last executing test programs: 1m15.134079386s ago: executing program 4 (id=72): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="8e27bdee00000000000000000000000000000000baa1bb9e19c5e1de539ed9c673d82b64bd07c667003d90bdf42f50e070f202bfbf566d2e2747ecaba822233bebe25685f7fe445d91d6ff070000d2f02ea9113c5995603d2d56606a7108c723e4fd882d6730c80c21cd694027a43ba4f8b5babe6da73aeaf24f693081ae77e58bf05e7c4d6fbe7d1c16a187577096d6d6f15fc8d13a23b6e08d5b0876759207d5208aa70cbbcc5011a6425a97256032115c237bca3a43f91e00d47b1c123db8215031ef2f98a38fa8fd25bef532155b4291a65b611387c1926797ab7c2f8d77be24bd2173b80a3f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.001904018s ago: executing program 4 (id=73): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x40084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1, 0x6}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x2404c084) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x204, &(0x7f0000000040)={0x0}) ptrace(0x11, r7) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x800, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r10, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r9]) ioctl$KVM_GET_VCPU_EVENTS(r10, 0xc048aeca, &(0x7f0000000080)) 1m11.044089887s ago: executing program 4 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="09032dbd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) ptrace$setsig(0x4203, r4, 0x20e, &(0x7f0000000380)={0x31, 0x3, 0x6}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) fcntl$setown(r3, 0x8, r5) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r6, 0x2285, 0x0) 1m10.282654895s ago: executing program 4 (id=88): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000680)=0x200008000) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rootfs\x00', 0x0, 0x0) 1m9.97374247s ago: executing program 4 (id=90): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x8000) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x34, 0x19, 0x901, 0x70bd2c, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x4, 0x3, 0xffffffffffffffff, 0x3100}, [@RTA_GATEWAY={0x8, 0x1e, @private=0xa010105}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x2d}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) getgroups(0x0, 0x0) setpriority(0x2, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f0000000300)="4f710f78decdb63acf0e5818c1fd0fe23c30ac5e63baa2053b87d0a529fe4a154a0348e16f412da50f84f490a61e808be7710f3fac6b5462b2e79ac75fac1948ac8c638c98c4063a18805abdb203246ab7b48b98c3a21bbd8af9f4db89dc0bbe2e572f5d593ed62ede003779c4afd50f924c39986d6ff10aca45a6c0299f", 0x7e, 0x8094, &(0x7f0000000280)={0xa, 0x0, 0x81, @private2}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0xfff6, 0x4, 0x20f, 0x5, 0x9, 0x5, 0x6, 0xffff}, &(0x7f0000000200)=0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 1m8.323708423s ago: executing program 4 (id=93): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000300)="2cd889f035a53e", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x6], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) r4 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x10080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0x9) io_uring_enter(r4, 0x2def, 0xb80c, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c000018010000600000800000068000c80"], 0x104}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x88401, 0x0) 53.1696663s ago: executing program 32 (id=93): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write(r0, &(0x7f0000000300)="2cd889f035a53e", 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x6], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0) r4 = syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, &(0x7f0000000100)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x1, 0x300, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x10080, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r9}}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000040018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0x9) io_uring_enter(r4, 0x2def, 0xb80c, 0x0, 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000080)={0xf0f041}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="04010000100001002bbd7000f4dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000008000200140003006e657464657673696d300000000000000a000100aaaaaaaaaaaa0000c4001680c000018010000600000800000068000c80"], 0x104}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x88401, 0x0) 9.685662302s ago: executing program 2 (id=307): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20400, 0x9535257d72065881) statx(r0, 0x0, 0x800, 0x800, &(0x7f00000006c0)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54084}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000040)=0x6e1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x100, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x1, 0x1007, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x4, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x4da5, 0x8100, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffff8, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x1, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1002, 0x8, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x9, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x5, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x4000100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x224, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x8, 0x0) setpriority(0x1, 0x0, 0x4047) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4004) 8.511064305s ago: executing program 2 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x1, 0x200) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018d0ff000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 8.248272608s ago: executing program 2 (id=313): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x4, 0x5e2, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0xca, 0x32, 0x60, 0x40, 0x4f2, 0xaff8, 0x7354, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d0, 0x4, 0xe, 0x11, 0x0, 0x3, [{{0x9, 0x4, 0xfa, 0x8, 0x2, 0xc8, 0x59, 0xa8, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f6e5f7dff6c0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8a, 0x8, 0x40}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x85, 0x9}, @mdlm_detail={0x96, 0x24, 0x13, 0xb, "bd088ac0ca859865147827a38748a22485c19447d089044e7fac76f26b31b6c2579345c14d2d5e1db9cebfa76531e938d9fab0fe00cab5bf38d243fc813cf10c7da7d82caee617cc67b963c765d43c36a6261e2481a12f5389eac9515cd7e4501a35572db06bcb99094ef7f5fa9e2de5200e791ef65a052ab59578b5a49ede8195300b72f0f283ac77df2044c45f3b667ec0"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mdlm_detail={0x20, 0x24, 0x13, 0xa, "0c938247429236c97f30f1e61c1f47b7dd49e2ef377a6c9574d6f3ad"}, @mdlm={0x15, 0x24, 0x12, 0x7ff}]}, @hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x774}}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x31, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfff7}, @generic={0xf9, 0x7, "9250ce4eca3b7e5f4c9a63dafe98809792e3e9cfa11f1dd117dfbd9cab0d21be514a5c5dc2417226d8b9bffdce045e93a64a28b9a7d8d9477afc5cadd43cb25a621fc9212c2aa1743c1fd7ed49f11d570a93fbf35d647eafd7a8cf2ceb0c31323a2b27c12f2d91c94a87bae3a27283645bddc3841374a43cc268b58a3b80154e856d17e7b6785968d7a7920d720ee856a51be6660eec8d1686b7a5ba8620b81a1445b45b611c6e9f66b7a4baad7731e222ddf69767cf2e772729e379382d37a314dd5602519d03d62a7996bc6042ad5af44b17b4804eac805ff8105c94a05442a68f3a628d75ef5f88f39d167b8b3848b200b61e40b7cd"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x9, 0x1d, 0x1, [@generic={0xe0, 0xe, "7d618bc3b78944e55155960bb3fcf87b59d51c2748d9d73b51e1628516a6831968de708a30dc28c626724f1805f275b1f5658a6f5a89bf2e0adf7f527bda55310443f9f428193ee8aaecccae27fd3db0e203537015455d3103ea814976afba0a81fbe706b5a4f7c6ad3106e713646669bbc445972144f272269e8708103bcd76b394055d69f2b8cb1b2f5b5e25fe39b04450274c53a01b1746d8e97f0cb39860e224991b1c60ec6fc44073427f0d410ad1d9e787147fe72fcd80f980ce70279c00de9afbc2e0e249de290142b0bf9bf983d91d52c5f05cf5fcca90c4f47b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x7ff}]}}]}}, {{0x9, 0x4, 0x6c, 0x3, 0x6, 0xf6, 0x75, 0x84, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xe9, 0x7, 0x4, 0xb}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x0, [0xffff, 0x8, 0x8001, 0x5]}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1911"}, {0x5, 0x24, 0x0, 0xea9}, {0xd, 0x24, 0xf, 0x1, 0xae6, 0x5, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@acm={0x4}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @generic={0xc3, 0x22, "93ae22b98f60e07c578ec2daf207682415438367ed8689d9669aee99b021fbcbd3e1aedf3a39c06457139ab77807f5d69d6f66d2673dc4683771e609bba8c6b21133e2176003822831833739e7b16cd7631947826e1b995ea8b96194186cf2b22fdaa7f6a26772a3d0b17a04857ae2e4a1ad004c030ab07c5613643e335b5462ac0bd429e83e274955e6a85729f20e9870c27a6be434bb46db85f82ea4d643658bea9ba5979ca255de82733c524bd5c861a75e29670e6eba7870f85386cf2c2b24"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xa, 0x1, 0x2, [@generic={0x2e, 0x8, "9b1a831a01744d67f64265cd091b682a76959a3b4eed8c5373f10bbd7b8f710c6decb2b71fcf862b368e58be"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x60, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0xad, 0x93, 0xf2}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x2, 0x4, 0x1, [@generic={0x57, 0x12, "61ddc83fb04758c37d7c971309c5cc145f8dd11eff8c28dbe45f33cc8b61e6ef3a8312906bb10d36c71400fa334855ba95dbaa197bac7103e7431181f6003f636cb9d59f001a833a05ce52566fd0e03976c0b4b31f"}, @generic={0x76, 0xf, "e541c628b356165b2ebf58d1b8533eee46d91bfc62c2afca14cc4de9d1ac422a8b6ed0fc1e44682b65d78a4724e5389115c2086b89970d70c9f2a06f42a340cbe5b1872e5899521eb22a08abc47d4ec766df39f5c9035be7cc0daeddc005fc4b2d4da40849b6df9b9c2a7ff2daf919d9f63823da"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x9, 0x34, 0xb6}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xa}]}}]}}, {{0x9, 0x4, 0xaa, 0x0, 0x2, 0xdc, 0x6e, 0x82, 0x8, [], [{{0x9, 0x5, 0xb860e34643d9f275, 0x3, 0x8, 0x6, 0xf9, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xaa, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0x5, 0x5, 0x6, 0x61, 0x59, 0x77, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x41, 0xf7, 0x9}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0xf7, 0xd9, 0xad}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x18, 0x80, 0x1}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0xa9, 0x8c, 0xa}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x81, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}]}}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x310, 0x3, 0x29, 0x2, 0x40}, 0x10, &(0x7f0000001900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x5, 0x8c, 0x9, 0x3}]}, 0x1, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x53, {0x53, 0xb, "9b9f9c1963efc764aa8ea1da8da4d6c60f1457f6dc7b34474f9f34fe7880c26ea76458cb8adbdbd44ec335dc056542c94664bdefcc2514058fea0908704e98d785d06d61ad53753ff41f818c8115678224"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5e22}}, &(0x7f0000000140)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x1, 0xfff7}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x200, 0xf, 0x8, [0xf, 0xff0f]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x1, 0xc, 0x1, "2a329d01", "a7a6bdbb"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x91, 0x8, 0xa, 0x4, 0x1, 0x0, 0x30}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x75, "b3dafcb18081e28decaade07fd55527882f1faae9457fbe5e4af1f795c0772594fa03b7583068bab770675e1c158d378727fc0ac8198c11380ccd9a34a6cca2aacf34b1e5a9c9e329fc9a916fe9274dc5253a41536239e14af86cb5e89c7007a074ff704f92df9352cf51896a1e6ba9c2a2c0437df"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'z\''}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab0a"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3e, &(0x7f0000000cc0)=@string={0x3e, 0x3, "65a974b2231c83bf5969b5b33165d97426d21aa8678dcc08afd9ded95dd95f9870980e5b2be7da7d3a2017fea71f02a75e60b655bc358c685af66350"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 8.145860731s ago: executing program 5 (id=314): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x400, 0x1}, 0x18, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) set_mempolicy(0x1, 0x0, 0x5) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 7.236478673s ago: executing program 3 (id=319): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}]}]}, 0x30}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x6, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xb7, 0x2, 0x3, 0x7, 0x2, 0x1}, 0xe) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5e}], 0x1, 0x40000040, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=r0], 0x0) syz_emit_ethernet(0x82, &(0x7f0000000700)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x74, 0x65, 0x0, 0xff, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x101f, {0x16, 0x4, 0x3, 0x14, 0x7ff, 0x68, 0xd9, 0xc9, 0x6, 0xe5c, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, {[@timestamp_addr={0x44, 0x44, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@broadcast, 0x20005}, {@loopback}, {@remote, 0x326}, {@multicast2, 0x4}, {@local, 0x5}, {@local, 0x10000}]}]}}}}}}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, 0x0, 0x40084c0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0xe, 0x12, 0x0, 0x3}, 0x9c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r2, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x7800, 0x0, 0x43a3561f, 0x7fff, {{0x3a, 0x4, 0x0, 0x1, 0xe8, 0x64, 0x0, 0x4, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x28, 0xb4, 0x0, 0x9, [0x800, 0xffffff47, 0x9, 0x29, 0x2, 0x5, 0x0, 0xd8, 0x6]}, @end, @cipso={0x86, 0x78, 0x2, [{0x2, 0xb, "8f562444e3e6cd84aa"}, {0x2, 0xf, "02b72744a30f1fc559c492e997"}, {0x5, 0xf, "4d2e8bc858ff7390bea3a4d5be"}, {0x6, 0x10, "247f64ecd5f31d007fe5aa49634c"}, {0x2, 0xd, "4d05c435289fc1ae134cee"}, {0x5, 0xd, "728dca04824bb938422eaf"}, {0x0, 0x3, '\r'}, {0x2, 0xa, "13ee520d1fd7eb03"}, {0x5, 0x12, "642075fa4c9811b220ad10aadff834a8"}]}, @timestamp={0x44, 0x14, 0x2f, 0x0, 0x5, [0x5b5a, 0x3, 0x3, 0x5f]}, @rr={0x7, 0xb, 0x4a, [@private=0xa010100, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x92, 0x3, 0x9, [{@multicast1, 0x9}, {@empty, 0xd}]}]}}}}}) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r1, &(0x7f00000000c0)={0x2c, 0x8, r6, 0x0, r7}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$ARCH_MAP_VDSO_X32(0x1e, r8, 0x2d, 0x2001) 6.854087967s ago: executing program 5 (id=323): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000b7080000fc0000007b8af8ff00000000b7080000ffffff7f7b8af0ff00000000bfa100000000000007010018f8ffffffbfa4000000000000070400000000ffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000003000000b70500000800000085000000a5000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 6.502502308s ago: executing program 5 (id=326): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r2, 0x0, 0xe07e872420dfefca) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (fail_nth: 5) 5.917829268s ago: executing program 1 (id=327): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000004700)={0x2020}, 0x2020) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r3, 0x4068aea3, &(0x7f0000001200)) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000100)) (async) sendmsg$rds(r4, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{0xfffffffffffffffe}], 0x1}}], 0x48}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 5.438897182s ago: executing program 2 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x4c}}, 0x24004800) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) syz_create_resource$binfmt(0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000880), &(0x7f00000008c0)=0xc) socket$inet6(0xa, 0x80002, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) init_module(&(0x7f0000000140)=ANY=[@ANYBLOB], 0x78, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@authinfo={0x18, 0x84, 0x6, {0x8}}], 0x18, 0x8000}, 0x800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0xdfff, 0x5, 0x0, 0x6, 0x7ff, 0x3, 0x5, 0x5}, 0x20) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x7) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100020003d12bfa23a8a440000102030109021b000101000000090400ff02070101000905010200000300001a6701ab7cbdcdd325d18edc9e1ff7b1975e"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xd, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r9, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 5.26728989s ago: executing program 1 (id=329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe41) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x81, 0xb, 0xdd, 0x8}, {0x6, 0x13, 0x3, 0x80}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c20000000180c200000008004500005c0000000000019078ac1e0001ac141401000000787f00000140ae000300640200ff320000ac1e0101ac14142a9404010044243661ac14143900000009ac1414aa000009bfac141443000000087f000001000000058303cf00"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r4, &(0x7f0000000640)="e8b77052a9", 0x5, 0x40, &(0x7f0000000200)={0x11, 0x19, r7}, 0x14) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r8, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x54f, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.069822082s ago: executing program 3 (id=330): r0 = socket$kcm(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) write$binfmt_format(r1, &(0x7f0000000100)='-1\x00', 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_getscheduler(r3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) memfd_create(&(0x7f0000000300)=',-\\:Y/***@-.