}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f0000000240)=""/55, 0x37}], 0x8, &(0x7f00000002c0)=""/31, 0x1f}, 0x6}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/140, 0x8c}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/137, 0x89}], 0x4, &(0x7f0000001080)=""/4096, 0x1000}, 0x10001}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/74, 0x4a}, {&(0x7f0000000c80)=""/49, 0x31}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/195, 0xc3}], 0x4, &(0x7f00000047c0)=""/126, 0x7e}, 0xffff}, {{&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000fc0)=""/122, 0x7a}], 0x1, &(0x7f00000020c0)=""/211, 0xd3}, 0x8}, {{&(0x7f00000021c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002240)=""/39, 0x27}, {&(0x7f0000002280)=""/127, 0x7f}, {&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/18, 0x12}, {&(0x7f0000002440)=""/174, 0xae}, {&(0x7f0000002500)=""/139, 0x8b}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/95, 0x5f}, {&(0x7f0000003640)=""/176, 0xb0}, {&(0x7f0000003700)=""/41, 0x29}], 0xa, &(0x7f0000003800)=""/179, 0xb3}, 0x1}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}, 0xc2f8}, {{&(0x7f0000003c00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0}, 0xfffffff8}, {{&(0x7f0000004480)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004500)=""/110, 0x6e}, {&(0x7f0000004580)=""/163, 0xa3}, {&(0x7f0000004640)=""/229, 0xe5}, {&(0x7f0000004740)=""/61, 0x3d}, {&(0x7f0000004780)=""/42, 0x2a}, {&(0x7f0000003e00)=""/240, 0xf0}, {&(0x7f00000048c0)=""/175, 0xaf}], 0x7, &(0x7f0000004a00)=""/212, 0xd4}, 0x3}, {{&(0x7f0000004b00)=@l2tp, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004b80)=""/48, 0x30}, {&(0x7f0000004bc0)=""/48, 0x30}], 0x2, &(0x7f0000004c40)=""/161, 0xa1}, 0x7fffffff}, {{&(0x7f0000004d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005dc0)=""/162, 0xa2}], 0x3, &(0x7f0000005ec0)=""/203, 0xcb}, 0x9}], 0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000024d564b"]) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r7 = syz_open_pts(r6, 0x141601) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r9 = socket(0x2000000000000021, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x3b, 0x0) shutdown(r9, 0x2) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) 10.658329266s ago: executing program 5 (id=2040): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aa00001c000000020011907800000000000000004e23000000089078"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000640)={@local, @remote, 0x0}, &(0x7f0000000680)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000800)={&(0x7f0000000080), 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xd0, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x44851) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2000000}, @L2TP_ATTR_IFNAME={0x14}]}, 0x34}}, 0x40880) r9 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r9, &(0x7f0000000240)=""/112, 0x349b7f55) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 10.117521317s ago: executing program 4 (id=2041): syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x180000000000000}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x80000000, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[], 0x65) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@gettfilter={0x64, 0x2e, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1c}, {0x7, 0xbbb5a8302988d813}, {0xb}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3a25}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) bind$xdp(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9890) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) close(r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)="0abf74ac14f876a4b564679f7e384016a40045e1b61d70dbb1f28308ae7a5f4b101d35ed1fbbf0d88673a2183a982620682c313cab7f4b832186772f04b542009492e044e2a1ebbb0d8ff17395e49cc2484f9124f4f772b3cd9ed3df03e28184c187bd7679e147f9a057864a8d3ea946c1dbc702b22e2ac2f1c967c5a5865dce8e7e58eb686600be07168b5452282f6b117e95d79b2adb0e5f10fe56f2937b3339932aed2f9577723601fa6bea59a54a1e8bdad53c832f1f406876de201a0904844c00e8f3bfb09b73112e35465017457896f21f75236a7a181f4da68fdd60343e10ed7cdac8379c7d4737bb957a", 0xee}, 0x1, 0x0, 0x0, 0x20008844}, 0x4004887) 10.02368681s ago: executing program 3 (id=2042): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 9.094386882s ago: executing program 3 (id=2043): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f00000002c0)={@multicast, @remote, @void, {@can={0xc, {{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "6bf6b251f9880b35"}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r3, 0xc0044dff, &(0x7f0000004000)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x0) syz_clone3(&(0x7f0000002340)={0x40082a440, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8.95840722s ago: executing program 4 (id=2044): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 7.847566545s ago: executing program 3 (id=2045): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', r2, 0x7800, 0x40, 0x7ff, 0xfffffffc, {{0x15, 0x4, 0x3, 0xf, 0x54, 0x64, 0x0, 0x3, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x3f, 0x4e77127bb1e0fcc8, [{0x6, 0x6, "168bc634"}, {0x7, 0x12, "f1c652120663518a97849204044c8b8a"}, {0x5, 0xe, "549d78d916ac05a4bdbc4a26"}, {0x2, 0x9, "190e33f4d31b79"}, {0x1, 0x2}, {0x0, 0x8, "7c803d5993e7"}]}]}}}}}) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) ioctl$NBD_DISCONNECT(r0, 0xab08) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1aff00000000bfa100000000000007010000f8ffffffb702000003000004f42261d8d1d0fc687392eabc00b70300000000ecff85000000040000001811000038cd755396f276b11f39647f98a83bf989dcba36018a8231098e7a5e3190beea9e845f29b0c43b3634fd9a3e3c0d3c2e5a0b29bf40463af48f025d9d130f118a7ec237600dd198b88f2fa9ffb49b11e644540b6ee87119bb38d4afc87276d183ab87f24d1279033694cd808f72c0fdca40f43474282771ba59e1f3348d2e4f55ca391832d9785b595b4fcfbf59faee388a4c34aa6f5393479015324e", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001700)={0x2c02, 0x1, &(0x7f0000000580)=[0x70], &(0x7f0000000600)=[0x7], &(0x7f0000000640)=[0x5], &(0x7f0000000680)=[0xf300, 0x2000]}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000240)) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r9, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000500)={0xab6, "875913d99159fc21611f1739e6b29469a9172a4228ca24e2f6eb7b0a875e14e3", 0x5, 0x8, 0x8, 0xe, 0x10, 0x2, 0x101, 0x1ff}) 7.58835477s ago: executing program 4 (id=2047): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={&(0x7f0000000200)="2437460f1c2bc4a2f99c9022000000c4a2f1002746c44179700d32233333a738e7c44240f29a3b470000a5c4c4a14d590c9736fe0d094e486ff5f5bb559a00000f75bed5370b1c2665d2950e000000db37", 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) listen(r4, 0x7ff) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) sched_setattr(r3, &(0x7f00000001c0)={0x38, 0x3, 0xc, 0x101, 0x6, 0x7, 0x6b4, 0x510000000, 0x6, 0x40}, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0), 0x400, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r7, 0x40045108, 0x0) 7.460369551s ago: executing program 5 (id=2048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000008140005000000000000000000006bfbad785eee3ca8b4978cca83522b7fbfb608a8eea0ff", @ANYRES32=0x1, @ANYRES16=r1, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYRESOCT=r5], 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000004c0)={0xc1, 0x7, 0x0, 'queue0\x00', 0x2}) read$FUSE(r8, &(0x7f0000004180)={0x2020}, 0x2020) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x11, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x45a4, 0x0, 0x0, 0x0, 0x8c46}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) r10 = socket(0x10, 0x80002, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x4, {{0x7e}, {@void, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x20}}, 0x4000054) recvmmsg$unix(r10, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1, &(0x7f0000000900)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x1, 0x20, 0x0) r13 = creat(&(0x7f0000000340)='./file0\x00', 0x14) r14 = getpid() syz_pidfd_open(r14, 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000000c0), 0x1004001, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000000000349726644292307", @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r12, @ANYBLOB=',\x00']) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100110}, 0xc, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0xc814) 7.428677486s ago: executing program 2 (id=2049): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) mount$fuse(0x0, 0x0, 0x0, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x201000c, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0x86, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r3, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}}, {{0x0, 0x0, 0x0}}], 0x564, 0x4040) 5.53048053s ago: executing program 3 (id=2052): socket$packet(0x11, 0x3, 0x300) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)=@fd={0xffffffff, 0x2, 0x4, 0x20, 0x3, {}, {0x4, 0xc, 0x3, 0x9, 0xc2, 0x10, "b8fa7f08"}, 0x4, 0x4, {}, 0x5324a5b7}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa0f, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[], 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x81}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000208, 0xffffffff, 0x4, 0x3, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 5.373246105s ago: executing program 2 (id=2053): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), 0x0}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 4.91791127s ago: executing program 6 (id=2054): syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x180000000000000}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x80000000, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[], 0x65) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@gettfilter={0x64, 0x2e, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1c}, {0x7, 0xbbb5a8302988d813}, {0xb}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x2c}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3a25}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) bind$xdp(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9890) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) close(r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)="0abf74ac14f876a4b564679f7e384016a40045e1b61d70dbb1f28308ae7a5f4b101d35ed1fbbf0d88673a2183a982620682c313cab7f4b832186772f04b542009492e044e2a1ebbb0d8ff17395e49cc2484f9124f4f772b3cd9ed3df03e28184c187bd7679e147f9a057864a8d3ea946c1dbc702b22e2ac2f1c967c5a5865dce8e7e58eb686600be07168b5452282f6b117e95d79b2adb0e5f10fe56f2937b3339932aed2f9577723601fa6bea59a54a1e8bdad53c832f1f406876de201a0904844c00e8f3bfb09b73112e35465017457896f21f75236a7a181f4da68fdd60343e10ed7cdac8379c7d4737bb957a", 0xee}, 0x1, 0x0, 0x0, 0x20008844}, 0x4004887) 4.0552658s ago: executing program 2 (id=2055): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$pppoe(0x18, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0'}, 0xb) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bridge0\x00'}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setresuid(0xee01, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') 3.942773304s ago: executing program 4 (id=2056): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x5}, {0xa, 0x4e24, 0xf5, @mcast2, 0x3}, 0xffffffffffffffff, {[0x2, 0x6, 0x401, 0x8, 0x10001, 0x8, 0x2, 0xd]}}, 0x5c) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) 3.916836169s ago: executing program 6 (id=2057): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x4, 0x141102) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005200210900000000001cd2001c000000"], 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0}) r4 = getpid() getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(r4, 0x5, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r6) close(r6) 3.905519759s ago: executing program 2 (id=2058): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x10, 0x8, 0x11}, 0x2c) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e0000120f0a", 0xf) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @dev, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x28, 0xfffd, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x8, 0x0, 0x1}}}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.813753417s ago: executing program 5 (id=2059): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/128, 0x80}, {&(0x7f00000003c0)=""/130, 0x82}, {&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000006340)=""/223, 0xdf}, {&(0x7f0000000500)=""/146, 0x92}, {&(0x7f0000000240)=""/55, 0x37}], 0x8, &(0x7f00000002c0)=""/31, 0x1f}, 0x6}, {{&(0x7f0000000880)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/21, 0x15}, {&(0x7f0000000940)=""/140, 0x8c}, {&(0x7f0000000a00)=""/249, 0xf9}, {&(0x7f0000000b00)=""/137, 0x89}], 0x4, &(0x7f0000001080)=""/4096, 0x1000}, 0x10001}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)=""/74, 0x4a}, {&(0x7f0000000c80)=""/49, 0x31}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/195, 0xc3}], 0x4, &(0x7f00000047c0)=""/126, 0x7e}, 0xffff}, {{&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000fc0)=""/122, 0x7a}], 0x1, &(0x7f00000020c0)=""/211, 0xd3}, 0x8}, {{&(0x7f00000021c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000003740)=[{&(0x7f0000002240)=""/39, 0x27}, {&(0x7f0000002280)=""/127, 0x7f}, {&(0x7f0000002300)=""/213, 0xd5}, {&(0x7f0000002400)=""/18, 0x12}, {&(0x7f0000002440)=""/174, 0xae}, {&(0x7f0000002500)=""/139, 0x8b}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/95, 0x5f}, {&(0x7f0000003640)=""/176, 0xb0}, {&(0x7f0000003700)=""/41, 0x29}], 0xa, &(0x7f0000003800)=""/179, 0xb3}, 0x1}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}, 0xc2f8}, {{&(0x7f0000003c00)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0}, 0xfffffff8}, {{&(0x7f0000004480)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000004980)=[{&(0x7f0000004500)=""/110, 0x6e}, {&(0x7f0000004580)=""/163, 0xa3}, {&(0x7f0000004640)=""/229, 0xe5}, {&(0x7f0000004740)=""/61, 0x3d}, {&(0x7f0000004780)=""/42, 0x2a}, {&(0x7f0000003e00)=""/240, 0xf0}, {&(0x7f00000048c0)=""/175, 0xaf}], 0x7, &(0x7f0000004a00)=""/212, 0xd4}, 0x3}, {{&(0x7f0000004b00)=@l2tp, 0x80, &(0x7f0000004c00)=[{&(0x7f0000004b80)=""/48, 0x30}, {&(0x7f0000004bc0)=""/48, 0x30}], 0x2, &(0x7f0000004c40)=""/161, 0xa1}, 0x7fffffff}, {{&(0x7f0000004d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005dc0)=""/162, 0xa2}], 0x3, &(0x7f0000005ec0)=""/203, 0xcb}, 0x9}], 0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000024d564b"]) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r7 = syz_open_pts(r6, 0x141601) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000080)={0x8, 0x20000000, 0xfffffffc, 0x7fffffd, 0x5, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r9 = socket(0x2000000000000021, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x3b, 0x0) shutdown(r9, 0x2) getsockopt$CAN_RAW_LOOPBACK(r9, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) 3.133268557s ago: executing program 6 (id=2060): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d5387f4"], 0x18}}], 0x1, 0x4040880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100000000006f2f0200ac1414000c0002800500010000000000240002800c00028005000100000000008008000100e0000002080017a0562ec590925fe98ef80200e0000002080007400000000018000680"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000180)=0xfffffffa, 0xfffffffffffffed4) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x28400, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 2.950780893s ago: executing program 2 (id=2061): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.279749688s ago: executing program 3 (id=2062): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f00000002c0)={'ip_vti0\x00', r2, 0x7800, 0x40, 0x7ff, 0xfffffffc, {{0x15, 0x4, 0x3, 0xf, 0x54, 0x64, 0x0, 0x3, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x3f, 0x4e77127bb1e0fcc8, [{0x6, 0x6, "168bc634"}, {0x7, 0x12, "f1c652120663518a97849204044c8b8a"}, {0x5, 0xe, "549d78d916ac05a4bdbc4a26"}, {0x2, 0x9, "190e33f4d31b79"}, {0x1, 0x2}, {0x0, 0x8, "7c803d5993e7"}]}]}}}}}) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x20) ioctl$NBD_DISCONNECT(r0, 0xab08) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xc, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000001700)={0x2c02, 0x1, &(0x7f0000000580)=[0x70], &(0x7f0000000600)=[0x7], &(0x7f0000000640)=[0x5], &(0x7f0000000680)=[0xf300, 0x2000]}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r8, 0x29, 0x1a, 0x0, 0x0) sendto$inet6(r8, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r8, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000240)) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r9, &(0x7f0000000040)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x10) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000500)={0xab6, "875913d99159fc21611f1739e6b29469a9172a4228ca24e2f6eb7b0a875e14e3", 0x5, 0x8, 0x8, 0xe, 0x10, 0x2, 0x101, 0x1ff}) 2.048047106s ago: executing program 6 (id=2063): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r3 = accept$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @rose, @remote, @default, @remote, @rose, @default]}, &(0x7f0000000200)=0x48) connect$netrom(r3, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @null]}, 0x48) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000005edae93ba0e8e43882e8adad956c110000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002b00020300000000000000000000ac1414aa000000000000000000000000fc"], 0xa0}}, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) pread64(r7, &(0x7f0000002440)=""/68, 0x44, 0x5) close(0x4) 1.912128184s ago: executing program 6 (id=2064): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="66643d0df7d830990f961919895ea1d7225dc2b27bbe370afab5c935552df907e5506e5460a36672c7c50c", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303130303130303030300c757365725f74643d139445ef9fd269beca5b59bda297958e79a40400000040a4419069cf44dd2059011c5e9cc1db90", @ANYRESDEC=0x0, @ANYRES8, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x130, 0x0, 0x403, {0xf929, 0x7, 0x0, '\x00', {0x1, 0xcdc, 0xb, 0x8, 0x0, r2, 0x1000, '\x00', 0x1, 0x5, 0x10000100000000, 0x3, {0x2, 0x6}, {0x8}, {0x100080004, 0xc}, {0x8, 0xa02}, 0x8, 0x9, 0x5, 