last executing test programs: 5m58.588618695s ago: executing program 3 (id=30): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = socket$inet6(0xa, 0x200000000003, 0x87) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x2}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000329bd7000fedbdf256300000008000300", @ANYRES32=r3, @ANYBLOB="6c51ee4960e9d6b8c7f1c9a74c5131044e608cc0a19aaeb6545e6ea4280313f6c52319440f8ee0048ea5521afe75ba1d37b17f7ecc7633ee0f48ebd35085c4c9fbb54f8abf906ab5a75b1cdb2fe0a2c1732adef1d188f72bccd77bebf8e3f2bbaf4eee7ef856a5944b4ba10372890910fdd3fd96fa695691cdbc8bc9dfef66fa13c2a349914172a9866ee41c7d"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4044801) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @local}}}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000500), 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x40044103, 0xf0ff1f00000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000001380)={0x0, 0x10, 0xf109, 0x8, 0x0, 0x4, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5m56.022172322s ago: executing program 3 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() socket$can_raw(0x1d, 0x3, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000240)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$getownex(r0, 0x10, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "09151995c95f32cc"}, 0x10}}, 0x44001) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(r0, &(0x7f00000003c0)=@hci, 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r6, 0x40085618, 0x0) ioperm(0x0, 0x82, 0x1f) r7 = socket$unix(0x1, 0x5, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r8, 0xc0d05604, &(0x7f0000000040)={0x8, @vbi={0x724a, 0x8, 0xefbe, 0x32435750, [0x4, 0x8], [0x1, 0x9], 0x108}}) fchown(r7, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 5m53.633995991s ago: executing program 3 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000005c0)={0x2, 0x0, 0x1, 0x20, 0x7a, 0x0}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x8, 0x8, 0xfffffffc}) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket(0x11, 0x800000003, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r8, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r9}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 5m48.620655176s ago: executing program 3 (id=48): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x300}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0xa4}}, 0x0) ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="080002000000ebff0b00000013000800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r8, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r8, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) 5m42.177090441s ago: executing program 3 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) setregid(r3, r3) stat(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{0x1, 0x0, r3, r4, 0x0, 0x2, 0x800}, 0x0, 0x0, 0x3, 0x3, 0x4000, 0x6, 0xd3e8, 0x1b, 0x1000, 0x9, 0x0, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESDEC=r5], &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_usb_connect(0x0, 0x36, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r7 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000340)}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) socket$inet6(0xa, 0x3, 0x1) 5m35.417941554s ago: executing program 3 (id=66): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0xf, 0x65, [@dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010101, @private=0xda]}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x1, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x64}}}}}, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x28543634fae43ad, 0xa6ff, 0x25dfdbff}, 0x14}}, 0x20044890) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000010000d0400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a400028004000380"], 0xd4}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb0, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2004c004}, 0x20000001) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000000c0)=0xeefe8000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) r11 = dup(r3) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = getpid() process_vm_readv(r13, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 5m19.366851377s ago: executing program 32 (id=66): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@rr={0x7, 0xf, 0x65, [@dev={0xac, 0x14, 0x14, 0x1e}, @private=0xa010101, @private=0xda]}, @timestamp_prespec={0x44, 0x24, 0xbf, 0x3, 0x1, [{@private=0xa010100}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@broadcast}, {@empty, 0x3}]}, @noop, @noop, @lsrr={0x83, 0x3, 0xdc}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo_reply={0x0, 0x0, 0x0, 0x64}}}}}, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x28543634fae43ad, 0xa6ff, 0x25dfdbff}, 0x14}}, 0x20044890) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000010000d0400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a400028004000380"], 0xd4}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xb0, 0x6}}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x84, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x2004c004}, 0x20000001) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000000c0)=0xeefe8000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0) r11 = dup(r3) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = getpid() process_vm_readv(r13, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 3m28.637361605s ago: executing program 1 (id=936): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 3m28.538269891s ago: executing program 1 (id=938): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000540)=ANY=[], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x83, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x49774}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x80}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x125fa}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x64}}, 0x4080) 3m27.906129555s ago: executing program 1 (id=939): socket$pppl2tp(0x18, 0x1, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3m27.78596531s ago: executing program 1 (id=941): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_ep_write(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a8", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x2000) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004"], 0x84}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 3m27.101285041s ago: executing program 1 (id=950): mkdir(&(0x7f0000000040)='./file1\x00', 0xc) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 3m26.492999525s ago: executing program 1 (id=953): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x68}}, 0x0) 3m9.892453307s ago: executing program 33 (id=953): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x68}}, 0x0) 27.13331185s ago: executing program 0 (id=1432): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$dri(0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x3, 0x800000000004}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0], 0x27) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000003c0)=@buf) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x800) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setrlimit(0x4, &(0x7f00000000c0)={0x6, 0x5}) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x40}, {}, {}, {}, {0x0, 0x2}, {}, {}, {0x80000000, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xcc1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x30}}, 0x0) 25.401779855s ago: executing program 0 (id=1435): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x3, 0x104) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r2, &(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close_range(r6, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) open(0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x1000, 0x1, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xe9, 0x2f, 0x0, @private, @local}}}}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 22.888967699s ago: executing program 0 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) epoll_create1(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0x15e, 0xb) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000000000000000086dd602c96ed00f05e7fd6f47cc6"], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000080)=0x18000000001) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r3, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 21.068927682s ago: executing program 0 (id=1443): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000740)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x8, &(0x7f0000000680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @exit, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='GPL\x00', 0xb8b6, 0xc3, &(0x7f0000000580)=""/195, 0x41100, 0x14, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ptrace(0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1], 0x108}}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r4, 0x800442d2, 0x200000f3) sendmsg$nl_generic(r3, 0x0, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x9}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x1, 0x8000, 0xab}) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 18.244836754s ago: executing program 0 (id=1447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000f3ff00000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000037f9cf40d7bf799a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060de30509f5e4d850000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x24, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x4e34}]}}]}, 0x38}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0xab4}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20044084) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000000280)="f3470fbc06c74424000600007848b8000b0000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001af80000c744240216383d27c744240600000000011c2466b8f0000f00d0400f06c74424009684f40ac744240230ff0000c7442406000000000f011424c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x91}], 0x1, 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x20000000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0xfe) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000200)={0x3, 0x200, 0xc0, 0x0}) 17.528933502s ago: executing program 5 (id=1450): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r1], 0x448}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x88) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r10, 0x0, 0x0) bind$inet6(r8, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80001, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f00000000c0), 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCDELRT(r9, 0x890c, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x1, [@null, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @default]}) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x24}}, 0x0) 15.796746182s ago: executing program 4 (id=1452): add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x5c9}, {0x0}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f0000000380)="c58cf2a0f0f863621a483b19e7ecfce0d34e53fbf2959272146847c314ac0cdfd79dc1815274c3ee57068b3793c243bc98585fab48eb353478689f452328afb023f75f93227bbe5a4aa3fea049ec0862c493e14eb44aacf27f9060bc2c826383c904750402dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5", 0x85}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3c", 0xf8}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e0fe02aa9077d7ddd960ba112fe1c64f57cba71e7ad8bbdc06a3299398e39498fc459bc1745e3d21a7ca987a4f4b774fe331d20dab2e846a721ff43b0491dc4cb32e16330e0d7d520f4887da0d6f356f8ef230b9b2374095ca6f14a6d13e03375c7029e28592c419bfb8957ac024ba8dc90ab15427410b870f3035ff95146d6e29f9b56ac096281d2f2b249f20c9fdc3239f838acc6b3433571d3043d", 0xaf}, {&(0x7f0000000500)="8700144add194dc92e62bfdc1de91e98227f67410fae0aa2958eeb11856055f582d7ed3b9ca5bf48d2e97becf8673e", 0x2f}, {&(0x7f00000008c0)="6aa7e221ef79afca996dde651fad6b8f1085c4567b3af29b90b3221f98f93ce7f8d32156d842e64f2dd8e9b969c22d076b5dbfb714449b009ff42ec0e2a2c178", 0x40}, {&(0x7f0000000080)="e94b02666c08000080", 0x9}], 0x9, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback}}}], 0x20}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x20364, 0x1) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'U+', 0x2}, 0x16, 0x3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) creat(0x0, 0x4) mount$9p_rdma(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x200000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x10000}}, {@rq={'rq', 0x3d, 0x9}}]}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 13.414210498s ago: executing program 4 (id=1455): socket$kcm(0x21, 0x2, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0), 0x0, 0x40a000) sendmsg$kcm(r3, &(0x7f0000000d40)={&(0x7f0000000540)=@in={0x2, 0x4e21, @private=0xa010102}, 0x80, &(0x7f0000000a40)=[{0x0}, {0x0}, {&(0x7f00000006c0)="5534eb447b3d7583cfd461e7f9a80985f12576510bcc78538f92462dee9c39c4b3b861412ec1c45313d6f678f392c2d87577b6c133042dbfef5101eb1e2670759c9f2f6b124313ba5d7e5e59e27e1d965ee4fbf9a84a0a8e78b6634634cad3973f3c9290c015164787a8fae89f8716fdd82454d53a48bd005ee609005122e131b9b3043c6c3a5926b3309f689d5c10f529679b8727032345568c40b4cddc803015373a14b54ce5ef9a09812b7c74c7b8d2991759741ebcac7ae6311071257a992a25357a", 0xc4}, {&(0x7f00000007c0)="9b1a2f6eab5d60c7d136e2353ffea106c52ad5b1b0476b5ccec63fcd402caede04fcc2fb69dda9b69ee4d878fecbe2f44159be20416776c6d31b242904d65270588fba40c3f2d8ad0c7cd40df644035ac6606cf2eee80757467bea6c1a1ea2586deb39f41053758da30fe893711a2bd1ed588fcd4bec8a1d5567d4008d52d1a49506611b86c3d5d90414426d0ac5f0732ec2d2e8fb04186d34a642a01ccdd826beb48e6fdaa07b9922fb09111e3e978d4dce642a47ea9cf59be45daca8b01b14c7d5d770bcf5eeb0c1e886831a8d956e562e293acf4ea8dbad07cc47b1d0bc165e519a07534272243ed6df2062fbb101eaed7e3a59e8e78b", 0xf8}, {&(0x7f00000009c0)="a60e9b66394c727561b811d91500ed6e2447a5ed8a874f29090fc21c2ceccbe3e9704e5056d2db6da34726cf676c1fc60576d051b6442d4d1362ced3c8d55c43716bc0fcff5012", 0x47}], 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x400c095) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000340)={0x28, 0x6, 0x0, 0x3f, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2b7fffffffffffc}) r6 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x4d, &(0x7f00000009c0)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) 13.320968512s ago: executing program 0 (id=1456): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x444200, 0x80) r1 = fanotify_init(0xf00, 0x1001) r2 = socket$inet(0x2b, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r6, 0x0, 0x0, 0x40002000, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) fstat(0xffffffffffffffff, 0x0) listxattr(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)=""/116, 0x74) openat$rfkill(0xffffffffffffff9c, 0x0, 0x44000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x0, 0x0, [0x519, 0x3ff, 0x7, 0x1000000000, 0x3, 0x1], 0x6, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r8, 0x409, 0x3f) ftruncate(r8, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) 11.871782803s ago: executing program 6 (id=1457): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0x7, 0x200) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x12, 0x2a, [@mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x8, 0x1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='dlm_unlock_end\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r7 = userfaultfd(0x80001) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0045aa", 0x28, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x28}}}}}}}, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) socket$inet6(0xa, 0x5, 0x0) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000380)={&(0x7f00006c6000/0x400000)=nil, &(0x7f00006a9000/0xf000)=nil, 0x400000, 0x3, 0x18100}) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x1, 0x0, 0x1000, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) 11.710445042s ago: executing program 6 (id=1459): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES8=r0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0xf, 0xd2, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, 'batadv_slave_1\x00'}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005"], 0x80}}, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r5, 0x40305652, &(0x7f0000000440)={0xff, 0x2, 0x338, 0x2, 0xe, 0x6, 0x5}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x6580}}]}, 0x54}, 0x1, 0x0, 0x0, 0x494}, 0x4000000) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r7}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x20}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9b) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_int(r11, 0x29, 0x2, &(0x7f0000000080), 0x4) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket(0x40000000002, 0x3, 0xfb) setsockopt$EBT_SO_SET_ENTRIES(r13, 0x0, 0xd4, 0x0, 0x230) syz_fuse_handle_req(r0, &(0x7f00000021c0)="37d06ea87ca6df5bff7c0fb51d744a968cf22abff4b22cca26dcfbf965f14d55906b7682e52d101ae38d4e96e1cb07162c0411f91bb1ca508ef5ecc586ad28478936d41c4dc267dc9b6b0809fca8bcd1e9118c5a88b5ea0a2f9e3d9db009989f3cf7a008d6f60240d5c9c4744d0d02e948238037bea60b68470204e0b98034f39a0b615a35489f1932f73ebc03453a2a9511d8232ace3e1fa67ba023bd9fb3962a91f30c75fc93bd5825503ec96b775fee951ce14725db59bd6b761100362dbdbd5bd8132b33b21a79c4ed2a9a0cd53e79c135091284455fdba8023fa69fc00d2a01b78f936e162896f59a747e5fb0b5ae00a1cc3de1dc0fe1adcfdfd9c7f4e973e00ac8d4a2a44dc76dee19530323fbcefe0c7b2d005210659432456b104ff501a217f9ce771f8526830b7ca9ffee21c597bd58b130cdae0d3bea32c029f2d09a66a9c868b6b4794f7e6a5a1de5fe22cb43a27856a9e7554f1bbffe58121ef14c6ed9f9caa45e6e4b3f3ced603d136e2addd76cb0db4818763be9ab9618ad811e261a24f0f6431b354c35b43639bcab6ddddf32d95f18287fb52d8cd4f290b06de30c614807f92bb49cc85720eb05b4afe5c64939e2e366e64a129eb5fbbf5e3b370c525bfa3808e2f575824f135da09625be12031bd80734f09e53b50ccb27f9d14810ada0663d0d2a42e9c0cf5401b0101c49d94dd668e126d00bdc0e4e22ed7864612d2d46bfe617fdad87153f2bfa7d359f77bc322454925b2479ab3a572e3931d105e834bd878588598f04bcdfd31d4cafaaeb4f35494cbe438b2514f65a1c8a9df2f201eb0de589fb76d5e825e20f30e08216371b9f375c84acfcac36f339eb1e1f3504e6d15fd1dc73a2a9abe4762ecdabf66e854b4639a1deae92a3daa060bc9ac0f52ca5c5d1cb769d2fd9862f1f35d6ba46d2112112bc625f8145e141f92df4413cb49388be2a3590c479c2fa3e9517321128caf1397861b88b42ac50ee9c3f3b22b82fabbe5fabb7e50781bc6ecaf866627f0be6d52e028306f8acf780f35ba2340bfe73aca198ef366139d1f573deebbf0db8ad4e008874667f93a41d92466c0a2e8d32659a77536d3db70a5aac860887032a5c28fde3b4d2fd87d39161d22ad6ace842bdf5304fe9b318634343564a470f6589c52ef94f12e7e18aaddf1ec013e62ae4c13ca23cdbc2f7fbe9c77fcf02e399ddc562c26abf5b05ecd804832763ff888d51af87d0f77a35ffb4181e7246697a03a43cedc398aa4dfb6ffc44cb7c940957c3e2a1cdcf583b97f911ec676f036790f791f4686dca402ff787ec8a3496507c7c2fa161824c8984ba4fd6db978bd05387163c538210e89bf3083975a15c6706de9ab67527b52083bd9f77885398f4195755785938032d9ce15fc03c8298cb409b0c68bf2e74d58c295a5374cbb4c02cff819329a0a44445333d7ad71773a980056eec8e29166559ed577429d3f1799fd01b9636b2a974c45cb5a7be1169f9a0de77104155682245e5947cab310b9d87967202fc77e2856174f0e4bd88553aa87386fe4e51c3f8fdd3872df429f50dfbf09d4af05ec83b5c5c16f5c58ee8fa968a4c770296bad83b8c4fc0b54bb892e4b2cb5bc22726b367d1ba015330cdef035d3341aaa26bc89aab1ae89400c6e1c79a4e08b5c32a75c534ec04ee537ce9f08b6e67dc8e50d9700f799d23a6d4ceac00282c4d98758675a2da85dbc168eba130fab9e6ff668717699fffa7faeca3a1a8bd4949190156804057606cb4f95ec5e4cdf3a733bf324dd1b71a070e93b9ddfdfe6cea0510b5ceb91e9b8f285e3c7f56341258a2629e82da4a6f8b00e165e3f9662677d1d56654f62d9397e2029d38ff7cd27b3e3465e38e551c093d1c50cfcfe1fb17390160a3394037b1b6307e4a282e62385db0b47ad453dba3ca400388a9fbfa64cee56716901af43723b627739667f1b82d16d39508e31e7cc8b94423936e004aff1e8d699c5f79966234fa4fdae21a44764089f6ab280449639657b5315683549284f67679c9dafb7b2baaa2043d8be377bb255e8db4bb06d1ec59ae534ed92737933cb27492a000232f621f5c88f923c8ce743b8ec14ccb453c6c8fdd1ebd51904c62f714ad6a7c3c04436684498a19a2549950922cbfcf701b895557d836607173ee2ad4be424e9d5f0f350d9f5fee378f94701e90f9321bf8b2c395938894688bfe928b14c010e868e7447eafdb4e2df15923f36db5e630d61bf48d77d50b7e6bd046424f919ea2085debdb37a1298b0f8e8afd8db50266775d7ecbbb5702dca1f5e8b74f2bf21774c108f7968a247b333e556d0443c7299d56f78e2c9ea361a2da304bafa130e6c25a239aa4b056b2226473fe190aaba1ffbb90c1dcdf9127fba2fee68fe58c9e9e3fca3c2fa4d5178b81c9fda6be03f088269