-\x00', 0xe) r7 = getuid() mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}}) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x3, {0x1, 0x7, 0x0, '\x00', {0x7ff, 0xa2e, 0x4, 0x28000, r8, r9, 0x8000, '\x00', 0x1, 0x1, 0xb4eb, 0x2, {0x8003, 0x5}, {0x7ff, 0x10004}, {0x100000000, 0x7}, {0x4, 0xa00}, 0x3, 0x400bde3, 0x4, 0xffff}}}}) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000180)={0x5, 0x5, {r3}, {r8}, 0xb, 0x5}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000020603000000000000000000050000000c00078008000800000000400900020073797a32000000000500040000000000050005000a000000050001000600000010000300f89373683a69702c6d616300"], 0x54}}, 0x80) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r10 = socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, 0x0, 0xe07e872420dfefca) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 4.696321345s ago: executing program 5 (id=331): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) syz_open_procfs(0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = getpid() sched_setaffinity(r1, 0x0, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) (async) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000104e040c1200000000000109022400010000002009040000010300c90009210600000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0xa, "89"}, @local=@item_4={0x3, 0x2, 0xa, "8efbf1d7"}]}}, 0x0}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_rr_get_interval(r1, 0x0) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) (async, rerun: 32) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file1\x00', 0x2000757) ftruncate(r5, 0x6000000) (async) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) pidfd_send_signal(r8, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) close(0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, &(0x7f0000000040)=0x121) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='pstore\x00', 0x0, &(0x7f00000001c0)='grpquota') umount2(&(0x7f0000000340)='./file0\x00', 0x0) 4.357724298s ago: executing program 1 (id=332): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="281effe935fdca249bf6ffffffffffffff556e", 0x13}], 0x1}}], 0x1, 0x4800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000004200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 3.997825234s ago: executing program 1 (id=333): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x400, 0x1}, 0x18, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) set_mempolicy(0x1, 0x0, 0x5) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 3.384422338s ago: executing program 3 (id=334): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x3, 0x9, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r6, &(0x7f00000001c0)={0x67446698, 0x0, 0x3, 0x3, 0x1, "3c45617f"}, 0x14) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000200)=[r3, r1, r4, r2], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000340)=@urb_type_control={0x2, {0x8, 0x1}, 0x1, 0x84, &(0x7f0000000280)={0x2, 0x13, 0x5, 0x800, 0xfff9}, 0x8, 0x8, 0x40, 0x0, 0x11, 0xfd8, &(0x7f00000002c0)="2600673869f2c2e5500866eb5c6365e2336514e1785d3e6dbaeda9c8dfad9f62316eb061a057f71721d8f45898068bfb1d08072a20b3312cc457245a6fe1e0e1e5b5b165745425907bc34f187ba52ce8c3c9a53d900f74"}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r8, &(0x7f0000000380)="b84d0d3ac4138f13f7973c473521dd765f891346b92b5ee389e814c24bc5e6ee3970bd8bcd05e71a8ed8d5958b70e5799b8e2f04f7d632bd24505d889541dd62a01488ec1ca53bf083910fece86ce6beb640be986d6e772d7aef93edc911a9d24041df17435c3437d6ea1a8452e416096fd5acfbba457a707f2f8af2d480b68dc27eae6bcc18a62b756d8b10214cce73ee2700f90cebc781be7104569e4109aec56c1a099506627cfb2bae9d601acde49861b01ee79fdd2d7dc468b3f54207240ded2d7aeb6119cd82bb4b7e0e4200cc03d5afca8231aad2d0d7eb2d33", 0xdd, 0x24044085, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r7) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, r9, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x49e6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x753}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000c811}, 0x4) r10 = socket(0x1d, 0x80000, 0x2) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000640)={'sit0\x00', 0x0, 0x10, 0x40, 0x77f, 0x80000001, {{0x40, 0x4, 0x0, 0xc, 0x100, 0x67, 0x0, 0x1, 0x2f, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x24, 0x5f, 0x3, 0xc, [{@multicast2, 0x1}, {@rand_addr=0x64010100, 0x8}, {@private=0xa010102, 0x70}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4}]}, @rr={0x7, 0xf, 0xef, [@broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @multicast1]}, @noop, @timestamp_addr={0x44, 0x4c, 0x2, 0x1, 0x7, [{@local, 0xfa9039d6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast2, 0x8}, {@remote, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x6}, {@broadcast, 0x2}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x10000}]}, @rr={0x7, 0x17, 0xc1, [@private=0xa010100, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0xe4, 0x1, 0x8, [{@remote, 0x9}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0xfb, 0x1, 0xa, [{@multicast1, 0x4}, {@private=0xa010101, 0x6}, {@multicast1, 0x5}, {@rand_addr=0x64010102, 0x8}, {@local, 0xee}, {@broadcast, 0xc4}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x7}]}]}}}}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r11, r7, 0x5, 0x1}, 0x50) ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000880)={0x2, 0xf2f, 0x2, &(0x7f0000000840)=""/2}) write$binfmt_elf64(r7, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0x10, 0xb6, 0xfffffffffffffffb, 0x3, 0x3, 0x9, 0x1d4, 0x40, 0x1dd, 0x8, 0x6, 0x38, 0x3, 0x8, 0x2365, 0x5}, [{0x70000000, 0x9, 0x8, 0x7, 0xb, 0xd3, 0x4, 0x7fff}, {0x60000000, 0x7c2843e1, 0x5, 0x7, 0x9, 0x2, 0x82, 0x86}, {0x60000000, 0x4, 0xffff, 0xc, 0xe4d, 0x180000, 0x80, 0x4}], "793c3d73db1af59ffbb0e33e2f3c25c4a978b771390376b16fbb73bb2a46e7960942f4dd8aec27e341d371b1d934efa61e9d324cebc164bfb466c3ec17924ddbc44c74ce831f5abb8691338ac11f92acbbc3bbbb333e5bb1e427a754007203cdd3aa52dd8adf339b0602ed08fe4aff89a6638aaac86d7cbf6287c3e9ca3df847ec05da4bc510e7c5c57b523d93460b120f6d1f96d58fc5a09ce040ca1e4c30ca397232d87dcfd591d8cd92a71462a1396785cfc90507af000a67008a065304597cb6187ca3b7e0ae3719fe0bc8", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6b5) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r10, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x70, r12, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004000}, 0x44000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000001140)={0x0, 'geneve1\x00', {0x2}, 0xfff}) ioctl$vim2m_VIDIOC_STREAMON(r7, 0x40045612, &(0x7f0000001180)) ioctl$SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, &(0x7f00000011c0)=0x1) gettid() r14 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001200), 0x1c1800, 0x0) syz_io_uring_setup(0x748a, &(0x7f0000001240)={0x0, 0x3402, 0x2000, 0x0, 0x136}, &(0x7f00000012c0), &(0x7f0000001300)) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xe4, 0x1a, 0x10, 0x70bd2b, 0x25dfdbff, {0x18}, [@generic="f1915e4204bb2cce39bc5ab8b4cc0e4c019118b6135ea90aac0ade7da67de5568976e16273af77858302daf605279eb6cbfaac5c1e9e04ab07bf59391c937e6ff3a23a43a73d4dca02cc49424c246663171ad7654943ae69e2e71dd4ac46945deedbc50873cb9d4f841f026695af4be38498ddb062a8efd8fe3a00771b9a7d7973e7e39f22741e6352ab6228c25a7c6bed3141b5405c3492665da408ca5065fa7143dce579ea1c7fa08eddf01c7681163b731b458903f12e7bc679710d2a3382d3e0fcf82ed2848a6cd6fdf43b9a"]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000a8b1}, 0x4041) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_kcm_SIOCKCMUNATTACH(r10, 0x89e1, &(0x7f0000001500)={r16}) fsetxattr$security_ima(r15, &(0x7f0000001540), &(0x7f0000001580)=@v2={0x4, 0x2, 0x13, 0x8001, 0x4b, "c38c270f97dc0705f8e3a0d934f616b978f1758a280b29cb81cfbf9e98d2c0b825fd35fbb7f9527c70d686736c4f368dadb0e9bc779a0feb0b79f9f284a11d734c43c8d422d90076af337c"}, 0x54, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001600)={r14, r11, 0x25, 0x0, @val=@perf_event={0x7}}, 0x18) 3.1575818s ago: executing program 0 (id=336): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r4 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000300)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1700}}], [{@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@flag='silent'}, {@fowner_gt={'fowner>', r5}}, {@euid_eq={'euid', 0x3d, r6}}, {@measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '!'}}]}}) close_range(r0, r1, 0x2) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000005c0), 0x113000, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r7, 0x541c, &(0x7f0000000600)) ioctl$TCXONC(r7, 0x540a, 0x3) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, &(0x7f0000000640)={r0}) r8 = getpid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000680)={0xfff, 0xffff0001, {r8}, {r5}, 0x6, 0x4}) r9 = fsmount(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) acct(&(0x7f00000006c0)='./file0\x00') io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000001d40)={&(0x7f0000002000)={[{&(0x7f0000000700)="a8ff387479e9ba758148759f717813c011a938607edff9910b410642e802db0f", 0x20, 0x3}, {&(0x7f0000000740)="12b3ba7f649a9e0f23d040c08f222f0eebd994c133e8aa234a47eff81deafa76f9e7f43f9b7e8b4a99474f21a735904e103b4040554356d32c0532a692d5def8980800d8437e11fa194caa7c5510ef85f77edb701399c7f3c74f8e6a090bd2463acfcde04eded2a4de7dd1300c6d23e6111766f377612e2f35dc168a51117e54c5de7f1a305af8c0b72ace199179475623dfeb496b0f50f62177ea202ab07a28575a310bb639869522d0f1f7dddd5a786fc247e565cd4aabc8fbc513ec6e7ea2098e83a9f6f5f6cf50eff8bee4af1bb292a3095f5d73a660d43f646dea8ee6f9ad1348b13bb9dc774bac2e1846ef6b10743981b542c94bef0b2500d54353b66cd52e05b384847a269ef9e0488b291d07e5d182279e4e53955a6106e6626bd043fba275560d5431c4fd76ca9cec81a22f19267a4a4811370ecd846691fcc78c2ab551969ee4900e4a25e3bdedbc8fcd8603136744e565e82a9229324999d51e8fd645dd20385c5b07a2a3249dba624f26a09b6339590be75379563fc476c9ddeae397d4de73dd2dec9f8c776a36c29351ab4e7757f4100f2258153431e08132324aabb2edfc735bede62c10e24a3a2a926be892d63c7a2d6cd22591c1e805e34ebf29ed36056ec262c0a18ef289664a03a06e2eb3aacb07692ee14758a1dff75f1b7d93bb8efd2ff5accb0d16652a50dfadcae4f59f40007bb178f77117a6a3e3c08356673e0184f20c388ff294a59f4ba7beddf902dfc620d3cd3c26ce10d7d45101976af853ed555683c12a52f8768bd69b8b68bb2efd31fc71f0b4576202eaa4b998f35e0822e0472d03458a8dd2ce31f8399979f40697dea57ce53b2accdf39be93ccde84750cfad3eac16cc8e30a686a061108e27fa64f919b4287b5d9480e94dbfeb8e456809ac878e6fa0717ee2623d82921cab159f2d2320a4015bb2c5aab26bbd5060a296e02918a41cf062ab0261bc586c466233d75971aed1d80656239c9e1b50f1e0beaa4569e2e0cecf465251d6598349df83ed62ce00308ba10e21f895e0da38cbf94fcfad9d2e9351a3e07c6ffcbdef4506d96eb37c6df53a739dfd69a2f26d5234ba26fd44f721f13a50768bc3588ac4cedd14b7c601247a9da2b67d4eff9af160fcb8b21d5eac36a785a60f4de9eb3c195baf0acb938f1239e1e4cc72298a549dd2b8a37a4c3727623256edabdaaf72d064702479940faa8fc37acbe1ef31aa491beee070f5931b1b0bce6311a3219d06d01b94c2d3c0cdeacdec014653aa67d1d1a2d88c32ae4f36f88df230feff32305005a74ad8632cd3fbdc2bcb93014d63dafbfef9a0d9bbe3fc2ef0c20be319d52a14c2a5f605edc6f8e465322e2cb08c66113527c3c442100c57222ec9c6298622968cd670cf6cf8c39049042c5203c84b64163a2965a655e59767e6e1cc5e4d4c92ddb5a041b80c5f1f4c37227ccdb7d7d793672f072be90ccb512145c93a748dd6458d933c0de3c933e6e2af7ea6cee7cc4d5e2aa16e71808de12a0f662ddf857242d01cd49dee70b16eef20d935f8da2d056d609189fee8214ec07221357c1d49da2de47a733f97a8cacdb419c0466953a97ec398ba166da30ae9de413ed72cee5bc17e72e82b34827de8508886f532f2b0c44a3c8e27938467c43636ba2ef0dcf85eac51488ac077c3e2c32cf3a500946e502805463c578563cb1c0c7f27cb995fb1966edd57dd28ece9196ca2c713d63b8f3426ac747769f4f35a2881b9a62a39a07568552b5dcc32a07421dfd61da1062d47efa1df36463255bf31f120fb7c181785dc2b41185154c84794533e765536eab602fcca6e1b77b87d94a095115976753f355d4f85aad6a2233687d4c9e7b9264c62726045af8d6a2c7f029431b5cc8de9dbaf807a166ecb52cb6f7daf330f61636e888e5ae0be2cde65e00f678d9963629b1527ec51d4413dc465ffa31a9ec14fd5b4d3a6236c235888e8ad6b2119aa933e266ccceae1fa74cfa23b9feefbba6db51a6dd133c057d39c91d2a44dbe54536c76601c5ff6814e9ac49cd7a4573485d3c38ae1ae239e82360d5825350e025fc29519a7137742fcb6458b16ac0a5554a189d916304a901aa66372d2a8990f5ff2116a5088a0589dc20a536c8eb66c4eb49f5db9400d31afb6623febc4fbee9064b39dbb5211c556fca5cc2cea65b8f141c02770192360ab61798d53390b2cf093d9e5bed35da5d53e2106b646714a49714569a6b7d9a0784cccaa7b46be29f5b95b45f08ea3b9cc30474df847eff5f390219527e1fd5087a108ac007ce8afb32b7ad79da717d099ac2db7e70af4b87a8e8411e34d732a0a6848e3c5e89831fd5db98e078d161b91ff47c069a88f445c01bfa6eabe04e160a2af37bdd2bf089f0b939b2f4022f13119957bffb9ab2ee5dd6b6e916b1068b27406e1e6b1c23bbf09036b33bc6bd7b8428c76bbcea3c19b19e8f2bcb1fd45943b9d6279726d88c83cdcbe6b94289b1891ab9665837ce34bde29a4eeb84cd69f57f10b3054dd52cd974f5fc58d32c06e936b62c44a1513e3d6a10b231f1d2dc1d62461558cabfc17ce99ad405d023ccd5e288d638ec83f539d18514fa3c6b7ce56f7c730ffe6e6a2aeac9325e9585dd24812ea5b71740619a788918c22d462ebcd6132ba006f75d22ed149e68caa44e4eaef7f0137679eb2aff5d8f3055f95753a313f016d7023fdc7de09ccc9ffa650924d02cb7f1ee4947fbe0f2d94f7328a94937986363669100b9239bd497967bcc0104e6abd4422771789fe7bdd6d01571128fd09992d0dba0b0547b065ac5e3d1863aa0c7573121173dcb99eafdfb45090efe797d579470fb176b5edaebc721546772d41652cdb3de2aabde22bebfc37ba645fe423e7c05fb24e3604e5498b7153e4d8af879963368122210de91bb5066bfb80a7c25c74d678e0582e9a6219e417614b0d6fd1f0ada1a7bfdd9aed1cd320c0fb260c9e182174f778d9f00c6479d8ba5455e75c35ab31fc55e3231b08043487feaf4750047acd3533f3adf83b6f91899e2d2fc950c79246515309ed55a65e7832b80c6458329c95a4ac40bb24c3a640f77572a7c9a5332174b1967a67e32d4cb85989a9049dffc5be8dd15ec372d1e28bc1762c29f94190ca1bba9a0108b57c10cb436d075de1ef279593bdf6ad84c90007fe51979c4e1cf885338fb6b675fc299294b7707fdaf1e436a4bb71b3a86159902719d548cf586163e2901d14b47e3500007dbbd6d17dd9fe151d2d05cd2664098f42cdadcb10dfa1254dfbff7845db8a71c3586c49fc65ed69c0d40782e2a75f5b93e78ecf7bad0a1be006557189dabd7af8aa3d8a500344062605ae8ec7368ea2ffd9f64b29e63126d69bbc6ad3eaa9234a29dcea91c1d325f3899b6fa74c48c46b33eb1bd8685300cbca0193f2ef1ad91be12f614f96ae5546aaa3dedbebc1703bc7f54afde54872f8798bbb7d81e76c694a6841d6476e19e44cb006179839dd8fb2ac268151e162343a80e414ac9c20fbfe48da8b8746b5ff8efbf8347d5832d22fb743cae23ce5293330eeb3da6d88124f5f6a57e9c274d9e0490388c7a8a1794bf03dda2f893de746164721e78fc69029d0eaf905aadd4a5ced2502d8e24432f4c360cff9b75b16743e2eca2ffd369d0cd8a302c1454d738b0463224240fd93d4cc48f38b05bd2e2164f77a8a7cd89293990575595bb68e054cdcaedb4fea46368cd838423f3ff26db012deab5a66734f9c44812ecb7aa247ffa1337372429670bb0f1b9faafedaf9f596f04f1e953941bcdb63f702c52aafe162df005efcc9c982d7111d219b6219db64ca01e85f986d3cecc3d7d554d77242361fc36943a2048c54a7c97a7911f88137f4c6ef89d20a8fe16a84ffe9ada3cc1a7241cc5581b3908f2bee91240ba5dd643afc79bc9b14cc5ce87722e819fcd981d6395d1541c78280ef19703cecbd1d85bbe25141a6174bb5fc67f0d7f16a27f8d2e36dbbe0997b71a504c044ee53025935ce2c5f5b80e6b288558d7551c3f9073ec21e5ece294ae5ab97f4c5043a01009cb4e7087e03afce2d3a3fb13ed1d9d6411aa196adeb52e166e94bfbd392c9cb01aeebbd962d080aa226575c5d082ae686e83aad34111aad1422541976a1c0357cbde5359b02baa764f9097bd2e28cd84e5faaa27cc80128887e12f2cb80216b4d8c7b4796f753d2ea6513579110a892ab58a4d8399ea856d2f4feabe093ed2620c8f6b36d7eff2e168aef6e02bd5828844d8b4acdcd165859cd95bbb3af37cf099d1ae836a114d015da33d7deaf74a9500c6cb574806fba3230fa2b61a5b84703cd95b66fba1958c84d3364899cb3252de5bfd104523ddd07edca3502824e3ca57f0459ba29740708ebcabfd3da5b46c69df10e7f12d4b194c54ab6a882a2bce19c5a309e2d8392df6e1cceb54d3d99d8456660446e4179fda66826f74528fbcdc0e131c08ec64bf711c68648c0c7cc93f3f31eb2699dc7f469817dd09b26e506841ec7aa0cc41d7e697fc7a47b14e287cdbb790a674bbe326ab627ad47da0752bb383d3615cd7681d434a108186cc0468d66c17e23df8c15199515b55133874e05cf1827c5d33985ae6fa0f3d0351099930b8d24187e0abdc189ca57f854587792d2c48c7a988a5f6c82b06b951206cf5889e4a1b98835fd3775a5f1aa144ebb385c0512b17d23820785c19db3dbd80a6d0137caec0ec12242c6555d0ad4b7ec1d7f91eb8443985207c777e8deacc08e61c4960d4ab8afe5aa1fd665a14e8633404a8c133b6fcd38c7ad64b3820488e63eb19bf820ae72bc4f9af98bc2d2f97c29971c7790243dd1fe7e69811f3dfbef2b8cd1cb3bf07b50c766a4e95b1a0d9ab0434eafa92c162d81ded341d99255b724d2ece0e4f26fb5733e7401a58ba1a76ec6398caa3578e8721be4f9771e1b11f451d6289907345fcdd00833c1d36e6f224b0cfe863e81b27c75f21dd047ba6f88a303393262f75bd9b7d652b405a1de8ec8a69feebfe303b74d5cace4d092a812355f8c9da310f8626f5e408cf06f934aa020ebf59c629b108f16c6aa4ccfa750008593cb08401880b366557ad9fc9101206eb6ba1a254c01a0c912b52358f577583d5f01ec9d55e7c37b2710ada65da94a0b37222ace7a2981ee85da5a9e82a005cf1c72f591fe22e30f0a7bc908467bf51156117976cfefb424964ef7f0ef2c0a9b6ea56d2c1bac2380fbdf5be36af385370b3f3309671b773a7f3491e09b9bbec261745ac0eb78487755f48673f20155710a7487c1ddc241e3b13f3f53f71dcf1a97ce24231f5099133a2262ebec03361254fee50e46165418c90b9e77625240fd768c4e22eb43fa468d44c54e3e8e504d100d5fe150dba15c5167a69d6f9a07c31ddb9cf24dc9deea9476ec235dd05f7b655a0434f52d036776ad4d46ed0a1c2e54cb81a17c30364477fa218ac56678385b67048dee8821a7469a9b639f9c8e447734c4c7f6d5cc08c1670daaebc83be4b7f78c3bf9e8a82f1049176d0ee78dfbc4bf582805ffcf7398aa1905c6eea5287089a677a983e480b2d643d37547b3b00d54d29bb98635112f6af6e41e5ebde62fa24dcf23e3140c6f989fda453f898271b3ef28a376f1dcebcdcad530d617d20dc141838888dd0bf96a7d7cb2a3ad5d91b8f7341168bbcdb69438ab8d8e2a36aacbfc06119dba2a32781e421768d5014e556a45c5bccb4d73e3092937a5a0e0a6a2a27bb4ba173c102f9a8c73116b3132026d05548f4fa301ed195dfc35c3847d435485646", 0x1000}, {&(0x7f0000001740)="47c8e6402c53547294a1bbc6938170ab4834d442df2224414bfb481037879a16ace5e6067a66e746b4c3c79f258432e333717c88f343278ed91f9b5bd2127c8826b08849e5936e8bc10a8bab7bf1879f15121e3489506862dd569c065d77448f388d9cf086cfa49fb8cd2d4d495a66a7a178a2ead6a5f47c652c3ec6b769c1ce80", 0x81, 0x2}, {&(0x7f0000001800)="39f3ab0b4ac825942256577b7465c5d8536a5244503634fa67b97d787c272c3e8a7b4f37f1b2fb723c59d521cbe9517d7881988ec17e817a2452eb5f99e5b89459c9fe040815ec1514cf73a8215d394b4f6780264f1638de40d317d20a6a39c8dd88275b5b9d43ac7a67300e23141006bcb406b52917673d5fd8ce8fac49e7e016db21b76f97ad48a56ee0e42c7c17e0eaa358d96f2b628881848bf88e9fdf31f63b589aecaafbf3c0902cfdc01d9ac03fa2b50f9d02965926e1ed6efc9c557860c9c9d1286a00db1a1c0ad96095795b4c3ed6d357302a", 0xd7}, {&(0x7f0000001900)="e0fcfbff816b8472a1430d496f0727162ea2daf3edf70f4797320bec3fdafb4a75b54047448498c5f167e74347a4dd5018aff700cd4885901a8fe11d04c233c3a5f25bdfb7b1cc39afc5abdcb95e80bac67b25841b6e94d58d6bccd0392a376956e493b29e71bfac6519e4e89789", 0x6e}, {&(0x7f0000001980)="85329d2f84ceb047adcc885d3a674fc16b1092ae79e1356303b36242ebcfdf5a38364399", 0x24, 0x3}, {&(0x7f00000019c0)="19017bf511916a5d6d66f0060d13f408145a451e14bf0f923bf9adc30397e7ae2af4458ef236671048aa4e79c1bc0043e7bbc04acf55fd5e1d77ea8a45e658dcf4146708971c7fcf73c84a10990faa2d2e6e8f9f7b1b5b0cdcbde91f082c7209045c2fe2e34d063a7908f7a8e0e587e6eb59e7f8d1100e2dab4812d54c7076eb", 0x80, 0x3}, {&(0x7f0000001a40)="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", 0xfd, 0x1}, {&(0x7f0000001b40)="40dd22a88000fb76d7972646f1aaa886360eddbd6b2a3f5ea5ab0ff5330138bf6de180623bac7900a70233ac54001ad9dfeb98ed80321dd77efb610b95364ddc6cd5f610d30b4956566b6ca9db449ed29d785b315cb5bfdbaf2ffd092bed1fdd0abecb16577d6aa8a45bf090453b9b653f9365c83426da865b786f6e647b17a91fda2847acdb949b4e14a17ea3b61102ece949ac64d5b1b61885acf4bc1eae3a75b887352c95b82b82195b6429fce13814ef40322d8f02f7fbb2f179f560a1b1eeb11b922bc8441931d6a1fe19", 0xcd, 0x3}, {&(0x7f0000001c40)="6afb9c9b8dce9c4f6da9e12e677a2c25373f5cf999f03119dee8d31e47f3e9d2c6a6c44b64a0531fc103376326fe13caeec5baeb9d9630bfbeb03448743f274f74c3c1e83136f01ed91615d689f8197707fc47c4b43b683d0694ee4fc4ce69752682f850e319333aeb74c0d8bda8fcaddd65e95347d2818189bc0178007eab80191054325c3b374670d34fc66a2a247c83979274391c0afdc2185976f68422772972ddcf436b387cd779b4be0c70cfdd02fcf478169674a9b5e2b4f0d238478d7cbfc0b46b4d5784eca119d6a1211b26d5e9b3546815837f988be886", 