0x9}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f00000011c0)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file0/file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1c403, &(0x7f0000001200)=ANY=[@ANYBLOB="66643ddce09d63657a306b9d195c6acf4d1c8c660b24c15c52da7345086accff71eb66a3d521ca6fea96ff6f76c1d6f0abd7421f29d690111cf1b6261be37a5212a8b7bb7d148e0888935ed244ffa7d8168c98afda4d20cacd5cb5787ba21943cba4d93eb3d60648b896d196865f44ebd9bb6adfb1eda9ed19647ef2316ee10462f7f44d2ee39a22fab627592e732837f77da8ce256580c983877dcf19c9c96897e17d4b77fea69ca382486096019beb9d26ebb7b76bf67cbb1607b0301cc234ae9b5b608e72ba576a3ab67cab22f03eaf6898bee0a9fa8e4728da84799351f0eb999459a8cf", @ANYRESHEX=r6, @ANYRESOCT=r4, @ANYRESDEC=0x0, @ANYRES16=r3, @ANYRES64=r2, @ANYRESHEX=r5, @ANYRES64=r5]) r7 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) preadv2(r7, &(0x7f0000000640)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1, 0x3, 0x4, 0x3) read$FUSE(r6, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ef, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f0000000b00)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000080)="cc097c120a1ec518f570e4e1c32927173fd4584955f1b7762186e7bb11cc738e6ccf71124daa66f3acbf9fff8e118875f0cc3b6d1b3a941e3a235bb817c41f3e1cb3f3998e28431ec9921a27cb0d621a764d8c59732db64cbbd5e9e5667856aaed6bbb309d05cb0eaad396bc285e638860681d303f18dfd9ec9ec9a50ec800e505432963590ecb7d5dc793e8a9eb289938c0781479482722a6c29d34dc82bac3e2f451346b25282798672a298f6238a9cfd8a5eddc47cb658869f1b7870fca7263987487e58faacf978395b9f8ac03c0c8b4680b505ffea02828616445792fd65c93b2b0b7e1aaaf018e837347bdae63a96b018510dd47c8", 0xf8}, {&(0x7f0000000240)="1fe6d48aa8dd1ddf8e5633e71ccbdae9883ab5151bbefa6619141cc21ad5c918fd1e137420597c353feb7bb2b8883242c06af8a2e79849508d31c49c4d7f735c0c3c12d3bb10efec651022030889d4c14beb7343338071f1f7e8a6b55d760588a360ffde6efc80c48661884ea47f512f927c95d80b9537508428b966595ac01b8b81880a2e677d9d3e9165860b6f518d1166c161a0a895ddb28b09427156df6f98f841d5b974d71dfca1ccfa639e8797", 0xb0}, {&(0x7f00000001c0)}, {&(0x7f0000000300)="ff0319dde2e4381766d1f95320dab91808d06d33e8ee77295ff986bf53aa8ae828ffc776cf1c1f2e39792275ce6167a9fbbbd85abfaaf02f359cd0a45e5385fc47bfa2b1a18dfa3d7014c3b8c1735ac30f5d5896ec0020c6a3f9eb0189a7fe964c4c58733024174dad13ecef5aaead7ff64d5e1459b6f5c0a89e3a3daa3d4cd1566ff88648750117b9ab62a409b9108e374a96c1fd166157d8b5c463fa9c822dbe1f5e88b65cb671181d5615246c103cfd84fb15aebeabcd5be64bcd88161e4255c9197819ff6f2b670d405ef02444da07499e2e8fad1218f9bfa99c09fefb", 0xdf}, {&(0x7f0000000500)="b8792584c02ecb0aa5d586007e539c2e6cdace270c0470063ba55b5b4b060030912a5819b539876cfde16207e5a39b30a01ea9f18f0bad22f957b7a83b2236380f8612c2db16f305084fc038b0ce118c59d6414c79e7c221230d9d689a28210f352182e150b2cd6978525f2135794e7c2bc7d9c825626799a425f16b423369fc3aa062528889b75b81facbfc0b960bd332e71effbc9be2660b98f21a7661e7019dbd12f9df1d210de3b46c8199e0830626da31f8778f9a2cf21f526d627b8fbc5b7408c6088d08f89b98eda37a9f0d4d759270d228915ba0570c2b3f2a0ba2169818d7c89374e559055f41", 0xeb}, {&(0x7f0000000600)="7894b5952ad187a26d28773901d8bc8d2b957a62cbdc2c867506fcbc6fc40eeae708fbda7c2d0d95ef16f61819b981ef44931712902c9e118d14673b84c958ccca87921978fc9807681ae993b96e9d1df41f595a84024b4f2639a38262e610b8bf74ca750d1e322da3046ccab160e145abc3176218b3a259575a1a64e256dc71451eb1011be680d84a3676d64b9701357c675a0dac11e08b3360ed", 0x9b}, {&(0x7f00000006c0)="844b03d630238ed97ce8823e1ad4a556e43495d24901043e2ef51505dbdafa59c3721dc05c5c68032814b9f1b24107f27ee19f26b8c8672b35e7a45de4b493ad3071d9e8534874298cac86f3f92440ec39c6ec65c0a5b6881fd6a44790b1bad8bf2158012bf1cecd893c122096af9c8e7ac70a711bfd0a2be9404dd0cc81f21166f3d8c15678792c34053b396af658f1f2cc094591b136339f26b2462c1b852af67e7440a9c5d03bf9faf8", 0xab}, {&(0x7f0000000e40)="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", 0xfd}, {&(0x7f0000000880)="91ff197ed802845fc4fac60a52575b333598950c58818e64b0de53fd382298c23f84434b792a7da08a95288ce279b2748b743ae1f519c6341d904c0b8c45728e47c9bc9f516b1d07633c132e62f3ac4b1ef8118b292e1229364527c6cd853e18fa276435f0c206b4d888222fdcd2477a4e30bdbe770a05498a43c752b01a8b7ef48d2f4f886a611797937459553f3bef9bd0b9d851c13df0d77c4b319df4cf1f05c7043354fdc5be91012df50890a96571e833b7d899a47118c1fd6e0d8380a422e3709e36178f16e4358322dc931b058018", 0xd2}, {&(0x7f0000000c40)="501cd3693807188bda0a5b4ce7c7f9987d4ddb90a357687f52264214c2a49cfb38dbf5ae170f2486fac341f8b00e28c320913a44ce85ef25201a3fe7cc00fb94eadabf4d8bfe08bf1c764a1cc5e947c936b5add06a99a1f0caba6d4b7d6bfdc885d78e7587814eb8ba0f2247cd97ab508e2f5f2de8937923ec47ed7b6706083f66318b2b96d87acbbc2f7c125cd82ba6b2c7534ca1a63dae35e069da88515c40000000000000000000000000006c7867e5e7b24c3d51", 0xb6}], 0xa, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5, r9}}}], 0x20, 0x8001}}], 0x1, 0x0) setuid(r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r10 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ppoll(&(0x7f0000000040)=[{r10, 0x401}], 0x1, &(0x7f0000000080), 0x0, 0x0) r11 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$sock(r11, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000000c0), 0x1}}, {{0x0, 0x0, 0x0}}], 0x564, 0x4040) 1.660670982s ago: executing program 4 (id=2065): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d5387f4"], 0x18}}], 0x1, 0x4040880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100000000006f2f0200ac1414000c0002800500010000000000240002800c00028005000100000000008008000100e0000002080017a0562ec590925fe98ef80200e0000002080007400000000018000680"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000180)=0xfffffffa, 0xfffffffffffffed4) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x28400, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) close(0xffffffffffffffff) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) 739.395758ms ago: executing program 4 (id=2066): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004000000040b4f0517c000000000000000000000905000000070000000000000e0100000000000000000000000000000d02000000000000000000000d00000000000000000000000203000000000000000000005f00"], 0x0, 0x61}, 0x20) r0 = syz_open_dev$video(&(0x7f0000000440), 0x37ad5285, 0x12b043) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000600)={0x3, @vbi={0x3ff, 0x4, 0x7fffffff, 0x32315258, [0x7fffffff, 0x10001], [0xa, 0x3], 0x1}}) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000006d700030000000000e0ff156f9038495805a6000000575cdbe6500ae36be2a950358a030e618cebc64d0ee2754ab08576b149decbf70000a8a1424670505780081915d2151c9e3510442f6a4673be04dda4602824ed3a55f254615aac9c0b9410b362c6d22c724a8ab442cd72304042b0f67c81affe05653c9e41937425dd5f07ced835298bdb1dbcd70f432b9f8f1b524889d48ead080cfb7365c92c6a2af3befb97e8ac26c3894489d4eb6ea21019d0255b16d812d5e8ceefd9f0e6d01bdffb7eaa414746a3377561db1a57"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRESHEX=r4, @ANYRES8=r5], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) sendmsg(r3, &(0x7f0000000880)={&(0x7f00000002c0)=@generic={0x1f, "f0327ac69ac420a12bd2750b5fd79f98030f2f555a8920bda199b2c6e60174f887f6ec0aa20b4cd1880ed68676edf27781c73806d171cecdd889081d0d5493171250c2c029e6fc96658b81d81c59b1f2240ca7606e6c9bcb32fee2a55cc46f923b3aa2de49b7672f8b5f90fa549d136e8fe725aeeec2db2041ed43765487"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)="df09128c03b0e0024a4442268f1038b739a78a818137697c327d0feadff535b2d24e471eeb65bfc6c4320af5228e7674610f6bdd557f095e61e02f6ab551592eda76ce7da3dfe372026b6805b1734b1213", 0x51}, {&(0x7f0000000200)="22f3df0a4e19d8ad0617bd73511e4f7c8f95dc2eb2ca32dab1578633020fcb1bbc", 0x21}, {&(0x7f0000000700)="0ab43ab63d6c41878a9948c201ad97cb256a2d26b27d9817a46725dd928edd3a", 0x20}, {&(0x7f0000000740)="20f54587a77021d23e40f7239af291960c6fb7ffdf7d813f9d29985e5739bf86444f52671842e93d53781e0d130b2b6fe17ede605fa4357497810c16d55fa41459b29ac64eedd1bec31cd34c14b4ba7962a5a2806a0d25bd766c0c2fbfb91f42d86861e4487f5b8bcd6f30f54f0a4881f90fc8043c1f513a53ceb3a75d84fa43478bcbae794bae0791505a6c93080e9acbc2ef3861a5eed430e0058a9d420921b994b1aac8bcebe4fa8a5d8b04d1c6a95bd4e044172a715f7ba4666927fcd756d6a8c28c1c376f1afd33f7dbadf9270abe7e22f7b9f2fc6096c332cd51908ee5895e5faf68719576acad2bb66b4e01171e", 0xf1}], 0x4, &(0x7f00000020c0)=[{0xf8, 0x84, 0x6d7, "3848a4ce873c6d1e46b7f04a0debc161d022484980159c79918d188ec08b1ef5343feac5a66545ed59aac0130c6afde3b1cc2444342ebc3b87d03e45afc3dd30d1b15826fa685615c2548122343744ad5cc1c91ba877f17b64b58613fbb52f71ea9b8e8a0c18728efe7ae2b636a611b9593099ea1af02958a6f939135d5edc980c608ac466064ed0b95a348079ddac356c97720ee8b74ad2c44f3c12efcc7e2c07fc9117aa5d5604bb3f9684f2e01c90497bd759b77ec6043b77a10158588be7aace3224213dfe622b8469b46c3efee6e6e07ac6c3c2f09c359d730e2a0812e9b3b4d4c907"}, {0x98, 0x10a, 0x8, "0718d4d31177dc73cc2bb689174b7d6bcd70565bd58f8a420ef8e8c6f33b03ddab58845ab7d1ac5d8f1125c13e64e699c8798e959968cf912b0e6dbccb59f266cf4dbb73ecd5718102ad26cacac747213a50f253afdd7cf0bee81f9c63afdcea8fad6ac8fc8e1f46e8a4a08e7cae265739f2e4693a3c7bb53173874f79a592c29f29ea"}, {0x30, 0x118, 0x9, "75bdeb610cc148dbd45744a176b30d453fcd405b776cbf2ff9da9dd0"}, {0x70, 0x117, 0x401, "e0a77a66a61164f1cc692f23cf87669f3c68d3c210ebff4fa335b885f22dc457b4424c363531c7ab4ada529aafae0b51765c91cc16d3e1edafaf8589b1945ac575ca5341f6a1307b1dc4d4d4d8ec157ab8dc6afb5185203c9ba65417b9c39d90"}, {0x1010, 0x18e, 0x2, "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"}], 0x1240}, 0xc0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x400000000010, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 535.846031ms ago: executing program 5 (id=2067): syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x180000000000000}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x80000000, 0x0}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[], 0x65) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@gettfilter={0x64, 0x2e, 0x400, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x1c}, {0x7, 0xbbb5a8302988d813}, {0xb}}, [{0x8, 0xb, 0xe}, {0x8, 0xb, 0x2c}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3a25}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) bind$xdp(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9890) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x400000000010, 0x3, 0x0) close(r2) r3 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000900)="0abf74ac14f876a4b564679f7e384016a40045e1b61d70dbb1f28308ae7a5f4b101d35ed1fbbf0d88673a2183a982620682c313cab7f4b832186772f04b542009492e044e2a1ebbb0d8ff17395e49cc2484f9124f4f772b3cd9ed3df03e28184c187bd7679e147f9a057864a8d3ea946c1dbc702b22e2ac2f1c967c5a5865dce8e7e58eb686600be07168b5452282f6b117e95d79b2adb0e5f10fe56f2937b3339932aed2f9577723601fa6bea59a54a1e8bdad53c832f1f406876de201a0904844c00e8f3bfb09b73112e35465017457896f21f75236a7a181f4da68fdd60343e10ed7cdac8379c7d4737bb957a", 0xee}, 0x1, 0x0, 0x0, 0x20008844}, 0x4004887) 203.257163ms ago: executing program 5 (id=2068): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {}, 0x49, [0x0, 0x3, 0x403, 0x100000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xffffffff], [0x0, 0xa82, 0x0, 0x0, 0x2, 0x733, 0x1, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7fff0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2, 0x89, 0x0, 0x800, 0x0, 0xfffffffb, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80008003, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x6492, 0x8], [0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xd2a, 0x200000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0xfffffffc, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x3ff, 0x200000, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000008, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) ioctl$UI_DEV_CREATE(r0, 0x5501) 100.092045ms ago: executing program 6 (id=2069): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x842, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmsg$inet(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2000c885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000001c0)={0x5fa, 0xfffffeff, 0x2, {0x1, @raw_data="8e45c874385ea4a7ac878343bfe3fb89a65d467c3196ab4c239f77e15bcf42c1affeaaeed12e4fa78764efe1672abdbd7fb9474aa3395e0d971f7f0c1952806f8482cbf5141d77708f03cce7346112fe3d07de5536df3117172933ecbedd21b498cd72a6acef57db4f89ab40e51dfd46cafca68f810cbd472a62dd06529822ad104c911a9f808e0096aab8a2bff7ae137ebaec4e01ba0f68d181d202f8bff2ba9f189f796eef9ac5ccc24993d9e8505c0ad3df967bc45185a9d92adb15984d4a5b73d5b33c5ea6a9"}, 0x7f}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000003c0)={0x3, 0x6, 0x1, {0x1, @pix={0x5, 0x3, 0x50313134, 0x9, 0x3, 0x52b, 0x5, 0x880, 0x0, 0x2, 0x1, 0x2}}, 0x9}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd26, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x0) 69.76606ms ago: executing program 3 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e80)=@newtaction={0x3ec, 0x1e, 0x200, 0x2, 0xfffffffe, {}, [{0x3d8, 0x1, [@m_csum={0x88, 0x14, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6fe54e34, 0x0, 0x10000000, 0x2, 0x5}, 0x2}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x249a93f, 0x0, 0x20000000, 0x7, 0x4}, 0x42}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x0, 0xfff, 0x80000001}, 0xb}}]}, {0x7, 0x6, "965e48"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x7}}}}, @m_ctinfo={0x14c, 0x18, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfff, 0x1, 0xffffffffffffffff, 0x0, 0xb80}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffb}]}, {0xbe, 0x6, "ae5d059d2054919472dea0fa7ce82d9b82f0386c76a5a84d5f96cd4c2157e3049f6879d7a31be2dd88d11ef178db8d4241640fead4405c547f48a5b0fa03973ca73e64322308b0120f2492dd01b6b1cbde0cd345731645a62cc537cd20b3994899a80137ca82399f8e2ce65cd0c4dea9363d72b79af44b7c90494dccaa8124d06fcd963bca95ab32884a89468b0e776ee7d5039937fb72ea5ef30f5cffc96bad436e5d69f60709f7b0294a1fc936592d436685a387e1d3ab08b1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xe8, 0x20, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}]}, {0xb3, 0x6, "167ccaaf0dbf876e58148a40b621fcc0b975474fdcc33cec6331671f64b09204ed65fc986598e06c6479825580d9559c419d9190ddcdebd0a98fca9619e067f3e4b84092e9a16af14d7dba3e5addabf4fbbbb825eceaddbded516c7a1236d4bb7e8299b4299b64253c833d3bebfb68b6f1c112eed10764b3626841c3cc3e6cfd9cd84ec7d26e8543da06daa0b04b91450e6f6d1c58d2a94c17a142ea580bfbf3e9775a3b37cd958e5ae6995e038e0b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_skbedit={0x118, 0xf, 0x0, 0x0, {{0xc}, {0x4}, {0xea, 0x6, "4c506d2bcf10a2739aecbbacaaa084e360a72829df38f9ba8689708facbd95be4652edd43db2f1982a69e5e6a47a1555c7adad3cab808d31b569152a8a0b324f82c44a1a0db3bde91a0489ec96110acd8ae2d408371cc099f6607a67a9aa7f963ff012e1beb6488bde19b2d7bc42c5a02f862246614594dc4a17ab818bf6b2fc29b1667d360cb1a4b456670f7c41acd300125f96d1afbfb852249c4a22b42180af1e5a0ce9973a4e7d740a07fc4f03392da0d7d275189d2f7212923bc1beed66e4f4a2e98f42a626666eb69cd4002d36b89be8e294e1df1b64182281e7cfa72e19baf26be195"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x3ec}, 0x1, 0x2b1e}, 0x4c840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffffffffff7, 0x3, 0x4427}, 0xc}, 0x20, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x3, 0x7}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x54a1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000306010100000000000000000200000a0500f67122030000"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x40800) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2071): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000070000008608ffffffff0602c117b5814f4bac0b5d03871d5387f4"], 0x18}}], 0x1, 0x4040880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100000000006f2f0200ac1414000c0002800500010000000000240002800c00028005000100000000008008000100e0000002080017a0562ec590925fe98ef80200e0000002080007400000000018000680"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000180)=0xfffffffa, 0xfffffffffffffed4) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r8) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, 0x0) kernel console output (not intermixed with test programs): ket size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 620.130709][ T43] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 620.611166][ T43] usb 6-1: device descriptor read/8, error -71 [ 620.619254][T12624] trusted_key: encrypted_key: key user:syz not found [ 620.722461][ T43] usb usb6-port1: unable to enumerate USB device [ 620.803677][T12633] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 620.824845][T12633] overlayfs: missing 'lowerdir' [ 621.257121][T12642] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 621.266854][T12642] SELinux: failed to load policy [ 622.187639][ T30] audit: type=1400 audit(1757114614.035:1621): avc: denied { ioctl } for pid=12656 comm="syz.4.1637" path="socket:[41076]" dev="sockfs" ino=41076 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 622.284821][T12660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=12660 comm=syz.4.1637 [ 622.403630][ T30] audit: type=1400 audit(1757114614.225:1622): avc: denied { shutdown } for pid=12654 comm="syz.3.