b404f2de9acb217827483794aeecc82e4facb516fe110cec8023448ecb8b51314eab74a21497b3545f590157d99343fcac31ec860bd59e60d11fc426b421ecbdeb58cff4e43171ace3c961b134b590b15c3bfb5c4b04be3fea472e2e9236b0b105e39edf863bd04374aa36bbb9b0699e2be4f7987fbf0a267328bbcbbfd8c099001c7f9f54f8471997b54da69e08e9cffc2801e08cab1b8a2fe5c56a0325be65aea4822a63a41dd47a8991cdd60a2f6b4b3dd14fa657b24d03327db2bd47c58ba6f1d0d5bf9e2883482009c26c9c6d5557361a7dcd7c785688568b9de4c3791290495bbea5712c69eb435cac1dc2049e3bf24153c41dc767751c232b0cda126e8c6369472ba7fa111e3f1dee1ba18fcbd0232075b007f4820659300420432ef1653fb15518e6e7a6b277ccbab20b304eef705fcc061d372e16dfad97813f0ea712047725be4b3cf60d7ecf8be96edc1cf1b407076096875a882f89cecffa5075e649ce6ed58edfd589145730518858b6898575cb5c6d8f993f9976eb0f8089677007ba00ad45de7b7159c07f8bf41f38dda8be09b49e8d403c63b234a8469e4f4d8f8e1907bb9db8d6040aaf4ff4291f3f949375936cfb1fcd7a2cc37d613668c483c727d86640eafe4f338c393bcc1d76a4a6c3b4c53057ca238e7ccfde5bb63cd486c2647a80dc7b817065be7a9226d61a6bf47f9e59cc32b693730383a9e159f1726f1de36c42dc67cb54a258eaa1d7e505a10a6f9d40f1627b8077e100f8aeaa0d669fedab094d006c3e7045e568aba0351c774f3e2788432286caadc44c6cad69624bc04d159705387781652ba26a0c51c8ae6667dcc0695f0e946bd88011e492a1c2921eaea2cfb428ab9818a012ab50cc7fd26b5008dda312cba2c9a7620e379a630fc1eee230e1407e538d25995c9db5d64bb6bf9b3580749178b1fa81ad9d924b264b6119ae14e6fa3907fa7b38dbc92db5fb780ff4229ce600b52f02ce6419b163a07fc9f435e683e70f524dbc2c36d6d28cb403aa0af35509d4cc29e633fbbbfbeed81d07ca1c75a99e57de3ec5137d7004a0c230fb839b7cd040db5834dfa89d72d455c484798d32fef52f3b3128c6d0206f755a1a789c67d49193b8cac54f22e2e5710b24d81ce546682eb917dae30834336fc89e5101e95875a2076eda9da3a9296ad4ff3058cf4bf04eadf12d701327b221ba303541a3d3b815d3538d709887861bee577aa01437a8b3426a42a9c72414f7e2c3d46bda897ddfd3f069b367792dd7c588552dfbf1a917b1ca3da79a3dd8ce8fc8728f8cfa9f3a10824c011331b42e5ab169d36d85a3be98a50e38c280d390936ce4e15abefe344997b157fd9b849c572474253ec74ea48899c087310cd00940ef35670d4e7f6a07bcd98cb55e0e1dc41996e77432a264e7ffe89a494c2b4bdf3c726313e8ebd75c57ccdf0b38daa4dce03b77b49c1fe56ecdc83c93ad305e8287f1dab3abb378e653098f07bb1ebeb8d653b458754b363a7c8f9a8f8aad08ff87f4a678ab734cb58b8c4563e4bfb4d03e5cdba4102e801e0bee68f76fdbdffe5802c3f2b095f1b11d1f00ec560429fd1ed28e2c45bbad2b845dfd0dd988f8876edf6bb10cd642c0a8fa3054c061156411442a4133352e04e067a8f18f0160fa4c52f2e2485e567114060de4bfc4ddf6f759e7bb3f54ab9be920b268e0022d7d5955d5abfd9798414a77904771339344bc188d09fad19985160783c35d94523f69e026eed6394cdc12fcc0491fef10fa916d88f432e7cbf7cd93153364e9339e48bb0f996ec450027a3b1ee5ba55c950c636ab7b0e6414b3257582da8338dec779c64c3cd39ede59887f3bed13772484690bd8da15f96f951d39ec1bcbbec8b9ac3b5d8924af317a36388b795797b4c30c0dae44c079b201d9090c5a04a6e0a053c9d9bbe4eb86c4eda47bebcbc5a05467e535b2e7efd122d9e3ef215bdb5e3475bb3a62bdd97477e0d370efe34a841d6f8bc4a2293b9f6a9b8c0264982029b3b5132d82c6e53c8cef8e1b421ae9d6503a95224ed2970c479e941935a6e18f1e3c48fdcb6345280f2959c939eefbe074f8096a0d54a0e9f293f44eb46c7916672927f30687caa589fed97f0ce12569da8487ec1897edeb0719ca96fe21de7ed97d10ea73837cf85e43ceb646f79333f4f82c28854d1d6d0500b30dafc94ae93645a7816a6942bdbc648d731e5f1f90034b9f05037b8827681a1fb038bd1cc813b9d01927497ff12c6ea9ef3a19d982e25093af903b89873152d081c7a49376e1357f118720a7d609cea8043534a983d0ebdb8e65cbda5a548d1a48291c1a4828564298e17650c6243c58ebaa400a9434982a03bfbdf413f0f77b52fb9cec4a0c1215f4601565f12ae6e0eff7145d00581090b73da156f3387b58758b2deae83e52fe97e2e4d44819669f707f39c0de9de0ba7533770060bc5d1657a2c2d7735f5453ca76d3977182fcc4591f2581dd37ab5379263ba5df95f1a7cafe0e522fb63d876a3476ee6f0f1d27bf46c30fd5763354cc19d82f18d18ef637965915109d4acdd8162ce56ea78c910a7ed35c9fa54ec2b17c3bf2d7d3c3f840c0b2a14ef9f3728deb3cb8543a64ea68c027de07597142c45c0f1577cecf83dd54134d77cb9d503d1e549b9c017c71c64c1d6df43d27e0ea2ffb455b0b8f4172977e1370fda7280852049a23e2d3b8f75b90409ea1343f1cbedae5f5e36e1874b76908c4406ff5b3385eef6e5a3972f4ba9341bf5619b05ab4e9d767ca23f33ae4ae050d6421fa4cac19381be0ece7344140ce4f501398b17fc2b60721fd55c0cc5a980554492b2d330cfb88518fddf64afd46f4e2db18f5e3a273021d0f0f38e14f4f45924ac8d6301b7832bf140cf9d5e7e4b25a5b5fc64ccb7335fda3365d5628421e01bf21203f6f003e322b48302682499a0896b4cb2cc706d7f2abcb5576f7f9c3c8dd31d93936d18cd6ad32f521f61c8bc381ef8b25d927cf7df4fbe88aae96b7747a6bb647d8f763cb8d75cac4f757426ff7b5e58a3bc1909cb47a118f97069449e4a94b5372b8f1cf89026fd1a71e16cc8cac3b73ea2c024df283f1b478685458815d56663edc02648d5d428e90ebeb14d41f85fec1d620c12abb4a995e1a32f4c53b478b5cbfd1366238287f9e21d5e93fa0600876738ca8fb2500506b88f6a592bc8a27d088ea338ae8f000d6fecc9d8e5ceadb2710ec8fcce2d98327375316f8df791b59939df8fdfef64d3e4fa76623020687971ea0ae17898827c0c0131558e332ab11139cac9d23b5971706dffecc3454a74fcfbc8b4882faf2fe0598ee5c512baec44899d4c6f4da7af8d5217f1c466814df16678e7e6820f37425d2c95afc1402143836dc95a442ab9a741cead946859e76e1d8f2c1b50c23ea07e48d3dcfdc026f9a691d3dcef8f4ec26bbe30ca61587464a8cb5c7c9d32282f6081a3f1a97783c4e6667285b5419828fb1d59b45a9657bb69ad1e86aa165cc08b77865112dea8a5de79d32f0f7580752575ae5bf6b32c0b7cb6087e4cfa6831f1f8d1148026492aa565061f280a090fa3a3ae4af6b650dd66c485bffa069199b3f3c83319539ca856b15f2c19d7cc4e68d6cc7439452e2c15db1ec38d394523bb3c9507fbe2fbfb2ff8d855bdad8e6102026ae0a62f561284599f26df0102f1c5b2929e9675192c8214c694ecde849f2e873f75244ce11c655a8d3ffd619ca4e677c47e286738d11d58b9b784e18d836702e191148df854a25ea12f30a7aeda885dc0bf975e4aea513f44b01db9e6d74008b31f8ec9319479d04e88335e0eeafef8914e5df5c58d31129e8bcfbc93f1ec999f9ca3060affbbc6b6300e5f2b039f42c31519d725cef722847b32f98bd0e78af3e5a9b59ac1aea9c1754709e6eab9c4bf43102ddfbb2874462e7c676b4a9dbac295ccbec90a4e848d453a6f908f552bb883b15aa31104af995ae7e3154f4a0134c1920571feb5695d13d6afb86f7db42980ecef112c3f7cfea14a871b63824e369b07824934c5beab295ac3661ecb5b2e33832438e4b5bc082f26ec70efbb9d98604b48e727f47fe2f42d1f51f9d09d143607dae61bfcf4397ca3d146961a49a7e4e6a1d822dbfed1513900ee8eb4bc9015bcc69f321e6c30dc88a2171cda742005090c5b45b306c8735f4d993f6526cec6da7b0dba31c5409b30e3ec6101efbcf7cfabe72c0519f9219b07fef01d814960ddc4498e6d8521fb5bc7076cd14dd62b6f0045425d233dd53e709a0a19bb67f0a5cfaf41538185b00595cb51a8ea8e219b8592878784f1e360a496cccb41ab6b0d4f82b071c10a4386d3978cacafdf131a08150dbe2235447044a4a0c7d15246a03aaa4f7889986d895624dde52b0f1f3419fb8de347fb4b9bb3b80c5b5462b6c251adee99cbded33363d309c179a625e9d4019ea93b7c0235b88524e284d1b1b4e8f13ed954abfccbf96dbad09d114e7c3606fcf71ab8c7b5e9f401d2b050a3c6e29c081bb4538effc861f0911f9d374412d8238bbe920fdd8a94ddcf6c12b67b2339dd5a799bb451e4edc7c6a59cf212bc987315be043dfdcd87d3d8c66de45f077c0484bfd17d03288a66f3ff135deed519ecec0eb451a20aa290c9920d6e89b9eb9782a1d35b8e2448db12cddbf6bad7632812a10ab80f1380ca493938eb176112c39a2510c1a0f49683666ade4f72174f3d7627f119a3b2d737ce70c4f8ea3fd60c2f439e673efc158c2bbbb7fcfc3bfc59f939fee0766f40dea2a56e204c13d523022a7677b207fd56c71de92e748b5bfb7327111942c4f3283579fd577f8de6054e429564e64a07d025164663b625e6a6a8366881ab8469eb6ef91dfe3d8d634578f5bb024ed04c7750094b58250f1662c7c6deae5165e62d4cbf52215b7df78edf93edb9fb4e794f7a67cc5efe634a2d5c3c6dc8d4a3debe64dbdca4ccf9d794674e3ba80e4463a21c80aa5486382a580355110b7ef1b73e238414cf248d0738581ceb3cf4b9267c04e997177ae5ff9e9e4a1533a92864ae01e093b571c89294ed523d3b9bfb7582b905310897ff8d18dd9447abc89fe5b304afcabb14bba6bcc298224de1ab1ea984a59b33f9308234306d19dcd8d8062e4893ab5dcbac7c50da7fe9047541c0e8c930c70aa5de9b5ca8f30dd71c49d3c8977389f67ef63cccbc7e6b97ecda509fd7158c1760949aa528838706a88bebcfa2785de69e61755e2f40a3f1d8d0614f177e195118381a468d744057b607dda7cbb3bf0da9d3fdb02da5991212246ea7a7f2e53bf65d1ca0c95c96237181725cd34b198146f0a12382083839c1425dae5b762958dad3f5ceaf1f16f191034636526d2370362340450c56e410d3dfe2495dc1bb59e1fcb093f6ea2bc9c78896f6e9179f133ab3c2591839ff671796ef2b539ed3a671093ba753f2903b0823ce4d4827ea910f130312d7ae124ad35205d9b2170db9912ea792cb77eac457833be73b921425ede5c804d603c9a80121b318fc238965342fd48ff1e538f918f60b0922011cdf6bb8a23682b8b4aeccb2cc3a3275c2fb0ecd34b3f4ae970e4ac4111f0f9c0e775737a1c9e9c7ebc603be18178a597459229bba6f972e21196118ae04f4869f6665ed5c1c7003ebf35eb35da4c5b4e2349904ce71d83ebedcd6054da421a54a64c8dc636ae35fc07c6e7952977219afcfa62d964959ea89e3bd2b2dcca8787566e63d186ec46a2265c1dd7b963f9dc549804d85080beb053575ba0d2e09afe217d6d98a9027e4a3271741d7115db6769e7685e11f958601d30af65454063042a09f499ea2f58f9a9f7f6bc5ebcdf27c71ca396c0668e9b9903c8b91295dc7e73147986600afb6b4de7e7d0040d1d2a98f0aec84664feb3672d065cfb5f98fd8fa2ec6c4c2e12f20d4f58d78c50f5409b3def9d180caca637d4db266d1e9fd31d7b7b48af74b17fb79b9686d96c5abd007a8d96bd13702a4c49e09ed60aa36b640069feb95ee8132975b22017734bb904445014a04107edb083c327bf5174fab602bd5d18bef43d6abb627a425b9aebdaaf963818bed6a6669085948f410cf004e311c8cc68afddc61b31f7b444bc2ca8d9f0184a5e205c2d86c9f844649ffab6f1c7efdb3ada5fd175ae462b420eeebd874f27954edbd0814a8899dab5d7637bc8e18a86427cec0c31568a4b0cb30891c7395184dc20c802ba3c5a21859f163b3940a7e795d4df98d701ed4eeea1820c92df82c5deada7f7b661573ea5770e6e443cd469c9f4e524e08c0902354cc354a04696e17b5726a29f7c3dac1edf9e619c7e10ca82edd1537cf538b18e9f6b6c2065e47556e35db52fdf54fa828d9d1bdec70de42d500aba5e55222e983339beb6fda2edd7a267b4a8d672b2479509bfbfce737ccbdc52ca8ba096dae6ada4aba2e5f88c53a8751206fc746b4c1c72514e19b2c6a53d93069282071d34e842922e9eb8b24f4ac173e7a62236fcbea28307bfb1ef5a9cef8208cca4449fb2b344474eaefd5f26c81d31ca78883596b53b4b5d75c5cb3ae3a768dfa2110c50c46deea2561024fb1b27def43354d2940976f5a8b03dcb8e57142091e5ce1b51f3ae4001a128a6462826e477d4cde9ecd2ff6a2b88953428e0297bd3d26d1a1cd0f5c6924eddc23a1215d445d159754966cd594a30c64a74f11e995bdafa8b4696bb05233e87492e86d51c3607de8e0d027fe5b6d5ff60b23135ad0fd35207bd268dcaa71d62e2d0c727c0ab5081b795c2ecab1339d100c9bfa70d7062d3b79830479f5cd67029721427a5a20da56ab9bb2026eb857d3dc35000b88dd5e0b6092ceceee4d6d646df79dcf7215811b0904c42fc1d5807aa6264372607bda582b5b2f6d31c6002e7385d6355307bf5b99a68c5f194576de19c81738fac1cc413216154c1736634ac7191842d0d6ef32e0c55b77fb76ebec002b13669d6a88810ff3ce3670df31e5e27abedde18d64a6e1608e5662fdcec02f6179dd53a9326dcc8aa5a4e81b0c76104aa3aa215be88348d98a9e74118915aae36437c6e90ee0c8ddb3df6aacf0ce70277bb4af37d50899171c00bbd1ac46c18b75de6f984f6701009a55f687ca49d18b9e7a6f44e88c9161b6aba9f10e767c805a7b3d9bd95ce7afa73333204b528276c4f233b2c71a355f9ccb5b017696dfac5911cee539c44d625eb861b60dc609b888fd00d88587e43150bb3ecd8f4264199d832295ff054fa5ef340af0b2fba02171d0d98ca054a8c6572b556992bdf4a02d913ec0b52a36e360babfa20ab0656be9870040768e08572bf7e844a1b623f883406341a93db609e84563879adf98176a8dc8c0d9536c37234a328fd4dbb3db9b4aa725d75fd115a5024151d3c02cb1349684db2d8cd81f3e5b7b4578c0254ac031a5426bae908fb774c3d614d8c65c61537afb3637215f4d0e6b6d89a9b4e16984d30c198b28d3fc1d1ace5c10a944fabd5cbc76ee3431f73c0d7fda0dd8d3225cb79615895aa1be1fd097cd31189edd9fd952332ef354843bd63f84f2a2946059afe35a7b84a010efff4375087f4dfd1c724bce19957560b925c0ac19e91d1258fb35f900594d0dfa2d15fbbd4ed795a8392bb078617d6fa167a800bf969b9149d706c719d7ad3f4cf9bd6b29de361b87b2191761c6e8e5cf721676e7e6657672655e4cd620d726194555a80faec1c8f556e55db2427b39aa1be4014006dc89ca09a31805ae9ba5551032be48618910ef52678170065e74bf48b830ec8944ea2f57511d5fa2ee6c5592df8f3fda3d8d910894754b73ec07b2ebaec31404dac2febd027c462aef96beed9d536b2372bf4b1237b2faebb62a5e1ae98e8c7123214d668e2a4278dad5df571af6ea577c7e43b7a01a5e62e53f323159ac77157cd5a389e733fb0ba734efe8c70ef4191d48109184ebf493a1a0cbc1ab8a3794f52b6db4c2b2cf1a2fca5740f00a7ea48897829ce3c28b6210f9b7eb3b8c773da953d3431388982809b1a2c1b3fa83355b8dc5fb9e21fc7974789a4d6f544bd63748e96debde64c424a0468580dd7f9f6e63774beae53007709364e7d5970d294b45eb8b55eaac5731b0449acddfa26278ad6357aaf7c1cc05c6fabea3f0b2e88e1b4faf0891b754671834615368955773ccea70cde025b7cee6549a3395b3385d7df1d2b1d22b555b316a3a868e5c2b6e688bbf9755e87e4e39c84dc2780746bebc6670ea97841090b96cb0eea9bb3da6b9a629931a0362b7365025d0db1b3518ad2486234eaaed1a5a0209463172d477d04f9fbf1f545a58b59f5d7170c2d683a21b1caa0f13c88fbebb9a1dbb337c8eb2872a2ab0e700116bd8d61afee252c6e44f19b26d1c2c2030ca4eb96ca4161b482d2676417becad4488e246a59d1796b43ca8561aa69c896477dec378d398d354bb343b0573d924ddc6073299c69cb2c65ead45eb3f7e156bc07ae293e5e5bff37f163bce4c2ac7d317ec9a8c753df3c1846a1ec4cf6e0b52c0b72acccee80416cd68c76957a03a378b4ad73a4efbcee53149bca301fddde82ca9424344750053d4d62f6414a78f054c4e3bc79538b539722ed79d048423a449fb0b0ada9057ad0ecdf25b9ee285500124e0da330028d511f846f2bdf1ce0dc82fb50fb558c3a9b5b9fb6ec296f4cd45b1cd5a364c96768e521c064943f117a33db0dd943495ceb553cea5fbcaf2eed9a428a92d569edc1916546d29c2d5f1c3f2cc05555ed00a9cf03310d0016b536123fa318221ebbed11559724d23209c2c4ff03bbfba60a645c1944aad473d55252368fb0cc8c441087de70b20a2a47b1db711b13d4f343563426fd04e4f77cc57fb065ad08f399237929ed4f755db6995cae61dc2d0cab8bd228b1b3d43e7a69f300b75a30631ed84b9472c2d7b4081bd0c2856dabc5e45311c2fedab729141cf0241506c90bbebde2ac1dcbc4657d3a01a2ddd290de518901c2599690a4b1d62ecebbdf368aca65d165fa9b005fbb9b1558c7632a6cd1245ded96caa8bd823a7fbc5694813d6b57c678b27c41ec85f07cc402986a4b5223526a70484987dba6465b6b72353f1fc3f9feb52b58c845e9ec74ee4e7d30f4505ad3057cfe0f8261693cee73b6e0cf590bf3fde", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x4, {0x3, 0x2, 0x9d3, 0x3, 0x8, 0x2, {0x1, 0x8000006, 0x81, 0x7fff, 0xf5ef, 0x1, 0xa, 0x1, 0x6, 0xa000, 0x10000, r8, 0x0, 0x9, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.160902522s ago: executing program 5 (id=1460): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x0, 0x0, @empty}, 0x2, {[0x0, 0xf0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8943, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)={0x11}, 0x8) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000240)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/152, 0x98}], 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0xffffffff, 0x4) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r5, &(0x7f00000012c0)="3f030e0033e6120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x20004881, &(0x7f0000001280)={0x11, 0x0, r7, 0x1, 0x1, 0x6, @remote}, 0x14) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 10.05372047s ago: executing program 4 (id=1462): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/68, 0x44}], 0x1, 0x7, 0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f00000023c0)=""/241, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="7472616e733d76697274696f2c64656275673d3078163030303030303030303030303030372c0001da5280833471f915c7"]) read$FUSE(r6, &(0x7f0000000340)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000050005000000400005000600070000000800030001000000"], 0x2c}}, 0x0) 9.541096462s ago: executing program 6 (id=1463): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x0, 0xffffffffffffffff, @void, @value}, 0x11) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) fstat(r1, &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, 0x0, 0x8010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000000d00)=""/9, 0x9}], 0x2}}], 0x1, 0x2001, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 7.906674795s ago: executing program 4 (id=1464): socket$nl_route(0x10, 0x3, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r3, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000200)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b700000000000000950000000000000026ac4bfb7054f9ee73d7c1f1c4bc8b19c344f9426db3a7cf997707f960ed8703c47cbb16d82ba62b2f92bdc875d0063147bbbf7ed88c7fcbbeeba02a8368841abc1ba6667711261f50ffe547233763907dede50e7e3c10f4051db527cb99372753a0ab2036248c6a74d97cc3b65217805f9ed57a7714730f594761723a36226d6b045f73b17b4bd9fe5f2f21fb9a961eb1591acc6e90aff75a98e547b6db9b70af43d5e258d8c56554958d787f425b8114472da11a9b7691e122469482be58262d55ffe45b395864789f35e17880debcba53e1a9129ac1be73b47b04a7c173a78b960990cce8c5934fb6d35133"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x13, 0x8, &(0x7f0000000540)="7300008cdcd56500"/19, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r2) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_open_dev$MSR(0x0, 0x100, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@any, 0xffffffff}, @local, 0x0, 0x6, 0x7ffe, 0x800000000000001, 0x6, 0x9, 0x7f}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20049809) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) 7.840508223s ago: executing program 2 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) time(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f00000001c0)=0x2, 0x6) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r3) getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000002100), 0x40, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000100', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='.\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000100)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r5, &(0x7f0000000300), 0x0}, 0x20) 7.798656956s ago: executing program 6 (id=1466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, &(0x7f0000000880), &(0x7f0000000100)='syzkaller\x00', 0xaf, 0xf6, &(0x7f00000003c0)=""/246, 0x100, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0xa, 0xfffffff5, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000001c0), &(0x7f00000000c0)=[{0x3, 0x1, 0x1, 0x5}, {0x2, 0x1000004, 0xe, 0x2}, {0x3, 0x2, 0x9, 0x9}, {0x4, 0x1, 0x4, 0x4}], 0x10, 0x7fff, @void, @value}, 0x94) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000300)={0x82}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0x12, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = syz_open_procfs(r0, &(0x7f00000001c0)='net/raw6\x00') pread64(r4, &(0x7f0000002240)=""/237, 0xed, 0x619) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@cgroup=r4, r1, 0x2b, 0x3b, r2, @void, @void, @void, @value, r3}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(r6, r6, 0x0) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000040)={0x1d, r8, 0x2}, 0x18) mount$pvfs2(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x1080, &(0x7f00000009c0)=ANY=[@ANYBLOB="2c6d6f756e7473002c73797a6b616c6c6572002c2f232c3aeb3a7d2a7d2c292c6d6f756e7473002c67656e657665002c2d27242a5e282d2a2c2723265e2a2129242127212c6673757569643d64396434653235322d346535382d616565332d355063662d00303832333135372c736d61636b6673726f6f743d277d2c686173682c7569643d", @ANYRESDEC=0x0, @ANYBLOB="2c706f0b000001003ed37ef6e66bbb9c0daf39c41f7603027a589effc6a9e06434f8b3665ab6a7763caa81d7c250df2dc0d6bc672b7aaac467cdb3564bc2"]) close(r7) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x34, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 7.544847124s ago: executing program 5 (id=1467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={0x0, &(0x7f0000000a40)="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"}}, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f0000000800)=[{0x0}], 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r2, 0x101, 0x2, 0x0, 0xfed8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa1"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "5161dc20", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r4 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc2b02) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f00000000c0)}, 0x1c) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000001400)={0x0, 0xc182, 0x5}) 6.634439699s ago: executing program 2 (id=1468): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x444200, 0x80) r1 = fanotify_init(0xf00, 0x1001) r2 = socket$inet(0x2b, 0x801, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) recvfrom(r6, 0x0, 0x0, 0x40002000, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) fstat(0xffffffffffffffff, 0x0) listxattr(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)=""/116, 0x74) openat$rfkill(0xffffffffffffff9c, 0x0, 0x44000, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000004c0)={'filter\x00', 0x0, 0x0, 0x0, [0x519, 0x3ff, 0x7, 0x1000000000, 0x3, 0x1], 0x6, 0x0, 0x0, [{}, {}, {}, {}, {}, {}]}, 0xd8) r8 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r8, 0x409, 0x3f) ftruncate(r8, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) 5.986050642s ago: executing program 4 (id=1469): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1abb01, 0x0) syz_io_uring_setup(0x4169, 0x0, &(0x7f0000000480), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x95b0, 0x400}, &(0x7f0000000340), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x7}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) timer_create(0x9, 0x0, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x0, 0x200) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, 0x0) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 5.923604656s ago: executing program 2 (id=1470): syz_open_dev$vbi(0x0, 