0xdc, 0x1}]}, 0xa, 0x2}, 0x1) r10 = socket$rds(0x15, 0x5, 0x0) close_range(r9, r10, 0x0) ioctl$SNDRV_PCM_IOCTL_RESUME(r9, 0x4147, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000001d80), 0x501002, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000001dc0)={0x2, 0x3, 0x14}) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001e00)=0x9) ioctl$TIOCEXCL(r7, 0x540c) socket$packet(0x11, 0x0, 0x300) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000001e40)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r9, 0x3b80, &(0x7f0000001ec0)={0x8, r11}) 3.125571386s ago: executing program 3 (id=337): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f00000005c0)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.107654599s ago: executing program 1 (id=338): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x4, 0x5e4, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0xca, 0x32, 0x60, 0x40, 0x4f2, 0xaff8, 0x7354, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d2, 0x4, 0xe, 0x11, 0x0, 0x3, [{{0x9, 0x4, 0xfa, 0x8, 0x2, 0xc8, 0x59, 0xa8, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f6e5f7dff6c0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8a, 0x8, 0x40}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x85, 0x9}, @mdlm_detail={0x96, 0x24, 0x13, 0xb, "bd088ac0ca859865147827a38748a22485c19447d089044e7fac76f26b31b6c2579345c14d2d5e1db9cebfa76531e938d9fab0fe00cab5bf38d243fc813cf10c7da7d82caee617cc67b963c765d43c36a6261e2481a12f5389eac9515cd7e4501a35572db06bcb99094ef7f5fa9e2de5200e791ef65a052ab59578b5a49ede8195300b72f0f283ac77df2044c45f3b667ec0"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mdlm_detail={0x20, 0x24, 0x13, 0xa, "0c938247429236c97f30f1e61c1f47b7dd49e2ef377a6c9574d6f3ad"}, @mdlm={0x15, 0x24, 0x12, 0x7ff}]}, @hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x774}}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x31, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfff7}, @generic={0xf9, 0x7, "9250ce4eca3b7e5f4c9a63dafe98809792e3e9cfa11f1dd117dfbd9cab0d21be514a5c5dc2417226d8b9bffdce045e93a64a28b9a7d8d9477afc5cadd43cb25a621fc9212c2aa1743c1fd7ed49f11d570a93fbf35d647eafd7a8cf2ceb0c31323a2b27c12f2d91c94a87bae3a27283645bddc3841374a43cc268b58a3b80154e856d17e7b6785968d7a7920d720ee856a51be6660eec8d1686b7a5ba8620b81a1445b45b611c6e9f66b7a4baad7731e222ddf69767cf2e772729e379382d37a314dd5602519d03d62a7996bc6042ad5af44b17b4804eac805ff8105c94a05442a68f3a628d75ef5f88f39d167b8b3848b200b61e40b7cd"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x9, 0x1d, 0x1, [@generic={0xe2, 0xe, "7d618bc3b78944e55155960bb3fcf87b59d51c2748d9d73b51e1628516a6831968de708a30dc28c626724f1805f275b1f5658a6f5a89bf2e0adf7f527bda55310443f9f428193ee8aaecccae27fd3db0e203537015455d3103ea814976afba0a81fbe706b5a4f7c6ad3106e713646669bbc445972144f272269e8708103bcd76b394055d69f2b8cb1b2f5b5e25fe39b04450274c53a01b1746d8e97f0cb39860e224991b1c60ec6fc44073427f0d410ad1d9e787147fe72fcd80f980ce70279c00de9afbc2e0e249de290142b0bf9bf983d91d52c5f05cf5fcca90c4f47b926f"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x7ff}]}}]}}, {{0x9, 0x4, 0x6c, 0x3, 0x6, 0xf6, 0x75, 0x84, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xe9, 0x7, 0x4, 0xb}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x0, [0xffff, 0x8, 0x8001, 0x5]}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1911"}, {0x5, 0x24, 0x0, 0xea9}, {0xd, 0x24, 0xf, 0x1, 0xae6, 0x5, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@acm={0x4}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @generic={0xc3, 0x22, "93ae22b98f60e07c578ec2daf207682415438367ed8689d9669aee99b021fbcbd3e1aedf3a39c06457139ab77807f5d69d6f66d2673dc4683771e609bba8c6b21133e2176003822831833739e7b16cd7631947826e1b995ea8b96194186cf2b22fdaa7f6a26772a3d0b17a04857ae2e4a1ad004c030ab07c5613643e335b5462ac0bd429e83e274955e6a85729f20e9870c27a6be434bb46db85f82ea4d643658bea9ba5979ca255de82733c524bd5c861a75e29670e6eba7870f85386cf2c2b24"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xa, 0x1, 0x2, [@generic={0x2e, 0x8, "9b1a831a01744d67f64265cd091b682a76959a3b4eed8c5373f10bbd7b8f710c6decb2b71fcf862b368e58be"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x60, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0xad, 0x93, 0xf2}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x2, 0x4, 0x1, [@generic={0x57, 0x12, "61ddc83fb04758c37d7c971309c5cc145f8dd11eff8c28dbe45f33cc8b61e6ef3a8312906bb10d36c71400fa334855ba95dbaa197bac7103e7431181f6003f636cb9d59f001a833a05ce52566fd0e03976c0b4b31f"}, @generic={0x76, 0xf, "e541c628b356165b2ebf58d1b8533eee46d91bfc62c2afca14cc4de9d1ac422a8b6ed0fc1e44682b65d78a4724e5389115c2086b89970d70c9f2a06f42a340cbe5b1872e5899521eb22a08abc47d4ec766df39f5c9035be7cc0daeddc005fc4b2d4da40849b6df9b9c2a7ff2daf919d9f63823da"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x9, 0x34, 0xb6}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xa}]}}]}}, {{0x9, 0x4, 0xaa, 0x0, 0x2, 0xdc, 0x6e, 0x82, 0x8, [], [{{0x9, 0x5, 0xb860e34643d9f275, 0x3, 0x8, 0x6, 0xf9, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xaa, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0x5, 0x5, 0x6, 0x61, 0x59, 0x77, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x41, 0xf7, 0x9}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0xf7, 0xd9, 0xad}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x18, 0x80, 0x1}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0xa9, 0x8c, 0xa}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x81, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}]}}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x310, 0x3, 0x29, 0x2, 0x40}, 0x10, &(0x7f0000001900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x5, 0x8c, 0x9, 0x3}]}, 0x1, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x53, {0x53, 0xb, "9b9f9c1963efc764aa8ea1da8da4d6c60f1457f6dc7b34474f9f34fe7880c26ea76458cb8adbdbd44ec335dc056542c94664bdefcc2514058fea0908704e98d785d06d61ad53753ff41f818c8115678224"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5e22}}, &(0x7f0000000140)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x1, 0xfff7}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x200, 0xf, 0x8, [0xf, 0xff0f]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x1, 0xc, 0x1, "2a329d01", "a7a6bdbb"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x91, 0x8, 0xa, 0x4, 0x1, 0x0, 0x30}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x75, "b3dafcb18081e28decaade07fd55527882f1faae9457fbe5e4af1f795c0772594fa03b7583068bab770675e1c158d378727fc0ac8198c11380ccd9a34a6cca2aacf34b1e5a9c9e329fc9a916fe9274dc5253a41536239e14af86cb5e89c7007a074ff704f92df9352cf51896a1e6ba9c2a2c0437df"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'z\''}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab0a"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3e, &(0x7f0000000cc0)=@string={0x3e, 0x3, "65a974b2231c83bf5969b5b33165d97426d21aa8678dcc08afd9ded95dd95f9870980e5b2be7da7d3a2017fea71f02a75e60b655bc358c685af66350"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 3.005420258s ago: executing program 0 (id=339): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r0, 0xa, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x189) 2.905352173s ago: executing program 0 (id=340): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x400, 0x1}, 0x18, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) set_mempolicy(0x1, 0x0, 0x5) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 2.373678907s ago: executing program 2 (id=341): socket$inet(0x2, 0xa, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x531f, 0x10100, 0x0, 0xfffffffd, 0x0, r1}, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000080)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 1.727551021s ago: executing program 0 (id=342): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44002, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)='system_u:object_r:var_lib_t:s0\x00', 0x1f, 0x1) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1a, 0x0, &(0x7f0000000d00)) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1a, 0x0, &(0x7f0000000d00)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="66ba6100b802000000ef0fc7ae0f0000000f01c50f78ad2b0000000f01c9daa7aa0000000f8f30e5c5480f95bb0b000000b8f931d5070f23d00f21f8350000000a0f23f80f792ccf", 0x11}], 0x1, 0x7, 0x0, 0xfffffffffffffe3f) (async) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="66ba6100b802000000ef0fc7ae0f0000000f01c50f78ad2b0000000f01c9daa7aa0000000f8f30e5c5480f95bb0b000000b8f931d5070f23d00f21f8350000000a0f23f80f792ccf", 0x11}], 0x1, 0x7, 0x0, 0xfffffffffffffe3f) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.301738298s ago: executing program 0 (id=343): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r3, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000100)={0x10, 0x8, 0xf2c8}) write$uinput_user_dev(r2, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x10000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71d], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) read$hiddev(r3, &(0x7f0000000040)=""/117, 0x75) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) 1.191295558s ago: executing program 2 (id=344): syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000298962d08e2041414b9c50102030109023b00027f013009090400000002af27cf05240600"], 0x0) (async, rerun: 64) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) (rerun: 64) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 1.187249479s ago: executing program 5 (id=345): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r4, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000180001002ce7ed944fee4b1170001400ff03ff0600000000"], 0x1c}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.045017536s ago: executing program 0 (id=346): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x4, 0x5e2, &(0x7f0000000d00)={{0x12, 0x1, 0x200, 0xca, 0x32, 0x60, 0x40, 0x4f2, 0xaff8, 0x7354, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d0, 0x4, 0xe, 0x11, 0x0, 0x3, [{{0x9, 0x4, 0xfa, 0x8, 0x2, 0xc8, 0x59, 0xa8, 0x0, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f6e5f7dff6c0"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8a, 0x8, 0x40}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x85, 0x9}, @mdlm_detail={0x96, 0x24, 0x13, 0xb, "bd088ac0ca859865147827a38748a22485c19447d089044e7fac76f26b31b6c2579345c14d2d5e1db9cebfa76531e938d9fab0fe00cab5bf38d243fc813cf10c7da7d82caee617cc67b963c765d43c36a6261e2481a12f5389eac9515cd7e4501a35572db06bcb99094ef7f5fa9e2de5200e791ef65a052ab59578b5a49ede8195300b72f0f283ac77df2044c45f3b667ec0"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x2}, @mdlm_detail={0x20, 0x24, 0x13, 0xa, "0c938247429236c97f30f1e61c1f47b7dd49e2ef377a6c9574d6f3ad"}, @mdlm={0x15, 0x24, 0x12, 0x7ff}]}, @hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x774}}], [{{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x31, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0xfff7}, @generic={0xf9, 0x7, "9250ce4eca3b7e5f4c9a63dafe98809792e3e9cfa11f1dd117dfbd9cab0d21be514a5c5dc2417226d8b9bffdce045e93a64a28b9a7d8d9477afc5cadd43cb25a621fc9212c2aa1743c1fd7ed49f11d570a93fbf35d647eafd7a8cf2ceb0c31323a2b27c12f2d91c94a87bae3a27283645bddc3841374a43cc268b58a3b80154e856d17e7b6785968d7a7920d720ee856a51be6660eec8d1686b7a5ba8620b81a1445b45b611c6e9f66b7a4baad7731e222ddf69767cf2e772729e379382d37a314dd5602519d03d62a7996bc6042ad5af44b17b4804eac805ff8105c94a05442a68f3a628d75ef5f88f39d167b8b3848b200b61e40b7cd"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x9, 0x1d, 0x1, [@generic={0xe0, 0xe, "7d618bc3b78944e55155960bb3fcf87b59d51c2748d9d73b51e1628516a6831968de708a30dc28c626724f1805f275b1f5658a6f5a89bf2e0adf7f527bda55310443f9f428193ee8aaecccae27fd3db0e203537015455d3103ea814976afba0a81fbe706b5a4f7c6ad3106e713646669bbc445972144f272269e8708103bcd76b394055d69f2b8cb1b2f5b5e25fe39b04450274c53a01b1746d8e97f0cb39860e224991b1c60ec6fc44073427f0d410ad1d9e787147fe72fcd80f980ce70279c00de9afbc2e0e249de290142b0bf9bf983d91d52c5f05cf5fcca90c4f47b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x7ff}]}}]}}, {{0x9, 0x4, 0x6c, 0x3, 0x6, 0xf6, 0x75, 0x84, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0xe9, 0x7, 0x4, 0xb}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x0, [0xffff, 0x8, 0x8001, 0x5]}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "1911"}, {0x5, 0x24, 0x0, 0xea9}, {0xd, 0x24, 0xf, 0x1, 0xae6, 0x5, 0xff, 0x6}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@acm={0x4}]}], [{{0x9, 0x5, 0x1, 0x10, 0x200, 0x3, 0x4, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}, @generic={0xc3, 0x22, "93ae22b98f60e07c578ec2daf207682415438367ed8689d9669aee99b021fbcbd3e1aedf3a39c06457139ab77807f5d69d6f66d2673dc4683771e609bba8c6b21133e2176003822831833739e7b16cd7631947826e1b995ea8b96194186cf2b22fdaa7f6a26772a3d0b17a04857ae2e4a1ad004c030ab07c5613643e335b5462ac0bd429e83e274955e6a85729f20e9870c27a6be434bb46db85f82ea4d643658bea9ba5979ca255de82733c524bd5c861a75e29670e6eba7870f85386cf2c2b24"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xa, 0x1, 0x2, [@generic={0x2e, 0x8, "9b1a831a01744d67f64265cd091b682a76959a3b4eed8c5373f10bbd7b8f710c6decb2b71fcf862b368e58be"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x60, 0xfffa}]}}, {{0x9, 0x5, 0xe, 0x2, 0x0, 0xad, 0x93, 0xf2}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x2, 0x4, 0x1, [@generic={0x57, 0x12, "61ddc83fb04758c37d7c971309c5cc145f8dd11eff8c28dbe45f33cc8b61e6ef3a8312906bb10d36c71400fa334855ba95dbaa197bac7103e7431181f6003f636cb9d59f001a833a05ce52566fd0e03976c0b4b31f"}, @generic={0x76, 0xf, "e541c628b356165b2ebf58d1b8533eee46d91bfc62c2afca14cc4de9d1ac422a8b6ed0fc1e44682b65d78a4724e5389115c2086b89970d70c9f2a06f42a340cbe5b1872e5899521eb22a08abc47d4ec766df39f5c9035be7cc0daeddc005fc4b2d4da40849b6df9b9c2a7ff2daf919d9f63823da"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x9, 0x34, 0xb6}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xa}]}}]}}, {{0x9, 0x4, 0xaa, 0x0, 0x2, 0xdc, 0x6e, 0x82, 0x8, [], [{{0x9, 0x5, 0xb860e34643d9f275, 0x3, 0x8, 0x6, 0xf9, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0xaa, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x6, 0x8}]}}]}}, {{0x9, 0x4, 0x5, 0x5, 0x6, 0x61, 0x59, 0x77, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x8, 0x5, 0x6}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x41, 0xf7, 0x9}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0xf7, 0xd9, 0xad}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x18, 0x80, 0x1}}, {{0x9, 0x5, 0x1, 0x4, 0x20, 0xa9, 0x8c, 0xa}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x81, 0x5, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x1}]}}]}}]}}]}}, &(0x7f0000001980)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x310, 0x3, 0x29, 0x2, 0x40}, 0x10, &(0x7f0000001900)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x84, 0x5, 0x8c, 0x9, 0x3}]}, 0x1, [{0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x41a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x0, 0x22, 0x53, {0x53, 0xb, "9b9f9c1963efc764aa8ea1da8da4d6c60f1457f6dc7b34474f9f34fe7880c26ea76458cb8adbdbd44ec335dc056542c94664bdefcc2514058fea0908704e98d785d06d61ad53753ff41f818c8115678224"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x5e22}}, &(0x7f0000000140)={0x0, 0xf, 0x27, {0x5, 0xf, 0x27, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xf, 0x7, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xf, 0x1, 0xfff7}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x200, 0xf, 0x8, [0xf, 0xff0f]}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x1, 0xc, 0x1, "2a329d01", "a7a6bdbb"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x91, 0x8, 0xa, 0x4, 0x1, 0x0, 0x30}}}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x75, "b3dafcb18081e28decaade07fd55527882f1faae9457fbe5e4af1f795c0772594fa03b7583068bab770675e1c158d378727fc0ac8198c11380ccd9a34a6cca2aacf34b1e5a9c9e329fc9a916fe9274dc5253a41536239e14af86cb5e89c7007a074ff704f92df9352cf51896a1e6ba9c2a2c0437df"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000580)={0x40, 0xb, 0x2, 'z\''}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000640)={0x40, 0x17, 0x6, @local}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab0a"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1}}) syz_usb_connect$hid(0x1, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3e, &(0x7f0000000cc0)=@string={0x3e, 0x3, "65a974b2231c83bf5969b5b33165d97426d21aa8678dcc08afd9ded95dd95f9870980e5b2be7da7d3a2017fea71f02a75e60b655bc358c685af66350"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 720.096771ms ago: executing program 3 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semget$private(0x0, 0x1, 0x200) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002004000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018f8ff000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 639.036015ms ago: executing program 1 (id=348): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x400, 0x1}, 0x18, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) set_mempolicy(0x1, 0x0, 0x5) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008081}, 0x0) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 453.80359ms ago: executing program 3 (id=349): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x54593, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0xd}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)={0x100000, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}}, 0x108) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x400b40, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000000c0)={0x12}) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) r5 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x20000) read$usbmon(r5, 0x0, 0x0) ioctl$MON_IOCX_GET(r5, 0x40189206, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 5 (id=350): sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x40) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$kcm(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000000)='B', 0x1}, {&(0x7f00000013c0)="eb", 0x1}, {&(0x7f00000011c0)="bff30255a8b7e0086f2eba004db8cda7913b7f13445f952a8185c3242d667f00614652da5e743ca5d009894048f62c1c4a8b758ea788edb6556af0375e42e38d00", 0x41}], 0x3}, 0x20000004) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) kernel console output (not intermixed with test programs): 