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 622.697391][T12669] trusted_key: encrypted_key: key user:syz not found [ 623.111175][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 623.180551][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 623.575554][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 623.589575][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.612189][T12676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 623.630547][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.630553][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 623.630590][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.712805][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.739222][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 623.747646][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.759403][ T9] usb 3-1: config 0 has no interface number 0 [ 623.881110][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.887503][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.952225][ T30] audit: type=1400 audit(1757114615.565:1623): avc: denied { audit_write } for pid=12678 comm="syz.5.1642" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 623.978902][ T9] usb 3-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 623.994550][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 623.997156][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 624.045652][ T24] usb 2-1: invalid MIDI out EP 0 [ 624.052520][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 624.066641][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.087473][ T9] usb 3-1: Product: syz [ 624.095029][ T9] usb 3-1: Manufacturer: syz [ 624.103928][ T9] usb 3-1: SerialNumber: syz [ 624.699988][ T9] usb 3-1: config 0 descriptor?? [ 624.724219][ T9] ipheth 3-1:0.196: Unable to find endpoints [ 624.789699][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 625.110699][ T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 625.510635][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 625.519679][T12699] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 625.529425][T12699] SELinux: failed to load policy [ 625.587759][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 625.597734][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.644516][ T24] usb 4-1: config 0 descriptor?? [ 625.828425][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 626.137543][T12705] loop2: detected capacity change from 0 to 7 [ 626.331080][ C0] blk_print_req_error: 32 callbacks suppressed [ 626.331096][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.346407][ C0] buffer_io_error: 32 callbacks suppressed [ 626.346417][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.360640][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.369794][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.377864][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.387008][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.396144][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.405277][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.415078][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.424210][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.432411][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.441547][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.450399][T12710] trusted_key: encrypted_key: key user:syz not found [ 626.546648][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.562610][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.590590][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.599745][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.607605][T12705] ldm_validate_partition_table(): Disk read failed. [ 626.615118][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.624245][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.640532][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 626.649661][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 626.660366][T12705] Dev loop2: unable to read RDB block 0 [ 626.691109][T12705] loop2: unable to read partition table [ 626.696909][T12705] loop2: partition table beyond EOD, truncated [ 626.703084][T12705] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 626.939444][ T5924] usb 3-1: USB disconnect, device number 38 [ 627.279410][T12717] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 627.675044][T12728] Invalid source name [ 628.028855][ T978] usb 4-1: USB disconnect, device number 63 [ 628.801806][T12743] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 628.811483][T12743] SELinux: failed to load policy [ 629.486592][T12753] loop2: detected capacity change from 0 to 7 [ 629.663113][T12753] ldm_validate_partition_table(): Disk read failed. [ 629.670046][T12753] Dev loop2: unable to read RDB block 0 [ 629.676443][T12753] loop2: unable to read partition table [ 629.682241][T12753] loop2: partition table beyond EOD, truncated [ 629.688380][T12753] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 630.011819][ T30] audit: type=1400 audit(1757114621.865:1624): avc: denied { setopt } for pid=12759 comm="syz.4.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 630.369776][T12765] trusted_key: encrypted_key: key user:syz not found [ 630.603027][ T30] audit: type=1400 audit(1757114622.455:1625): avc: denied { read } for pid=12766 comm="syz.2.1665" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 630.663489][ T30] audit: type=1400 audit(1757114622.455:1626): avc: denied { open } for pid=12766 comm="syz.2.1665" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 631.105440][T12773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1666'. [ 631.110542][ T30] audit: type=1400 audit(1757114622.955:1627): avc: denied { bind } for pid=12772 comm="syz.3.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 632.208261][T12790] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 632.218097][T12790] SELinux: failed to load policy [ 632.529598][T12788] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 632.870566][ T24] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 633.024308][T12802] trusted_key: encrypted_key: key user:syz not found [ 633.150775][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 633.217409][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 633.232841][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.256397][ T24] usb 4-1: config 0 descriptor?? [ 633.613055][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 634.058104][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 634.264808][ T30] audit: type=1400 audit(1757114626.115:1628): avc: denied { ioctl } for pid=12810 comm="syz.4.1678" path="socket:[42333]" dev="sockfs" ino=42333 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 635.630558][ T5973] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 635.780669][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 635.794307][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.827398][ T24] usb 4-1: USB disconnect, device number 64 [ 635.882063][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.914132][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 635.943008][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.989204][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.019033][T12839] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1684'. [ 636.054913][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.278684][ T5973] usb 5-1: GET_CAPABILITIES returned 0 [ 636.284351][ T5973] usbtmc 5-1:16.0: can't read capabilities [ 636.491190][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 637.577036][T12855] ubi: mtd0 is already attached to ubi31 [ 638.534125][ T9] usb 5-1: USB disconnect, device number 52 [ 638.630530][T12871] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 638.638858][T12871] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 638.646533][T12871] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 638.654638][T12871] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 638.662022][T12871] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 638.683139][ T5859] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 638.703122][ T5859] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 638.722715][ T5859] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 638.753257][ T5859] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 638.765097][ T5859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 638.793845][ T30] audit: type=1400 audit(1757114630.645:1629): avc: denied { mounton } for pid=12869 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 639.708923][T12869] chnl_net:caif_netlink_parms(): no params data found [ 639.943271][ T30] audit: type=1400 audit(1757114631.795:1630): avc: denied { shutdown } for pid=12888 comm="syz.4.1697" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.008660][ T30] audit: type=1400 audit(1757114631.795:1631): avc: denied { read } for pid=12888 comm="syz.4.1697" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 640.046094][T12869] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.290736][ T30] audit: type=1400 audit(1757114632.025:1632): avc: denied { create } for pid=12888 comm="syz.4.1697" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 640.324661][T12869] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.405968][ T30] audit: type=1400 audit(1757114632.025:1633): avc: denied { write } for pid=12888 comm="syz.4.1697" name="file0" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 640.440866][T12869] bridge_slave_0: entered allmulticast mode [ 640.461999][T12869] bridge_slave_0: entered promiscuous mode [ 640.495033][ T30] audit: type=1400 audit(1757114632.025:1634): avc: denied { open } for pid=12888 comm="syz.4.1697" path="/351/file0" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 640.496072][T12869] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.638753][ T30] audit: type=1400 audit(1757114632.025:1635): avc: denied { ioctl } for pid=12888 comm="syz.4.1697" path="/351/file0" dev="tmpfs" ino=1853 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 640.640298][T12869] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.703521][T12869] bridge_slave_1: entered allmulticast mode [ 640.758957][T12869] bridge_slave_1: entered promiscuous mode [ 640.909201][T12871] Bluetooth: hci6: command tx timeout [ 640.938176][T12869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.092242][T12869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.134288][T12869] team0: Port device team_slave_0 added [ 641.143173][T12869] team0: Port device team_slave_1 added [ 641.174448][T12869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.183007][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.249815][ T30] audit: type=1400 audit(1757114633.095:1636): avc: denied { unlink } for pid=5843 comm="syz-executor" name="file0" dev="tmpfs" ino=1853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 641.288062][T12869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.438317][T12869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.630925][T12869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.696673][T12869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.701988][T12913] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 641.834992][T12869] hsr_slave_0: entered promiscuous mode [ 641.978777][T12869] hsr_slave_1: entered promiscuous mode [ 641.994060][T12869] debugfs: 'hsr0' already exists in 'hsr' [ 642.002835][T12869] Cannot create hsr debugfs directory [ 642.128680][T12918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1701'. [ 642.648881][T12922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 642.972705][T12871] Bluetooth: hci6: command tx timeout [ 643.011483][ T30] audit: type=1400 audit(1757114634.865:1637): avc: denied { wake_alarm } for pid=12926 comm="syz.4.1704" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 643.119238][ T30] audit: type=1400 audit(1757114634.965:1638): avc: denied { ioctl } for pid=12926 comm="syz.4.1704" path="socket:[41802]" dev="sockfs" ino=41802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 643.166423][T12927] batman_adv: batadv0: Interface deactivated: dummy0 [ 643.218726][T12927] batman_adv: batadv0: Removing interface: dummy0 [ 643.401948][T12927] dummy0 (unregistering): left promiscuous mode [ 643.507724][T12869] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.549073][T12869] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.618314][T12869] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.659220][T12869] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.170368][T12869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.225939][T12869] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.324143][T12869] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.351645][T12869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.385708][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.392842][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.403204][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.408586][T12951] ubi: mtd0 is already attached to ubi31 [ 644.410303][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.050857][T12871] Bluetooth: hci6: command tx timeout [ 645.061090][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 645.061102][ T30] audit: type=1400 audit(1757114636.885:1640): avc: denied { setopt } for pid=12948 comm="syz.5.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 645.350792][ T978] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 645.510568][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 645.554925][ T978] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 645.805722][ T978] usb 5-1: config 179 has no interface number 0 [ 645.835912][ T978] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 645.876702][ T978] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 645.911881][ T978] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 645.966162][T12869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.970788][ T978] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 646.031043][ T978] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 646.081244][ T978] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 646.121172][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.159161][T12959] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 646.943725][ T30] audit: type=1400 audit(1757114638.485:1641): avc: denied { remount } for pid=12976 comm="syz.3.1714" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 646.989326][T12959] syzkaller1: entered promiscuous mode [ 647.081894][T12959] syzkaller1: entered allmulticast mode [ 647.095948][T12982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.107325][T12982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.138683][T12871] Bluetooth: hci6: command tx timeout [ 647.268543][T12869] veth0_vlan: entered promiscuous mode [ 647.305408][T12869] veth1_vlan: entered promiscuous mode [ 647.396705][T12985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.420141][T12869] veth0_macvtap: entered promiscuous mode [ 647.425618][T12985] Bluetooth: Invalid esc byte 0xf7 [ 647.459751][T12869] veth1_macvtap: entered promiscuous mode [ 647.556255][T12869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.699870][T12869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.851067][ T30] audit: type=1400 audit(1757114639.675:1642): avc: denied { read } for pid=12986 comm="syz.2.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 648.053645][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.099176][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.116757][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.134565][ T5924] usb 5-1: USB disconnect, device number 53 [ 648.134569][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 648.134610][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 648.192009][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.251776][T12991] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 648.274241][T12991] overlayfs: missing 'lowerdir' [ 648.274385][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.298690][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.635382][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.643343][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.661133][ T30] audit: type=1400 audit(1757114640.505:1643): avc: denied { mounton } for pid=12869 comm="syz-executor" path="/root/syzkaller.XQ5yIE/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 648.780384][ T30] audit: type=1400 audit(1757114640.505:1644): avc: denied { mounton } for pid=12869 comm="syz-executor" path="/root/syzkaller.XQ5yIE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 648.829871][ T30] audit: type=1400 audit(1757114640.505:1645): avc: denied { mounton } for pid=12869 comm="syz-executor" path="/root/syzkaller.XQ5yIE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=44061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 648.866977][ T30] audit: type=1400 audit(1757114640.565:1646): avc: denied { mounton } for pid=12869 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 649.023700][ T30] audit: type=1400 audit(1757114640.565:1647): avc: denied { mount } for pid=12869 comm="syz-executor" name="/" dev="gadgetfs" ino=7472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 649.399346][T13003] Invalid source name [ 649.672880][ T30] audit: type=1400 audit(1757114640.565:1648): avc: denied { mounton } for pid=12869 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 650.830150][T13016] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 650.839402][T13016] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 651.100593][ T5910] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 651.352307][T13029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1724'. [ 651.638853][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 651.644338][ T30] audit: type=1400 audit(1757114643.465:1649): avc: denied { accept } for pid=13023 comm="syz.3.1725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 651.710032][ T5910] usb 3-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 651.809661][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.855624][ T5910] usb 3-1: config 0 descriptor?? [ 652.427752][ T5910] gm12u320 3-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 652.573360][ T5910] gm12u320 3-1:0.0: probe with driver gm12u320 failed with error -5 [ 652.638333][ T5910] usb-storage 3-1:0.0: USB Mass Storage device detected [ 652.811613][ T5910] usb-storage 3-1:0.0: device ignored [ 653.292352][ T5910] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 653.451360][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 653.467676][ T5910] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 653.506391][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.585971][ T5910] usb 7-1: config 0 descriptor?? [ 653.633812][ T5910] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 653.686999][ T5973] usb 3-1: USB disconnect, device number 39 [ 653.931210][ T5924] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 654.113564][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 654.124463][ T5924] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 654.136446][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.321454][ T5924] usb 4-1: config 0 descriptor?? [ 654.753090][ T5924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 654.787273][ T5910] libceph: connect (1)[b::]:6789 error -101 [ 654.893383][ T5910] libceph: mon0 (1)[b::]:6789 connect error [ 655.003680][T13057] ceph: No mds server is up or the cluster is laggy [ 655.262253][ T5910] libceph: connect (1)[b::]:6789 error -101 [ 655.270173][ T5910] libceph: mon0 (1)[b::]:6789 connect error [ 655.436457][T13069] FAULT_INJECTION: forcing a failure. [ 655.436457][T13069] name failslab, interval 1, probability 0, space 0, times 0 [ 655.449610][T13069] CPU: 0 UID: 0 PID: 13069 Comm: syz.5.1734 Not tainted syzkaller #0 PREEMPT(full) [ 655.449635][T13069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 655.449650][T13069] Call Trace: [ 655.449656][T13069] [ 655.449663][T13069] dump_stack_lvl+0x16c/0x1f0 [ 655.449690][T13069] should_fail_ex+0x512/0x640 [ 655.449712][T13069] ? __kmalloc_noprof+0xbf/0x510 [ 655.449732][T13069] ? net_alloc_generic+0x1e/0x70 [ 655.449753][T13069] should_failslab+0xc2/0x120 [ 655.449774][T13069] __kmalloc_noprof+0xd2/0x510 [ 655.449789][T13069] ? __pfx___up_read+0x10/0x10 [ 655.449814][T13069] net_alloc_generic+0x1e/0x70 [ 655.449842][T13069] copy_net_ns+0xc6/0x5f0 [ 655.449865][T13069] ? copy_cgroup_ns+0x71/0x700 [ 655.449892][T13069] create_new_namespaces+0x3ea/0xa90 [ 655.449922][T13069] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 655.449948][T13069] ksys_unshare+0x45b/0xa40 [ 655.449974][T13069] ? __pfx_ksys_unshare+0x10/0x10 [ 655.449999][T13069] ? ksys_write+0x1ac/0x250 [ 655.450026][T13069] __x64_sys_unshare+0x31/0x40 [ 655.450050][T13069] do_syscall_64+0xcd/0x4c0 [ 655.450075][T13069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.450093][T13069] RIP: 0033:0x7f80ba58ebe9 [ 655.450107][T13069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.450124][T13069] RSP: 002b:00007f80b87b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 655.450141][T13069] RAX: ffffffffffffffda RBX: 00007f80ba7c6180 RCX: 00007f80ba58ebe9 [ 655.450153][T13069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 655.450163][T13069] RBP: 00007f80b87b4090 R08: 0000000000000000 R09: 0000000000000000 [ 655.450173][T13069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.450183][T13069] R13: 00007f80ba7c6218 R14: 00007f80ba7c6180 R15: 00007fff6e675ce8 [ 655.450207][T13069] [ 655.944732][ T5924] gspca_sonixj: reg_w1 err -110 [ 655.949666][ T5924] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 656.084819][ T5924] usb 7-1: USB disconnect, device number 2 [ 656.385474][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1737'. [ 656.871189][T13090] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1740'. [ 657.016695][T13087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 657.107073][ T5910] usb 4-1: USB disconnect, device number 65 [ 659.255196][T13123] trusted_key: encrypted_key: key user:syz not found [ 659.948686][ T5972] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 660.199102][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 660.251922][ T5972] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 660.420989][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.434431][ T5972] usb 5-1: config 0 descriptor?? [ 660.441439][ T5972] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 661.031312][ T30] audit: type=1400 audit(1757114652.845:1650): avc: denied { getopt } for pid=13137 comm="syz.5.