0x0, 0x2) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_mr_vif\x00') preadv(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x2c, 0x7ff) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) 5.454256571s ago: executing program 5 (id=1471): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)=0x7f) socketpair(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'team_slave_0\x00', @random="02000000000a"}) 3.642696467s ago: executing program 2 (id=1472): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x10) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f0000001a80)=[{{&(0x7f0000000400)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000d40)}}, {{&(0x7f0000001080)={0x2, 0x4e23, @private=0xa010101}, 0x10, 0x0}}], 0x2, 0x40) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, 0x0) r8 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, &(0x7f0000000140)='\')\x00', 0x3) shmget(0x0, 0x2000, 0x100, &(0x7f00007ac000/0x2000)=nil) 3.565730896s ago: executing program 6 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x4e23, 0x0, 'dh\x00', 0x0, 0x80000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000240)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x3, 0x28040238, 0x10, 0xf9, 0x7, 0x9, 0x0, 0x0, 0x4, 0xd}}, 0x50) r6 = open(0x0, 0xc162, 0x0) r7 = open$dir(0x0, 0x0, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0x4004e502, &(0x7f0000000380)=0xc) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$uinput_user_dev(r9, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x6, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x9, 0x6, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x1002, 0x7f, 0x9, 0x5, 0x1, 0x4, 0x7f, 0xa, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8000, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x10000009, 0x3f7, 0x1, 0x105, 0x8, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x8, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x5, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x1, 0x3, 0x2, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x40001, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x6, 0x6c1b, 0x1, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r9, &(0x7f0000000100)="76f63e1741c1e2a080b895d550d429e4414614f8e4abe64ce7b111ab0b"}, 0x20) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r10, 0x0) 3.564802739s ago: executing program 4 (id=1474): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000280), 0x7a, 0x111440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000090605000a00000000000000000000000900020073797a30000000000500010006000000040007"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) listen(r6, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x900, 0x12) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4004, r7, 0x2}) mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r10, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x87, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x401}, {0x0, 0xa00}, 0x5, 0x6e6bc0, 0x0, 0x1}}, 0xb8}}, 0x0) read$FUSE(r11, &(0x7f0000000040)={0x2020}, 0x2020) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f0000000040)={0x1ec, 0x0}) 2.843737657s ago: executing program 5 (id=1475): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x3, 0x43) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x8000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f00000000c0)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 140.718148ms ago: executing program 2 (id=1476): ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_ep_write(0xffffffffffffffff, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$I2C(0x0, 0x0, 0x2000) ioctl$I2C_RDWR(r0, 0x707, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) 138.336864ms ago: executing program 5 (id=1477): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r1, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x401, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0x10a5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r4, &(0x7f0000000e00)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0xf, 0x80, 0x1, 0x3, 0x3e, 0xd31, 0x2e3, 0x38, 0x58, 0x2, 0x6, 0x20, 0x3, 0x6, 0x9d, 0x9}, [{0x70000000, 0x1, 0x1, 0x7, 0xf, 0x0, 0xd918, 0x8000}, {0x6, 0x3, 0x7, 0x404000, 0x5, 0x1, 0x9, 0x8}, {0x60000000, 0x7, 0x1, 0x1, 0x7, 0x3, 0x3, 0x2}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x596) set_mempolicy(0x1, &(0x7f0000000040)=0xfffffffffffffffc, 0x5) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, r6, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x81}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) syz_emit_ethernet(0x42, &(0x7f0000000340)={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0xc, 0x11, 0x0, @remote, @local, {[], {0x4e21, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0xa00000000000000, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000010000000068000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000c000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000626f6e645f736c6176655f3000000000736974300000000000000000000000007465716c30000000b8adaed8ec6e8fac0000000000000000000000000180c20000000000000000000000b8080000b8080000e8080000616d6f6e6700000000000000000000000000000000000000000004000000000018040000000000000c0000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000fa0100000000000000000000000000000000000000000000000000000000004037118bc35d3037960000000000000000000000000000000000000000000000000000000000001f00000000000000000000009300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300020000000000000000006c00000000000000000000000000000000000000000000000000000000000000000000000000892f9284b45f00000000000000000000000000000000a600000000000000000000000000f9ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5000000000000000000000000000000e21071ce4cc8eaac65a0f6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070cc490d0510d30ce90b91aedadb0c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dd00000000000000000000000000000000009476b0c33efd5e65b7316c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014bc1d077b4817d693d02c0000000000000000000000000000000000416cbf6525780f42e3870800000000000000000000000000000000000000000000000000000000000000abcc3311337430270000000000000000000000000000000000000000000000000037ff1cf2f8e52e074300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d65992000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cbcb951a4f0f3300ebb39c00000000000000000000000000000000000000000000000000000000000000000000000000e70000000000053cbf7eee533b170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffffffffffff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081cc42e042291bc3000000000000200000000000000000000000000000000000000000000000000000000000005de0eab8674f2269845f530928d7000000000000000000000000000000000000000000000000000000000000000000000000000000ee72000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000095dd0000000000000000c1a8a95ba6a3ba677371c303b5426300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000670000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000c81e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000052000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003800e04771f4c2d100000000000000000000000000000000000000000000000000000000000000000072"]}, 0x9c0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0x50, 0x38, 0x5d, 0x30, @loopback, @dev={0xfe, 0x80, '\x00', 0x43}, 0x20, 0x700, 0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0xf00, 0x8000) fanotify_mark(r9, 0x105, 0x5000003a, r8, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') setns(r11, 0x20000000) r12 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) 0s ago: executing program 6 (id=1478): epoll_create(0x10000e9) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x4) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000340)=0x1c, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xd19000, 0x35) read$FUSE(0xffffffffffffffff, 0x0, 0x0) splice(r4, &(0x7f0000000040)=0x8, r4, &(0x7f00000003c0)=0x3, 0x101, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) tee(r7, r8, 0x1000101, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) kernel console output (not intermixed with test programs): eed USB device number 9 using dummy_hcd [ 210.620411][ T8171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.700400][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 210.730303][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.743971][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.754625][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.764880][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.805993][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.825536][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.850061][ T5904] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 211.020645][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 211.027751][ T5904] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 211.036470][ T5904] usb 1-1: config 179 has no interface number 0 [ 211.043460][ T5904] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 211.059652][ T5904] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 211.059774][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 211.076126][ T5904] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 211.080488][ T25] usbtmc 2-1:16.0: can't read capabilities [ 211.089522][ T8185] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm [ 211.106596][ T5904] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 211.119017][ T5904] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 211.167509][ T5904] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 211.188408][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.202509][ T8172] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 211.210777][ T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 211.293534][ T5904] usb 2-1: USB disconnect, device number 9 [ 211.336257][ T29] audit: type=1400 audit(1737374523.865:496): avc: denied { listen } for pid=8193 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.364678][ T29] audit: type=1400 audit(1737374523.885:497): avc: denied { accept } for pid=8193 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 211.406748][ T8] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.417925][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 211.429361][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 211.473064][ T5865] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23 [ 211.484913][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.504900][ T8] usb 6-1: config 0 descriptor?? [ 211.625802][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 211.658925][ T5869] usb 1-1: USB disconnect, device number 17 [ 211.659021][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 211.673857][ T5869] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 211.673884][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 211.775825][ T8204] team0: entered promiscuous mode [ 211.781231][ T8204] team_slave_0: entered promiscuous mode [ 211.787059][ T8204] team_slave_1: entered promiscuous mode [ 211.796754][ T8203] team0: left promiscuous mode [ 211.804001][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 211.809243][ T8203] team_slave_0: left promiscuous mode [ 211.816148][ T8203] team_slave_1: left promiscuous mode [ 211.830574][ T5866] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 211.839114][ T5866] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 211.848413][ T5866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 211.857807][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.890688][ T5866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.913668][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 211.933466][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 211.950151][ T5866] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 211.959279][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 211.979501][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 211.986835][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.002338][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 212.020571][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 212.028577][ T5866] usb 3-1: config 0 descriptor?? [ 212.039979][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 212.056584][ T8] logitech 0003:046D:C29C.000D: unknown main item tag 0x0 [ 212.079431][ T8] logitech 0003:046D:C29C.000D: hidraw0: USB HID v10.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 212.209780][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.736'. [ 212.236656][ T29] audit: type=1400 audit(1737374524.745:498): avc: denied { mounton } for pid=8215 comm="syz.1.737" path="/168/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=sock_file permissive=1 [ 212.244803][ T8214] netlink: 32 bytes leftover after parsing attributes in process `syz.4.736'. [ 212.283956][ T5866] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 212.336462][ T8] logitech 0003:046D:C29C.000D: no inputs found [ 212.352300][ T8] usb 6-1: USB disconnect, device number 7 [ 212.889424][ T8224] ipt_REJECT: TCP_RESET invalid for non-tcp [ 213.065139][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 213.065154][ T29] audit: type=1400 audit(1737374525.585:500): avc: denied { read write } for pid=8195 comm="syz.2.727" name="lp0" dev="devtmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 213.068218][ T5869] usb 3-1: USB disconnect, device number 14 [ 213.111414][ T29] audit: type=1400 audit(1737374525.585:501): avc: denied { open } for pid=8195 comm="syz.2.727" path="/dev/usb/lp0" dev="devtmpfs" ino=2909 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 213.118999][ T8226] bond_slave_0: entered promiscuous mode [ 213.141188][ T8226] bond_slave_1: entered promiscuous mode [ 213.146852][ T8226] batadv0: entered promiscuous mode [ 213.164640][ T5869] usblp0: removed [ 213.182389][ T8226] macvlan2: entered promiscuous mode [ 213.187793][ T8226] bond0: entered promiscuous mode [ 213.198412][ T8226] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.263840][ T29] audit: type=1400 audit(1737374525.795:502): avc: denied { append } for pid=8229 comm="syz.0.742" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 213.329876][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.744'. [ 213.437215][ T29] audit: type=1400 audit(1737374525.965:503): avc: denied { read } for pid=8235 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 213.742653][ T8253] netlink: 132 bytes leftover after parsing attributes in process `syz.5.753'. [ 213.890147][ T5869] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 214.154369][ T5869] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 214.175880][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.190318][ T5869] usb 1-1: Product: syz [ 214.194610][ T5869] usb 1-1: Manufacturer: syz [ 214.199341][ T5869] usb 1-1: SerialNumber: syz [ 214.226657][ T5869] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 214.249399][ T5818] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 214.503240][ T8268] netlink: 168 bytes leftover after parsing attributes in process `syz.5.758'. [ 215.030069][ T5865] usb 1-1: USB disconnect, device number 18 [ 215.197685][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.764'. [ 215.249099][ T29] audit: type=1326 audit(1737374527.775:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.1.765" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f676ad85d29 code=0x0 [ 215.320673][ T5818] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 215.328477][ T5818] ath9k_htc: Failed to initialize the device [ 215.335354][ T5869] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 215.346761][ T5865] usb 1-1: ath9k_htc: USB layer deinitialized [ 215.386768][ T29] audit: type=1400 audit(1737374527.915:505): avc: denied { read write } for pid=8291 comm="syz.5.768" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.425822][ T29] audit: type=1400 audit(1737374527.915:506): avc: denied { open } for pid=8291 comm="syz.5.768" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 215.501056][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 215.507840][ T5869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.519401][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.535687][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.546390][ T5869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.590065][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.613132][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.790094][ T5865] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 215.838167][ T5869] usb 5-1: GET_CAPABILITIES returned 0 [ 215.854040][ T5869] usbtmc 5-1:16.0: can't read capabilities [ 215.970156][ T5865] usb 6-1: Using ep0 maxpacket: 16 [ 215.977455][ T5865] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.994924][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.007801][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.018088][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 216.030399][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 216.040197][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.065437][ T5865] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 216.083233][ T8314] netlink: 6233 bytes leftover after parsing attributes in process `syz.2.778'. [ 216.118625][ T5869] usb 5-1: USB disconnect, device number 15 [ 216.165394][ T5865] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 216.425991][ T5865] usb 6-1: Manufacturer: syz [ 216.493663][ T5865] usb 6-1: config 0 descriptor?? [ 216.530809][ T5865] mceusb 6-1:0.0: mceusb_dev_probe: device setup failed! [ 216.537885][ T5865] mceusb 6-1:0.0: probe with driver mceusb failed with error -12 [ 216.565379][ T5865] usbhid 6-1:0.0: can't add hid device: -22 [ 216.577165][ T5865] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 216.810145][ T8] usb 6-1: USB disconnect, device number 8 [ 216.933487][ T8333] kvm: kvm [8332]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000002d) [ 216.970083][ T5865] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 217.102907][ T8344] syz.4.790 uses obsolete (PF_INET,SOCK_PACKET) [ 217.130007][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 217.136628][ T5865] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.147842][ T5865] usb 3-1: config 0 interface 0 altsetting 249 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.158205][ T5865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.165045][ T5865] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 217.175166][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.186580][ T5865] usb 3-1: config 0 descriptor?? [ 217.407432][ T8348] overlayfs: upper fs does not support file handles, falling back to index=off. [ 217.487489][ T8350] Bluetooth: hci5: Frame reassembly failed (-84) [ 217.551573][ T8352] Bluetooth: MGMT ver 1.23 [ 217.606601][ T5865] hid-picolcd 0003:04D8:F002.000E: unexpected long global item [ 217.626097][ T5865] hid-picolcd 0003:04D8:F002.000E: device report parse failed [ 217.638232][ T5865] hid-picolcd 0003:04D8:F002.000E: probe with driver hid-picolcd failed with error -22 [ 217.768677][ T5829] Bluetooth: hci2: unexpected event for opcode 0x2042 [ 217.828777][ T5869] usb 3-1: USB disconnect, device number 15 [ 218.093149][ T8369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.801'. [ 218.190112][ T5865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 218.226301][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.805'. [ 218.370803][ T5865] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.380372][ T5818] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 218.393133][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.431620][ T5865] usb 2-1: config 0 descriptor?? [ 218.452035][ T5865] cp210x 2-1:0.0: cp210x converter detected [ 218.525836][ T29] audit: type=1326 audit(1737374531.055:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 218.587378][ T29] audit: type=1326 audit(1737374531.085:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 218.600789][ T5818] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 218.610610][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.648389][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.662947][ T29] audit: type=1400 audit(1737374531.085:509): avc: denied { bind } for pid=8391 comm="syz.2.812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.669576][ T5818] usb 1-1: config 0 descriptor?? [ 218.687096][ T29] audit: type=1400 audit(1737374531.085:510): avc: denied { name_bind } for pid=8391 comm="syz.2.812" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 218.701492][ T5818] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 218.707668][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.709102][ T29] audit: type=1400 audit(1737374531.085:511): avc: denied { node_bind } for pid=8391 comm="syz.2.812" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 218.742336][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.750502][ T29] audit: type=1326 audit(1737374531.095:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 218.952777][ T29] audit: type=1326 audit(1737374531.095:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 218.976579][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.132557][ T29] audit: type=1326 audit(1737374531.095:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 219.141224][ T5865] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 219.217758][ T29] audit: type=1326 audit(1737374531.095:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 219.281144][ T29] audit: type=1326 audit(1737374531.095:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d1385d29 code=0x7ffc0000 [ 219.316958][ T5865] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 219.390352][ T5865] usb 2-1: cp210x converter now attached to ttyUSB0 [ 219.428693][ T5865] usb 2-1: USB disconnect, device number 10 [ 219.449439][ T5818] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 219.467721][ T5865] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 219.475076][ T5818] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 219.506373][ T5865] cp210x 2-1:0.0: device disconnected [ 219.560157][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 219.566137][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 220.101967][ T5866] usb 1-1: USB disconnect, device number 19 [ 220.124342][ T5826] Bluetooth: hci3: Malformed LE Event: 0x1b [ 220.139735][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.821'. [ 220.308708][ T8423] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 220.315265][ T8423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.335011][ T8423] vhci_hcd vhci_hcd.0: Device attached [ 220.348190][ T8426] vhci_hcd: connection closed [ 220.352750][ T66] vhci_hcd: stop threads [ 220.373464][ T66] vhci_hcd: release socket [ 220.378644][ T66] vhci_hcd: disconnect device [ 220.550213][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 220.961084][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 220.987789][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.006791][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.019065][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.036972][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.094138][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.123799][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.363996][ T25] usb 2-1: usb_control_msg returned -32 [ 221.377651][ T25] usbtmc 2-1:16.0: can't read capabilities [ 221.640086][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 221.770089][ T5866] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 221.802102][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 221.807429][ T5826] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 221.815948][ T5826] Bluetooth: hci2: Injecting HCI hardware error event [ 221.824009][ T5826] Bluetooth: hci2: hardware error 0x00 [ 221.840719][ T25] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 221.849386][ T25] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 221.862775][ T25] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 221.873893][ T25] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 221.889493][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 221.901556][ T25] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 221.911170][ T25] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 221.921320][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.930278][ T25] usb 6-1: Product: syz [ 221.936951][ T25] usb 6-1: Manufacturer: syz [ 221.937183][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.956102][ T5865] usb 2-1: USB disconnect, device number 11 [ 221.963957][ T25] usb 6-1: SerialNumber: syz [ 221.964024][ T5866] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.982809][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.986759][ T25] usb 6-1: config 0 descriptor?? [ 221.997223][ T5866] usb 1-1: config 0 descriptor?? [ 222.013863][ T25] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 222.034557][ T25] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 222.321253][ T5865] usb 6-1: USB disconnect, device number 9 [ 222.327125][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 222.349875][ T5865] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 222.558525][ T8463] ldusb: No device or device unplugged -19 [ 222.983970][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 222.991877][ T8491] loop6: detected capacity change from 0 to 524287999 [ 223.080559][ T5866] uclogic 0003:256C:006D.000F: failed retrieving string descriptor #200: -71 [ 223.093794][ T5866] uclogic 0003:256C:006D.000F: failed retrieving pen parameters: -71 [ 223.100698][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.113179][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.186804][ T5866] uclogic 0003:256C:006D.000F: failed probing pen v2 parameters: -71 [ 223.190296][ T8494] Invalid logical block size (3) [ 223.433385][ T5866] uclogic 0003:256C:006D.000F: failed probing parameters: -71 [ 223.444364][ T5866] uclogic 0003:256C:006D.000F: probe with driver uclogic failed with error -71 [ 223.451164][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.463397][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.480758][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.489966][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.500115][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.505872][ T5866] usb 1-1: USB disconnect, device number 20 [ 223.509282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.523637][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.532840][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.587119][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.596296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.620429][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.629597][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.646435][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.655621][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.663568][ T8491] ldm_validate_partition_table(): Disk read failed. [ 223.677086][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.686308][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.696203][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 223.705438][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.724602][ T8491] Dev loop6: unable to read RDB block 0 [ 223.762663][ T8491] loop6: unable to read partition table [ 223.779762][ T8491] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 223.827682][ T8507] vcan0: entered allmulticast mode [ 223.890361][ T5826] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 223.913447][ T8507] vcan0 (unregistering): left allmulticast mode [ 224.225131][ T5865] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 224.680069][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 224.699069][ T5865] usb 3-1: config 0 has an invalid interface number: 19 but max is 0 [ 224.715781][ T5865] usb 3-1: config 0 has no interface number 0 [ 224.723131][ T5865] usb 3-1: config 0 interface 19 has no altsetting 0 [ 224.734688][ T5865] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice=f5.26 [ 224.751209][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.751501][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 224.751514][ T29] audit: type=1400 audit(1737374537.285:523): avc: denied { read } for pid=8536 comm="syz.5.867" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 224.759279][ T5865] usb 3-1: Product: syz [ 224.770154][ T5818] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 224.792159][ T5865] usb 3-1: Manufacturer: syz [ 224.833811][ T5865] usb 3-1: SerialNumber: syz [ 224.849082][ T5865] usb 3-1: config 0 descriptor?? [ 224.870356][ T5865] appletouch 3-1:0.19: Could not find int-in endpoint [ 224.877160][ T5865] appletouch 3-1:0.19: probe with driver appletouch failed with error -5 [ 224.931917][ T5865] usbhid 3-1:0.19: couldn't find an input interrupt endpoint [ 224.950961][ T8541] syzkaller1: entered promiscuous mode [ 224.956456][ T8541] syzkaller1: entered allmulticast mode [ 224.964678][ T5818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.991807][ T5818] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 225.040138][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.063181][ T5818] usb 1-1: config 0 descriptor?? [ 225.087466][ T5865] usb 3-1: USB disconnect, device number 16 [ 225.496892][ T5818] lg-g15 0003:046D:C222.0010: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 225.719767][ T25] usb 1-1: USB disconnect, device number 21 [ 225.840113][ T5865] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 225.925710][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 226.010045][ T5865] usb 2-1: Using ep0 maxpacket: 32 [ 226.022782][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.058923][ T8581] ipvlan2: entered allmulticast mode [ 226.067234][ T8581] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 226.069860][ T5865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.078863][ T8581] batman_adv: batadv0: Adding interface: ipvlan2 [ 226.091439][ T8581] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.117119][ T5865] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 226.117150][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.135821][ T8581] batman_adv: batadv0: Interface activated: ipvlan2 [ 226.143297][ T5865] usb 2-1: config 0 descriptor?? [ 226.168433][ T29] audit: type=1400 audit(1737374538.695:524): avc: denied { read write } for pid=8582 comm="syz.2.886" name="mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.223388][ T29] audit: type=1400 audit(1737374538.695:525): avc: denied { open } for pid=8582 comm="syz.2.886" path="/dev/input/mouse0" dev="devtmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 226.854484][ T5865] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 227.013263][ T5865] usb 2-1: USB disconnect, device number 12 [ 227.774388][ T8627] kvm: pic: non byte write [ 227.786442][ T8627] kvm: pic: non byte write [ 227.795965][ T8623] block device autoloading is deprecated and will be removed. [ 227.940618][ T5865] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 228.020151][ T5818] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 228.040200][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 228.047692][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 228.059427][ T29] audit: type=1400 audit(1737374540.585:526): avc: denied { bind } for pid=8636 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.084767][ T29] audit: type=1400 audit(1737374540.585:527): avc: denied { node_bind } for pid=8636 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 228.108754][ T29] audit: type=1400 audit(1737374540.615:528): avc: denied { read } for pid=8636 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.135502][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 228.143848][ T5865] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 228.152602][ T5865] usb 1-1: config 2 has no interface number 0 [ 228.160092][ T5865] usb 1-1: config 2 interface 1 has no altsetting 0 [ 228.168848][ T5865] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=47.78 [ 228.178109][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.186236][ T5865] usb 1-1: Product: syz [ 228.190714][ T5865] usb 1-1: Manufacturer: syz [ 228.195327][ T5865] usb 1-1: SerialNumber: syz [ 228.221404][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.231703][ T5818] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.241204][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.252745][ T5818] usb 5-1: config 0 descriptor?? [ 228.261885][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 228.661965][ T5865] snd-usb-audio 1-1:2.1: probe with driver snd-usb-audio failed with error -22 [ 228.671150][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 228.671736][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 228.692242][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 228.712518][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 228.941012][ T5818] pwc: recv_control_msg error -71 req 04 val 1400 [ 229.063983][ T5818] pwc: recv_control_msg error -71 req 02 val 2000 [ 229.121834][ T5865] usb 1-1: us122l: couldn't allocate write buffer [ 229.156982][ T5818] pwc: recv_control_msg error -71 req 02 val 2100 [ 229.162793][ T5865] snd-usb-us122l 1-1:2.1: probe with driver snd-usb-us122l failed with error -22 [ 229.190201][ T5818] pwc: recv_control_msg error -71 req 04 val 1500 [ 229.232056][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 229.243269][ T5865] usb 1-1: USB disconnect, device number 22 [ 229.250296][ T5818] pwc: recv_control_msg error -71 req 02 val 2500 [ 229.257245][ T5818] pwc: recv_control_msg error -71 req 02 val 2400 [ 229.283689][ T5818] pwc: recv_control_msg error -71 req 02 val 2600 [ 229.620313][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 229.641292][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 229.660459][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 229.700128][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 229.746917][ T6827] udevd[6827]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.755945][ T5818] pwc: Registered as video103. [ 229.788502][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 229.813656][ T5818] usb 5-1: USB disconnect, device number 16 [ 229.893115][ T29] audit: type=1400 audit(1737374542.415:529): avc: denied { map } for pid=8659 comm="syz.5.915" path="/dev/video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 229.986694][ T29] audit: type=1400 audit(1737374542.515:530): avc: denied { watch watch_reads } for pid=8665 comm="syz.1.917" path=2F3230302F66696C6530202864656C6574656429 dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 230.012413][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.046915][ T5868] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 230.200484][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 230.220309][ T29] audit: type=1400 audit(1737374542.755:531): avc: denied { getopt } for pid=8671 comm="syz.0.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 230.239510][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.246672][ T5868] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 230.260105][ T5818] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 230.275394][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 230.300132][ T5868] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 230.322410][ T5868] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 230.370044][ T5868] usb 3-1: config 0 interface 0 has no altsetting 0 [ 230.381778][ T5868] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 230.393190][ T5868] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 230.408452][ T5868] usb 3-1: Product: syz [ 230.429341][ T5868] usb 3-1: Manufacturer: syz [ 230.440970][ T5868] usb 3-1: SerialNumber: syz [ 230.446478][ T5818] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 230.462044][ T5868] usb 3-1: config 0 descriptor?? [ 230.475855][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.534346][ T5868] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 230.570173][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 230.576578][ T5818] usb 5-1: config 0 descriptor?? [ 230.657671][ T5868] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 230.755928][ T5818] gspca_main: spca508-2.14.0 probing 8086:0110 [ 230.756257][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 230.794950][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 230.906948][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.964767][ T8] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 230.970794][ T5818] gspca_spca508: reg_read err -32 [ 230.980697][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 230.986797][ T5818] gspca_spca508: reg_read err -32 [ 231.007697][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.010201][ T5818] gspca_spca508: reg_read err -32 [ 231.018360][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.030501][ T5866] usb 3-1: USB disconnect, device number 17 [ 231.033660][ T5818] gspca_spca508: reg_read err -32 [ 231.037248][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.044462][ T5818] gspca_spca508: reg_read err -32 [ 231.049790][ T5866] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 231.060839][ T5867] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 231.075396][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.087761][ T8] usb 1-1: config 0 descriptor?? [ 231.095481][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.102990][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.114363][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.122373][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.130792][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.138375][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.146789][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.154577][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.162161][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.190511][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.197938][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.206132][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.213784][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.221819][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.230859][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.238616][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.254162][ T5867] usb 2-1: config 0 has no interfaces? [ 231.259722][ T5867] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 231.269013][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.277955][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.286421][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.287932][ T5818] gspca_spca508: reg write: error -71 [ 231.295088][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.307893][ T5867] usb 2-1: config 0 descriptor?? [ 231.308985][ T5818] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 231.327362][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 231.341797][ T5818] usb 5-1: USB disconnect, device number 17 [ 231.345744][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 231.355658][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.365221][ T8] usb 1-1: USB disconnect, device number 23 [ 231.371487][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.380000][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.388088][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.404806][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.412440][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.419840][ T5865] hid-generic 0000:0000:0003.0012: unknown main item tag 0x0 [ 231.427715][ T8689] trusted_key: syz.5.925 sent an empty control message without MSG_MORE. [ 231.438535][ T5865] hid-generic 0000:0000:0003.