1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.503745][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.525744][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.540900][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.548009][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.574882][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.582133][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.614963][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.628599][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.635721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.658442][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.841516][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.870326][ T5842] veth0_vlan: entered promiscuous mode [ 68.908208][ T5842] veth1_vlan: entered promiscuous mode [ 68.986425][ T5843] veth0_vlan: entered promiscuous mode [ 69.042003][ T5860] Bluetooth: hci1: command tx timeout [ 69.043811][ T5169] Bluetooth: hci2: command tx timeout [ 69.047414][ T5860] Bluetooth: hci4: command tx timeout [ 69.053005][ T5854] Bluetooth: hci0: command tx timeout [ 69.074166][ T5842] veth0_macvtap: entered promiscuous mode [ 69.095847][ T5843] veth1_vlan: entered promiscuous mode [ 69.113038][ T5842] veth1_macvtap: entered promiscuous mode [ 69.127500][ T5854] Bluetooth: hci3: command tx timeout [ 69.158811][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.181267][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.196650][ T5843] veth0_macvtap: entered promiscuous mode [ 69.214544][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.226641][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.237558][ T5843] veth1_macvtap: entered promiscuous mode [ 69.269799][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.280215][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.300483][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.308338][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.317565][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.338783][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.349158][ T5857] veth0_vlan: entered promiscuous mode [ 69.376589][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.386973][ T5841] veth0_vlan: entered promiscuous mode [ 69.404494][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.413724][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.436423][ T5857] veth1_vlan: entered promiscuous mode [ 69.449925][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.460737][ T5841] veth1_vlan: entered promiscuous mode [ 69.479905][ T5844] veth0_vlan: entered promiscuous mode [ 69.532374][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.540260][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.570095][ T5844] veth1_vlan: entered promiscuous mode [ 69.583985][ T5948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.588631][ T5841] veth0_macvtap: entered promiscuous mode [ 69.597807][ T5948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.610932][ T5857] veth0_macvtap: entered promiscuous mode [ 69.625826][ T5841] veth1_macvtap: entered promiscuous mode [ 69.638862][ T5857] veth1_macvtap: entered promiscuous mode [ 69.664792][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.683861][ T5844] veth0_macvtap: entered promiscuous mode [ 69.694519][ T5844] veth1_macvtap: entered promiscuous mode [ 69.705532][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.709535][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.730936][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.745283][ T30] audit: type=1400 audit(1757593367.241:87): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.PHBlI4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 69.774654][ T30] audit: type=1400 audit(1757593367.241:88): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.796270][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.807488][ T30] audit: type=1400 audit(1757593367.241:89): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.PHBlI4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 69.838113][ T30] audit: type=1400 audit(1757593367.241:90): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 69.838847][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.867750][ T30] audit: type=1400 audit(1757593367.241:91): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.PHBlI4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 69.902442][ T30] audit: type=1400 audit(1757593367.241:92): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/root/syzkaller.PHBlI4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 69.925604][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.946524][ T30] audit: type=1400 audit(1757593367.241:93): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.953728][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.966421][ T30] audit: type=1400 audit(1757593367.271:94): avc: denied { mounton } for pid=5842 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 69.998257][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.998606][ T30] audit: type=1400 audit(1757593367.271:95): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="gadgetfs" ino=8303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.029916][ T30] audit: type=1400 audit(1757593367.271:96): avc: denied { mount } for pid=5842 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.056337][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.077332][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.086769][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.099075][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.110385][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.122457][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.163732][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.174519][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.201596][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.249362][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.366490][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.407997][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.419835][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.441247][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.451172][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.508202][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.623288][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.627299][ T5906] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 70.631184][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.688551][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.748680][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.796433][ T5906] usb 3-1: config 0 has an invalid interface number: 97 but max is 0 [ 70.816547][ T5906] usb 3-1: config 0 has no interface number 0 [ 70.826644][ T5906] usb 3-1: config 0 interface 97 has no altsetting 0 [ 70.843252][ T5906] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 70.858585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.880131][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.893715][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.900192][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.916561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.937304][ T5906] usb 3-1: Product: syz [ 70.948716][ T5906] usb 3-1: Manufacturer: syz [ 70.966396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.982384][ T5906] usb 3-1: SerialNumber: syz [ 70.999511][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.020289][ T5906] usb 3-1: config 0 descriptor?? [ 71.083115][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.084263][ T5906] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 71.129964][ T5854] Bluetooth: hci4: command tx timeout [ 71.135608][ T5169] Bluetooth: hci1: command tx timeout [ 71.140989][ T5169] Bluetooth: hci0: command tx timeout [ 71.141876][ T5851] Bluetooth: hci2: command tx timeout [ 71.152084][ T5906] dvb-usb: bulk message failed: -22 (4/0) [ 71.157948][ T5906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.168953][ T5906] dvb-usb: bulk message failed: -22 (5/0) [ 71.176005][ T5906] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 71.193319][ T5906] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 71.204115][ T5851] Bluetooth: hci3: command tx timeout [ 71.230183][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.243833][ T5906] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 71.263050][ T5906] usb 3-1: USB disconnect, device number 2 [ 71.481064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.602356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.752033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.772377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.342028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.350305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.358862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.367469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.376045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.402147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.541760][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 72.780588][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 72.813620][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.866417][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.918041][ T9] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 72.929366][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.972044][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.992387][ T9] usb 3-1: Product: syz [ 73.033604][ T9] usb 3-1: Manufacturer: syz [ 73.038221][ T9] usb 3-1: SerialNumber: syz [ 73.057789][ T9] usb 3-1: config 0 descriptor?? [ 73.110067][ T9] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 73.203434][ T5851] Bluetooth: hci2: command tx timeout [ 73.207942][ T5860] Bluetooth: hci0: command tx timeout [ 73.208883][ T5169] Bluetooth: hci4: command tx timeout [ 73.214345][ T5860] Bluetooth: hci1: command tx timeout [ 73.222312][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 73.272286][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.284993][ T5860] Bluetooth: hci3: command tx timeout [ 73.285648][ T10] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 73.329634][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.093961][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 74.094014][ T5998] loop7: detected capacity change from 0 to 7 [ 74.130466][ T10] usb 1-1: Product: syz [ 74.134693][ T10] usb 1-1: Manufacturer: syz [ 74.139282][ T10] usb 1-1: SerialNumber: syz [ 74.188300][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.197579][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.209127][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.218262][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.251553][ T6010] hub 9-0:1.0: USB hub found [ 74.289521][ T6010] hub 9-0:1.0: 1 port detected [ 74.308435][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.317604][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.347684][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.356847][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.376623][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.385741][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.502137][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.505015][ T10] usb 1-1: config 0 descriptor?? [ 74.511314][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.555111][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.564286][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.575127][ T5998] ldm_validate_partition_table(): Disk read failed. [ 74.613954][ T10] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 74.634306][ T10] usb 1-1: selecting invalid altsetting 1 [ 74.638022][ T5965] usb 3-1: USB disconnect, device number 3 [ 74.664474][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.673671][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.683670][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.692838][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.714624][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 74.723803][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 74.733724][ T5998] Dev loop7: unable to read RDB block 0 [ 74.815383][ T5998] loop7: unable to read partition table [ 74.822684][ T10] gspca_stk014: init reg: 0x00 [ 74.824103][ T5998] loop7: partition table beyond EOD, [ 74.831901][ T10] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 74.836837][ T5998] truncated [ 74.909171][ T5998] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ œëÜ%õ«`Éæ˜Èµ4FLQkÝŠ5) failed (rc=-5) [ 74.935914][ T5218] ldm_validate_partition_table(): Disk read failed. [ 74.974890][ T5218] Dev loop7: unable to read RDB block 0 [ 75.034029][ T5218] loop7: unable to read partition table [ 75.039753][ T5218] loop7: partition table beyond EOD, truncated [ 75.090572][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 75.090587][ T30] audit: type=1400 audit(1757593372.581:149): avc: denied { read write } for pid=5993 comm="syz.0.8" name="vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.131748][ T5906] usb 1-1: USB disconnect, device number 2 [ 75.163915][ T30] audit: type=1400 audit(1757593372.581:150): avc: denied { open } for pid=5993 comm="syz.0.8" path="/dev/vbi0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.296025][ T30] audit: type=1400 audit(1757593372.621:151): avc: denied { ioctl } for pid=5993 comm="syz.0.8" path="/dev/vbi0" dev="devtmpfs" ino=952 ioctlcmd=0x5657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 75.485531][ T6024] only policy match revision 0 supported [ 75.485548][ T6024] unable to load match [ 75.519196][ T30] audit: type=1400 audit(1757593372.951:152): avc: denied { create } for pid=6018 comm="syz.2.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.033480][ T30] audit: type=1400 audit(1757593373.261:153): avc: denied { create } for pid=6022 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.222727][ T30] audit: type=1400 audit(1757593373.341:154): avc: denied { create } for pid=6016 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.246061][ T1207] cfg80211: failed to load regulatory.db [ 76.257081][ T6035] Zero length message leads to an empty skb [ 76.332656][ T5860] Bluetooth: hci1: Malformed Event: 0x02 [ 76.373466][ T30] audit: type=1400 audit(1757593373.351:155): avc: denied { read } for pid=6016 comm="syz.4.13" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.398258][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.408652][ T30] audit: type=1400 audit(1757593373.351:156): avc: denied { open } for pid=6016 comm="syz.4.13" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.432115][ T30] audit: type=1400 audit(1757593373.351:157): avc: denied { ioctl } for pid=6016 comm="syz.4.13" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.456491][ T30] audit: type=1400 audit(1757593373.351:158): avc: denied { write } for pid=6016 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.563304][ T9] usb 1-1: device descriptor read/64, error -71 [ 76.802502][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.971977][ T9] usb 1-1: device descriptor read/64, error -71 [ 77.081991][ T9] usb usb1-port1: attempt power cycle [ 77.465023][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.496164][ T9] usb 1-1: device descriptor read/8, error -71 [ 77.642823][ T5919] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.871926][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.950650][ T9] usb 1-1: device descriptor read/8, error -71 [ 77.981735][ T5919] usb 3-1: device descriptor read/64, error -71 [ 78.084043][ T9] usb usb1-port1: unable to enumerate USB device [ 78.243653][ T5919] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 78.681728][ T5919] usb 3-1: device descriptor read/64, error -71 [ 78.812706][ T5919] usb usb3-port1: attempt power cycle [ 79.484535][ T5919] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 79.543438][ T5919] usb 3-1: device descriptor read/8, error -71 [ 79.811830][ T5906] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.834653][ T5919] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 79.885503][ T5919] usb 3-1: device descriptor read/8, error -71 [ 79.893867][ T5892] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 79.997371][ T5919] usb usb3-port1: unable to enumerate USB device [ 80.073014][ T6082] autofs: Unknown parameter '–Ò' [ 80.074485][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 80.076084][ T5906] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 80.076106][ T5906] usb 4-1: config 0 has no interface number 0 [ 80.076137][ T5906] usb 4-1: config 0 interface 12 has no altsetting 0 [ 80.078422][ T5906] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 80.078446][ T5906] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 80.078465][ T5906] usb 4-1: Product: syz [ 80.078479][ T5906] usb 4-1: Manufacturer: syz [ 80.078492][ T5906] usb 4-1: SerialNumber: syz [ 80.080505][ T5906] usb 4-1: config 0 descriptor?? [ 80.160492][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.160533][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.160570][ T5892] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 80.160589][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.163562][ T5892] usb 5-1: config 0 descriptor?? [ 80.166518][ T5892] qmi_wwan 5-1:0.0: bogus CDC Union: master=0, slave=101 [ 80.166892][ T5892] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 80.386664][ T5919] usb 5-1: USB disconnect, device number 2 [ 80.411476][ T5906] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 80.411522][ T5906] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 80.411538][ T5906] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 80.411601][ T5906] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 80.419688][ T5906] usb 4-1: USB disconnect, device number 2 [ 80.786276][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 80.786295][ T30] audit: type=1400 audit(1757593378.281:189): avc: denied { ioctl } for pid=6096 comm="syz.2.34" path="socket:[8996]" dev="sockfs" ino=8996 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.893324][ T30] audit: type=1400 audit(1757593378.391:190): avc: denied { create } for pid=6096 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 80.939608][ T30] audit: type=1400 audit(1757593378.411:191): avc: denied { ioctl } for pid=6096 comm="syz.2.34" path="socket:[8112]" dev="sockfs" ino=8112 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.221959][ T30] audit: type=1400 audit(1757593378.421:192): avc: denied { search } for pid=6098 