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 661.472423][ T5973] usb 5-1: USB disconnect, device number 54 [ 661.525488][T13146] 9pnet_fd: Insufficient options for proto=fd [ 661.663463][T13151] Invalid source name [ 661.790732][ T5972] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 661.999592][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.161868][T13160] ubi: mtd0 is already attached to ubi31 [ 663.030599][ T5972] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 663.039845][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.128886][ T5972] usb 3-1: config 0 descriptor?? [ 663.472846][T13170] loop2: detected capacity change from 0 to 7 [ 663.655287][ C1] blk_print_req_error: 27 callbacks suppressed [ 663.655302][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.670681][ C1] buffer_io_error: 27 callbacks suppressed [ 663.670695][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.684896][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.694039][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.703223][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.712335][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.720496][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.729634][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.738195][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.747453][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.761421][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.770618][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.782567][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.791716][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.820693][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.829883][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.837890][T13170] ldm_validate_partition_table(): Disk read failed. [ 663.853602][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.862822][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.887949][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 663.897127][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 663.928695][T13170] Dev loop2: unable to read RDB block 0 [ 663.944825][T13170] loop2: unable to read partition table [ 663.950651][T13170] loop2: partition table beyond EOD, truncated [ 663.956865][T13170] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 665.663820][T13180] binder: BINDER_SET_CONTEXT_MGR already set [ 665.670270][T13180] binder: 13179:13180 ioctl 4018620d 2000000002c0 returned -16 [ 665.686725][ T30] audit: type=1400 audit(1757114657.515:1651): avc: denied { map } for pid=13179 comm="syz.4.1762" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 665.713902][T13180] binder: 13179:13180 ioctl c0306201 200000000240 returned -11 [ 666.267655][ T5972] usbhid 3-1:0.0: can't add hid device: -71 [ 666.279901][ T5972] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 666.424987][ T5972] usb 3-1: USB disconnect, device number 40 [ 666.612779][ T5973] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 666.954160][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 666.966564][ T5973] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 666.983939][ T5973] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 667.010312][ T5973] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 667.044925][ T5973] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.070253][ T5973] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 667.120664][T13200] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 667.160754][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.281861][T13200] block device autoloading is deprecated and will be removed. [ 667.510664][T13202] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 667.630719][ T5973] usb 4-1: GET_CAPABILITIES returned 0 [ 667.636238][ T5973] usbtmc 4-1:16.0: can't read capabilities [ 667.836967][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 669.294626][T13228] trusted_key: encrypted_key: key user:syz not found [ 669.481226][ T5973] usb 4-1: USB disconnect, device number 66 [ 670.845425][T13250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1778'. [ 670.987795][ T5910] libceph: connect (1)[b::]:6789 error -101 [ 671.013741][ T5910] libceph: mon0 (1)[b::]:6789 connect error [ 671.206081][T13252] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.213413][T13252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.222177][T13252] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.229420][T13252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.245429][T13252] bridge0: left allmulticast mode [ 671.343333][ T5910] libceph: connect (1)[b::]:6789 error -101 [ 671.349394][ T5910] libceph: mon0 (1)[b::]:6789 connect error [ 671.367163][T13252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 671.768349][ T5910] libceph: connect (1)[b::]:6789 error -101 [ 671.775243][ T5910] libceph: mon0 (1)[b::]:6789 connect error [ 672.119175][ T5973] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 672.313577][ T30] audit: type=1400 audit(672.295:1652): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 672.336262][ T5973] usb 7-1: Using ep0 maxpacket: 32 [ 672.414790][T13253] ceph: No mds server is up or the cluster is laggy [ 672.453756][ T5973] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 672.471222][ T5973] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.514351][ T5973] usb 7-1: config 0 has no interface number 0 [ 672.523519][ T5973] usb 7-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 672.539267][ T5973] usb 7-1: config 0 interface 196 has no altsetting 0 [ 672.555670][ T5973] usb 7-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 672.616191][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.627082][ T5973] usb 7-1: Product: syz [ 672.630883][ T5910] libceph: connect (1)[b::]:6789 error -101 [ 672.633994][ T5973] usb 7-1: Manufacturer: syz [ 672.643200][ T5973] usb 7-1: SerialNumber: syz [ 672.647467][ T5910] libceph: mon0 (1)[b::]:6789 connect error [ 672.674727][ T5973] usb 7-1: config 0 descriptor?? [ 672.743402][ T5973] ipheth 7-1:0.196: Unable to find endpoints [ 673.412316][T13271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1785'. [ 674.668879][T13286] trusted_key: encrypted_key: key user:syz not found [ 674.819140][ T5973] usb 7-1: USB disconnect, device number 3 [ 674.931916][ T30] audit: type=1400 audit(674.915:1653): avc: denied { bind } for pid=13287 comm="syz.2.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 674.974939][T13290] FAULT_INJECTION: forcing a failure. [ 674.974939][T13290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.035910][T13290] CPU: 1 UID: 0 PID: 13290 Comm: syz.6.1792 Not tainted syzkaller #0 PREEMPT(full) [ 675.035937][T13290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.035947][T13290] Call Trace: [ 675.035953][T13290] [ 675.035960][T13290] dump_stack_lvl+0x16c/0x1f0 [ 675.035988][T13290] should_fail_ex+0x512/0x640 [ 675.036014][T13290] _copy_from_user+0x2e/0xd0 [ 675.036041][T13290] do_hidp_sock_ioctl.constprop.0+0x367/0x510 [ 675.036062][T13290] ? __pfx_do_hidp_sock_ioctl.constprop.0+0x10/0x10 [ 675.036100][T13290] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 675.036120][T13290] ? kasan_quarantine_put+0x10a/0x240 [ 675.036152][T13290] ? tomoyo_path_number_perm+0x18d/0x580 [ 675.036183][T13290] sock_do_ioctl+0x118/0x280 [ 675.036211][T13290] ? __pfx_sock_do_ioctl+0x10/0x10 [ 675.036243][T13290] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 675.036271][T13290] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 675.036301][T13290] sock_ioctl+0x227/0x6b0 [ 675.036328][T13290] ? __pfx_sock_ioctl+0x10/0x10 [ 675.036352][T13290] ? hook_file_ioctl_common+0x145/0x410 [ 675.036376][T13290] ? selinux_file_ioctl+0x180/0x270 [ 675.036398][T13290] ? selinux_file_ioctl+0xb4/0x270 [ 675.036424][T13290] ? __pfx_sock_ioctl+0x10/0x10 [ 675.036451][T13290] __x64_sys_ioctl+0x18e/0x210 [ 675.036479][T13290] do_syscall_64+0xcd/0x4c0 [ 675.036503][T13290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.036520][T13290] RIP: 0033:0x7fe3ebd8ebe9 [ 675.036534][T13290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.036551][T13290] RSP: 002b:00007fe3ecc64038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.036569][T13290] RAX: ffffffffffffffda RBX: 00007fe3ebfc5fa0 RCX: 00007fe3ebd8ebe9 [ 675.036581][T13290] RDX: 0000200000000140 RSI: 00000000400448c8 RDI: 0000000000000007 [ 675.036591][T13290] RBP: 00007fe3ecc64090 R08: 0000000000000000 R09: 0000000000000000 [ 675.036602][T13290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.036612][T13290] R13: 00007fe3ebfc6038 R14: 00007fe3ebfc5fa0 R15: 00007ffd0eb3f1d8 [ 675.036642][T13290] [ 675.295336][T13298] FAULT_INJECTION: forcing a failure. [ 675.295336][T13298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.713105][T13298] CPU: 1 UID: 0 PID: 13298 Comm: syz.5.1794 Not tainted syzkaller #0 PREEMPT(full) [ 675.713129][T13298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.713135][T13298] Call Trace: [ 675.713140][T13298] [ 675.713144][T13298] dump_stack_lvl+0x16c/0x1f0 [ 675.713161][T13298] should_fail_ex+0x512/0x640 [ 675.713178][T13298] _copy_from_user+0x2e/0xd0 [ 675.713194][T13298] copy_msghdr_from_user+0x98/0x160 [ 675.713208][T13298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 675.713228][T13298] ___sys_sendmsg+0xfe/0x1d0 [ 675.713241][T13298] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.713271][T13298] __sys_sendmsg+0x16d/0x220 [ 675.713284][T13298] ? __pfx___sys_sendmsg+0x10/0x10 [ 675.713305][T13298] do_syscall_64+0xcd/0x4c0 [ 675.713320][T13298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.713331][T13298] RIP: 0033:0x7f80ba58ebe9 [ 675.713340][T13298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.713350][T13298] RSP: 002b:00007f80b87f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.713361][T13298] RAX: ffffffffffffffda RBX: 00007f80ba7c5fa0 RCX: 00007f80ba58ebe9 [ 675.713368][T13298] RDX: 0000000020008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 675.713376][T13298] RBP: 00007f80b87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 675.713383][T13298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.713389][T13298] R13: 00007f80ba7c6038 R14: 00007f80ba7c5fa0 R15: 00007fff6e675ce8 [ 675.713402][T13298] [ 676.277211][T13312] loop2: detected capacity change from 0 to 7 [ 676.487448][ C0] blk_print_req_error: 6 callbacks suppressed [ 676.487459][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.502653][ C0] buffer_io_error: 6 callbacks suppressed [ 676.502662][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.563342][ T5910] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 676.597695][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.606868][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.616444][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.625576][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.633818][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.642947][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.652185][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.661317][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.669371][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.678492][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.687327][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.696441][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.706684][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.715821][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.723649][T13312] ldm_validate_partition_table(): Disk read failed. [ 676.731288][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.740410][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.748644][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 676.757756][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 676.766427][T13312] Dev loop2: unable to read RDB block 0 [ 676.772624][T13312] loop2: unable to read partition table [ 676.778390][T13312] loop2: partition table beyond EOD, truncated [ 676.784588][T13312] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 677.140487][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 677.417885][ T5910] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 677.568972][ T5910] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 677.582543][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 677.624248][ T5910] usb 3-1: SerialNumber: syz [ 677.647387][ T5910] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 677.660011][ T5910] usb-storage 3-1:1.0: USB Mass Storage device detected [ 677.687293][ T5910] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 677.828455][T13331] netlink: 'syz.6.1800': attribute type 1 has an invalid length. [ 677.828471][T13331] netlink: 'syz.6.1800': attribute type 4 has an invalid length. [ 677.828478][T13331] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.1800'. [ 677.878723][ T5910] scsi host1: usb-storage 3-1:1.0 [ 678.335571][T13339] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 678.398732][T13341] netlink: 'syz.2.1793': attribute type 3 has an invalid length. [ 678.416127][T13341] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1793'. [ 678.562955][T13330] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 678.601446][T13345] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 678.601484][T13345] SELinux: failed to load policy [ 679.078985][ T30] audit: type=1400 audit(678.965:1654): avc: denied { write } for pid=13343 comm="syz.6.1803" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 679.440776][ T5910] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 679.622277][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.632423][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 679.695811][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.099041][ T5910] usb 5-1: config 0 descriptor?? [ 682.404391][ T5973] usb 3-1: USB disconnect, device number 41 [ 682.690616][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 682.837722][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 682.894848][ T5910] usb 5-1: USB disconnect, device number 55 [ 683.080519][ T5972] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 683.240828][ T5972] usb 4-1: Using ep0 maxpacket: 8 [ 683.250600][ T5972] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 683.275073][ T5972] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 683.380506][ T5972] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 683.907589][ T5972] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 684.043152][T13385] trusted_key: encrypted_key: insufficient parameters specified [ 684.191904][ T5972] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 684.279660][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.599443][T13392] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.606794][T13392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.615569][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.622879][T13392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.630872][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 684.638178][T13392] bridge0: left allmulticast mode [ 684.673008][T13392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 684.732382][ T5972] usb 4-1: GET_CAPABILITIES returned 0 [ 684.737904][ T5972] usbtmc 4-1:16.0: can't read capabilities [ 684.947805][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 684.963451][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 684.982586][ T5897] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 684.996614][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 685.001758][ T5973] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 685.007080][ T5897] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 685.102717][ T5897] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.177208][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.300305][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.307272][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.330920][ T5897] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 685.340144][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.497677][ T5973] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 685.516883][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.542971][ T5973] usb 5-1: config 0 descriptor?? [ 685.719558][ T5897] usb 7-1: GET_CAPABILITIES returned 0 [ 685.725755][ T5897] usbtmc 7-1:16.0: can't read capabilities [ 687.014251][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 687.036466][ T9] usb 4-1: USB disconnect, device number 67 [ 687.310040][ T5924] usb 7-1: USB disconnect, device number 4 [ 687.427878][ T5973] usbhid 5-1:0.0: can't add hid device: -71 [ 687.435669][ T5973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 687.469233][ T5973] usb 5-1: USB disconnect, device number 56 [ 687.861123][T13419] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 688.028196][T13425] tipc: Enabling of bearer rejected, failed to enable media [ 688.470622][ T5973] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 688.668378][T13421] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 688.870428][T13437] trusted_key: encrypted_key: key user:syz not found [ 688.996930][ T5973] usb 6-1: Using ep0 maxpacket: 16 [ 689.022574][ T5973] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 689.050664][ T5973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.097183][ T5973] usb 6-1: config 0 descriptor?? [ 689.139213][ T5973] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 689.183466][T13441] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 689.350775][T13441] overlayfs: missing 'lowerdir' [ 690.102143][ T5973] gspca_sonixj: reg_r err -71 [ 690.107600][ T5973] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 690.120842][ T5973] usb 6-1: USB disconnect, device number 37 [ 690.952488][T13458] trusted_key: encrypted_key: insufficient parameters specified [ 691.687733][T13471] loop2: detected capacity change from 0 to 7 [ 691.864201][ C0] blk_print_req_error: 11 callbacks suppressed [ 691.864217][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 691.879570][ C0] buffer_io_error: 11 callbacks suppressed [ 691.879583][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 691.893749][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 691.902939][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 691.920367][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 691.929575][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 691.938055][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 691.947215][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 691.957386][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 691.966550][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 691.974839][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 691.981182][ T5973] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 691.984012][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 692.001652][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 692.010802][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 692.019821][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 692.028972][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 692.036847][T13471] ldm_validate_partition_table(): Disk read failed. [ 692.044070][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 692.053180][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 692.070487][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 692.079645][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 692.091650][T13471] Dev loop2: unable to read RDB block 0 [ 692.100501][T13471] loop2: unable to read partition table [ 692.106246][T13471] loop2: partition table beyond EOD, truncated [ 692.112520][T13471] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 692.220671][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 692.321496][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 692.331354][ T30] audit: type=1400 audit(692.305:1655): avc: denied { create } for pid=13475 comm="syz.5.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 692.366198][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 692.408225][ T30] audit: type=1400 audit(692.305:1656): avc: denied { setopt } for pid=13475 comm="syz.5.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 692.427527][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 692.453410][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 692.484487][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 692.569023][T13480] trusted_key: encrypted_key: key user:syz not found [ 692.610686][ T5897] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 692.835295][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.900760][ T5897] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 692.919068][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.945765][ T5897] usb 6-1: config 0 descriptor?? [ 693.278747][ T5973] usb 5-1: GET_CAPABILITIES returned 0 [ 693.485914][ T5897] nintendo 0003:057E:200E.0018: unknown main item tag 0x0 [ 693.508541][ T5973] usbtmc 5-1:16.0: can't read capabilities [ 693.540830][ T5897] nintendo 0003:057E:200E.0018: unknown main item tag 0x0 [ 693.553219][ T5897] nintendo 0003:057E:200E.0018: unknown main item tag 0x0 [ 693.563389][ T5897] nintendo 0003:057E:200E.0018: unknown main item tag 0x0 [ 693.570825][ T5897] nintendo 0003:057E:200E.0018: unknown main item tag 0x0 [ 693.668952][ T5897] nintendo 0003:057E:200E.0018: hidraw0: USB HID v81.01 Device [HID 057e:200e] on usb-dummy_hcd.5-1/input0 [ 694.041015][ T5897] nintendo 0003:057E:200E.0018: Failed charging grip handshake [ 694.154903][ T5897] nintendo 0003:057E:200E.0018: Failed to initialize controller; ret=-110 [ 694.226678][T13498] trusted_key: encrypted_key: insufficient parameters specified [ 694.277170][ T5897] nintendo 0003:057E:200E.0018: probe - fail = -110 [ 694.317498][ T5897] nintendo 0003:057E:200E.0018: probe with driver nintendo failed with error -110 [ 694.360739][ T5897] usb 6-1: USB disconnect, device number 38 [ 695.085381][ T9] usb 5-1: USB disconnect, device number 57 [ 695.848429][T13517] FAULT_INJECTION: forcing a failure. [ 695.848429][T13517] name failslab, interval 1, probability 0, space 0, times 0 [ 695.901115][T13517] CPU: 1 UID: 0 PID: 13517 Comm: syz.2.1845 Not tainted syzkaller #0 PREEMPT(full) [ 695.901141][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 695.901158][T13517] Call Trace: [ 695.901164][T13517] [ 695.901171][T13517] dump_stack_lvl+0x16c/0x1f0 [ 695.901199][T13517] should_fail_ex+0x512/0x640 [ 695.901221][T13517] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 695.901243][T13517] should_failslab+0xc2/0x120 [ 695.901264][T13517] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 695.901281][T13517] ? __alloc_skb+0x2b2/0x380 [ 695.901305][T13517] __alloc_skb+0x2b2/0x380 [ 695.901324][T13517] ? __pfx___alloc_skb+0x10/0x10 [ 695.901346][T13517] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 695.901373][T13517] netlink_alloc_large_skb+0x69/0x130 [ 695.901397][T13517] netlink_sendmsg+0x6a1/0xdd0 [ 695.901423][T13517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.901455][T13517] ____sys_sendmsg+0xa98/0xc70 [ 695.901480][T13517] ? copy_msghdr_from_user+0x10a/0x160 [ 695.901500][T13517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.901537][T13517] ___sys_sendmsg+0x134/0x1d0 [ 695.901557][T13517] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.901599][T13517] __sys_sendmsg+0x16d/0x220 [ 695.901617][T13517] ? __pfx___sys_sendmsg+0x10/0x10 [ 695.901647][T13517] do_syscall_64+0xcd/0x4c0 [ 695.901667][T13517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.901682][T13517] RIP: 0033:0x7f2f83f8ebe9 [ 695.901694][T13517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.901709][T13517] RSP: 002b:00007f2f84ea1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.901724][T13517] RAX: ffffffffffffffda RBX: 00007f2f841c5fa0 RCX: 00007f2f83f8ebe9 [ 695.901733][T13517] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 695.901742][T13517] RBP: 00007f2f84ea1090 R08: 0000000000000000 R09: 0000000000000000 [ 695.901751][T13517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 695.901759][T13517] R13: 00007f2f841c6038 R14: 00007f2f841c5fa0 R15: 00007ffda7dce5e8 [ 695.901779][T13517] [ 696.133671][ T30] audit: type=1400 audit(696.115:1657): avc: denied { create } for pid=13518 comm="syz.6.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 696.178075][ T30] audit: type=1400 audit(696.135:1658): avc: denied { setopt } for pid=13518 comm="syz.6.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 696.213730][ T9] IPVS: starting estimator thread 0... [ 696.310671][T13520] IPVS: using max 75 ests per chain, 180000 per kthread [ 696.703759][T13527] tmpfs: Unknown parameter '' [ 696.735337][T13531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1851'. [ 696.791575][ T978] kernel write not supported for file 1082/task/1083/setgroups (pid: 978 comm: kworker/1:2) [ 697.022373][T13527] overlay: Unknown parameter 'smackfshat' [ 697.057640][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1851'. [ 697.523199][T13542] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 697.529449][T13533] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 697.576812][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 697.842960][T13551] FAULT_INJECTION: forcing a failure. [ 697.842960][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.856114][T13551] CPU: 0 UID: 0 PID: 13551 Comm: syz.3.1853 Not tainted syzkaller #0 PREEMPT(full) [ 697.856137][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.856148][T13551] Call Trace: [ 697.856155][T13551] [ 697.856162][T13551] dump_stack_lvl+0x16c/0x1f0 [ 697.856189][T13551] should_fail_ex+0x512/0x640 [ 697.856215][T13551] _copy_from_user+0x2e/0xd0 [ 697.856242][T13551] __sys_bpf+0x21d/0x4de0 [ 697.856270][T13551] ? __pfx___sys_bpf+0x10/0x10 [ 697.856292][T13551] ? migrate_enable+0x1ed/0x260 [ 697.856313][T13551] ? __pfx_migrate_enable+0x10/0x10 [ 697.856336][T13551] ? __pfx___cant_migrate+0x10/0x10 [ 697.856361][T13551] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 697.856402][T13551] ? fput+0x9b/0xd0 [ 697.856427][T13551] ? ksys_write+0x1ac/0x250 [ 697.856452][T13551] __x64_sys_bpf+0x78/0xc0 [ 697.856477][T13551] do_syscall_64+0xcd/0x4c0 [ 697.856504][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.856522][T13551] RIP: 0033:0x7f327f58ebe9 [ 697.856537][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.856555][T13551] RSP: 002b:00007f3280325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.856572][T13551] RAX: ffffffffffffffda RBX: 00007f327f7c6180 RCX: 00007f327f58ebe9 [ 697.856584][T13551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000f [ 697.856595][T13551] RBP: 00007f3280325090 R08: 0000000000000000 R09: 0000000000000000 [ 697.856605][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.856616][T13551] R13: 00007f327f7c6218 R14: 00007f327f7c6180 R15: 00007ffcbc8aa4d8 [ 697.856640][T13551] [ 698.561864][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1855'. [ 698.612694][T13554] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1855'. [ 698.692135][T13554] netlink: 50 bytes leftover after parsing attributes in process `syz.6.1855'. [ 698.933537][T13560] No source specified [ 698.968769][T13560] tipc: Enabling of bearer rejected, failed to enable media [ 699.170255][ T5981] Bluetooth: hci7: Frame reassembly failed (-84) [ 699.359181][T13566] ubi: mtd0 is already attached to ubi31 [ 700.175892][T13581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 700.281148][ T5973] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 700.450654][ T5973] usb 4-1: Using ep0 maxpacket: 8 [ 700.470710][ T30] audit: type=1400 audit(700.445:1659): avc: denied { shutdown } for pid=13578 comm="syz.6.1863" laddr=::1 lport=36485 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 700.530624][ T5973] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 700.579728][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 700.600945][ T5973] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.618346][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.629516][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.647481][ T5973] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 700.665691][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 700.677028][ T5973] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.692509][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.704796][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.721075][ T5973] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 700.728561][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 700.744842][ T5973] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.757355][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.770944][ T5973] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 700.786902][ T5973] usb 4-1: string descriptor 0 read error: -22 [ 700.793344][ T5973] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 700.802423][ T5973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.891560][ T5973] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 700.982466][ T5897] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 701.180496][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 701.198461][ T5897] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 701.209374][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.220004][T12871] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 701.220681][ T5859] Bluetooth: hci7: command 0x1003 tx timeout [ 701.247455][T13562] mkiss: ax0: crc mode is auto. [ 701.281498][ T5897] usb 6-1: config 0 descriptor?? [ 701.297390][ T5897] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 701.695004][ T30] audit: type=1400 audit(701.675:1660): avc: denied { ioctl } for pid=13591 comm="syz.6.1866" path="socket:[45569]" dev="sockfs" ino=45569 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 702.186476][ T5897] gspca_sonixj: reg_r err -71 [ 702.191663][ T5897] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 702.459073][ T5897] usb 6-1: USB disconnect, device number 39 [ 703.116662][T13610] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 703.221104][ T5973] usb 4-1: USB disconnect, device number 68 [ 704.186745][T13629] netlink: 'syz.3.1874': attribute type 178 has an invalid length. [ 705.120772][T13411] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 705.301677][T13411] usb 5-1: Using ep0 maxpacket: 16 [ 705.318091][T13411] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 705.355010][T13411] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.397031][T13411] usb 5-1: config 0 descriptor?? [ 705.428283][T13411] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 706.521108][ T5897] libceph: connect (1)[b::]:6789 error -101 [ 706.544702][ T5897] libceph: mon0 (1)[b::]:6789 connect error [ 706.702802][T13671] ceph: No mds server is up or the cluster is laggy [ 706.903678][ T5897] libceph: connect (1)[b::]:6789 error -101 [ 706.909741][ T5897] libceph: mon0 (1)[b::]:6789 connect error [ 707.010639][ T9] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 707.180632][T13411] gspca_sonixj: i2c_w8 err -71 [ 707.202965][T13411] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 707.215873][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 707.236664][T13411] usb 5-1: USB disconnect, device number 58 [ 707.253009][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 707.268607][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 707.284369][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 707.314552][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.316052][ T5897] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 707.330249][ T9] usb 4-1: Product: syz [ 707.341288][ T9] usb 4-1: Manufacturer: syz [ 707.353481][ T9] usb 4-1: SerialNumber: syz [ 707.378010][ T9] usb 4-1: config 0 descriptor?? [ 707.395567][T13691] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 707.405593][T13691] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 707.432527][ T9] usb 4-1: ucan: probing device on interface #0 [ 707.483167][ T5897] usb 6-1: Using ep0 maxpacket: 32 [ 707.490289][ T5897] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 707.499289][ T5897] usb 6-1: config 0 has no interface number 0 [ 707.510335][ T5897] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 707.527590][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.535801][ T5897] usb 6-1: Product: syz [ 707.539995][ T5897] usb 6-1: Manufacturer: syz [ 707.544826][ T5897] usb 6-1: SerialNumber: syz [ 707.565552][ T5897] usb 6-1: config 0 descriptor?? [ 707.582786][ T5897] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 707.603245][T13699] random: crng reseeded on system resumption [ 707.613336][ T30] audit: type=1400 audit(707.585:1661): avc: denied { lock } for pid=13696 comm="syz.6.1884" path="socket:[46677]" dev="sockfs" ino=46677 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 707.645526][ T30] audit: type=1400 audit(707.585:1662): avc: denied { ioctl } for pid=13696 comm="syz.6.1884" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 707.785161][ T5897] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 707.827176][ T5897] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 707.847757][T13701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1885'. [ 707.852754][ T30] audit: type=1400 audit(707.825:1663): avc: denied { mount } for pid=13700 comm="syz.4.1885" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 707.897274][ T9] usb 4-1: ucan: failed to retrieve device info [ 707.934053][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 708.634252][T13693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.642830][T13693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.218772][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 709.219187][ T5924] usb 6-1: USB disconnect, device number 40 [ 709.279537][ T5924] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 709.311312][T13714] netlink: 'syz.6.1887': attribute type 8 has an invalid length. [ 709.336044][ T5924] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 709.358801][T13717] netlink: 