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 231.662776][ T5818] usb 2-1: USB disconnect, device number 13 [ 231.880984][ T5868] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 232.040579][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 232.053284][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.064705][ T5868] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 232.079990][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.089996][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 232.100856][ T5868] usb 1-1: config 0 descriptor?? [ 232.111484][ T5868] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 232.129425][ T5868] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 232.140192][ T5866] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.242300][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.267438][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.279882][ T8] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 232.304697][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.318505][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.410685][ T8] usb 3-1: config 0 descriptor?? [ 232.415949][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 232.571217][ T5866] usb 5-1: New USB device found, idVendor=c98b, idProduct=0ac7, bcdDevice=ec.f6 [ 232.672653][ T8721] netlink: 'syz.1.938': attribute type 1 has an invalid length. [ 232.675580][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.768407][ T5866] usb 5-1: config 0 descriptor?? [ 232.792828][ T5866] usb 5-1: bad CDC descriptors [ 232.844603][ T8722] bond1: (slave ip6erspan0): making interface the new active one [ 232.873192][ T8722] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 232.903563][ T8] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 232.970197][ T8] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 233.001599][ T5866] usb 1-1: USB disconnect, device number 24 [ 233.021657][ T5866] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 233.043142][ T8] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 233.092241][ T5867] usb 5-1: USB disconnect, device number 18 [ 233.120140][ T8] usb 3-1: USB disconnect, device number 18 [ 233.133085][ T8731] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.941'. [ 233.156017][ T8] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 233.175051][ T8733] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.549993][ T5868] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 233.711859][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.742743][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.780921][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.875533][ T5868] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.913982][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.056021][ T5868] usb 6-1: config 0 descriptor?? [ 234.214329][ T29] audit: type=1400 audit(1737374546.745:532): avc: denied { mounton } for pid=8754 comm="syz.1.950" path="/208/file1/file0" dev="autofs" ino=20094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 234.237469][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.345642][ T8758] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 234.388429][ T8758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.432364][ T8758] bond2: (slave gretap1): making interface the new active one [ 234.443992][ T8758] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 234.571152][ T5868] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 234.580238][ T5818] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 234.603992][ T5868] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 234.701282][ T29] audit: type=1400 audit(1737374547.225:533): avc: denied { ioctl } for pid=8768 comm="syz.4.957" path="socket:[20125]" dev="sockfs" ino=20125 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 234.749990][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 234.756655][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.778556][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.803235][ T5818] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.820514][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.831929][ T5868] usb 6-1: USB disconnect, device number 10 [ 234.856069][ T5818] usb 3-1: config 0 descriptor?? [ 234.864438][ T5818] hub 3-1:0.0: USB hub found [ 234.954743][ T29] audit: type=1400 audit(1737374547.485:534): avc: denied { watch watch_reads } for pid=8778 comm="syz.0.961" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 235.070954][ T5818] hub 3-1:0.0: 1 port detected [ 235.456592][ T5867] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 235.738900][ T5867] usb 1-1: Using ep0 maxpacket: 16 [ 235.787400][ T5867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.869962][ T5867] usb 1-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 235.879054][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.885752][ T5818] hub 3-1:0.0: activate --> -90 [ 235.914899][ T5867] usb 1-1: config 0 descriptor?? [ 236.146948][ T29] audit: type=1400 audit(1737374548.675:535): avc: denied { block_suspend } for pid=8795 comm="syz.5.967" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.168169][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.287693][ T8] usb 3-1: USB disconnect, device number 19 [ 236.329439][ T5867] ntrig 0003:1B96:000C.0016: item fetching failed at offset 3/5 [ 236.337386][ T5867] ntrig 0003:1B96:000C.0016: parse failed [ 236.343625][ T5867] ntrig 0003:1B96:000C.0016: probe with driver ntrig failed with error -22 [ 236.543164][ T25] usb 1-1: USB disconnect, device number 25 [ 236.856245][ T29] audit: type=1400 audit(1737374549.385:536): avc: denied { map } for pid=8800 comm="syz.2.969" path="socket:[20232]" dev="sockfs" ino=20232 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 237.050167][ T8] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 237.210129][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 237.217451][ T8] usb 5-1: config 0 has no interfaces? [ 237.223362][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.233550][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.245525][ T8] usb 5-1: config 0 descriptor?? [ 237.350106][ T25] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 237.505343][ T8] usb 5-1: USB disconnect, device number 19 [ 237.510099][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 237.525812][ T25] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 237.536642][ T25] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 237.546717][ T25] usb 6-1: Product: syz [ 237.551000][ T25] usb 6-1: Manufacturer: syz [ 237.555594][ T25] usb 6-1: SerialNumber: syz [ 237.562567][ T25] usb 6-1: config 0 descriptor?? [ 237.798474][ T8] usb 6-1: USB disconnect, device number 11 [ 237.875154][ T29] audit: type=1400 audit(1737374550.405:537): avc: denied { ioctl } for pid=8813 comm="syz.0.975" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.904002][ T29] audit: type=1400 audit(1737374550.405:538): avc: denied { set_context_mgr } for pid=8813 comm="syz.0.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 238.522486][ T8827] bridge_slave_0: default FDB implementation only supports local addresses [ 238.662561][ T8831] mmap: syz.5.982 (8831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 238.690016][ T5818] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 238.700639][ T25] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 238.837493][ T29] audit: type=1400 audit(1737374551.365:539): avc: denied { unmount } for pid=6366 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 238.854794][ T5818] usb 5-1: Using ep0 maxpacket: 32 [ 238.864977][ T5818] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 238.873892][ T5818] usb 5-1: config 0 has no interface number 0 [ 238.881038][ T5818] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.897784][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.906186][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 238.916801][ T5818] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 238.929317][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.942221][ T25] usb 1-1: config 9 has an invalid interface number: 199 but max is 1 [ 238.950796][ T25] usb 1-1: config 9 has an invalid interface number: 97 but max is 1 [ 238.958941][ T5818] usb 5-1: Product: syz [ 238.963248][ T25] usb 1-1: config 9 has no interface number 0 [ 238.969350][ T25] usb 1-1: config 9 has no interface number 1 [ 238.976042][ T5818] usb 5-1: Manufacturer: syz [ 238.990593][ T5818] usb 5-1: SerialNumber: syz [ 238.998512][ T25] usb 1-1: config 9 interface 199 has no altsetting 0 [ 239.011870][ T5818] usb 5-1: config 0 descriptor?? [ 239.024455][ T5818] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 239.034312][ T25] usb 1-1: config 9 interface 97 has no altsetting 0 [ 239.046719][ T5818] em28xx 5-1:0.132: Video interface 132 found: [ 239.057336][ T25] usb 1-1: New USB device found, idVendor=05a9, idProduct=2800, bcdDevice=b1.d6 [ 239.073344][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.084233][ T25] usb 1-1: Product: syz [ 239.088432][ T25] usb 1-1: Manufacturer: syz [ 239.107159][ T25] usb 1-1: SerialNumber: syz [ 239.146641][ T29] audit: type=1400 audit(1737374551.675:540): avc: denied { append } for pid=8845 comm="syz.2.988" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 239.189630][ T8846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 239.263483][ T29] audit: type=1326 audit(1737374551.795:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8849 comm="syz.5.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc64ef85d29 code=0x0 [ 239.286150][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.369760][ T25] usb 1-1: USB disconnect, device number 26 [ 239.432692][ T5826] Bluetooth: hci4: unexpected cc 0x0403 length: 9 > 1 [ 239.441218][ T5826] Bluetooth: hci4: unexpected event for opcode 0x0403 [ 239.441875][ T5818] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 239.507772][ T8857] syz_tun: entered promiscuous mode [ 239.517045][ T8857] batadv_slave_0: entered promiscuous mode [ 239.525323][ T8857] hsr1: entered allmulticast mode [ 239.530548][ T8857] syz_tun: entered allmulticast mode [ 239.535864][ T8857] batadv_slave_0: entered allmulticast mode [ 240.128663][ T5818] em28xx 5-1:0.132: failed to read eeprom (err=-110) [ 240.177186][ T5818] em28xx 5-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 240.367646][ T5818] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 240.410183][ T5818] em28xx 5-1:0.132: analog set to bulk mode. [ 240.420658][ T25] em28xx 5-1:0.132: Registering V4L2 extension [ 240.454928][ T5818] usb 5-1: USB disconnect, device number 20 [ 240.470964][ T5818] em28xx 5-1:0.132: Disconnecting em28xx [ 240.600072][ T25] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 240.615648][ T25] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 240.638558][ T25] em28xx 5-1:0.132: No AC97 audio processor [ 240.642636][ T29] audit: type=1400 audit(1737374553.165:542): avc: denied { mounton } for pid=8872 comm="syz.0.997" path="/197/file0" dev="tmpfs" ino=1049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 240.683687][ T25] usb 5-1: Decoder not found [ 240.701987][ T25] em28xx 5-1:0.132: failed to create media graph [ 240.708774][ T29] audit: type=1400 audit(1737374553.185:543): avc: denied { ioctl } for pid=8872 comm="syz.0.997" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 240.710698][ T25] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 240.767627][ T25] em28xx 5-1:0.132: Remote control support is not available for this card. [ 240.818808][ T5818] em28xx 5-1:0.132: Closing input extension [ 240.855805][ T5818] em28xx 5-1:0.132: Freeing device [ 241.427881][ T29] audit: type=1326 audit(1737374553.955:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8898 comm="syz.4.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3d1385d29 code=0x0 [ 241.803853][ T29] audit: type=1400 audit(1737374554.335:545): avc: denied { mounton } for pid=8912 comm="syz.0.1012" path="/202/file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 241.989171][ T29] audit: type=1400 audit(1737374554.515:546): avc: denied { write } for pid=8914 comm="syz.5.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 242.264585][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 242.320473][ T2984] Bluetooth: hci5: Frame reassembly failed (-84) [ 243.385453][ T29] audit: type=1400 audit(1737374555.915:547): avc: denied { create } for pid=8951 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 243.418273][ T29] audit: type=1400 audit(1737374555.945:548): avc: denied { ioctl } for pid=8951 comm="syz.4.1029" path="socket:[21735]" dev="sockfs" ino=21735 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 243.445140][ T29] audit: type=1400 audit(1737374555.945:549): avc: denied { setopt } for pid=8951 comm="syz.4.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.490209][ T5829] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 243.500179][ T5829] Bluetooth: hci4: Injecting HCI hardware error event [ 243.508716][ T53] Bluetooth: hci4: hardware error 0x00 [ 243.600146][ T5867] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 243.689254][ T29] audit: type=1400 audit(1737374556.215:550): avc: denied { mounton } for pid=8962 comm="syz.5.1034" path="/proc/436/task" dev="proc" ino=21816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 243.767086][ T5867] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.778457][ T5867] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 243.800627][ T5867] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.809742][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.829992][ T5867] usb 1-1: Product: syz [ 243.839942][ T5867] usb 1-1: Manufacturer: syz [ 243.844587][ T5867] usb 1-1: SerialNumber: syz [ 243.896479][ T29] audit: type=1400 audit(1737374556.425:551): avc: denied { sqpoll } for pid=8971 comm="syz.4.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.990012][ T5869] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 244.063889][ T8950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.140082][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 244.146676][ T5869] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 244.155054][ T5869] usb 6-1: config 179 has no interface number 0 [ 244.161348][ T5869] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 244.175127][ T5869] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 244.186419][ T5869] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.197841][ T5869] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 244.209502][ T5869] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.222793][ T5869] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 244.232082][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.242544][ T8966] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 244.291647][ T5829] Bluetooth: hci5: command 0xfc11 tx timeout [ 244.299222][ T5826] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 244.484863][ T5869] usb 6-1: USB disconnect, device number 12 [ 244.484912][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 244.499168][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.676599][ T8950] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.893734][ T5867] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 244.913833][ T5867] cdc_mbim 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 244.915946][ T8986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 244.929955][ T5867] cdc_mbim 1-1:1.0: setting rx_max = 2048 [ 244.989629][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1043'. [ 245.094107][ T5867] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 245.104802][ T5867] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 245.117872][ T5867] wwan wwan0: port wwan0mbim0 attached [ 245.129764][ T5867] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 245.308121][ T8] usb 1-1: USB disconnect, device number 27 [ 245.319724][ T8] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 245.329416][ T5865] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 245.374001][ T8] wwan wwan0: port wwan0mbim0 disconnected [ 245.491526][ T5865] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.518865][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 245.535540][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 245.548138][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 123, setting to 64 [ 245.559038][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 245.560122][ T53] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 245.575271][ T5865] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 245.587704][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 245.595899][ T5865] usb 5-1: Product: syz [ 245.606007][ T5865] usb 5-1: Manufacturer: syz [ 245.610846][ T5865] usb 5-1: SerialNumber: syz [ 245.621451][ T5865] usb 5-1: config 0 descriptor?? [ 245.628004][ T8992] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.809260][ T29] audit: type=1400 audit(1737374558.335:552): avc: denied { write } for pid=9023 comm="syz.2.1047" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 245.846334][ T5865] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 245.858973][ T5865] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 245.905034][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 245.982081][ T9028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 246.049717][ T5865] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 246.076521][ T5865] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 246.112592][ T5865] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 246.434560][ T5865] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 246.558488][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.565123][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.571767][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.578391][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.585160][ T5865] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 246.585231][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.600407][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.607120][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.613678][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.620261][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.626874][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.633549][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.640180][ C0] radio-si470x 5-1:0.0: non-zero urb status (-71) [ 246.649173][ T5865] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 246.671513][ T5865] usb 5-1: USB disconnect, device number 21 [ 251.159832][ T29] audit: type=1400 audit(1737374563.685:553): avc: denied { read } for pid=9056 comm="syz.4.1060" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 251.255133][ T9060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.290900][ T9060] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 251.409500][ T9060] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.439329][ T9060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.468687][ T9060] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.639283][ T29] audit: type=1400 audit(1737374564.165:554): avc: denied { bind } for pid=9072 comm="syz.2.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.660566][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.682116][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.696199][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.708975][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.719748][ T5826] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.735977][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.030618][ T5932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.832832][ T5932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.967140][ T29] audit: type=1400 audit(1737374565.495:555): avc: denied { read } for pid=9093 comm="syz.2.1072" laddr=::ffff:172.20.20.170 lport=20000 faddr=::ffff:172.20.20.170 fport=60962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 253.320343][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 253.480019][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.840015][ T53] Bluetooth: hci1: command tx timeout [ 253.919515][ T5932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.334661][ T5932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.796489][ T9126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 254.853182][ T9126] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.861865][ T9126] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.870280][ T9126] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.878541][ T9126] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.249793][ T9126] vxlan0: entered promiscuous mode [ 255.400520][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 255.522139][ T9075] chnl_net:caif_netlink_parms(): no params data found [ 255.560206][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 255.644589][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.660124][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.779623][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1081'. [ 255.806569][ T29] audit: type=1400 audit(1737374568.325:556): avc: denied { read } for pid=9138 comm="syz.4.1082" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 255.841345][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 255.856896][ T9137] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1080'. [ 255.880207][ T53] Bluetooth: hci1: command tx timeout [ 255.893220][ T5932] erspan0: left allmulticast mode [ 255.901616][ T9133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1081'. [ 255.920131][ T5932] erspan0: left promiscuous mode [ 255.944392][ T9141] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 255.961638][ T5932] bridge0: port 1(erspan0) entered disabled state [ 256.051151][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1080'. [ 256.214744][ T29] audit: type=1400 audit(1737374568.745:557): avc: denied { map } for pid=9146 comm="syz.0.1083" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 256.290122][ T29] audit: type=1400 audit(1737374568.795:558): avc: denied { call } for pid=9146 comm="syz.0.