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.243971][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.342350][ T30] audit: type=1400 audit(1757593378.421:193): avc: denied { search } for pid=6098 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.528149][ T30] audit: type=1400 audit(1757593378.421:194): avc: denied { search } for pid=6098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1835 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.201759][ T30] audit: type=1400 audit(1757593378.421:195): avc: denied { search } for pid=6098 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.224920][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.308041][ T6125] netlink: 'syz.4.37': attribute type 2 has an invalid length. [ 82.913739][ T30] audit: type=1400 audit(1757593378.431:196): avc: denied { read open } for pid=6101 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.013358][ T30] audit: type=1400 audit(1757593378.461:197): avc: denied { getattr } for pid=6101 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1836 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.041141][ T30] audit: type=1400 audit(1757593378.461:198): avc: denied { getattr } for pid=6101 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1877 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.407036][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 83.642306][ T6136] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 83.661262][ T6136] macvlan2: entered allmulticast mode [ 83.669466][ T6136] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 83.984079][ T6153] netlink: 'syz.4.45': attribute type 14 has an invalid length. [ 84.076459][ T6162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.096832][ T6157] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 84.402936][ T5919] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 85.048720][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.078114][ T5919] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 85.078142][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.083744][ T5919] usb 3-1: config 0 descriptor?? [ 85.261920][ T5929] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 85.401237][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 85.443239][ T6201] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 85.452373][ T6201] macvlan2: entered allmulticast mode [ 85.452569][ T6201] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 85.643028][ T5919] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 85.651734][ T5929] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.691674][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.713717][ T5929] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 85.725453][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.775615][ T5919] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input5 [ 85.796459][ T5929] usb 4-1: Product: syz [ 85.800922][ T5929] usb 4-1: Manufacturer: syz [ 85.894097][ T5929] usb 4-1: SerialNumber: syz [ 86.365678][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 86.365691][ T30] audit: type=1400 audit(1757593383.861:215): avc: denied { read } for pid=5203 comm="acpid" name="event4" dev="devtmpfs" ino=2808 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.422348][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.450542][ T5919] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 86.484360][ T30] audit: type=1400 audit(1757593383.861:216): avc: denied { open } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2808 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.586889][ T5919] usb 3-1: USB disconnect, device number 8 [ 86.588046][ T5929] usb 4-1: cannot find UAC_HEADER [ 86.637385][ T5929] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 86.655313][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 86.664609][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.726742][ T30] audit: type=1400 audit(1757593383.861:217): avc: denied { ioctl } for pid=5203 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2808 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 86.781784][ T6215] fido_id[6215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 86.797785][ T30] audit: type=1400 audit(1757593384.061:218): avc: denied { setopt } for pid=6192 comm="syz.1.54" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.892435][ T9] usb 5-1: Product: syz [ 86.899649][ T5929] usb 4-1: USB disconnect, device number 3 [ 86.907246][ T9] usb 5-1: Manufacturer: syz [ 86.926093][ T9] usb 5-1: SerialNumber: syz [ 86.931935][ T30] audit: type=1400 audit(1757593384.061:219): avc: denied { write } for pid=6192 comm="syz.1.54" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.955913][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.341738][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 87.387451][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 87.491709][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 87.605646][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 87.670686][ T9] usb 5-1: USB disconnect, device number 3 [ 87.785544][ T30] audit: type=1400 audit(1757593385.281:220): avc: denied { create } for pid=6239 comm="syz.1.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 87.867953][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 87.933024][ T30] audit: type=1400 audit(1757593385.431:221): avc: denied { name_bind } for pid=6244 comm="syz.2.66" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 87.961855][ T5899] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.981427][ T30] audit: type=1400 audit(1757593385.461:222): avc: denied { node_bind } for pid=6244 comm="syz.2.66" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 88.146426][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.156487][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.174361][ T5899] usb 1-1: Product: syz [ 88.186995][ T5899] usb 1-1: Manufacturer: syz [ 88.196342][ T5899] usb 1-1: SerialNumber: syz [ 88.612056][ T1207] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.613858][ T30] audit: type=1400 audit(1757593386.111:223): avc: denied { bind } for pid=6265 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.639713][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.654318][ T6268] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.731788][ T30] audit: type=1400 audit(1757593386.151:224): avc: denied { setopt } for pid=6265 comm="syz.2.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 88.803322][ T1207] usb 4-1: Using ep0 maxpacket: 8 [ 88.825905][ T1207] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 88.851144][ T1207] usb 4-1: config 0 has no interface number 0 [ 88.875115][ T1207] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 88.902568][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.902634][ T1207] usb 4-1: Product: syz [ 88.902685][ T1207] usb 4-1: Manufacturer: syz [ 88.902741][ T1207] usb 4-1: SerialNumber: syz [ 88.911570][ T1207] usb 4-1: config 0 descriptor?? [ 89.063872][ T1207] msi2500 4-1:0.246: Registered as swradio24 [ 89.070499][ T1207] msi2500 4-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 89.244699][ T5899] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 89.251271][ T5899] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 89.324150][ T1207] usb 4-1: USB disconnect, device number 4 [ 89.369854][ T6291] syz.1.71 uses obsolete (PF_INET,SOCK_PACKET) [ 90.197670][ T5899] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 90.224573][ T5899] usb 1-1: USB disconnect, device number 7 [ 90.272050][ T5899] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 90.494384][ T1207] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 90.524096][ T1207] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 90.718360][ T6315] netlink: 'syz.3.76': attribute type 5 has an invalid length. [ 90.851314][ T6319] netlink: 'syz.3.76': attribute type 5 has an invalid length. [ 91.387178][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 91.387192][ T30] audit: type=1326 audit(1757593388.881:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda7f52ada9 code=0x7ffc0000 [ 91.447079][ T30] audit: type=1326 audit(1757593388.931:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6296 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda7f58eba9 code=0x7ffc0000 [ 91.721453][ T6348] input: syz1 as /devices/virtual/input/input6 [ 91.732179][ T30] audit: type=1400 audit(1757593389.211:261): avc: denied { ioctl } for pid=6343 comm="syz.0.78" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.806416][ T6348] binder: 6343:6348 unknown command 0 [ 91.816706][ T6348] binder: 6343:6348 ioctl c0306201 200000000080 returned -22 [ 91.840317][ T30] audit: type=1400 audit(1757593389.281:262): avc: denied { ioctl } for pid=6343 comm="syz.0.78" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 91.868589][ T30] audit: type=1400 audit(1757593389.281:263): avc: denied { set_context_mgr } for pid=6343 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 91.891469][ T30] audit: type=1400 audit(1757593389.361:264): avc: denied { map } for pid=6343 comm="syz.0.78" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 92.264082][ T30] audit: type=1400 audit(1757593389.701:265): avc: denied { create } for pid=6353 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 92.293043][ T30] audit: type=1400 audit(1757593389.721:266): avc: denied { read } for pid=6353 comm="syz.0.79" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.315892][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.352605][ T30] audit: type=1400 audit(1757593389.721:267): avc: denied { open } for pid=6353 comm="syz.0.79" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.408186][ T30] audit: type=1400 audit(1757593389.731:268): avc: denied { ioctl } for pid=6353 comm="syz.0.79" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 92.432934][ C1] vkms_vblank_simulate: vblank timer overrun [ 93.178877][ T6363] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 93.534371][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.381792][ T5892] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 94.501748][ T5899] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.568818][ T5892] usb 3-1: config 0 has an invalid descriptor of length 68, skipping remainder of the config [ 94.622176][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 94.642690][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 94.678069][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 94.703564][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 94.715455][ T5892] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 94.729244][ T5892] usb 3-1: Manufacturer: syz [ 94.747769][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.765063][ T5892] usb 3-1: config 0 descriptor?? [ 94.804160][ T5899] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 94.820674][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.937024][ T5899] usb 2-1: config 0 descriptor?? [ 95.161707][ T5892] rc_core: IR keymap rc-hauppauge not found [ 95.188007][ T5892] Registered IR keymap rc-empty [ 95.200932][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.433690][ T6404] pim6reg: entered allmulticast mode [ 95.442404][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.463852][ T5892] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 95.480059][ T5892] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 95.530135][ T6404] pim6reg: left allmulticast mode [ 95.560091][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.582632][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.612071][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.632103][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.662004][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.700826][ T5899] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 95.704365][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.757250][ T5899] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0003/input/input8 [ 95.820128][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.963707][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 95.964095][ T5899] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 95.992561][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 96.041078][ T5892] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 96.084102][ T5892] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 96.164186][ T5892] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 96.219087][ T5899] usb 2-1: USB disconnect, device number 2 [ 96.250838][ T6407] fido_id[6407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 96.272097][ T5892] usb 3-1: USB disconnect, device number 9 [ 96.694281][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 96.694297][ T30] audit: type=1400 audit(1757593394.181:318): avc: denied { connect } for pid=6413 comm="syz.2.95" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.759808][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.057849][ T30] audit: type=1400 audit(1757593394.181:319): avc: denied { create } for pid=6413 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.076980][ C1] vkms_vblank_simulate: vblank timer overrun [ 97.092916][ T6419] !: renamed from dummy0 (while UP) [ 97.143417][ T5919] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 97.162392][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.179563][ T30] audit: type=1400 audit(1757593394.191:320): avc: denied { bind } for pid=6413 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.200661][ T5919] usb 4-1: config 0 descriptor?? [ 97.323487][ T5919] cp210x 4-1:0.0: cp210x converter detected [ 97.363558][ T30] audit: type=1400 audit(1757593394.701:321): avc: denied { connect } for pid=6420 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.561914][ T5899] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.631707][ T5929] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.678621][ T30] audit: type=1400 audit(1757593395.171:322): avc: denied { read write } for pid=6431 comm="syz.0.100" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.711850][ T5899] usb 3-1: device descriptor read/64, error -71 [ 97.712079][ T30] audit: type=1400 audit(1757593395.171:323): avc: denied { open } for pid=6431 comm="syz.0.100" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 97.746998][ T5919] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 97.811332][ T5919] usb 4-1: cp210x converter now attached to ttyUSB0 [ 97.823298][ T6433] 9pnet_fd: Insufficient options for proto=fd [ 97.855474][ T5929] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 97.860662][ T30] audit: type=1400 audit(1757593395.321:324): avc: denied { mounton } for pid=6431 comm="syz.0.100" path="/22/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.866797][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.067937][ T5906] usb 4-1: USB disconnect, device number 5 [ 98.089244][ T30] audit: type=1400 audit(1757593395.331:325): avc: denied { shutdown } for pid=6431 comm="syz.0.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.092610][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.117091][ T5899] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 98.233603][ T5929] usb 2-1: config 0 descriptor?? [ 98.269178][ T5906] cp210x 4-1:0.0: device disconnected [ 98.274690][ T5899] usb 3-1: device descriptor read/64, error -71 [ 98.381978][ T5899] usb usb3-port1: attempt power cycle [ 98.478300][ T5929] kaweth 2-1:0.0: Firmware present in device. [ 98.709025][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.901964][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 98.949138][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.959919][ T30] audit: type=1326 audit(1757593396.361:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 98.998357][ T5899] usb 3-1: device descriptor read/8, error -71 [ 99.048270][ T30] audit: type=1326 audit(1757593396.361:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.3.