'syz.6.1887': attribute type 8 has an invalid length. [ 709.382926][ T5924] quatech2 6-1:0.51: device disconnected [ 709.729546][T13731] FAULT_INJECTION: forcing a failure. [ 709.729546][T13731] name failslab, interval 1, probability 0, space 0, times 0 [ 709.742382][T13731] CPU: 0 UID: 0 PID: 13731 Comm: syz.4.1890 Not tainted syzkaller #0 PREEMPT(full) [ 709.742407][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.742418][T13731] Call Trace: [ 709.742424][T13731] [ 709.742432][T13731] dump_stack_lvl+0x16c/0x1f0 [ 709.742459][T13731] should_fail_ex+0x512/0x640 [ 709.742481][T13731] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 709.742512][T13731] should_failslab+0xc2/0x120 [ 709.742532][T13731] __kmalloc_cache_noprof+0x6a/0x3e0 [ 709.742559][T13731] ? fput+0x9b/0xd0 [ 709.742581][T13731] ? keyctl_watch_key+0x151/0x500 [ 709.742607][T13731] keyctl_watch_key+0x151/0x500 [ 709.742632][T13731] __do_sys_keyctl+0x123/0x590 [ 709.742656][T13731] do_syscall_64+0xcd/0x4c0 [ 709.742681][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.742700][T13731] RIP: 0033:0x7f4088d8ebe9 [ 709.742714][T13731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.742732][T13731] RSP: 002b:00007f4089ba8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 709.742750][T13731] RAX: ffffffffffffffda RBX: 00007f4088fc6180 RCX: 00007f4088d8ebe9 [ 709.742762][T13731] RDX: 000000000000000a RSI: 0000000023f8c6c8 RDI: 0000000000000020 [ 709.742773][T13731] RBP: 00007f4089ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 709.742784][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.742794][T13731] R13: 00007f4088fc6218 R14: 00007f4088fc6180 R15: 00007ffc76a871c8 [ 709.742819][T13731] [ 710.821268][ T5897] usb 4-1: USB disconnect, device number 69 [ 711.114169][T13747] bridge3: entered promiscuous mode [ 711.634251][ T30] audit: type=1400 audit(711.615:1664): avc: denied { ioctl } for pid=13754 comm="syz.4.1900" path="socket:[46759]" dev="sockfs" ino=46759 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 711.791022][ T5924] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 711.810621][T13411] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 711.986827][T13411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.020701][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.102624][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.173984][T13411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.298154][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.315320][T13411] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 712.395255][T13411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.410737][ T5924] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.444569][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.453401][T13411] usb 3-1: config 0 descriptor?? [ 712.503674][ T5924] usb 6-1: config 0 descriptor?? [ 712.865780][T13411] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x1 [ 712.880738][T13411] cm6533_jd 0003:0D8C:0022.0019: item fetching failed at offset 4/5 [ 712.905131][T13411] cm6533_jd 0003:0D8C:0022.0019: parse failed [ 712.914979][T13411] cm6533_jd 0003:0D8C:0022.0019: probe with driver cm6533_jd failed with error -22 [ 713.036987][ T5924] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 713.072383][T13411] usb 3-1: USB disconnect, device number 42 [ 714.941052][T13791] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 714.950656][T13791] SELinux: failed to load policy [ 715.465661][ T30] audit: type=1326 audit(715.025:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13788 comm="syz.4.1908" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4088d8ebe9 code=0x0 [ 715.490178][ T5924] usb 6-1: USB disconnect, device number 41 [ 716.138781][T13803] trusted_key: encrypted_key: insufficient parameters specified [ 716.515371][T13812] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1912'. [ 716.580691][ T5924] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 717.540540][ T5897] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 717.552784][ T30] audit: type=1800 audit(716.675:1666): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1915" name="bus" dev="overlay" ino=1959 res=0 errno=0 [ 717.660494][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 717.749051][T13819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13819 comm=syz.3.1916 [ 717.821538][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 717.840949][ T5897] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.882641][T13824] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1916'. [ 717.909050][ T5897] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 718.058872][ T5897] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 718.133702][ T5924] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 718.170631][ T5924] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 718.180330][ T5897] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 718.230572][ T5897] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 718.266636][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.321559][ T5897] hub 7-1:1.0: bad descriptor, ignoring hub [ 718.351976][ T5897] hub 7-1:1.0: probe with driver hub failed with error -5 [ 718.374350][ T5897] cdc_wdm 7-1:1.0: skipping garbage [ 718.393940][ T5897] cdc_wdm 7-1:1.0: skipping garbage [ 718.410857][ T30] audit: type=1400 audit(718.265:1667): avc: denied { create } for pid=13826 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 718.434863][ T5897] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 718.448618][ T5897] cdc_wdm 7-1:1.0: Unknown control protocol [ 718.618921][ T5924] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 718.621721][ T30] audit: type=1400 audit(718.595:1668): avc: denied { read write } for pid=13811 comm="syz.6.1914" name="cdc-wdm0" dev="devtmpfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 718.680862][ T30] audit: type=1400 audit(718.595:1669): avc: denied { open } for pid=13811 comm="syz.6.1914" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 718.682597][ T5924] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.465212][ T5924] usb 3-1: string descriptor 0 read error: -71 [ 719.471715][ T5924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 719.481620][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.561091][ T5924] usb 3-1: can't set config #1, error -71 [ 719.604405][ T5924] usb 3-1: USB disconnect, device number 43 [ 719.766944][T13841] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 719.777260][T13841] SELinux: failed to load policy [ 720.161660][T13813] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 720.203870][T13848] FAULT_INJECTION: forcing a failure. [ 720.203870][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 720.218676][T13848] CPU: 0 UID: 0 PID: 13848 Comm: syz.5.1923 Not tainted syzkaller #0 PREEMPT(full) [ 720.218701][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 720.218712][T13848] Call Trace: [ 720.218719][T13848] [ 720.218726][T13848] dump_stack_lvl+0x16c/0x1f0 [ 720.218752][T13848] should_fail_ex+0x512/0x640 [ 720.218774][T13848] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 720.218796][T13848] should_failslab+0xc2/0x120 [ 720.218817][T13848] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 720.218836][T13848] ? skb_clone+0x190/0x3f0 [ 720.218861][T13848] skb_clone+0x190/0x3f0 [ 720.218883][T13848] nfnetlink_rcv_batch+0x1cf/0x2330 [ 720.218919][T13848] ? __lock_acquire+0x62e/0x1ce0 [ 720.218950][T13848] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 720.218995][T13848] ? avc_has_perm_noaudit+0x149/0x3b0 [ 720.219017][T13848] ? __asan_memset+0x23/0x50 [ 720.219045][T13848] ? __nla_validate_parse+0x600/0x2880 [ 720.219078][T13848] ? __pfx___nla_validate_parse+0x10/0x10 [ 720.219107][T13848] ? cap_capable+0xb3/0x250 [ 720.219133][T13848] ? __nla_parse+0x40/0x60 [ 720.219167][T13848] nfnetlink_rcv+0x3c1/0x430 [ 720.219196][T13848] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 720.219230][T13848] netlink_unicast+0x5aa/0x870 [ 720.219257][T13848] ? __pfx_netlink_unicast+0x10/0x10 [ 720.219289][T13848] netlink_sendmsg+0x8d1/0xdd0 [ 720.219316][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.219348][T13848] ____sys_sendmsg+0xa98/0xc70 [ 720.219375][T13848] ? copy_msghdr_from_user+0x10a/0x160 [ 720.219396][T13848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.219432][T13848] ___sys_sendmsg+0x134/0x1d0 [ 720.219454][T13848] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.219488][T13848] __sys_sendmsg+0x16d/0x220 [ 720.219502][T13848] ? __pfx___sys_sendmsg+0x10/0x10 [ 720.219519][T13848] ? xfd_validate_state+0x61/0x180 [ 720.219541][T13848] do_syscall_64+0xcd/0x4c0 [ 720.219556][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.219569][T13848] RIP: 0033:0x7f80ba58ebe9 [ 720.219584][T13848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.219601][T13848] RSP: 002b:00007f80b87f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.219619][T13848] RAX: ffffffffffffffda RBX: 00007f80ba7c5fa0 RCX: 00007f80ba58ebe9 [ 720.219630][T13848] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 720.219642][T13848] RBP: 00007f80b87f6090 R08: 0000000000000000 R09: 0000000000000000 [ 720.219653][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.219664][T13848] R13: 00007f80ba7c6038 R14: 00007f80ba7c5fa0 R15: 00007fff6e675ce8 [ 720.219689][T13848] [ 720.656714][T13813] usb 7-1: device descriptor read/64, error -71 [ 720.794414][T13851] trusted_key: encrypted_key: insufficient parameters specified [ 721.110509][T13813] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 723.317799][T13872] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 723.327079][T13872] overlayfs: missing 'lowerdir' [ 724.700942][T13890] netlink: 'syz.3.1932': attribute type 5 has an invalid length. [ 725.230627][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 725.390541][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 725.397334][ T43] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 725.407256][ T43] usb 3-1: config 179 has no interface number 0 [ 725.456229][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 725.492828][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 725.512673][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 725.528409][ T43] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 725.550201][ T43] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 725.573697][ T43] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 725.590585][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.604526][T13897] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 725.704445][T13900] trusted_key: encrypted_key: key user:syz not found [ 726.310901][T13813] usb 7-1: device descriptor read/64, error -110 [ 726.373980][T13897] syzkaller1: entered promiscuous mode [ 726.379534][T13897] syzkaller1: entered allmulticast mode [ 726.450316][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.460648][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.723605][T13813] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 726.891058][T13813] usb 7-1: device descriptor read/8, error -32 [ 727.209564][T13813] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 727.244303][T13813] usb 7-1: device descriptor read/8, error -32 [ 727.424641][T13813] cdc_wdm 7-1:1.0: Error autopm - -16 [ 727.430543][ T5897] usb 7-1: USB disconnect, device number 5 [ 727.715893][ T5924] usb 3-1: USB disconnect, device number 44 [ 727.715906][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 727.715942][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 728.230534][ T5897] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 728.393006][ T5897] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 728.417806][ T5897] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.450861][ T5897] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 728.498956][ T5897] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 728.515715][ T5897] usb 7-1: Manufacturer: syz [ 728.529589][ T5897] usb 7-1: config 0 descriptor?? [ 728.642423][T13411] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 728.690552][ T5897] rc_core: IR keymap rc-hauppauge not found [ 728.696528][ T5897] Registered IR keymap rc-empty [ 728.711725][ T5897] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 728.723865][ T5897] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input39 [ 728.753712][ C1] igorplugusb 7-1:0.0: Error: urb status = -32 [ 728.789414][ T5897] usb 7-1: USB disconnect, device number 6 [ 728.823018][T13411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.834269][T13411] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 728.843423][T13411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.880382][T13411] usb 3-1: config 0 descriptor?? [ 728.882301][ T43] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 729.050687][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 729.060369][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 729.075298][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.380298][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 730.427227][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.486638][ T43] usb 5-1: config 0 descriptor?? [ 730.521803][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 730.674364][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 730.764014][T13940] loop2: detected capacity change from 0 to 7 [ 730.991859][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 731.003931][ C0] blk_print_req_error: 11 callbacks suppressed [ 731.003948][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.019343][ C0] buffer_io_error: 11 callbacks suppressed [ 731.019353][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.071964][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.081147][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.089339][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.098486][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.106572][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.115704][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.125233][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.134443][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.143495][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.152706][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.161051][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.170212][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.196521][T13411] usbhid 3-1:0.0: can't add hid device: -71 [ 731.209688][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.218837][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.226692][T13940] ldm_validate_partition_table(): Disk read failed. [ 731.235006][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.244170][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.252549][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 731.254087][T13411] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 731.261695][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 731.278301][T13940] Dev loop2: unable to read RDB block 0 [ 731.287122][T13940] loop2: unable to read partition table [ 731.294430][T13940] loop2: partition table beyond EOD, truncated [ 731.300598][T13940] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 731.347228][T13411] usb 3-1: USB disconnect, device number 45 [ 731.490517][ T5897] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 731.548278][T13950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.573832][T13948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1949'. [ 731.587421][T13951] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1949'. [ 731.599003][ T30] audit: type=1400 audit(731.555:1670): avc: denied { ioctl } for pid=13945 comm="syz.5.1949" path="socket:[48319]" dev="sockfs" ino=48319 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 731.631398][ T30] audit: type=1400 audit(731.605:1671): avc: denied { append } for pid=13945 comm="syz.5.1949" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 731.760931][ T5897] usb 7-1: no configurations [ 731.765601][ T5897] usb 7-1: can't read configurations, error -22 [ 731.875569][ T30] audit: type=1326 audit(731.835:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.209328][ T30] audit: type=1326 audit(731.835:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.234350][ T30] audit: type=1326 audit(731.845:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.258435][ T30] audit: type=1326 audit(731.845:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.287794][ T30] audit: type=1326 audit(731.845:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.311030][ T30] audit: type=1326 audit(731.845:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f327f58d550 code=0x7ffc0000 [ 732.316438][ T5897] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 732.336221][ T30] audit: type=1326 audit(731.845:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.365152][ T30] audit: type=1326 audit(731.845:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13952 comm="syz.3.1951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f327f58ebe9 code=0x7ffc0000 [ 732.398581][ T43] usb 5-1: USB disconnect, device number 59 [ 732.580501][T13961] input: syz1 as /devices/virtual/input/input40 [ 732.769663][ T5897] usb 7-1: no configurations [ 732.851593][ T5897] usb 7-1: can't read configurations, error -22 [ 732.891065][ T5897] usb usb7-port1: attempt power cycle [ 733.264106][T13976] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 733.490508][ T5897] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 733.623515][ T5897] usb 7-1: no configurations [ 733.628106][ T5897] usb 7-1: can't read configurations, error -22 [ 733.780634][ T5897] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 733.829546][ T5897] usb 7-1: no configurations [ 733.835804][ T5897] usb 7-1: can't read configurations, error -22 [ 733.858074][ T5897] usb usb7-port1: unable to enumerate USB device [ 735.500633][ T5931] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 735.788138][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 735.841923][ T5931] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 735.862324][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.874863][ T5931] usb 3-1: Product: syz [ 735.879779][ T5931] usb 3-1: Manufacturer: syz [ 735.885365][ T5931] usb 3-1: SerialNumber: syz [ 735.899692][ T5931] usb 3-1: config 0 descriptor?? [ 736.109144][ T5931] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 736.610605][T13411] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 736.917463][T13411] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 737.039198][T13411] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 737.589845][T13411] usb 4-1: config 0 interface 0 has no altsetting 0 [ 737.607026][T13411] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 737.631242][T13411] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 737.640190][T13411] usb 4-1: Product: syz [ 737.643739][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1968'. [ 737.644576][T13411] usb 4-1: Manufacturer: syz [ 737.658132][T13411] usb 4-1: SerialNumber: syz [ 737.682892][T13411] usb 4-1: config 0 descriptor?? [ 737.699883][T13411] hub 4-1:0.0: bad descriptor, ignoring hub [ 737.708607][T13411] hub 4-1:0.0: probe with driver hub failed with error -5 [ 737.724958][T13411] usb 4-1: selecting invalid altsetting 0 [ 738.396415][ T43] usb 4-1: USB disconnect, device number 70 [ 738.503314][ T5931] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 738.525800][ T5931] dvbdev: DVB: registering new adapter (Terratec H7) [ 738.546390][ T5931] usb 3-1: media controller created [ 738.622337][T14031] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 738.721205][ T5931] usb read operation failed. (-71) [ 738.740504][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 738.740523][ T30] audit: type=1400 audit(738.695:1688): avc: denied { write } for pid=13992 comm="syz.2.