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 256.428230][ T5932] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 256.950512][ T9153] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3560516746 (28484133968 ns) > initial count (26428273480 ns). Using initial count to start timer. [ 257.060725][ T29] audit: type=1400 audit(1737374569.585:559): avc: denied { bind } for pid=9155 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 257.107409][ T29] audit: type=1400 audit(1737374569.595:560): avc: denied { create } for pid=9155 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 257.155691][ T29] audit: type=1400 audit(1737374569.615:561): avc: denied { ioctl } for pid=9155 comm="syz.4.1086" path="socket:[22143]" dev="sockfs" ino=22143 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 257.649614][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 257.960081][ T53] Bluetooth: hci1: command tx timeout [ 258.315176][ T5932] bond0 (unregistering): Released all slaves [ 258.325976][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.325976][ T9169] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 258.345037][ T9170] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 258.348540][ T5932] bond1 (unregistering): Released all slaves [ 258.375456][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.375456][ T9169] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 258.402741][ T9172] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 258.427093][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 258.450127][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.450127][ T9169] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 258.524750][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 258.556551][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.590163][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.598534][ T9169] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 258.600550][ T9075] bridge_slave_0: entered allmulticast mode [ 258.627416][ T9169] UDF-fs: Scanning with blocksize 512 failed [ 258.635967][ T9075] bridge_slave_0: entered promiscuous mode [ 258.655641][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.655641][ T9169] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 258.688296][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.688296][ T9169] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 258.709839][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 258.735233][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.735233][ T9169] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 258.768261][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 258.800474][ T9169] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 258.808133][ T9169] UDF-fs: Scanning with blocksize 1024 failed [ 258.845493][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.845493][ T9169] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 258.929317][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.929317][ T9169] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 258.950139][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 258.962062][ T9169] syz.0.1089: attempt to access beyond end of device [ 258.962062][ T9169] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 258.977537][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.978246][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 258.994518][ T9169] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 259.010061][ T9075] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.018007][ T9075] bridge_slave_1: entered allmulticast mode [ 259.031939][ T9169] UDF-fs: Scanning with blocksize 2048 failed [ 259.039148][ T9075] bridge_slave_1: entered promiscuous mode [ 259.051648][ T9169] syz.0.1089: attempt to access beyond end of device [ 259.051648][ T9169] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 259.072599][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 259.100107][ T5869] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 259.140195][ T9169] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 259.160413][ T5865] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 259.168623][ T9169] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 259.187120][ T9169] UDF-fs: Scanning with blocksize 4096 failed [ 259.205463][ T9075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.225172][ T9169] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 259.313402][ T9075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.329468][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 259.344999][ T5865] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 65, using maximum allowed: 30 [ 259.359196][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.375543][ T5869] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 259.395641][ T5865] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 259.410053][ T5869] usb 6-1: config 0 has no interface number 0 [ 259.416159][ T5869] usb 6-1: config 0 interface 184 has no altsetting 0 [ 259.455297][ T5932] hsr_slave_0: left promiscuous mode [ 259.462122][ T5865] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 259.480881][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.520454][ T5869] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 259.532648][ T5865] usb 5-1: config 0 descriptor?? [ 259.536315][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.550893][ T5932] hsr_slave_1: left promiscuous mode [ 259.578218][ T5869] usb 6-1: Product: syz [ 259.593046][ T5869] usb 6-1: Manufacturer: syz [ 259.597669][ T5869] usb 6-1: SerialNumber: syz [ 259.611754][ T5932] veth1_macvtap: left promiscuous mode [ 259.626767][ T5932] veth0_macvtap: left promiscuous mode [ 259.647635][ T5869] usb 6-1: config 0 descriptor?? [ 259.650582][ T5932] veth1_vlan: left promiscuous mode [ 259.668243][ T5932] veth0_vlan: left promiscuous mode [ 259.677649][ T5869] smsc75xx v1.0.0 [ 259.885651][ T5867] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 260.012457][ T5865] hid-u2fzero 0003:10C4:8ACF.0017: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 260.040573][ T53] Bluetooth: hci1: command tx timeout [ 260.065868][ T5867] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 260.121635][ T5865] hid-u2fzero 0003:10C4:8ACF.0017: U2F Zero LED initialised [ 260.129045][ T5865] hid-u2fzero 0003:10C4:8ACF.0017: U2F Zero RNG initialised [ 260.157189][ T5867] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.199603][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.269849][ T5867] usb 3-1: Product: syz [ 260.362028][ T5818] usb 5-1: USB disconnect, device number 22 [ 260.459471][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 260.665469][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.285039][ T5867] usb 3-1: Manufacturer: syz [ 261.312435][ T5867] usb 3-1: SerialNumber: syz [ 261.765751][ T9195] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 262.099610][ T5867] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 262.170128][ T5867] usb 3-1: USB disconnect, device number 20 [ 262.271859][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 262.283842][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 262.294693][ T5869] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 262.305325][ T5869] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 262.614558][ T9213] syz.0.1098 (9213): drop_caches: 1 [ 262.643476][ T5869] usb 6-1: USB disconnect, device number 13 [ 262.710049][ T5866] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 263.598273][ T5866] usb 3-1: Using ep0 maxpacket: 8 [ 263.623157][ T5866] usb 3-1: device descriptor read/all, error -71 [ 263.728347][ T29] audit: type=1400 audit(1737374576.255:562): avc: denied { accept } for pid=9226 comm="syz.0.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.218878][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 264.388800][ T9240] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 264.397492][ T9240] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1106'. [ 265.560111][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 267.140346][ T9234] bridge0: port 3(erspan0) entered disabled state [ 267.147770][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.183957][ T9075] team0: Port device team_slave_0 added [ 267.226195][ T9075] team0: Port device team_slave_1 added [ 267.351712][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.370196][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.415107][ T9075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.459948][ T9075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.477222][ T9075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.510142][ T5866] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 267.554075][ T9075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.640961][ T5826] Bluetooth: hci1: command 0x0405 tx timeout [ 267.715554][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.747729][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.822946][ T9075] hsr_slave_0: entered promiscuous mode [ 267.837669][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.856706][ T9075] hsr_slave_1: entered promiscuous mode [ 267.870036][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.884569][ T9075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.910005][ T9075] Cannot create hsr debugfs directory [ 267.911373][ T5866] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.977744][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.019181][ T5866] usb 3-1: config 0 descriptor?? [ 268.708162][ T5866] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 268.734611][ T5866] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 269.623090][ T9075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 269.689946][ T9075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 269.749874][ T9075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.777774][ T9075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 270.065392][ T9075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.114310][ T9075] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.141793][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.148976][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.205604][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.212728][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.218492][ T9305] tmpfs: Bad value for 'mpol' [ 270.277270][ T5868] usb 3-1: USB disconnect, device number 23 [ 270.500171][ T5867] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 270.638870][ T9075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.660719][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 270.671531][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.679584][ T5867] usb 1-1: config 0 has no interface number 0 [ 270.687009][ T5867] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 270.704721][ T5867] usb 1-1: config 0 interface 1 has no altsetting 0 [ 270.722288][ T5867] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 270.740638][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.748736][ T5867] usb 1-1: Product: syz [ 270.756099][ T5867] usb 1-1: Manufacturer: syz [ 270.765399][ T5867] usb 1-1: SerialNumber: syz [ 270.779259][ T5867] usb 1-1: config 0 descriptor?? [ 271.062742][ T5867] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 271.107682][ T5867] cx231xx 1-1:0.1: Failed to read PCB config [ 271.139273][ T5867] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 271.145741][ T9333] loop6: detected capacity change from 0 to 524287999 [ 271.169240][ T29] audit: type=1400 audit(1737374583.695:563): avc: denied { map } for pid=9332 comm="syz.2.1120" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.188319][ T5867] usb 1-1: USB disconnect, device number 28 [ 271.221230][ C1] blk_print_req_error: 7 callbacks suppressed [ 271.221246][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 271.239704][ T29] audit: type=1400 audit(1737374583.695:564): avc: denied { execute } for pid=9332 comm="syz.2.1120" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 271.264064][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.264102][ C1] buffer_io_error: 7 callbacks suppressed [ 271.264116][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.295391][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.304598][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.313450][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.322645][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 271.323745][ T9075] veth0_vlan: entered promiscuous mode [ 271.378207][ T9075] veth1_vlan: entered promiscuous mode [ 271.390738][ T5869] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 271.417305][ T9075] veth0_macvtap: entered promiscuous mode [ 271.463306][ T9075] veth1_macvtap: entered promiscuous mode [ 271.527291][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.550163][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 271.550592][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.564159][ T5869] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.579515][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.595611][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.605604][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.606323][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.627468][ T5869] usb 6-1: Product: syz [ 271.649840][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.658275][ T5869] usb 6-1: Manufacturer: syz [ 271.664558][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.691969][ T5869] usb 6-1: SerialNumber: syz [ 271.730201][ T5867] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 271.734510][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.753848][ T5869] usb 6-1: config 0 descriptor?? [ 271.873927][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.910890][ T5867] usb 1-1: Using ep0 maxpacket: 32 [ 272.040561][ T5867] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.098740][ T5869] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 272.148946][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.157230][ T5867] usb 1-1: config 0 has no interface number 0 [ 272.178347][ T5867] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 272.189751][ T5867] usb 1-1: config 0 interface 1 has no altsetting 0 [ 272.196631][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.209122][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.219868][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.234239][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.245095][ T5867] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 272.255482][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.265393][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.279977][ T9075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.292145][ T5867] usb 1-1: Product: syz [ 272.296329][ T5867] usb 1-1: Manufacturer: syz [ 272.314718][ T5867] usb 1-1: SerialNumber: syz [ 272.319400][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.332657][ T5867] usb 1-1: config 0 descriptor?? [ 272.340908][ T9075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.368055][ T9075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.389935][ T9075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.399247][ T9075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.417648][ T9075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.544060][ T9075] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 272.586881][ T5867] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 272.597516][ T9075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.610000][ T5867] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 272.628342][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.036833][ T5867] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 273.057423][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.073590][ T5867] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 273.104100][ T5867] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 273.149045][ T5867] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 273.164801][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.184843][ T5867] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 273.193664][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.206021][ T5867] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -71 [ 273.320614][ T5867] i2c i2c-2: Added multiplexed i2c bus 4 [ 273.343183][ T5867] i2c i2c-2: Added multiplexed i2c bus 5 [ 273.343195][ T29] audit: type=1400 audit(1737374585.865:565): avc: denied { mounton } for pid=9075 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 273.403933][ T5867] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 273.423585][ T5867] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 273.545256][ T5867] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 273.592994][ T5867] usb 1-1: USB disconnect, device number 29 [ 273.695191][ T5869] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 273.747206][ T5869] usb 6-1: USB disconnect, device number 14 [ 273.790854][ T5904] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 274.223442][ T5904] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 274.233657][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.258146][ T5904] usb 3-1: config 0 descriptor?? [ 274.284710][ T5904] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 274.318083][ T5904] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 274.366397][ T29] audit: type=1400 audit(1737374586.895:566): avc: denied { relabelfrom } for pid=9399 comm="syz.0.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 274.424215][ T29] audit: type=1400 audit(1737374586.925:567): avc: denied { relabelto } for pid=9399 comm="syz.0.1131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 274.461864][ T9400] syzkaller0: entered promiscuous mode [ 274.467361][ T9400] syzkaller0: entered allmulticast mode [ 274.574955][ T5904] IPVS: starting estimator thread 0... [ 274.680046][ T9410] IPVS: using max 31 ests per chain, 74400 per kthread [ 275.220177][ T29] audit: type=1400 audit(1737374587.425:568): avc: denied { create } for pid=9413 comm="syz.5.