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 99.196870][ T6430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.208083][ T6430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.241697][ T5899] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 99.264524][ T5899] usb 3-1: device descriptor read/8, error -71 [ 99.312180][ T5929] kaweth 2-1:0.0: Statistics collection: 0 [ 99.331343][ T5929] kaweth 2-1:0.0: Multicast filter limit: 0 [ 99.357436][ T5929] kaweth 2-1:0.0: MTU: 0 [ 99.389945][ T5929] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 99.398140][ T5899] usb usb3-port1: unable to enumerate USB device [ 100.073515][ T5929] kaweth 2-1:0.0: Error setting receive filter [ 100.083312][ T5929] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 100.097583][ T5929] usb 2-1: USB disconnect, device number 3 [ 100.766648][ T6458] autofs: Unknown parameter '–Ò' [ 101.146864][ T6467] loop2: detected capacity change from 0 to 7 [ 101.156176][ T6467] Dev loop2: unable to read RDB block 7 [ 101.163008][ T6467] loop2: unable to read partition table [ 101.168799][ T6467] loop2: partition table beyond EOD, truncated [ 101.178990][ T6467] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 101.241711][ T1207] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 101.403298][ T1207] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.420853][ T1207] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.460982][ T1207] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.470403][ T1207] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.738231][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 101.738248][ T30] audit: type=1400 audit(1757593399.211:336): avc: denied { setopt } for pid=6471 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 101.771714][ T1207] usb 2-1: Manufacturer: syz [ 101.777965][ T1207] usb 2-1: config 0 descriptor?? [ 101.891726][ T1207] rc_core: IR keymap rc-hauppauge not found [ 101.898365][ T1207] Registered IR keymap rc-empty [ 101.935555][ T1207] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 101.960894][ T1207] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 102.008870][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 102.464259][ T1207] usb 2-1: USB disconnect, device number 4 [ 102.739618][ T30] audit: type=1400 audit(1757593400.231:337): avc: denied { watch } for pid=6486 comm="syz.2.115" path="/22" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 103.171930][ T30] audit: type=1400 audit(1757593400.551:338): avc: denied { ioctl } for pid=6486 comm="syz.2.115" path="socket:[9785]" dev="sockfs" ino=9785 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.561771][ T1207] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.615655][ T6496] autofs: Unknown parameter '–Ò' [ 103.752033][ T1207] usb 4-1: device descriptor read/64, error -71 [ 104.263007][ T1207] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 104.483740][ T1207] usb 4-1: device descriptor read/64, error -71 [ 104.612034][ T1207] usb usb4-port1: attempt power cycle [ 104.675424][ T30] audit: type=1400 audit(1757593402.171:339): avc: denied { append } for pid=6507 comm="syz.0.119" name="sg0" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.348023][ T6514] loop9: detected capacity change from 0 to 7 [ 105.354474][ T6514] buffer_io_error: 25 callbacks suppressed [ 105.354482][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.368240][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.376100][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.383938][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.391786][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.399630][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.407497][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.415365][ T6514] ldm_validate_partition_table(): Disk read failed. [ 105.421964][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.430028][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.437891][ T6514] Buffer I/O error on dev loop9, logical block 0, async page read [ 105.445902][ T6514] Dev loop9: unable to read RDB block 0 [ 105.451758][ T6514] loop9: unable to read partition table [ 105.457452][ T6514] loop9: partition table beyond EOD, truncated [ 105.463613][ T6514] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 105.463613][ T6514] ) failed (rc=-5) [ 105.477519][ T1207] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 105.549035][ T5965] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 105.594524][ T1207] usb 4-1: device descriptor read/8, error -71 [ 106.293602][ T5965] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 106.311797][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.329616][ T5965] usb 1-1: config 0 descriptor?? [ 106.347954][ T5965] ums-realtek 1-1:0.0: USB Mass Storage device detected [ 106.355066][ T1207] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 106.665581][ T1207] usb 4-1: device not accepting address 9, error -71 [ 106.735286][ T5965] usb 1-1: USB disconnect, device number 8 [ 106.744254][ T30] audit: type=1326 audit(1757593404.241:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 106.775364][ T1207] usb usb4-port1: unable to enumerate USB device [ 106.821821][ T30] audit: type=1326 audit(1757593404.241:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 106.847640][ T30] audit: type=1326 audit(1757593404.241:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 106.923302][ T30] audit: type=1326 audit(1757593404.241:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 106.962457][ T30] audit: type=1326 audit(1757593404.261:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6524 comm="syz.3.125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 107.230267][ T30] audit: type=1400 audit(1757593404.681:345): avc: denied { setopt } for pid=6538 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 107.281792][ T30] audit: type=1400 audit(1757593404.681:346): avc: denied { connect } for pid=6538 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.465767][ T30] audit: type=1400 audit(1757593404.681:347): avc: denied { write } for pid=6538 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.484955][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.457027][ T30] audit: type=1400 audit(1757593405.951:348): avc: denied { bind } for pid=6555 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 108.561911][ T5169] Bluetooth: hci5: command 0x1003 tx timeout [ 108.568601][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 109.077194][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.131'. [ 109.621748][ T5919] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 109.632170][ T30] audit: type=1400 audit(1757593407.111:349): avc: denied { append } for pid=6578 comm="syz.1.137" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.654779][ C1] vkms_vblank_simulate: vblank timer overrun [ 109.910703][ T5919] usb 3-1: device descriptor read/64, error -71 [ 110.153524][ T6586] netlink: 'syz.3.138': attribute type 9 has an invalid length. [ 110.204360][ T5919] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 110.336399][ T6590] mkiss: ax0: crc mode is auto. [ 110.394541][ T5919] usb 3-1: device descriptor read/64, error -71 [ 110.676180][ T5919] usb usb3-port1: attempt power cycle [ 111.091764][ T5919] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 111.251911][ T5919] usb 3-1: device descriptor read/8, error -71 [ 111.595022][ T5919] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 111.955769][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 111.955800][ T30] audit: type=1400 audit(1757593409.061:351): avc: denied { write } for pid=6607 comm="syz.0.145" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 112.029582][ T30] audit: type=1400 audit(1757593409.521:352): avc: denied { create } for pid=6616 comm="syz.2.148" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.093132][ T30] audit: type=1400 audit(1757593409.521:353): avc: denied { bind } for pid=6616 comm="syz.2.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 112.146118][ T30] audit: type=1400 audit(1757593409.581:354): avc: denied { append } for pid=6619 comm="syz.1.149" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 112.260995][ T5919] usb 3-1: device not accepting address 17, error -71 [ 112.270201][ T30] audit: type=1400 audit(1757593409.611:355): avc: denied { unlink } for pid=5843 comm="syz-executor" name="file0" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.272878][ T5919] usb usb3-port1: unable to enumerate USB device [ 112.307133][ T30] audit: type=1400 audit(1757593409.621:356): avc: denied { ioctl } for pid=6621 comm="syz-executor" path="socket:[11163]" dev="sockfs" ino=11163 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.324372][ T5169] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 112.340431][ T6623] process 'syz.1.149' launched './file0' with NULL argv: empty string added [ 112.349206][ T30] audit: type=1400 audit(1757593409.831:357): avc: denied { execute } for pid=6619 comm="syz.1.149" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.356205][ T6627] loop2: detected capacity change from 0 to 7 [ 112.377375][ T30] audit: type=1400 audit(1757593409.871:358): avc: denied { execute_no_trans } for pid=6619 comm="syz.1.149" path="/25/file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.411828][ T5169] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 112.423396][ T30] audit: type=1400 audit(1757593409.891:359): avc: denied { remount } for pid=6619 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 112.443828][ T5852] Dev loop2: unable to read RDB block 7 [ 112.449937][ T5169] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 112.457535][ T5852] loop2: unable to read partition table [ 112.463414][ T5852] loop2: partition table beyond EOD, truncated [ 112.479818][ T5169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 112.508949][ T5169] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 112.511410][ T6627] Dev loop2: unable to read RDB block 7 [ 112.667937][ T6627] loop2: unable to read partition table [ 112.696230][ T30] audit: type=1400 audit(1757593410.151:360): avc: denied { mounton } for pid=6621 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 112.718257][ T6627] loop2: partition table beyond EOD, truncated [ 112.725756][ T6627] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 113.289794][ T6621] chnl_net:caif_netlink_parms(): no params data found [ 113.321996][ T1207] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 113.551705][ T1207] usb 1-1: device descriptor read/64, error -71 [ 113.717477][ T6621] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.734875][ T6621] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.745100][ T6621] bridge_slave_0: entered allmulticast mode [ 113.757125][ T6621] bridge_slave_0: entered promiscuous mode [ 113.775288][ T6621] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.788331][ T6621] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.801812][ T1207] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 113.832491][ T6621] bridge_slave_1: entered allmulticast mode [ 113.858754][ T6648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 113.943021][ T6621] bridge_slave_1: entered promiscuous mode [ 114.071862][ T1207] usb 1-1: device descriptor read/64, error -71 [ 114.090650][ T6621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.131582][ T6621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.211964][ T1207] usb usb1-port1: attempt power cycle [ 114.260787][ T6621] team0: Port device team_slave_0 added [ 114.275911][ T6621] team0: Port device team_slave_1 added [ 114.317883][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.325410][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.378272][ T6621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.395032][ T6621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.402488][ T6621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.432337][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.439916][ T6621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.492835][ T5919] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 114.505637][ T6621] hsr_slave_0: entered promiscuous mode [ 114.511850][ T6621] hsr_slave_1: entered promiscuous mode [ 114.517704][ T6621] debugfs: 'hsr0' already exists in 'hsr' [ 114.523885][ T6621] Cannot create hsr debugfs directory [ 114.731694][ T5860] Bluetooth: hci5: command tx timeout [ 114.991608][ T1207] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.023652][ T1207] usb 1-1: device descriptor read/8, error -71 [ 115.030675][ T5892] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.044262][ T5892] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 62976, setting to 1024 [ 115.055828][ T5892] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 115.065948][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 115.067305][ T6621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.076953][ T5892] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.087015][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 115.087226][ T5919] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 115.089989][ T6621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.095526][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.119309][ T5892] usb 2-1: Product: syz [ 115.128340][ T5892] usb 2-1: Manufacturer: syz [ 115.134206][ T5892] usb 2-1: SerialNumber: syz [ 115.142222][ T6621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.144261][ T5892] cdc_mbim 2-1:1.0: skipping garbage [ 115.154997][ T5919] usb 3-1: Product: syz [ 115.159312][ T5919] usb 3-1: Manufacturer: syz [ 115.164007][ T5919] usb 3-1: SerialNumber: syz [ 115.164810][ T6621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.177396][ T5919] usb 3-1: config 0 descriptor?? [ 115.185727][ T5919] gspca_main: sq905-2.14.0 probing 2770:9120 [ 115.270920][ T6621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.304281][ T6621] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.320842][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.327983][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.342401][ T1207] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 115.362372][ T6652] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.363182][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.376592][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.390152][ T1207] usb 1-1: device descriptor read/8, error -71 [ 115.514659][ T1207] usb usb1-port1: unable to enumerate USB device [ 115.768061][ T6621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.830645][ T6678] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.293866][ T5919] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 116.301568][ T5919] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 116.345116][ T6007] Bluetooth: hci6: Frame reassembly failed (-84) [ 116.369525][ T6654] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 116.502343][ T6652] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.801904][ T5169] Bluetooth: hci5: command tx timeout [ 116.857359][ T5892] cdc_mbim 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 116.864043][ T5892] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 116.871613][ T5892] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 116.998969][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 116.998985][ T30] audit: type=1400 audit(1757593414.491:365): avc: denied { mount } for pid=6691 comm="syz.0.164" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 117.070216][ T5892] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 117.089787][ T5892] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 117.101134][ T5892] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 117.111105][ T5892] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 117.127867][ T5892] usb 2-1: USB disconnect, device number 5 [ 117.208637][ T6621] veth0_vlan: entered promiscuous mode [ 117.235108][ T6621] veth1_vlan: entered promiscuous mode [ 117.262783][ T5899] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 117.279845][ T6621] veth0_macvtap: entered promiscuous mode [ 117.289225][ T6621] veth1_macvtap: entered promiscuous mode [ 117.304419][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.317295][ T6621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.329194][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.338268][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.347414][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.359749][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.413479][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.429798][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.439988][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.446943][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.456437][ T5899] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.470339][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.477389][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.487891][ T5899] usb 1-1: config 0 descriptor?? [ 117.511779][ T1207] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 117.527644][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.536361][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.550228][ T30] audit: type=1400 audit(1757593415.041:366): avc: denied { mounton } for pid=6621 comm="syz-executor" path="/root/syzkaller.vbFRwG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 117.581415][ T30] audit: type=1400 audit(1757593415.081:367): avc: denied { mount } for pid=6621 comm="syz-executor" name="/" dev="gadgetfs" ino=8303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 117.603773][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.640334][ T30] audit: type=1400 audit(1757593415.131:368): avc: denied { watch_reads } for pid=6699 comm="syz.5.144" path="/0" dev="tmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 117.694536][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 117.705414][ T1207] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 117.718289][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.727407][ T1207] usb 4-1: Product: syz [ 117.732439][ T1207] usb 4-1: Manufacturer: syz [ 117.737163][ T1207] usb 4-1: SerialNumber: syz [ 117.749936][ T1207] usb 4-1: config 0 descriptor?? [ 117.757657][ T1207] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 117.923587][ T5899] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.023843][ T6717] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13) [ 118.030586][ T6717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 118.064353][ T6720] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(16) [ 118.070978][ T6720] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 118.079405][ T6717] vhci_hcd vhci_hcd.0: Device attached [ 118.087131][ T6720] vhci_hcd vhci_hcd.0: Device attached [ 118.179644][ T6717] virtio-fs: tag not found [ 118.187509][ T5929] usb 1-1: USB disconnect, device number 13 [ 118.242083][ T5899] vhci_hcd: vhci_device speed not set [ 118.259389][ T6721] vhci_hcd: connection closed [ 118.260392][ T6718] vhci_hcd: connection closed [ 118.260982][ T49] vhci_hcd: stop threads [ 118.274986][ T49] vhci_hcd: release socket [ 118.280112][ T49] vhci_hcd: disconnect device [ 118.285043][ T49] vhci_hcd: stop threads [ 118.289348][ T49] vhci_hcd: release socket [ 118.295916][ T49] vhci_hcd: disconnect device [ 118.311894][ T5899] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 118.319442][ T5899] usb 43-1: enqueue for inactive port 0 [ 118.392062][ T5899] vhci_hcd: vhci_device speed not set [ 118.402035][ T5860] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 118.402273][ T5169] Bluetooth: hci6: command 0x1003 tx timeout [ 118.426732][ T10] usb 3-1: USB disconnect, device number 18 [ 118.686029][ T1207] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 118.761807][ T5892] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.864120][ T30] audit: type=1400 audit(1757593416.341:369): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.883917][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.884341][ T5860] Bluetooth: hci5: command tx timeout [ 119.008056][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 119.028607][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 119.596319][ T30] audit: type=1400 audit(2000000000.000:370): avc: denied { create } for pid=6739 comm="syz.5.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 119.618107][ T5892] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 119.626301][ T5892] usb 2-1: config 1 has an invalid interface descriptor of length 6, skipping [ 119.638119][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.648389][ T30] audit: type=1400 audit(2000000000.000:371): avc: denied { getopt } for pid=6739 comm="syz.5.