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 738.813313][ T5931] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 738.874777][ T5931] usb 3-1: USB disconnect, device number 46 [ 739.054529][ T43] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 739.502337][ T43] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 739.510736][ T43] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 739.545527][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 739.560273][ T43] usb 4-1: string descriptor 0 read error: -22 [ 739.569015][ T43] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 739.593959][ T43] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 739.630966][ T43] usb 4-1: config 0 descriptor?? [ 739.648426][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 739.666477][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 739.692657][ T43] usb 4-1: selecting invalid altsetting 0 [ 739.810498][ T5910] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 739.980625][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 740.073197][ T5910] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 740.083490][ T5910] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 740.140534][ T5973] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 740.141892][ T43] usb 4-1: USB disconnect, device number 71 [ 740.174860][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 740.206240][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 740.230997][ T5910] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 740.247186][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 740.512388][T14048] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 740.517641][T14048] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.518578][T14048] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.741915][ T5973] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 740.741941][ T5973] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 740.741960][ T5973] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 740.741996][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 740.742015][ T5973] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 740.744132][ T5973] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 740.744156][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 740.744174][ T5973] usb 3-1: Product: syz [ 740.744186][ T5973] usb 3-1: Manufacturer: syz [ 740.746820][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 740.746833][ T5973] cdc_wdm 3-1:1.0: skipping garbage [ 740.748921][ T5973] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 740.748939][ T5973] cdc_wdm 3-1:1.0: Unknown control protocol [ 740.793402][ T5910] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 740.793420][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.798123][ T5910] usb 6-1: config 0 descriptor?? [ 741.039492][ T5910] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 741.048130][ T5910] usb 6-1: USB disconnect, device number 42 [ 741.055499][ T5910] usblp1: removed [ 741.597693][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.597796][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 741.598034][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.598053][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 741.598244][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.598262][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 741.598452][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.598469][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 741.598537][ T5924] usb 3-1: USB disconnect, device number 47 [ 741.598658][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 741.598675][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 741.598691][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 741.958584][ T5910] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 742.524354][ T5910] usb 6-1: Using ep0 maxpacket: 32 [ 742.535583][ T5910] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 742.535609][ T5910] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 742.535627][ T5910] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 742.535664][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 742.535696][ T5910] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 742.535718][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 742.535753][ T5910] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 742.535774][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.537701][ T5910] usb 6-1: config 0 descriptor?? [ 742.599344][T14064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1980'. [ 742.607915][ T5910] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 742.618439][ T5910] usb 6-1: USB disconnect, device number 43 [ 742.624729][ T5910] usblp0: removed [ 742.792838][T14064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.070813][ T5897] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 743.323504][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.323532][ T5897] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 743.323545][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.345290][ T5897] usb 3-1: config 0 descriptor?? [ 743.668154][T14077] FAULT_INJECTION: forcing a failure. [ 743.668154][T14077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.668241][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.3.1983 Not tainted syzkaller #0 PREEMPT(full) [ 743.668264][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.668273][T14077] Call Trace: [ 743.668277][T14077] [ 743.668282][T14077] dump_stack_lvl+0x16c/0x1f0 [ 743.668300][T14077] should_fail_ex+0x512/0x640 [ 743.668316][T14077] _copy_to_user+0x32/0xd0 [ 743.668336][T14077] simple_read_from_buffer+0xcb/0x170 [ 743.668357][T14077] proc_fail_nth_read+0x197/0x240 [ 743.668377][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.668393][T14077] ? vfs_read+0x1d0/0xcf0 [ 743.668404][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 743.668416][T14077] vfs_read+0x1e1/0xcf0 [ 743.668428][T14077] ? __pfx___mutex_lock+0x10/0x10 [ 743.668443][T14077] ? __pfx_vfs_read+0x10/0x10 [ 743.668457][T14077] ? __fget_files+0x20e/0x3c0 [ 743.668469][T14077] ? sysvec_kvm_asyncpf_interrupt+0x80/0xc0 [ 743.668493][T14077] ksys_read+0x12a/0x250 [ 743.668510][T14077] ? __pfx_ksys_read+0x10/0x10 [ 743.668533][T14077] do_syscall_64+0xcd/0x4c0 [ 743.668553][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.668564][T14077] RIP: 0033:0x7f327f58d5fc [ 743.668573][T14077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 743.668584][T14077] RSP: 002b:00007f3280325030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 743.668595][T14077] RAX: ffffffffffffffda RBX: 00007f327f7c6180 RCX: 00007f327f58d5fc [ 743.668602][T14077] RDX: 000000000000000f RSI: 00007f32803250a0 RDI: 0000000000000006 [ 743.668609][T14077] RBP: 00007f3280325090 R08: 0000000000000000 R09: 0000000000000000 [ 743.668615][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.668622][T14077] R13: 00007f327f7c6218 R14: 00007f327f7c6180 R15: 00007ffcbc8aa4d8 [ 743.668646][T14077] [ 743.881234][ T30] audit: type=1400 audit(743.845:1689): avc: denied { name_bind } for pid=14067 comm="syz.5.1981" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 743.881967][T14080] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 743.881977][T14080] overlayfs: missing 'lowerdir' [ 744.342308][ T5897] wacom 0003:056A:032B.001B: unknown main item tag 0x0 [ 744.342339][ T5897] wacom 0003:056A:032B.001B: unknown main item tag 0x0 [ 744.342360][ T5897] wacom 0003:056A:032B.001B: unknown main item tag 0x0 [ 744.342381][ T5897] wacom 0003:056A:032B.001B: unknown main item tag 0x0 [ 744.342402][ T5897] wacom 0003:056A:032B.001B: unknown main item tag 0x0 [ 744.578025][ T30] audit: type=1400 audit(744.555:1690): avc: denied { read write } for pid=14087 comm="syz.6.1986" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 744.578071][ T30] audit: type=1400 audit(744.555:1691): avc: denied { open } for pid=14087 comm="syz.6.1986" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 744.578094][ T30] audit: type=1400 audit(744.555:1692): avc: denied { ioctl } for pid=14087 comm="syz.6.1986" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 744.689551][T14090] input: syz1 as /devices/virtual/input/input41 [ 744.773564][ T5973] usb 3-1: USB disconnect, device number 48 [ 745.100186][T14046] tty tty29: ldisc open failed (-12), clearing slot 28 [ 745.130692][T14076] tty tty4: ldisc open failed (-12), clearing slot 3 [ 745.781028][T14099] sp0: Synchronizing with TNC [ 745.884482][T14097] [U] [ 746.583628][ T5973] libceph: connect (1)[b::]:6789 error -101 [ 746.589733][ T5973] libceph: mon0 (1)[b::]:6789 connect error [ 746.755794][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.765089][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.793679][T14105] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 746.936709][T14109] ceph: No mds server is up or the cluster is laggy [ 746.940764][ T5973] libceph: connect (1)[b::]:6789 error -101 [ 747.322751][ T5973] libceph: mon0 (1)[b::]:6789 connect error [ 747.344102][T14105] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.352078][T14105] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.377209][T14121] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 747.400633][T14121] overlayfs: missing 'lowerdir' [ 747.757548][T14117] tipc: Started in network mode [ 747.762474][T14117] tipc: Node identity e6b29b8e0ebb, cluster identity 4711 [ 747.769644][T14117] tipc: Enabled bearer , priority 0 [ 747.776559][T14118] syzkaller0: entered promiscuous mode [ 747.782058][T14118] syzkaller0: entered allmulticast mode [ 747.820658][T14113] tipc: Resetting bearer [ 747.836328][T14113] tipc: Disabling bearer [ 747.859099][T14125] trusted_key: encrypted_key: insufficient parameters specified [ 748.215888][T14130] /dev/nullb0: Can't open blockdev [ 749.645404][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2000'. [ 752.186815][ T5851] libceph: connect (1)[b::]:6789 error -101 [ 752.202330][ T5851] libceph: mon0 (1)[b::]:6789 connect error [ 752.240746][ T5973] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 752.336501][T14167] ceph: No mds server is up or the cluster is laggy [ 752.436291][ T5973] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 752.440815][ T5897] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 752.453504][ T5973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.540020][ T5851] libceph: connect (1)[b::]:6789 error -101 [ 752.547181][ T5851] libceph: mon0 (1)[b::]:6789 connect error [ 752.554784][ T5973] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 752.564794][ T5973] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 752.572839][ T5973] usb 3-1: Manufacturer: syz [ 752.579978][ T5973] usb 3-1: config 0 descriptor?? [ 752.640479][ T5897] usb 6-1: Using ep0 maxpacket: 8 [ 752.647611][ T5897] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 752.683400][ T5897] usb 6-1: config 179 has no interface number 0 [ 752.720699][ T5897] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 752.771203][ T5897] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 752.792884][ T5897] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 752.810538][ T5973] rc_core: IR keymap rc-hauppauge not found [ 752.913624][T14179] input: syz1 as /devices/virtual/input/input43 [ 753.083987][ T5973] Registered IR keymap rc-empty [ 753.089790][ T5973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 753.106460][ T5897] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 753.139322][ T5973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42 [ 753.194079][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 753.240503][ T5897] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 753.349886][ T5897] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 753.410887][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.422761][T14185] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 753.451448][T14161] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 753.462535][ T5973] usb 3-1: USB disconnect, device number 49 [ 753.725767][T14191] ptrace attach of "./syz-executor exec"[12869] was attempted by "./syz-executor exec"[14191] [ 753.839343][ T5851] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 754.020963][ T5851] usb 4-1: device descriptor read/64, error -71 [ 754.111807][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 754.128625][ T5897] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input44 [ 754.204567][ T5973] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 754.271332][ T5851] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 754.386590][T14202] FAULT_INJECTION: forcing a failure. [ 754.386590][T14202] name failslab, interval 1, probability 0, space 0, times 0 [ 754.399350][T14202] CPU: 0 UID: 0 PID: 14202 Comm: syz.2.2014 Not tainted syzkaller #0 PREEMPT(full) [ 754.399374][T14202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.399384][T14202] Call Trace: [ 754.399391][T14202] [ 754.399397][T14202] dump_stack_lvl+0x16c/0x1f0 [ 754.399422][T14202] should_fail_ex+0x512/0x640 [ 754.399442][T14202] ? fs_reclaim_acquire+0xae/0x150 [ 754.399465][T14202] ? tomoyo_encode2+0x100/0x3e0 [ 754.399486][T14202] should_failslab+0xc2/0x120 [ 754.399506][T14202] __kmalloc_noprof+0xd2/0x510 [ 754.399530][T14202] tomoyo_encode2+0x100/0x3e0 [ 754.399567][T14202] tomoyo_encode+0x29/0x50 [ 754.399592][T14202] tomoyo_mount_acl+0x314/0x850 [ 754.399615][T14202] ? bpf_ksym_find+0x127/0x1c0 [ 754.399641][T14202] ? is_bpf_text_address+0x94/0x1a0 [ 754.399662][T14202] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 754.399684][T14202] ? __kernel_text_address+0xd/0x40 [ 754.399705][T14202] ? unwind_get_return_address+0x59/0xa0 [ 754.399726][T14202] ? arch_stack_walk+0xa6/0x100 [ 754.399772][T14202] ? tomoyo_domain+0xbb/0x150 [ 754.399790][T14202] ? tomoyo_profile+0x47/0x60 [ 754.399815][T14202] tomoyo_mount_permission+0x16d/0x420 [ 754.399839][T14202] ? tomoyo_mount_permission+0x14f/0x420 [ 754.399864][T14202] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 754.399904][T14202] security_sb_mount+0x9b/0x260 [ 754.399930][T14202] path_mount+0x15f/0x2000 [ 754.399957][T14202] ? __pfx_path_mount+0x10/0x10 [ 754.399982][T14202] ? kmem_cache_free+0x2d1/0x4d0 [ 754.399999][T14202] ? putname+0x154/0x1a0 [ 754.400025][T14202] ? putname+0x154/0x1a0 [ 754.400050][T14202] ? __x64_sys_mount+0x28d/0x310 [ 754.400071][T14202] __x64_sys_mount+0x28d/0x310 [ 754.400094][T14202] ? __pfx___x64_sys_mount+0x10/0x10 [ 754.400125][T14202] do_syscall_64+0xcd/0x4c0 [ 754.400150][T14202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.400168][T14202] RIP: 0033:0x7f2f83f8ebe9 [ 754.400183][T14202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.400200][T14202] RSP: 002b:00007f2f84e80038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.400217][T14202] RAX: ffffffffffffffda RBX: 00007f2f841c6090 RCX: 00007f2f83f8ebe9 [ 754.400229][T14202] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 754.400240][T14202] RBP: 00007f2f84e80090 R08: 0000200000000080 R09: 0000000000000000 [ 754.400251][T14202] R10: 0000000000000c00 R11: 0000000000000246 R12: 0000000000000002 [ 754.400262][T14202] R13: 00007f2f841c6128 R14: 00007f2f841c6090 R15: 00007ffda7dce5e8 [ 754.400286][T14202] [ 754.883047][ T5851] usb 4-1: device descriptor read/64, error -71 [ 754.910521][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 755.000821][ T5851] usb usb4-port1: attempt power cycle [ 755.094560][ T5973] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 755.108679][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 755.126693][T14161] syzkaller1: entered promiscuous mode [ 755.150096][ T5973] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 755.168371][T14161] syzkaller1: entered allmulticast mode [ 755.240182][ T5973] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.393922][ T5973] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 755.420807][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.457152][ T5851] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 756.117793][ T5851] usb 4-1: device descriptor read/8, error -71 [ 756.501320][ T5851] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 756.605874][ T5973] usb 5-1: GET_CAPABILITIES returned 0 [ 756.620443][ T5973] usbtmc 5-1:16.0: can't read capabilities [ 756.664448][ T5851] usb 4-1: device descriptor read/8, error -71 [ 756.785844][ T5851] usb usb4-port1: unable to enumerate USB device [ 756.832857][ T43] usb 6-1: USB disconnect, device number 44 [ 756.838795][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 756.838821][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 756.921505][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 757.054103][T14219] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 757.063987][T14219] SELinux: failed to load policy [ 758.073183][ T43] usb 5-1: USB disconnect, device number 60 [ 758.189954][T14230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 758.542532][T14236] input: syz1 as /devices/virtual/input/input45 [ 759.007158][T14239] input: syz1 as /devices/virtual/input/input46 [ 759.397170][T14242] trusted_key: encrypted_key: key user:syz not found [ 759.726522][T14248] geneve2: entered promiscuous mode [ 759.739934][T14248] geneve2: entered allmulticast mode [ 760.129279][ T30] audit: type=1800 audit(760.035:1693): pid=14253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.2025" name="bus" dev="overlay" ino=2226 res=0 errno=0 [ 760.470483][ T5851] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 760.806763][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 760.832141][ T5851] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 760.856469][T14263] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 760.866133][T14263] SELinux: failed to load policy [ 760.874548][ T5851] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.145334][ T5851] usb 6-1: config 0 has no interface number 0 [ 761.160808][ T5851] usb 6-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 761.198371][ T5851] usb 6-1: config 0 interface 196 has no altsetting 0 [ 761.263517][ T5851] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 761.275717][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.369562][ T5851] usb 6-1: Product: syz [ 761.374044][ T5851] usb 6-1: Manufacturer: syz [ 761.378636][ T5851] usb 6-1: SerialNumber: syz [ 761.390923][ T5851] usb 6-1: config 0 descriptor?? [ 761.407205][ T5851] ipheth 6-1:0.196: Unable to find endpoints [ 761.931485][ T5851] libceph: connect (1)[b::]:6789 error -101 [ 761.970874][ T5851] libceph: mon0 (1)[b::]:6789 connect error [ 762.115711][T14268] ceph: No mds server is up or the cluster is laggy [ 763.532951][T14287] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 763.693362][ T30] audit: type=1400 audit(763.675:1694): avc: denied { read } for pid=14293 comm="syz.4.2037" path="socket:[49457]" dev="sockfs" ino=49457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 763.877568][ T30] audit: type=1400 audit(763.775:1695): avc: denied { connect } for pid=14293 comm="syz.4.