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 277.031594][ T5866] usb 3-1: USB disconnect, device number 24 [ 278.470025][ T5866] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 278.671038][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.705830][ T5866] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.752833][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.768354][ T29] audit: type=1400 audit(1737374591.295:569): avc: denied { getopt } for pid=9460 comm="syz.5.1142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 278.771961][ T5866] usb 3-1: config 0 descriptor?? [ 278.816824][ T5866] pwc: Askey VC010 type 2 USB webcam detected. [ 279.225486][ T5866] pwc: recv_control_msg error -32 req 02 val 2b00 [ 279.237890][ T5866] pwc: recv_control_msg error -32 req 02 val 2700 [ 279.245981][ T5866] pwc: recv_control_msg error -32 req 02 val 2c00 [ 279.254924][ T5866] pwc: recv_control_msg error -32 req 04 val 1000 [ 279.262333][ T5866] pwc: recv_control_msg error -32 req 04 val 1300 [ 279.269738][ T5866] pwc: recv_control_msg error -32 req 04 val 1400 [ 279.492919][ T5866] pwc: recv_control_msg error -71 req 02 val 2100 [ 279.504760][ T5866] pwc: recv_control_msg error -71 req 04 val 1500 [ 279.512055][ T5866] pwc: recv_control_msg error -71 req 02 val 2500 [ 279.518847][ T5866] pwc: recv_control_msg error -71 req 02 val 2400 [ 279.529655][ T5866] pwc: recv_control_msg error -71 req 02 val 2600 [ 279.541520][ T5866] pwc: recv_control_msg error -71 req 02 val 2900 [ 279.548880][ T5866] pwc: recv_control_msg error -71 req 02 val 2800 [ 279.561789][ T5866] pwc: recv_control_msg error -71 req 04 val 1100 [ 279.568531][ T5866] pwc: recv_control_msg error -71 req 04 val 1200 [ 279.581959][ T5866] pwc: Registered as video103. [ 279.593399][ T5866] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 279.632177][ T5866] usb 3-1: USB disconnect, device number 25 [ 280.550128][ T5818] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 280.740101][ T5818] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 280.779039][ T5818] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 280.816430][ T5818] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.835059][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.843757][ T5818] usb 3-1: Product: syz [ 280.862788][ T5818] usb 3-1: Manufacturer: syz [ 280.867539][ T5818] usb 3-1: SerialNumber: syz [ 280.933943][ T9482] kvm: emulating exchange as write [ 281.117692][ T5866] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 281.160806][ T9474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.193142][ T9474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.290023][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 281.298173][ T5866] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 281.298242][ T5866] usb 1-1: config 0 has no interface number 0 [ 281.298347][ T5866] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 281.298414][ T5866] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 281.298480][ T5866] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.298550][ T5866] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 281.298612][ T5866] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 281.298721][ T5866] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 281.298787][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.490419][ T5866] usb 1-1: config 0 descriptor?? [ 281.836465][ T5818] cdc_ncm 3-1:1.0: bind() failure [ 281.867165][ T5818] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 281.912133][ T5866] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 281.945706][ T5818] cdc_ncm 3-1:1.1: bind() failure [ 281.970410][ T9480] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1147'. [ 282.131289][ T5818] usb 3-1: USB disconnect, device number 26 [ 283.318299][ T5904] usb 1-1: USB disconnect, device number 30 [ 283.392221][ T5904] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 284.263302][ T29] audit: type=1326 audit(1737374596.785:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9526 comm="syz.2.1156" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e9985d29 code=0x0 [ 285.949508][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'. [ 286.003253][ T9549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.086959][ T29] audit: type=1400 audit(1737374598.615:571): avc: denied { bind } for pid=9551 comm="syz.6.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 286.500898][ T9563] SELinux: truncated policydb string identifier [ 286.508864][ T29] audit: type=1400 audit(1737374599.025:572): avc: denied { load_policy } for pid=9517 comm="syz.5.1155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 286.551439][ T9563] SELinux: failed to load policy [ 287.600205][ T29] audit: type=1400 audit(1737374599.865:573): avc: denied { mount } for pid=9571 comm="syz.2.1165" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 287.721489][ T9578] xt_socket: unknown flags 0x50 [ 288.080012][ T5867] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 288.361298][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.372442][ T5867] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 288.390411][ T29] audit: type=1400 audit(1737374600.925:574): avc: denied { search } for pid=5484 comm="dhcpcd" name="netdev:wlan2" dev="debugfs" ino=22431 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 288.441824][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.415446][ T5867] usb 5-1: config 0 descriptor?? [ 289.464687][ T29] audit: type=1400 audit(1737374601.995:575): avc: denied { sys_chroot } for pid=9592 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 289.494936][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 289.908696][ T29] audit: type=1400 audit(1737374601.995:576): avc: denied { setgid } for pid=9592 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 289.971457][ T9598] netlink: 'syz.2.1171': attribute type 1 has an invalid length. [ 289.990031][ T9598] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 290.027141][ T9598] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1171'. [ 290.140331][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 290.147683][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 290.161142][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 290.181326][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 290.191166][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 290.261106][ T5867] pwc: recv_control_msg error -32 req 04 val 1400 [ 290.289386][ T5867] pwc: recv_control_msg error -32 req 02 val 2000 [ 290.555825][ T5867] pwc: recv_control_msg error -32 req 02 val 2100 [ 290.570646][ T5867] pwc: recv_control_msg error -32 req 04 val 1500 [ 290.600578][ T5867] pwc: recv_control_msg error -32 req 02 val 2500 [ 290.632704][ T5867] pwc: recv_control_msg error -32 req 02 val 2400 [ 290.662749][ T5867] pwc: recv_control_msg error -32 req 02 val 2600 [ 290.890279][ T5818] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 290.895910][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 290.958220][ T9614] netlink: zone id is out of range [ 290.980483][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 291.004504][ T9614] netlink: zone id is out of range [ 291.032571][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.055558][ T9614] netlink: set zone limit has 8 unknown bytes [ 291.110193][ T5818] usb 1-1: Using ep0 maxpacket: 16 [ 291.127198][ T5867] pwc: Registered as video103. [ 291.151737][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 291.179756][ T5818] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.180199][ T5867] usb 5-1: USB disconnect, device number 23 [ 291.220442][ T5818] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 291.229504][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.300820][ T5818] usb 1-1: config 0 descriptor?? [ 291.480739][ T5866] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 291.723317][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.777958][ T5866] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 292.123785][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.175284][ T5866] usb 7-1: config 0 descriptor?? [ 293.188558][ T5868] usb 1-1: USB disconnect, device number 31 [ 293.863946][ T5866] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 293.875905][ T5866] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0019/input/input29 [ 294.277906][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1179'. [ 295.005615][ T5866] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 295.050957][ T29] audit: type=1400 audit(1737374607.585:577): avc: denied { ioctl } for pid=9649 comm="syz.4.1183" path="socket:[24477]" dev="sockfs" ino=24477 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 295.423125][ T5867] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 295.670650][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.691543][ T5867] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 295.744796][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.293776][ T5867] usb 1-1: config 0 descriptor?? [ 296.304377][ T5868] usb 7-1: USB disconnect, device number 2 [ 296.960368][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 297.063883][ T29] audit: type=1400 audit(1737374609.575:578): avc: denied { write } for pid=9658 comm="syz.5.1185" path="socket:[24489]" dev="sockfs" ino=24489 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.882357][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1188'. [ 299.050860][ T5867] pwc: recv_control_msg error -71 req 02 val 2b00 [ 299.085498][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1188'. [ 299.112983][ T9678] netlink: 'syz.4.1188': attribute type 1 has an invalid length. [ 299.482499][ T5867] pwc: recv_control_msg error -71 req 02 val 2700 [ 299.488977][ T9678] nbd: error processing sock list [ 299.512355][ T5867] pwc: recv_control_msg error -71 req 02 val 2c00 [ 299.522868][ T9682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.585197][ T5867] pwc: recv_control_msg error -71 req 04 val 1000 [ 299.786698][ T5867] pwc: recv_control_msg error -71 req 04 val 1300 [ 300.972772][ T5867] pwc: recv_control_msg error -71 req 04 val 1400 [ 300.979546][ T5867] pwc: recv_control_msg error -71 req 02 val 2000 [ 300.994217][ T5867] pwc: recv_control_msg error -71 req 02 val 2100 [ 301.001033][ T5867] pwc: recv_control_msg error -71 req 04 val 1500 [ 301.007773][ T5867] pwc: recv_control_msg error -71 req 02 val 2500 [ 301.014563][ T5867] pwc: recv_control_msg error -71 req 02 val 2400 [ 301.243576][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 301.257394][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 301.292107][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.342670][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.380912][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.427787][ T5867] pwc: Registered as video103. [ 301.444345][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 301.466120][ T9707] netlink: 'syz.2.1197': attribute type 1 has an invalid length. [ 301.488604][ T9707] netlink: 'syz.2.1197': attribute type 4 has an invalid length. [ 301.515533][ T9707] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1197'. [ 301.584932][ T5867] usb 1-1: USB disconnect, device number 32 [ 303.497014][ T29] audit: type=1400 audit(1737374616.025:579): avc: denied { map } for pid=9728 comm="syz.5.1192" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.578494][ T29] audit: type=1400 audit(1737374616.025:580): avc: denied { execute } for pid=9728 comm="syz.5.1192" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 303.627304][ T5867] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 304.602769][ T5867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.715906][ T5867] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 304.851422][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.881419][ T5867] usb 1-1: config 0 descriptor?? [ 305.018056][ T29] audit: type=1400 audit(1737374617.545:581): avc: denied { write } for pid=9738 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 305.083846][ T5867] pwc: Askey VC010 type 2 USB webcam detected. [ 305.900148][ T5867] pwc: recv_control_msg error -32 req 02 val 2b00 [ 305.930020][ T5867] pwc: recv_control_msg error -32 req 02 val 2700 [ 305.946531][ T5867] pwc: recv_control_msg error -32 req 02 val 2c00 [ 305.971907][ T5867] pwc: recv_control_msg error -32 req 04 val 1000 [ 306.165937][ T5867] pwc: recv_control_msg error -32 req 04 val 1300 [ 306.784649][ T5867] pwc: recv_control_msg error -32 req 04 val 1400 [ 306.801393][ T5867] pwc: recv_control_msg error -32 req 02 val 2000 [ 306.913119][ T5867] pwc: recv_control_msg error -32 req 02 val 2100 [ 306.939673][ T5867] pwc: recv_control_msg error -32 req 04 val 1500 [ 307.721383][ T5867] pwc: recv_control_msg error -32 req 02 val 2500 [ 307.740158][ T5867] pwc: recv_control_msg error -32 req 02 val 2400 [ 307.862241][ T5867] pwc: recv_control_msg error -71 req 02 val 2600 [ 307.884251][ T5867] pwc: recv_control_msg error -71 req 02 val 2900 [ 307.895629][ T5867] pwc: recv_control_msg error -71 req 02 val 2800 [ 307.925834][ T5867] pwc: recv_control_msg error -71 req 04 val 1100 [ 307.952433][ T5867] pwc: recv_control_msg error -71 req 04 val 1200 [ 308.115634][ T5867] pwc: Registered as video103. [ 308.712038][ T5867] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 308.741508][ T5867] usb 1-1: USB disconnect, device number 33 [ 308.947412][ T9785] netlink: 'syz.5.1210': attribute type 1 has an invalid length. [ 308.955288][ T9785] netlink: 'syz.5.1210': attribute type 4 has an invalid length. [ 308.963075][ T9785] netlink: 15334 bytes leftover after parsing attributes in process `syz.5.1210'. [ 309.847440][ T9791] xt_cgroup: invalid path, errno=-2 [ 314.714260][ T29] audit: type=1400 audit(1737374627.185:582): avc: denied { read } for pid=5175 comm="acpid" name="event4" dev="devtmpfs" ino=3085 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 315.018854][ T29] audit: type=1400 audit(1737374627.185:583): avc: denied { open } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3085 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 316.042584][ T29] audit: type=1400 audit(1737374627.185:584): avc: denied { ioctl } for pid=5175 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3085 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 317.379762][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.381288][ T29] audit: type=1400 audit(1737374629.885:585): avc: denied { ioctl } for pid=9842 comm="syz.2.1224" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 317.386230][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.298605][ T9866] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 326.023281][ T29] audit: type=1400 audit(1737374638.545:586): avc: denied { watch } for pid=9921 comm="syz.4.1240" path="/255" dev="tmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 326.278749][ T29] audit: type=1400 audit(1737374638.545:587): avc: denied { watch_sb } for pid=9921 comm="syz.4.1240" path="/255" dev="tmpfs" ino=1326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 328.065161][ T9950] overlayfs: failed to clone upperpath [ 333.769543][T10017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 333.776055][T10017] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 333.789094][T10017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 333.795069][T10017] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 333.852176][T10017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 333.858169][T10017] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 334.100242][ T29] audit: type=1400 audit(1737374646.625:588): avc: denied { setopt } for pid=10026 comm="syz.6.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 336.470170][T10065] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10065 comm=syz.5.1271 [ 337.579968][ T29] audit: type=1400 audit(1737374649.485:589): avc: denied { setattr } for pid=10071 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 338.021355][T10082] overlayfs: failed to clone upperpath [ 341.150173][T10135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 341.157226][T10135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 345.447890][T10160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1291'. [ 346.155053][ T9994] Set syz1 is full, maxelem 65536 reached [ 347.515248][ T29] audit: type=1400 audit(1737374659.605:590): avc: denied { ioctl } for pid=10185 comm="syz.0.1295" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 348.567291][ T29] audit: type=1400 audit(1737374660.965:591): avc: denied { execmem } for pid=10212 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 349.825766][T10224] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 350.503450][ T29] audit: type=1400 audit(1737374662.495:592): avc: denied { getopt } for pid=10216 comm="syz.2.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 350.535924][T10224] netlink: 'syz.4.1302': attribute type 4 has an invalid length. [ 350.589317][T10224] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.1302'. [ 350.602345][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1303'. [ 351.587691][T10241] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 352.175123][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1306'. [ 353.124586][T10255] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10255 comm=syz.5.1308 [ 354.772485][ T29] audit: type=1400 audit(1737374667.285:593): avc: denied { execute } for pid=10270 comm="syz.5.1313" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27162 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 355.135177][T10285] overlayfs: failed to clone lowerpath [ 355.849669][ T5904] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 355.925639][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1316'. [ 356.044101][ T5904] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 356.095754][ T5904] usb 6-1: config 0 interface 0 has no altsetting 0 [ 356.174301][ T5904] usb 6-1: New USB device found, idVendor=18d1, idProduct=503c, bcdDevice= 0.00 [ 356.210205][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.268864][ T5904] usb 6-1: config 0 descriptor?? [ 356.291816][T10275] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 357.837617][ T5904] usbhid 6-1:0.0: can't add hid device: -71 [ 357.890043][ T5904] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 357.956651][ T5904] usb 6-1: USB disconnect, device number 15 [ 360.692961][T10339] Cannot find del_set index 0 as target [ 361.970173][T10376] can0: slcan on ttyS3. [ 362.769228][T10383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.213886][T10371] can0 (unregistered): slcan off ttyS3. [ 364.126443][ T29] audit: type=1400 audit(1737374676.655:594): avc: denied { create } for pid=10390 comm="syz.6.1338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 364.152789][T10392] netlink: 'syz.6.1338': attribute type 24 has an invalid length. [ 364.218185][T10394] netlink: zone id is out of range [ 364.223505][T10394] netlink: zone id is out of range [ 364.247494][T10394] netlink: set zone limit has 4 unknown bytes [ 365.580409][ T29] audit: type=1804 audit(1737374678.095:595): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1339" name="/newroot/270/file1" dev="fuse" ino=1 res=1 errno=0 [ 365.865218][ T29] audit: type=1800 audit(1737374678.095:596): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1339" name="/" dev="fuse" ino=1 res=0 errno=0 [ 365.920353][ T29] audit: type=1804 audit(1737374678.095:597): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1339" name="/newroot/270/file1" dev="fuse" ino=1 res=1 errno=0 [ 365.945734][ T29] audit: type=1804 audit(1737374678.105:598): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1339" name="/newroot/270/file1" dev="fuse" ino=1 res=1 errno=0 [ 365.969557][ T29] audit: type=1800 audit(1737374678.105:599): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1339" name="/" dev="fuse" ino=1 res=0 errno=0 [ 366.236192][T10420] overlayfs: missing 'lowerdir' [ 367.714459][ T29] audit: type=1400 audit(1737374680.245:600): avc: denied { create } for pid=10424 comm="syz.0.