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.669818][ T5892] usb 2-1: config 1 has no interface number 1 [ 119.676158][ T5892] usb 2-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 119.689531][ T5892] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.705793][ T5892] usb 2-1: config 1 interface 4 has no altsetting 0 [ 119.746953][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.920771][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 119.961681][ T6757] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 119.969253][ T6757] macvlan2: entered allmulticast mode [ 119.974741][ T6757] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 120.178012][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.260154][ T5892] usb 2-1: Product: syz [ 120.314639][ T5892] usb 2-1: Manufacturer: syz [ 120.326724][ T5892] usb 2-1: SerialNumber: syz [ 120.390544][ T6768] NILFS (loop2): device size too small [ 120.731829][ T5929] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 120.827928][ T6771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.847089][ T30] audit: type=1400 audit(2000000001.600:372): avc: denied { accept } for pid=6770 comm="syz.0.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 120.848555][ T6771] team0: Port device batadv1 added [ 120.888565][ T30] audit: type=1400 audit(2000000001.600:373): avc: denied { block_suspend } for pid=6770 comm="syz.0.184" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 120.929234][ T30] audit: type=1400 audit(2000000001.630:374): avc: denied { read } for pid=6767 comm="syz.2.183" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 121.041247][ T5860] Bluetooth: hci5: command tx timeout [ 121.110296][ T5929] usb 6-1: device descriptor read/64, error -71 [ 121.343501][ T10] usb 4-1: USB disconnect, device number 10 [ 121.363672][ T5929] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.933254][ T5929] usb 6-1: device descriptor read/64, error -71 [ 122.910698][ T5929] usb usb6-port1: attempt power cycle [ 123.691027][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 123.691056][ T30] audit: type=1400 audit(2000000004.420:378): avc: denied { mount } for pid=6782 comm="syz.3.188" name="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 124.171810][ T30] audit: type=1400 audit(2000000004.430:379): avc: denied { search } for pid=6782 comm="syz.3.188" name="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.195329][ T30] audit: type=1400 audit(2000000004.430:380): avc: denied { search } for pid=6782 comm="syz.3.188" name="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.224183][ T30] audit: type=1400 audit(2000000004.430:381): avc: denied { read open } for pid=6782 comm="syz.3.188" path="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.246451][ C1] vkms_vblank_simulate: vblank timer overrun [ 124.278103][ T6794] block nbd2: Attempted send on invalid socket [ 124.288816][ T6794] blk_print_req_error: 25 callbacks suppressed [ 124.288855][ T6794] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.305176][ T30] audit: type=1400 audit(2000000004.430:382): avc: denied { setattr } for pid=6782 comm="syz.3.188" name="/" dev="configfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.324281][ T6794] block nbd2: Attempted send on invalid socket [ 124.333729][ T6790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.386572][ T30] audit: type=1400 audit(2000000004.980:383): avc: denied { setopt } for pid=6788 comm="syz.5.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.417562][ T6794] I/O error, dev nbd2, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 124.431250][ T6794] Mount JFS Failure: -5 [ 124.449201][ T5892] usb 2-1: 2:1 : invalid UAC_AS_GENERAL desc [ 124.469375][ T30] audit: type=1400 audit(2000000005.210:384): avc: denied { bind } for pid=6792 comm="syz.2.192" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.555519][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 124.585962][ T30] audit: type=1400 audit(2000000005.220:385): avc: denied { name_bind } for pid=6792 comm="syz.2.192" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 124.846428][ T6800] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 124.856797][ T6800] macvlan3: entered allmulticast mode [ 124.871543][ T5892] usb 2-1: USB disconnect, device number 6 [ 124.889859][ T6800] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 124.889906][ T30] audit: type=1400 audit(2000000005.220:386): avc: denied { node_bind } for pid=6792 comm="syz.2.192" saddr=172.30.1.3 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 125.220425][ T30] audit: type=1400 audit(2000000005.730:387): avc: denied { create } for pid=6792 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 125.433110][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.771179][ T5169] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.231887][ T5892] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 126.281316][ T5169] Bluetooth: hci5: command 0x0405 tx timeout [ 126.731754][ T5892] usb 1-1: Using ep0 maxpacket: 16 [ 126.749731][ T5892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 126.781211][ T5892] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 126.808772][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.819704][ T5892] usb 1-1: Product: syz [ 126.824462][ T5892] usb 1-1: Manufacturer: syz [ 126.829130][ T5892] usb 1-1: SerialNumber: syz [ 126.897920][ T5892] usb 1-1: config 0 descriptor?? [ 127.281225][ T5892] hub 1-1:0.0: bad descriptor, ignoring hub [ 127.298137][ T5892] hub 1-1:0.0: probe with driver hub failed with error -5 [ 127.450709][ T5892] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 127.628770][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.637608][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.109023][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 128.166630][ T6855] macvlan4: entered allmulticast mode [ 128.691696][ T5892] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 128.782366][ T6869] warning: `syz.2.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.841699][ T5892] usb 4-1: device descriptor read/64, error -71 [ 128.951989][ T10] usb 1-1: USB disconnect, device number 14 [ 129.109442][ T5892] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 129.311800][ T5892] usb 4-1: device descriptor read/64, error -71 [ 129.493878][ T5892] usb usb4-port1: attempt power cycle [ 129.842984][ T5892] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 129.874714][ T5892] usb 4-1: device descriptor read/8, error -71 [ 129.933717][ T6894] mmap: syz.1.217 (6894) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.997794][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 130.181883][ T5892] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 130.252775][ T5892] usb 4-1: device descriptor read/8, error -71 [ 130.372428][ T5892] usb usb4-port1: unable to enumerate USB device [ 130.533137][ T6884] infiniband syz!: set active [ 130.561741][ T6884] infiniband syz!: added team_slave_0 [ 130.568424][ T6884] syz!: rxe_create_cq: returned err = -12 [ 130.575809][ T6884] infiniband syz!: Couldn't create ib_mad CQ [ 130.582377][ T6884] infiniband syz!: Couldn't open port 1 [ 130.662625][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 130.662639][ T30] audit: type=1400 audit(2000000011.420:393): avc: denied { setopt } for pid=6899 comm="syz.5.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.683124][ T6884] RDS/IB: syz!: added [ 130.732785][ T6884] smc: adding ib device syz! with port count 1 [ 130.750562][ T6884] smc: ib device syz! port 1 has pnetid [ 130.857538][ T30] audit: type=1400 audit(2000000011.610:394): avc: denied { write } for pid=6904 comm="syz.5.220" path="socket:[12150]" dev="sockfs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.904125][ T30] audit: type=1400 audit(2000000011.610:395): avc: denied { read } for pid=6904 comm="syz.5.220" path="socket:[12150]" dev="sockfs" ino=12150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.933212][ T6912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.075626][ T30] audit: type=1400 audit(2000000011.830:396): avc: denied { map } for pid=6913 comm="syz.2.222" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 131.231782][ T6006] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.426786][ T30] audit: type=1400 audit(2000000011.830:397): avc: denied { write execute } for pid=6913 comm="syz.2.222" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 131.432225][ T5899] IPVS: starting estimator thread 0... [ 131.554502][ T6006] usb 2-1: Using ep0 maxpacket: 16 [ 131.612688][ T6916] IPVS: using max 78 ests per chain, 187200 per kthread [ 131.754766][ T6923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6923 comm=syz.5.225 [ 131.771506][ T30] audit: type=1400 audit(2000000011.930:398): avc: denied { create } for pid=6913 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 131.791394][ T30] audit: type=1400 audit(2000000012.390:399): avc: denied { write } for pid=6920 comm="syz.5.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.818337][ T6006] usb 2-1: config 0 has an invalid interface number: 53 but max is 0 [ 131.827576][ T6923] geneve2: entered promiscuous mode [ 131.829314][ T6006] usb 2-1: config 0 has no interface number 0 [ 131.839690][ T6923] geneve2: entered allmulticast mode [ 131.851191][ T30] audit: type=1400 audit(2000000012.510:400): avc: denied { ioctl } for pid=6922 comm="syz.5.225" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 131.919496][ T30] audit: type=1400 audit(2000000012.510:401): avc: denied { ioctl } for pid=6922 comm="syz.5.225" path="socket:[12194]" dev="sockfs" ino=12194 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.960191][ T6006] usb 2-1: config 0 has an invalid interface number: 53 but max is 0 [ 131.972772][ T6006] usb 2-1: config 0 has no interface number 0 [ 132.082463][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 132.104192][ T6006] usb 2-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=ed.e2 [ 132.272793][ T10] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 132.283075][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.291246][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.321492][ T10] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 132.337386][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.343722][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.343873][ T10] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 132.358058][ T5899] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 132.368431][ T6006] usb 2-1: Product: syz [ 132.372834][ T6006] usb 2-1: Manufacturer: syz [ 132.377419][ T6006] usb 2-1: SerialNumber: syz [ 132.389940][ T6006] usb 2-1: config 0 descriptor?? [ 132.428463][ T10] usb 4-1: Manufacturer: syz [ 132.509541][ T10] usb 4-1: config 0 descriptor?? [ 132.533344][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.589190][ T5899] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 132.643687][ T10] rc_core: IR keymap rc-hauppauge not found [ 132.649600][ T10] Registered IR keymap rc-empty [ 132.651684][ T30] audit: type=1400 audit(2000000013.380:402): avc: denied { accept } for pid=6905 comm="syz.1.221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 132.656124][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 132.687331][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 132.704476][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.722891][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.739708][ T5899] usb 3-1: Product: syz [ 132.744252][ T5899] usb 3-1: Manufacturer: syz [ 132.748949][ T5899] usb 3-1: SerialNumber: syz [ 132.972518][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 132.973039][ T6006] usb 4-1: USB disconnect, device number 15 [ 132.978702][ C0] igorplugusb 4-1:0.0: submit urb failed: -19 [ 132.996853][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.019363][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.045645][ T5899] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 133.105030][ T5899] usb 3-1: USB disconnect, device number 19 [ 133.141728][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 133.325944][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 133.347954][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.377157][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.399446][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 133.435963][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 133.453261][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 133.471711][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.480289][ T10] usb 6-1: Manufacturer: syz [ 133.487297][ T10] usb 6-1: config 0 descriptor?? [ 133.678442][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 133.693403][ T5899] usb 3-1: Using ep0 maxpacket: 8 [ 133.713559][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 134.842487][ T5899] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 134.850757][ T5899] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 134.868177][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.879523][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 134.893498][ T5899] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 134.904148][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.923485][ T5899] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.934099][ T5899] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 134.946765][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.064842][ T5906] usb 2-1: USB disconnect, device number 7 [ 135.107653][ T10] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 135.128040][ T5899] usb 3-1: usb_control_msg returned -71 [ 135.422179][ T5899] usbtmc 3-1:16.0: can't read capabilities [ 135.622367][ T5906] IPVS: starting estimator thread 0... [ 135.803648][ T5899] usbtmc 3-1:16.0: Failed to submit iin_urb [ 135.833885][ T5899] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -90 [ 135.848844][ T10] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 135.924188][ T6958] IPVS: using max 37 ests per chain, 88800 per kthread [ 135.999109][ T5899] usb 3-1: USB disconnect, device number 20 [ 136.344073][ T30] audit: type=1400 audit(2000000016.960:403): avc: denied { lock } for pid=6935 comm="syz.5.230" path="socket:[12812]" dev="sockfs" ino=12812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 137.059088][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.075231][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.088448][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.101665][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.114761][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.128439][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.141516][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.154423][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.167547][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.180569][ T6971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6971 comm=syz.0.237 [ 137.464975][ T30] audit: type=1400 audit(2000000018.210:404): avc: denied { write } for pid=6977 comm="syz.3.239" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 137.487909][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.522148][ T5899] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 138.019296][ T30] audit: type=1400 audit(2000000018.750:405): avc: denied { read write } for pid=6991 comm="syz.2.243" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.166178][ T30] audit: type=1400 audit(2000000018.750:406): avc: denied { open } for pid=6991 comm="syz.2.243" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.181686][ T5899] usb 6-1: device descriptor read/64, error -71 [ 138.267938][ T30] audit: type=1400 audit(2000000018.750:407): avc: denied { ioctl } for pid=6991 comm="syz.2.243" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 138.340450][ T30] audit: type=1400 audit(2000000018.750:408): avc: denied { create } for pid=6991 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 138.476074][ T5899] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 138.959447][ T5892] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.965502][ T5899] usb 6-1: device firmware changed [ 138.985974][ T5929] usb 6-1: USB disconnect, device number 5 [ 139.714905][ T5929] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.737084][ T5892] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 139.751955][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 139.795653][ T7017] macvlan5: entered allmulticast mode [ 140.101794][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.129869][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.140920][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.152248][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.170265][ T7020] program syz.2.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.172897][ T5929] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 140.306454][ T30] audit: type=1326 audit(2000000020.930:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd10f8eba9 code=0x7ffc0000 [ 140.490668][ T5906] IPVS: starting estimator thread 0... [ 140.517832][ T5929] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.527772][ T5892] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.538694][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 140.552688][ T5929] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 140.568627][ T5929] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 140.579065][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 140.594067][ T5929] usb 6-1: Manufacturer: syz [ 140.594794][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.599138][ T30] audit: type=1326 audit(2000000020.930:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd10f8eba9 code=0x7ffc0000 [ 140.630165][ T7022] IPVS: using max 78 ests per chain, 187200 per kthread [ 140.646335][ T5929] usb 6-1: config 0 descriptor?? [ 140.718128][ T30] audit: type=1326 audit(2000000020.930:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd10f8eba9 code=0x7ffc0000 [ 140.721922][ T5892] usb 2-1: config 0 descriptor?? [ 140.799245][ T30] audit: type=1326 audit(2000000020.930:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7019 comm="syz.2.252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcd10f8eba9 code=0x7ffc0000 [ 140.954753][ T7005] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.192974][ T5929] rc_core: IR keymap rc-hauppauge not found [ 141.201932][ T5929] Registered IR keymap rc-empty [ 141.218338][ T5929] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 141.367201][ T5929] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 141.373549][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 141.373563][ T30] audit: type=1400 audit(2000000022.130:424): avc: denied { bind } for pid=7032 comm="syz.5.