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 764.034197][ T5851] usb 6-1: USB disconnect, device number 45 [ 764.223648][T14303] trusted_key: encrypted_key: insufficient parameters specified [ 764.822333][T14309] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 764.832007][T14309] SELinux: failed to load policy [ 764.976226][T14314] bridge0: entered allmulticast mode [ 766.542635][T14325] bridge0: entered allmulticast mode [ 767.845630][ T30] audit: type=1400 audit(767.735:1696): avc: denied { bind } for pid=14330 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 767.937168][ T30] audit: type=1400 audit(767.735:1697): avc: denied { listen } for pid=14330 comm="syz.4.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.120524][ T30] audit: type=1400 audit(768.045:1698): avc: denied { mounton } for pid=14340 comm="syz.2.2049" path="/414/file0" dev="ramfs" ino=50252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 768.277327][T14351] loop2: detected capacity change from 0 to 7 [ 768.279468][ T30] audit: type=1400 audit(768.045:1699): avc: denied { read } for pid=14340 comm="syz.2.2049" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 768.320418][ C1] blk_print_req_error: 11 callbacks suppressed [ 768.320433][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.335734][ C1] buffer_io_error: 11 callbacks suppressed [ 768.335746][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.366514][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.375645][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.383822][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.392926][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.401400][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.410533][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.435566][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.444733][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.453260][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.462405][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.479739][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.488915][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.496823][T14351] ldm_validate_partition_table(): Disk read failed. [ 768.508071][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.517253][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.525565][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.534711][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.546496][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 768.550169][ T30] audit: type=1400 audit(768.045:1700): avc: denied { open } for pid=14340 comm="syz.2.2049" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 768.555644][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 768.588716][T14351] Dev loop2: unable to read RDB block 0 [ 768.595767][T14351] loop2: unable to read partition table [ 768.601537][T14351] loop2: partition table beyond EOD, truncated [ 768.607675][T14351] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 768.676338][ T30] audit: type=1400 audit(768.485:1701): avc: denied { write } for pid=14340 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 769.012069][T14358] netlink: 'syz.6.2051': attribute type 1 has an invalid length. [ 769.019926][T14358] netlink: 'syz.6.2051': attribute type 4 has an invalid length. [ 769.030569][T14358] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.2051'. [ 769.342846][ T30] audit: type=1400 audit(769.325:1702): avc: denied { unmount } for pid=5845 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 769.615583][T14362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 770.351228][T14373] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 770.360850][T14373] SELinux: failed to load policy [ 770.731594][T14376] No source specified [ 770.844814][ T5897] IPVS: starting estimator thread 0... [ 771.407661][T14380] IPVS: using max 42 ests per chain, 100800 per kthread [ 772.695566][ T5973] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 772.910457][ T5973] usb 3-1: device descriptor read/64, error -71 [ 773.015252][T14411] fuse: Bad value for 'fd' [ 773.032288][T14411] fuse: Bad value for 'fd' [ 773.160455][ T5973] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 773.358683][ T5910] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 773.552212][ T5910] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 773.700160][ T5910] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 7471, setting to 1024 [ 773.727435][ T5910] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 773.751769][ T5910] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 773.764697][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.782970][T14411] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 773.798551][ T5910] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 773.810685][ T5973] usb 3-1: device descriptor read/64, error -71 [ 773.963160][ T5973] usb usb3-port1: attempt power cycle [ 774.015492][ T5910] usb 7-1: USB disconnect, device number 11 [ 774.049257][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.158894][T14419] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 774.168642][T14419] SELinux: failed to load policy [ 774.286681][ T5851] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 774.431886][ T5973] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 774.480465][ T5973] usb 3-1: device descriptor read/8, error -71 [ 774.490656][ T5851] usb 5-1: device descriptor read/64, error -71 [ 774.530447][ T30] audit: type=1400 audit(774.505:1703): avc: denied { ioctl } for pid=14421 comm="syz.5.2068" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 774.566205][T14422] input: syz1 as /devices/virtual/input/input47 [ 774.720441][ T5973] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 774.730337][ T30] audit: type=1400 audit(774.685:1704): avc: denied { write } for pid=14424 comm="syz.6.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 774.760214][ T5851] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 774.856076][ T5973] usb 3-1: device descriptor read/8, error -71 [ 775.421132][ T5973] usb usb3-port1: unable to enumerate USB device [ 775.530891][ T31] INFO: task syz.1.1635:12659 blocked for more than 143 seconds. [ 775.538636][ T31] Not tainted syzkaller #0 [ 775.620779][ T5851] usb 5-1: device descriptor read/64, error -71 [ 775.659798][T14424] caif:caif_disconnect_client(): nothing to disconnect [ 775.681752][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 775.691388][ T31] task:syz.1.1635 state:D stack:26664 pid:12659 tgid:12651 ppid:5842 task_flags:0x400140 flags:0x00004004 [ 775.703644][ T31] Call Trace: [ 775.713250][ T31] [ 775.721511][ T31] __schedule+0x1190/0x5de0 [ 775.729510][ T31] ? check_path.constprop.0+0x24/0x50 [ 775.735273][ T31] ? __pfx___schedule+0x10/0x10 [ 775.740126][ T31] ? find_held_lock+0x2b/0x80 [ 775.744998][ T31] ? schedule+0x2d7/0x3a0 [ 775.749358][ T31] schedule+0xe7/0x3a0 [ 775.753458][ T31] io_schedule+0xbf/0x130 [ 775.757780][ T31] folio_wait_bit_common+0x3d6/0x9e0 [ 775.763094][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 775.768550][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 775.774588][ T31] ? filemap_get_folios_tag+0x46a/0xae0 [ 775.780129][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 775.785945][ T5851] usb usb5-port1: attempt power cycle [ 775.786099][ T31] folio_wait_writeback+0x3c/0x90 [ 775.796593][ T31] __filemap_fdatawait_range+0x11f/0x200 [ 775.802362][ T31] ? __pfx___filemap_fdatawait_range+0x10/0x10 [ 775.808893][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 775.814207][ T31] ? find_held_lock+0x2b/0x80 [ 775.818882][ T31] ? find_held_lock+0x2b/0x80 [ 775.823610][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 775.828465][ T31] filemap_fdatawait_keep_errors+0x21/0x30 [ 775.834295][ T31] sync_inodes_sb+0x5fa/0xa70 [ 775.838971][ T31] ? sync_inodes_sb+0x5e1/0xa70 [ 775.843869][ T31] ? __pfx_sync_inodes_sb+0x10/0x10 [ 775.849071][ T31] ? find_held_lock+0x2b/0x80 [ 775.853823][ T31] ? __iterate_supers+0x1b6/0x360 [ 775.858850][ T31] sync_inodes_one_sb+0x52/0x60 [ 775.863886][ T31] __iterate_supers+0x210/0x360 [ 775.868765][ T31] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 775.874647][ T31] ksys_sync+0x89/0x150 [ 775.878816][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 775.883635][ T31] ? rcu_is_watching+0x12/0xc0 [ 775.888436][ T31] ? do_syscall_64+0x91/0x4c0 [ 775.893143][ T31] __do_sys_sync+0xe/0x20 [ 775.897464][ T31] do_syscall_64+0xcd/0x4c0 [ 775.902003][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.907887][ T31] RIP: 0033:0x7f99d698ebe9 [ 775.912870][ T31] RSP: 002b:00007f99d4bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 775.921329][ T31] RAX: ffffffffffffffda RBX: 00007f99d6bc6090 RCX: 00007f99d698ebe9 [ 775.929307][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 775.937314][ T31] RBP: 00007f99d6bc6090 R08: 0000000000000000 R09: 0000000000000000 [ 775.945338][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.953360][ T31] R13: 00007f99d6bc6128 R14: 00007f99d6bc6090 R15: 00007fff924e1e78 [ 775.961392][ T31] [ 775.964464][ T31] [ 775.964464][ T31] Showing all locks held in the system: [ 775.972646][ T31] 1 lock held by ksoftirqd/0/15: [ 775.985243][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 775.997733][ T31] 1 lock held by khungtaskd/31: [ 776.005303][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 776.017484][ T31] 2 locks held by kworker/u8:5/1027: [ 776.026094][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 776.039232][ T31] #1: ffffc90003ddfd10 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 776.049857][ T31] 3 locks held by kworker/u8:6/1341: [ 776.055160][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 776.065341][ T31] #1: ffffc9000496fd10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 776.078153][ T31] #2: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: enqueue_task+0x20e/0x4e0 [ 776.087136][ T31] 2 locks held by getty/5604: [ 776.092138][ T31] #0: ffff88814d4e50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 776.101939][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 776.112066][ T31] 6 locks held by kworker/0:3/5851: [ 776.117253][ T31] #0: ffff8880232fed48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 776.128211][ T31] #1: ffffc90002f97d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 776.139670][ T5851] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 776.144790][ T31] #2: ffff8881453d8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 776.156225][ T31] #3: ffff8881453db518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2981/0x4fe0 [ 776.166318][ T31] #4: ffff88814376f168 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x29aa/0x4fe0 [ 776.171076][ T5851] usb 5-1: device descriptor read/8, error -71 [ 776.176113][ T31] #5: ffffc90000007ca8 ((&peer->timer_retransmit_handshake)){+.-.}-{0:0}, at: call_timer_fn+0x117/0x620 [ 776.194209][ T31] 3 locks held by syz.0.380/7462: [ 776.199231][ T31] #0: ffff88805a70e428 (sb_writers#20){.+.+}-{0:0}, at: do_pwritev+0x1a6/0x270 [ 776.208420][ T31] #1: ffff88805ce407b8 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: netfs_start_io_write+0x59/0x80 [ 776.220317][ T31] #2: ffff88805ce40b70 (&ctx->wb_lock){+.+.}-{4:4}, at: netfs_begin_writethrough+0x64/0x1c0 [ 776.231183][ T31] 2 locks held by syz.1.1635/12659: [ 776.236402][ T31] #0: ffff88805a70e0e0 (&type->s_umount_key#68){++++}-{4:4}, at: super_lock+0x31c/0x3f0 [ 776.246477][ T31] #1: ffff88805a70e950 (&s->s_sync_lock){+.+.}-{4:4}, at: sync_inodes_sb+0x231/0xa70 [ 776.256230][ T31] [ 776.258546][ T31] ============================================= [ 776.258546][ T31] [ 776.267272][ T31] NMI backtrace for cpu 1 [ 776.267285][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 776.267305][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.267315][ T31] Call Trace: [ 776.267321][ T31] [ 776.267329][ T31] dump_stack_lvl+0x116/0x1f0 [ 776.267352][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 776.267385][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 776.267413][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 776.267443][ T31] watchdog+0xf0e/0x1260 [ 776.267470][ T31] ? __pfx_watchdog+0x10/0x10 [ 776.267488][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.267511][ T31] ? __kthread_parkme+0x19e/0x250 [ 776.267537][ T31] ? __pfx_watchdog+0x10/0x10 [ 776.267557][ T31] kthread+0x3c2/0x780 [ 776.267575][ T31] ? __pfx_kthread+0x10/0x10 [ 776.267600][ T31] ? rcu_is_watching+0x12/0xc0 [ 776.267622][ T31] ? __pfx_kthread+0x10/0x10 [ 776.267641][ T31] ret_from_fork+0x5d4/0x6f0 [ 776.267657][ T31] ? __pfx_kthread+0x10/0x10 [ 776.267674][ T31] ret_from_fork_asm+0x1a/0x30 [ 776.267708][ T31] [ 776.267728][ T31] Sending NMI from CPU 1 to CPUs 0: [ 776.386626][ C0] NMI backtrace for cpu 0 [ 776.386640][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 776.386657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.386665][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 776.386685][ C0] Code: dc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 d3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 776.386699][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 776.386711][ C0] RAX: 0000000003c3fa4f RBX: 0000000000000000 RCX: ffffffff8b943c29 [ 776.386720][ C0] RDX: 0000000000000000 RSI: ffffffff8de519e8 RDI: ffffffff8c162b00 [ 776.386728][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 776.386737][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 776.386746][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab6190 R15: 0000000000000000 [ 776.386755][ C0] FS: 0000000000000000(0000) GS:ffff8881246b6000(0000) knlGS:0000000000000000 [ 776.386768][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.386778][ C0] CR2: 00007ffd0eb3dcb8 CR3: 000000007753e000 CR4: 00000000003526f0 [ 776.386787][ C0] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 776.386795][ C0] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 776.386803][ C0] Call Trace: [ 776.386808][ C0] [ 776.386813][ C0] default_idle+0x13/0x20 [ 776.386830][ C0] default_idle_call+0x6d/0xb0 [ 776.386847][ C0] do_idle+0x391/0x510 [ 776.386865][ C0] ? __pfx_do_idle+0x10/0x10 [ 776.386880][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 776.386897][ C0] cpu_startup_entry+0x4f/0x60 [ 776.386913][ C0] rest_init+0x16b/0x2b0 [ 776.386931][ C0] ? acpi_subsystem_init+0x133/0x180 [ 776.386945][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 776.386961][ C0] start_kernel+0x3ee/0x4d0 [ 776.386976][ C0] x86_64_start_reservations+0x18/0x30 [ 776.386990][ C0] x86_64_start_kernel+0x130/0x190 [ 776.387005][ C0] common_startup_64+0x13e/0x148 [ 776.387024][ C0] [ 776.388693][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 776.600262][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 776.609340][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 776.619372][ T31] Call Trace: [ 776.622637][ T31] [ 776.625554][ T31] dump_stack_lvl+0x3d/0x1f0 [ 776.630121][ T31] vpanic+0x6e8/0x7a0 [ 776.634093][ T31] ? __pfx_vpanic+0x10/0x10 [ 776.638572][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 776.644530][ T31] panic+0xca/0xd0 [ 776.648227][ T31] ? __pfx_panic+0x10/0x10 [ 776.652622][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 776.657973][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 776.664103][ T31] ? watchdog+0xd78/0x1260 [ 776.668494][ T31] ? watchdog+0xd6b/0x1260 [ 776.672882][ T31] watchdog+0xd89/0x1260 [ 776.677100][ T31] ? __pfx_watchdog+0x10/0x10 [ 776.681747][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 776.686918][ T31] ? __kthread_parkme+0x19e/0x250 [ 776.691929][ T31] ? __pfx_watchdog+0x10/0x10 [ 776.696576][ T31] kthread+0x3c2/0x780 [ 776.700616][ T31] ? __pfx_kthread+0x10/0x10 [ 776.705177][ T31] ? rcu_is_watching+0x12/0xc0 [ 776.709914][ T31] ? __pfx_kthread+0x10/0x10 [ 776.714474][ T31] ret_from_fork+0x5d4/0x6f0 [ 776.719035][ T31] ? __pfx_kthread+0x10/0x10 [ 776.723595][ T31] ret_from_fork_asm+0x1a/0x30 [ 776.728349][ T31] [ 776.731534][ T31] Kernel Offset: disabled [ 776.735835][ T31] Rebooting in 86400 seconds..