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 370.653586][T10471] tmpfs: Invalid uid '0x00000000ffffffff' [ 370.751696][T10479] trusted_key: encrypted_key: key user:syz not found [ 371.483745][T10476] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[10476] [ 371.760779][ T25] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 371.985429][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.008382][ T25] usb 6-1: config 0 has no interface number 0 [ 372.035289][ T25] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 372.254686][ T25] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 372.269390][ T25] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.099960][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.132697][ T25] usb 6-1: config 0 descriptor?? [ 373.167096][T10483] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 373.243651][ T25] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 373.565385][T10508] kernel profiling enabled (shift: 9) [ 374.864351][T10517] netlink: 'syz.4.1360': attribute type 1 has an invalid length. [ 374.895302][ T25] usb 6-1: USB disconnect, device number 16 [ 374.901818][T10517] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1360'. [ 378.538058][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.544588][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.490912][T10566] overlayfs: failed to clone upperpath [ 381.961726][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1373'. [ 382.684625][T10594] overlayfs: missing 'lowerdir' [ 383.444028][T10599] netlink: 'syz.5.1376': attribute type 1 has an invalid length. [ 383.459579][T10599] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1376'. [ 383.567411][T10608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 384.009152][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 384.310087][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 384.384770][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.407572][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.408540][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 385.710130][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.786684][ T8] usb 5-1: config 0 descriptor?? [ 385.820049][ T8] usb 5-1: can't set config #0, error -71 [ 385.853251][ T8] usb 5-1: USB disconnect, device number 24 [ 386.163348][T10638] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 386.172639][T10638] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 387.070117][ T5867] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 387.760031][ T5867] usb 1-1: Using ep0 maxpacket: 8 [ 387.801281][ T5867] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 387.809494][ T5867] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 387.869846][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 387.895187][ T5867] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 387.926964][ T5867] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.058446][ T5867] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.146748][ T29] audit: type=1400 audit(1737374700.665:601): avc: denied { ioctl } for pid=10656 comm="syz.2.1388" path="socket:[28287]" dev="sockfs" ino=28287 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 388.769969][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.780038][ T5869] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 389.023578][T10667] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 389.032058][T10667] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 389.492867][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 389.499957][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.510541][ T5869] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.519577][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.530037][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.541666][ T5869] usb 5-1: config 0 descriptor?? [ 389.774586][ T5867] usb 1-1: usb_control_msg returned -71 [ 389.801888][ T5867] usbtmc 1-1:16.0: can't read capabilities [ 390.010010][ T5867] usb 1-1: USB disconnect, device number 34 [ 390.901750][ T29] audit: type=1400 audit(1737374703.415:602): avc: denied { write } for pid=10670 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.110774][T10681] netlink: 'syz.6.1394': attribute type 1 has an invalid length. [ 391.118609][T10681] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1394'. [ 391.150351][ T29] audit: type=1400 audit(1737374703.415:603): avc: denied { nlmsg_write } for pid=10670 comm="syz.2.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 391.179594][ T8] usb 5-1: USB disconnect, device number 25 [ 391.480018][T10686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.527678][T10706] gre1: entered promiscuous mode [ 395.532714][T10706] gre1: entered allmulticast mode [ 395.596625][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.658206][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.800069][ T29] audit: type=1400 audit(1737374708.315:604): avc: denied { setopt } for pid=10712 comm="syz.2.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.638631][T10732] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 399.120913][T10741] netlink: 'syz.6.1408': attribute type 1 has an invalid length. [ 399.150870][T10741] netlink: 16150 bytes leftover after parsing attributes in process `syz.6.1408'. [ 399.325588][T10743] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 399.333451][T10743] netlink: 'syz.2.1406': attribute type 1 has an invalid length. [ 400.303134][ T29] audit: type=1800 audit(1737374712.715:605): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1407" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 400.903343][T10750] tipc: Enabling of bearer rejected, failed to enable media [ 410.276324][T10809] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 410.468812][ T29] audit: type=1400 audit(1737374722.935:606): avc: denied { bind } for pid=10803 comm="syz.5.1424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 414.473054][ T29] audit: type=1400 audit(1737374726.345:607): avc: denied { nlmsg_read } for pid=10837 comm="syz.6.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 415.488817][ T29] audit: type=1326 audit(1737374728.015:608): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10858 comm="syz.2.1434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e9985d29 code=0x0 [ 416.693310][T10870] xt_CT: No such helper "syz0" [ 417.812875][ T29] audit: type=1400 audit(1737374730.105:609): avc: denied { write } for pid=10864 comm="syz.4.1436" laddr=::ffff:172.20.20.170 lport=59728 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 419.661024][T10891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.576275][ T29] audit: type=1400 audit(1737374734.105:610): avc: denied { lock } for pid=10902 comm="syz.0.1443" path="socket:[29773]" dev="sockfs" ino=29773 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 423.127941][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1446'. [ 423.203401][T10914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 423.251359][ T29] audit: type=1400 audit(1737374735.745:611): avc: denied { map } for pid=10912 comm="syz.5.1446" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 425.485170][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1452'. [ 426.095480][ T29] audit: type=1400 audit(1737374738.475:612): avc: denied { write } for pid=10936 comm="syz.4.1452" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 430.022314][T10973] fuse: Bad value for 'fd' [ 430.150316][ T29] audit: type=1400 audit(1737374742.645:613): avc: denied { shutdown } for pid=10965 comm="syz.2.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 431.188324][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 431.229695][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 431.998817][T10992] 9pnet_virtio: no channels available for device syz [ 432.283207][ T29] audit: type=1400 audit(1737374744.795:614): avc: denied { ioctl } for pid=10987 comm="syz.2.1461" path="socket:[30003]" dev="sockfs" ino=30003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 432.390513][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 432.396501][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 432.890661][T10981] ceph: No mds server is up or the cluster is laggy [ 432.911754][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 432.921420][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 433.079333][T10999] fuse: Unknown parameter '0xffffffffffffffff' [ 433.986347][T11005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.511554][ T29] audit: type=1800 audit(1737374749.875:615): pid=11026 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1471" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 439.474188][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1475'. [ 439.796231][ T29] audit: type=1400 audit(1737374752.005:616): avc: denied { bind } for pid=11032 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 439.824300][ T5904] IPVS: starting estimator thread 0... [ 440.143736][T11045] block device autoloading is deprecated and will be removed. [ 440.152562][T11045] bio_check_eod: 2 callbacks suppressed [ 440.152573][T11045] syz.4.1474: attempt to access beyond end of device [ 440.152573][T11045] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 440.500456][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.506784][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.629792][T11044] IPVS: using max 28 ests per chain, 67200 per kthread [ 440.708429][ T29] audit: type=1400 audit(1737374752.305:617): avc: denied { setopt } for pid=11029 comm="syz.6.1473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 440.722454][T11048] netlink: 'syz.2.1476': attribute type 1 has an invalid length. [ 440.831259][T11048] netlink: 15382 bytes leftover after parsing attributes in process `syz.2.1476'. [ 440.923587][T11052] [ 440.925938][T11052] ====================================================== [ 440.932951][T11052] WARNING: possible circular locking dependency detected [ 440.939974][T11052] 6.13.0-syzkaller #0 Not tainted [ 440.944994][T11052] ------------------------------------------------------ [ 440.952003][T11052] syz.6.1478/11052 is trying to acquire lock: [ 440.958062][T11052] ffff8880276a0ba0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xe3/0x190 [ 440.966966][T11052] [ 440.966966][T11052] but task is already holding lock: [ 440.974321][T11052] ffff888025b12670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 440.983641][T11052] [ 440.983641][T11052] which lock already depends on the new lock. [ 440.983641][T11052] [ 440.994036][T11052] [ 440.994036][T11052] the existing dependency chain (in reverse order) is: [ 441.003043][T11052] [ 441.003043][T11052] -> #5 (&q->debugfs_mutex){+.+.}-{4:4}: [ 441.010871][T11052] __mutex_lock+0x19b/0xa60 [ 441.015910][T11052] blk_mq_init_sched+0x42b/0x640 [ 441.021382][T11052] elevator_init_mq+0x2cd/0x420 [ 441.026759][T11052] add_disk_fwnode+0x113/0x1300 [ 441.032147][T11052] sd_probe+0xa86/0x1000 [ 441.036922][T11052] really_probe+0x23e/0xa90 [ 441.041953][T11052] __driver_probe_device+0x1de/0x440 [ 441.047766][T11052] driver_probe_device+0x4c/0x1b0 [ 441.053327][T11052] __device_attach_driver+0x1df/0x310 [ 441.059228][T11052] bus_for_each_drv+0x157/0x1e0 [ 441.064603][T11052] __device_attach_async_helper+0x1d3/0x290 [ 441.071021][T11052] async_run_entry_fn+0x9c/0x530 [ 441.076490][T11052] process_one_work+0x9c5/0x1ba0 [ 441.081952][T11052] worker_thread+0x6c8/0xf00 [ 441.087071][T11052] kthread+0x2c1/0x3a0 [ 441.091669][T11052] ret_from_fork+0x45/0x80 [ 441.096609][T11052] ret_from_fork_asm+0x1a/0x30 [ 441.101906][T11052] [ 441.101906][T11052] -> #4 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 441.110796][T11052] blk_queue_enter+0x50f/0x640 [ 441.116097][T11052] blk_mq_alloc_request+0x59b/0x950 [ 441.121829][T11052] scsi_execute_cmd+0x1da/0xf40 [ 441.127204][T11052] read_capacity_16+0x213/0xe10 [ 441.132582][T11052] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 441.138927][T11052] sd_probe+0x904/0x1000 [ 441.143700][T11052] really_probe+0x23e/0xa90 [ 441.148730][T11052] __driver_probe_device+0x1de/0x440 [ 441.154546][T11052] driver_probe_device+0x4c/0x1b0 [ 441.160095][T11052] __device_attach_driver+0x1df/0x310 [ 441.165990][T11052] bus_for_each_drv+0x157/0x1e0 [ 441.171359][T11052] __device_attach_async_helper+0x1d3/0x290 [ 441.177786][T11052] async_run_entry_fn+0x9c/0x530 [ 441.183253][T11052] process_one_work+0x9c5/0x1ba0 [ 441.188710][T11052] worker_thread+0x6c8/0xf00 [ 441.193825][T11052] kthread+0x2c1/0x3a0 [ 441.198420][T11052] ret_from_fork+0x45/0x80 [ 441.203356][T11052] ret_from_fork_asm+0x1a/0x30 [ 441.208649][T11052] [ 441.208649][T11052] -> #3 (&q->limits_lock){+.+.}-{4:4}: [ 441.216299][T11052] __mutex_lock+0x19b/0xa60 [ 441.221329][T11052] loop_reconfigure_limits+0x407/0x8c0 [ 441.227315][T11052] lo_ioctl+0x901/0x18b0 [ 441.232085][T11052] blkdev_ioctl+0x276/0x6d0 [ 441.237140][T11052] __x64_sys_ioctl+0x190/0x200 [ 441.242433][T11052] do_syscall_64+0xcd/0x250 [ 441.247466][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.253894][T11052] [ 441.253894][T11052] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 441.262514][T11052] blk_mq_submit_bio+0x1fb6/0x24c0 [ 441.268153][T11052] __submit_bio+0x384/0x540 [ 441.273183][T11052] submit_bio_noacct_nocheck+0x698/0xd70 [ 441.279338][T11052] submit_bio_noacct+0x93a/0x1e20 [ 441.284884][T11052] mpage_readahead+0x41d/0x590 [ 441.290176][T11052] read_pages+0x1a8/0xdc0 [ 441.295029][T11052] page_cache_ra_unbounded+0x3dc/0x750 [ 441.301010][T11052] page_cache_ra_order+0x8f2/0xc80 [ 441.306644][T11052] filemap_fault+0x14a5/0x2820 [ 441.311930][T11052] __do_fault+0x10a/0x490 [ 441.316787][T11052] do_pte_missing+0xebd/0x3e00 [ 441.322074][T11052] __handle_mm_fault+0x103c/0x2a40 [ 441.327711][T11052] handle_mm_fault+0x3fa/0xaa0 [ 441.333022][T11052] __get_user_pages+0x8d9/0x3b50 [ 441.338484][T11052] get_user_pages_unlocked+0x1c2/0x780 [ 441.344473][T11052] hva_to_pfn+0x8be/0xc20 [ 441.349324][T11052] kvm_follow_pfn+0x29f/0x3f0 [ 441.354522][T11052] __kvm_faultin_pfn+0x11c/0x1a0 [ 441.359980][T11052] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 441.365705][T11052] kvm_tdp_page_fault+0x182/0x3d0 [ 441.371252][T11052] kvm_mmu_do_page_fault+0x58d/0x690 [ 441.374599][ T29] audit: type=1326 audit(1737374753.445:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.377047][T11052] kvm_mmu_page_fault+0x20f/0x1bb0 [ 441.406007][T11052] handle_ept_violation+0x25a/0x640 [ 441.411731][T11052] vmx_handle_exit+0x733/0x1f70 [ 441.417101][T11052] vcpu_run+0x3047/0x4f50 [ 441.421488][ T29] audit: type=1326 audit(1737374753.445:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.421939][T11052] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 441.451312][T11052] kvm_vcpu_ioctl+0x6ce/0x1520 [ 441.456600][T11052] __x64_sys_ioctl+0x190/0x200 [ 441.461891][T11052] do_syscall_64+0xcd/0x250 [ 441.466925][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.473345][T11052] [ 441.473345][T11052] -> #1 (mapping.invalidate_lock#2){.+.+}-{4:4}: [ 441.481873][T11052] down_read+0x9a/0x330 [ 441.485792][ T29] audit: type=1326 audit(1737374753.445:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.486540][T11052] page_cache_ra_unbounded+0x173/0x750 [ 441.515818][T11052] page_cache_ra_order+0x8f2/0xc80 [ 441.521447][T11052] filemap_fault+0x14a5/0x2820 [ 441.526730][T11052] __do_fault+0x10a/0x490 [ 441.531582][T11052] do_pte_missing+0xebd/0x3e00 [ 441.536867][T11052] __handle_mm_fault+0x103c/0x2a40 [ 441.539964][ T29] audit: type=1326 audit(1737374753.445:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.542491][T11052] handle_mm_fault+0x3fa/0xaa0 [ 441.542517][T11052] __get_user_pages+0x8d9/0x3b50 [ 441.576535][T11052] get_user_pages_unlocked+0x1c2/0x780 [ 441.582517][T11052] hva_to_pfn+0x8be/0xc20 [ 441.587367][T11052] kvm_follow_pfn+0x29f/0x3f0 [ 441.592567][T11052] __kvm_faultin_pfn+0x11c/0x1a0 [ 441.596633][ T29] audit: type=1326 audit(1737374753.445:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.598012][T11052] kvm_mmu_faultin_pfn+0x469/0x1f30 [ 441.627037][T11052] kvm_tdp_page_fault+0x182/0x3d0 [ 441.632589][T11052] kvm_mmu_do_page_fault+0x58d/0x690 [ 441.638401][T11052] kvm_mmu_page_fault+0x20f/0x1bb0 [ 441.644040][T11052] handle_ept_violation+0x25a/0x640 [ 441.649764][T11052] vmx_handle_exit+0x733/0x1f70 [ 441.653472][ T29] audit: type=1326 audit(1737374753.445:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.655125][T11052] vcpu_run+0x3047/0x4f50 [ 441.655152][T11052] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 441.689340][T11052] kvm_vcpu_ioctl+0x6ce/0x1520 [ 441.694622][T11052] __x64_sys_ioctl+0x190/0x200 [ 441.699909][T11052] do_syscall_64+0xcd/0x250 [ 441.704935][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.711361][T11052] [ 441.711361][T11052] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 441.713267][ T29] audit: type=1326 audit(1737374753.445:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.6.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a6e585d29 code=0x7ffc0000 [ 441.718907][T11052] __lock_acquire+0x249e/0x3c40 [ 441.747588][T11052] lock_acquire.part.0+0x11b/0x380 [ 441.753217][T11052] __might_fault+0x11b/0x190 [ 441.758331][T11052] _copy_from_user+0x29/0xd0 [ 441.763444][T11052] __blk_trace_setup+0xa8/0x180 [ 441.768822][T11052] blk_trace_ioctl+0x163/0x290 [ 441.774108][T11052] blkdev_ioctl+0x109/0x6d0 [ 441.779141][T11052] __x64_sys_ioctl+0x190/0x200 [ 441.784435][T11052] do_syscall_64+0xcd/0x250 [ 441.789466][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.795891][T11052] [ 441.795891][T11052] other info that might help us debug this: [ 441.795891][T11052] [ 441.806109][T11052] Chain exists of: [ 441.806109][T11052] &mm->mmap_lock --> &q->q_usage_counter(queue)#50 --> &q->debugfs_mutex [ 441.806109][T11052] [ 441.820462][T11052] Possible unsafe locking scenario: [ 441.820462][T11052] [ 441.827894][T11052] CPU0 CPU1 [ 441.833233][T11052] ---- ---- [ 441.838568][T11052] lock(&q->debugfs_mutex); [ 441.843141][T11052] lock(&q->q_usage_counter(queue)#50); [ 441.851299][T11052] lock(&q->debugfs_mutex); [ 441.858402][T11052] rlock(&mm->mmap_lock); [ 441.862794][T11052] [ 441.862794][T11052] *** DEADLOCK *** [ 441.862794][T11052] [ 441.870910][T11052] 1 lock held by syz.6.1478/11052: [ 441.876000][T11052] #0: ffff888025b12670 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xc9/0x290 [ 441.885713][T11052] [ 441.885713][T11052] stack backtrace: [ 441.891574][T11052] CPU: 1 UID: 0 PID: 11052 Comm: syz.6.1478 Not tainted 6.13.0-syzkaller #0 [ 441.900226][T11052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 441.910279][T11052] Call Trace: [ 441.913531][T11052] [ 441.916435][T11052] dump_stack_lvl+0x116/0x1f0 [ 441.921108][T11052] print_circular_bug+0x419/0x5d0 [ 441.926123][T11052] check_noncircular+0x31a/0x400 [ 441.931035][T11052] ? __pfx_check_noncircular+0x10/0x10 [ 441.936466][T11052] ? widen_string+0xd8/0x2a0 [ 441.941045][T11052] ? lockdep_lock+0xc6/0x200 [ 441.945633][T11052] ? __pfx_lockdep_lock+0x10/0x10 [ 441.950635][T11052] ? string+0x202/0x3d0 [ 441.954766][T11052] __lock_acquire+0x249e/0x3c40 [ 441.959596][T11052] ? __pfx___lock_acquire+0x10/0x10 [ 441.964769][T11052] ? __pfx_bdev_name.constprop.0+0x10/0x10 [ 441.970556][T11052] ? avc_has_extended_perms+0x481/0x1580 [ 441.976171][T11052] lock_acquire.part.0+0x11b/0x380 [ 441.981268][T11052] ? __might_fault+0xe3/0x190 [ 441.985948][T11052] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 441.991554][T11052] ? rcu_is_watching+0x12/0xc0 [ 441.996294][T11052] ? trace_lock_acquire+0x14e/0x1f0 [ 442.001472][T11052] ? __might_fault+0xe3/0x190 [ 442.006128][T11052] ? lock_acquire+0x2f/0xb0 [ 442.010606][T11052] ? __might_fault+0xe3/0x190 [ 442.015260][T11052] ? __might_fault+0xe3/0x190 [ 442.019923][T11052] __might_fault+0x11b/0x190 [ 442.024513][T11052] ? __might_fault+0xe3/0x190 [ 442.029183][T11052] _copy_from_user+0x29/0xd0 [ 442.033745][T11052] __blk_trace_setup+0xa8/0x180 [ 442.038577][T11052] ? __pfx___blk_trace_setup+0x10/0x10 [ 442.044014][T11052] ? __pfx_snprintf+0x10/0x10 [ 442.048671][T11052] blk_trace_ioctl+0x163/0x290 [ 442.053407][T11052] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 442.058667][T11052] blkdev_ioctl+0x109/0x6d0 [ 442.063159][T11052] ? __pfx_blkdev_ioctl+0x10/0x10 [ 442.068161][T11052] ? selinux_file_ioctl+0x180/0x270 [ 442.073346][T11052] ? selinux_file_ioctl+0xb4/0x270 [ 442.078442][T11052] ? __pfx_blkdev_ioctl+0x10/0x10 [ 442.083453][T11052] __x64_sys_ioctl+0x190/0x200 [ 442.088201][T11052] do_syscall_64+0xcd/0x250 [ 442.092690][T11052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.098567][T11052] RIP: 0033:0x7f6a6e585d29 [ 442.102970][T11052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.122555][T11052] RSP: 002b:00007f6a6f3d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.130946][T11052] RAX: ffffffffffffffda RBX: 00007f6a6e775fa0 RCX: 00007f6a6e585d29 [ 442.138905][T11052] RDX: 00000000200001c0 RSI: 00000000c0481273 RDI: 0000000000000006 [ 442.146859][T11052] RBP: 00007f6a6e601b08 R08: 0000000000000000 R09: 0000000000000000 [ 442.154807][T11052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.162759][T11052] R13: 0000000000000000 R14: 00007f6a6e775fa0 R15: 00007ffd0a320d88 [ 442.170712][T11052] [ 442.632040][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 442.632055][ T29] audit: type=1400 audit(1737374755.165:644): avc: denied { unlink } for pid=9075 comm="syz-executor" name="file0" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1