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 141.373757][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.5.256'. [ 141.375735][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.375956][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.405676][ T5929] usb 6-1: USB disconnect, device number 6 [ 141.941050][ T5892] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.948551][ T5892] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.956095][ T5892] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.963528][ T5892] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.970917][ T5892] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 141.993624][ T5892] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 142.008189][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 142.303928][ T5892] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 142.910635][ T7058] input: syz1 as /devices/virtual/input/input14 [ 143.017935][ T7058] binder: 7050:7058 unknown command 0 [ 143.023505][ T7058] binder: 7050:7058 ioctl c0306201 200000000080 returned -22 [ 143.070606][ T5899] usb 2-1: USB disconnect, device number 8 [ 143.450481][ T30] audit: type=1400 audit(2000000024.180:425): avc: denied { setopt } for pid=7060 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 143.757819][ T30] audit: type=1400 audit(2000000024.190:426): avc: denied { connect } for pid=7060 comm="syz.5.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 144.211741][ T1207] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 144.372135][ T1207] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.384481][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.431431][ T1207] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.440896][ T1207] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.459577][ T1207] usb 4-1: Manufacturer: syz [ 144.482394][ T6006] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 144.568604][ T1207] usb 4-1: config 0 descriptor?? [ 144.701760][ T6006] usb 6-1: device descriptor read/64, error -71 [ 144.881131][ T7090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 144.890593][ T1207] rc_core: IR keymap rc-hauppauge not found [ 144.918790][ T7091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.926695][ T7091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.946523][ T7091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.954440][ T1207] Registered IR keymap rc-empty [ 144.960716][ T7091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.986485][ T1207] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 144.996700][ T6006] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 145.021521][ T1207] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 145.152043][ T6006] usb 6-1: device descriptor read/64, error -71 [ 145.284521][ T6006] usb usb6-port1: attempt power cycle [ 145.413873][ T5899] usb 4-1: USB disconnect, device number 16 [ 145.741793][ T6006] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 145.773371][ T6006] usb 6-1: device descriptor read/8, error -71 [ 146.011762][ T6006] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 146.117541][ T6006] usb 6-1: device descriptor read/8, error -71 [ 146.453551][ T6006] usb usb6-port1: unable to enumerate USB device [ 147.294114][ T30] audit: type=1326 audit(2000000027.930:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.383614][ T30] audit: type=1326 audit(2000000027.930:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.407417][ T30] audit: type=1326 audit(2000000027.930:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.526522][ T5929] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 147.548276][ T30] audit: type=1326 audit(2000000027.940:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.586408][ T5929] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.618144][ T30] audit: type=1326 audit(2000000027.940:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.688724][ T30] audit: type=1326 audit(2000000027.940:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.750582][ T30] audit: type=1326 audit(2000000027.940:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.892755][ T30] audit: type=1326 audit(2000000027.940:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 147.918533][ T30] audit: type=1326 audit(2000000027.940:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 148.105489][ T30] audit: type=1326 audit(2000000027.940:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7107 comm="syz.3.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f19a238eba9 code=0x7ffc0000 [ 148.672428][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 148.948619][ T7133] autofs: Unknown parameter '–Ò' [ 148.971469][ T7131] macvlan6: entered allmulticast mode [ 150.256624][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 150.315505][ T7147] bridge_slave_1: left allmulticast mode [ 150.342448][ T7147] bridge_slave_1: left promiscuous mode [ 150.364291][ T7147] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.407037][ T7147] bridge_slave_0: left allmulticast mode [ 150.414664][ T7147] bridge_slave_0: left promiscuous mode [ 150.420626][ T7147] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.450592][ T7156] input: syz1 as /devices/virtual/input/input16 [ 150.466307][ T7156] binder: 7155:7156 unknown command 0 [ 150.472561][ T7156] binder: 7155:7156 ioctl c0306201 200000000080 returned -22 [ 150.770659][ T7164] netlink: 68 bytes leftover after parsing attributes in process `syz.5.290'. [ 150.820889][ T7164] fuse: Unknown parameter 'fd01777777777777777777777' [ 151.912020][ T7193] autofs: Unknown parameter '–Ò' [ 152.351056][ T5169] Bluetooth: hci3: command tx timeout [ 152.481921][ T6006] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 152.568156][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'. [ 152.632645][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'. [ 152.652620][ T7202] netlink: 'syz.3.298': attribute type 11 has an invalid length. [ 152.653210][ T6006] usb 1-1: Using ep0 maxpacket: 16 [ 152.667343][ T7202] netlink: 'syz.3.298': attribute type 13 has an invalid length. [ 152.675868][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 152.675875][ T30] audit: type=1326 audit(2000000033.430:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 152.711138][ T6006] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 152.749460][ T6006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.766051][ T6006] usb 1-1: Product: syz [ 152.776151][ T6006] usb 1-1: Manufacturer: syz [ 152.786593][ T6006] usb 1-1: SerialNumber: syz [ 152.800195][ T6006] usb 1-1: config 0 descriptor?? [ 152.966908][ T6006] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 152.977333][ T6006] usb 1-1: Detected FT-X [ 153.050535][ T30] audit: type=1326 audit(2000000033.430:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 153.126526][ T30] audit: type=1326 audit(2000000033.470:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 153.149762][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.258589][ T1207] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 153.271920][ T30] audit: type=1326 audit(2000000033.470:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 153.782858][ T6006] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 153.788615][ T30] audit: type=1326 audit(2000000033.470:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 153.842426][ T30] audit: type=1326 audit(2000000033.480:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb0a5f90a3c code=0x7ffc0000 [ 153.902078][ T30] audit: type=1326 audit(2000000033.480:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb0a5f90974 code=0x7ffc0000 [ 153.952045][ T1207] usb 4-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 153.961118][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.014188][ T1207] usb 4-1: config 0 descriptor?? [ 154.019620][ T30] audit: type=1326 audit(2000000033.480:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb0a5f90974 code=0x7ffc0000 [ 154.058472][ T1207] usb 4-1: selecting invalid altsetting 1 [ 154.071841][ T6006] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 154.087183][ T1207] flexcop_usb: set interface failed. [ 154.091475][ T30] audit: type=1326 audit(2000000033.480:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 154.102809][ T6006] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 154.115739][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.144245][ T1207] b2c2_flexcop_usb 4-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 154.218225][ T7227] FAULT_INJECTION: forcing a failure. [ 154.218225][ T7227] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 154.231804][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.1.305 Not tainted syzkaller #0 PREEMPT(full) [ 154.231827][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.231836][ T7227] Call Trace: [ 154.231841][ T7227] [ 154.231845][ T7227] dump_stack_lvl+0x16c/0x1f0 [ 154.231863][ T7227] should_fail_ex+0x512/0x640 [ 154.231880][ T7227] _copy_from_iter+0x29f/0x1720 [ 154.231896][ T7227] ? __alloc_skb+0x200/0x380 [ 154.231909][ T7227] ? __pfx__copy_from_iter+0x10/0x10 [ 154.231925][ T7227] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 154.231943][ T7227] netlink_sendmsg+0x829/0xdd0 [ 154.231959][ T7227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.231978][ T7227] ____sys_sendmsg+0xa98/0xc70 [ 154.231994][ T7227] ? copy_msghdr_from_user+0x10a/0x160 [ 154.232007][ T7227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.232029][ T7227] ___sys_sendmsg+0x134/0x1d0 [ 154.232043][ T7227] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.232071][ T7227] __sys_sendmsg+0x16d/0x220 [ 154.232084][ T7227] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.232106][ T7227] do_syscall_64+0xcd/0x4c0 [ 154.232121][ T7227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.232132][ T7227] RIP: 0033:0x7f34c998eba9 [ 154.232140][ T7227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.232151][ T7227] RSP: 002b:00007f34ca82c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.232161][ T7227] RAX: ffffffffffffffda RBX: 00007f34c9bd6090 RCX: 00007f34c998eba9 [ 154.232167][ T7227] RDX: 000000002400c000 RSI: 0000200000000040 RDI: 0000000000000005 [ 154.232173][ T7227] RBP: 00007f34ca82c090 R08: 0000000000000000 R09: 0000000000000000 [ 154.232179][ T7227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.232185][ T7227] R13: 00007f34c9bd6128 R14: 00007f34c9bd6090 R15: 00007ffc363c1ed8 [ 154.232198][ T7227] [ 154.426934][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.461639][ T30] audit: type=1326 audit(2000000033.480:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.5.301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0a5f8eba9 code=0x7ffc0000 [ 154.484861][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.502273][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.304'. [ 154.644403][ T5919] usb 4-1: USB disconnect, device number 17 [ 155.766626][ T5899] usb 1-1: USB disconnect, device number 15 [ 155.807487][ T5899] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 155.857229][ T5899] ftdi_sio 1-1:0.0: device disconnected [ 156.641202][ T5929] IPVS: starting estimator thread 0... [ 156.671834][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 156.773626][ T7260] IPVS: using max 43 ests per chain, 103200 per kthread [ 157.103299][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.176232][ T5899] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.187692][ T7267] loop2: detected capacity change from 0 to 7 [ 157.191650][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.215940][ T7267] Dev loop2: unable to read RDB block 7 [ 157.225614][ T7267] loop2: unable to read partition table [ 157.226162][ T5899] usb 3-1: config 0 descriptor?? [ 157.241679][ T7267] loop2: partition table beyond EOD, truncated [ 157.260869][ T7267] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.492006][ T6006] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 157.717672][ T5899] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 157.738123][ T6006] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.749509][ T5899] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input17 [ 157.773564][ T6006] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.799016][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.900866][ T6006] usb 4-1: Product: syz [ 157.915483][ T6006] usb 4-1: Manufacturer: syz [ 157.925394][ T5899] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 157.951899][ T6006] usb 4-1: SerialNumber: syz [ 157.985889][ T6006] usb 4-1: config 0 descriptor?? [ 158.027565][ T6006] usb 4-1: selecting invalid altsetting 0 [ 158.122865][ T7291] FAULT_INJECTION: forcing a failure. [ 158.122865][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 158.135763][ T7291] CPU: 0 UID: 0 PID: 7291 Comm: syz.5.326 Not tainted syzkaller #0 PREEMPT(full) [ 158.135786][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.135796][ T7291] Call Trace: [ 158.135805][ T7291] [ 158.135811][ T7291] dump_stack_lvl+0x16c/0x1f0 [ 158.135837][ T7291] should_fail_ex+0x512/0x640 [ 158.135863][ T7291] should_failslab+0xc2/0x120 [ 158.135883][ T7291] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 158.135902][ T7291] ? skb_clone+0x190/0x3f0 [ 158.135924][ T7291] skb_clone+0x190/0x3f0 [ 158.135944][ T7291] netlink_deliver_tap+0xabd/0xd30 [ 158.135967][ T7291] ? netlink_unicast+0xe0/0x870 [ 158.135991][ T7291] netlink_unicast+0x64c/0x870 [ 158.136015][ T7291] ? __pfx_netlink_unicast+0x10/0x10 [ 158.136038][ T7291] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 158.136068][ T7291] netlink_sendmsg+0x8d1/0xdd0 [ 158.136095][ T7291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.136127][ T7291] ____sys_sendmsg+0xa98/0xc70 [ 158.136152][ T7291] ? copy_msghdr_from_user+0x10a/0x160 [ 158.136171][ T7291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.136205][ T7291] ___sys_sendmsg+0x134/0x1d0 [ 158.136226][ T7291] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.136275][ T7291] __sys_sendmsg+0x16d/0x220 [ 158.136297][ T7291] ? __pfx___sys_sendmsg+0x10/0x10 [ 158.136334][ T7291] do_syscall_64+0xcd/0x4c0 [ 158.136357][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.136374][ T7291] RIP: 0033:0x7fb0a5f8eba9 [ 158.136387][ T7291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.136403][ T7291] RSP: 002b:00007fb0a6e74038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.136419][ T7291] RAX: ffffffffffffffda RBX: 00007fb0a61d6090 RCX: 00007fb0a5f8eba9 [ 158.136429][ T7291] RDX: 000000002400c000 RSI: 0000200000000040 RDI: 0000000000000005 [ 158.136439][ T7291] RBP: 00007fb0a6e74090 R08: 0000000000000000 R09: 0000000000000000 [ 158.136448][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.136458][ T7291] R13: 00007fb0a61d6128 R14: 00007fb0a61d6090 R15: 00007ffe8d1dec28 [ 158.136478][ T7291] [ 158.244400][ T6006] usb 3-1: USB disconnect, device number 21 [ 158.247298][ C0] keytouch 0003:0926:3333.0008: usb_submit_urb(ctrl) failed: -19 [ 158.257462][ T5919] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 158.439795][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 158.439836][ T30] audit: type=1400 audit(2000000039.190:508): avc: denied { read } for pid=7290 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 158.488070][ T7271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.512660][ T30] audit: type=1400 audit(2000000039.240:509): avc: denied { read } for pid=7268 comm="syz.3.319" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.518268][ T7271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.541448][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.678261][ T1207] usb 4-1: USB disconnect, device number 18 [ 158.851694][ T5919] usb 1-1: device descriptor read/64, error -71 [ 158.984567][ T7298] Invalid ELF header magic: != ELF [ 158.989880][ T30] audit: type=1400 audit(2000000039.740:510): avc: denied { getopt } for pid=7297 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.051354][ T30] audit: type=1400 audit(2000000039.740:511): avc: denied { module_load } for pid=7297 comm="syz.2.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 159.101762][ T5919] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 159.231794][ T5919] usb 1-1: device descriptor read/64, error -71 [ 159.271998][ T5906] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 159.342049][ T5919] usb usb1-port1: attempt power cycle [ 159.411915][ T5906] usb 3-1: device descriptor read/64, error -71 [ 159.511056][ T30] audit: type=1400 audit(2000000040.260:512): avc: denied { module_request } for pid=7301 comm="syz.3.330" kmod=69705F7365745FF89373683A69702C6D6163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 159.680063][ T5906] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 159.714517][ T5919] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 159.844229][ T5919] usb 1-1: device descriptor read/8, error -71 Stopping sshd: [ 159.873762][ T5906] usb 3-1: device descriptor read/64, error -71 stopped /usr/sbin/sshd (pid 5604) OK [ 159.982010][ T5906] usb usb3-port1: attempt power cycle [ 160.041841][ T1207] usb 6-1: new full-speed USB device number 11 using dummy_hcd Stopping crond: [ 160.082195][ T5919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.113242][ T5919] usb 1-1: device descriptor read/8, error -71 [ 160.138205][ T7319] loop2: detected capacity change from 0 to 7 stopped /usr/sbin/crond (pid 5587) OK [ 160.161350][ T5852] Dev loop2: unable to read RDB block 7 [ 160.171560][ T5852] loop2: unable to read partition table [ 160.181789][ T1207] usb 6-1: device descriptor read/64, error -71 [ 160.181844][ T5852] loop2: partition table beyond EOD, truncated [ 160.223124][ T5919] usb usb1-port1: unable to enumerate USB device [ 160.247159][ T7319] Dev loop2: unable to read RDB block 7 [ 160.274087][ T7319] loop2: unable to read partition table [ 160.285080][ T7319] loop2: partition table beyond EOD, truncated [ 160.292911][ T7319] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.332049][ T5906] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 160.372789][ T5906] usb 3-1: device descriptor read/8, error -71 [ 160.431811][ T1207] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 160.671849][ T5906] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 160.704778][ T1207] usb 6-1: device descriptor read/64, error -71 Stopping dhcpcd... [ 160.742223][ T5906] usb 3-1: device descriptor read/8, error -71 stopped /sbin/dhcpcd (pid 5512) [ 160.851990][ T5906] usb usb3-port1: unable to enumerate USB device [ 160.853245][ T1207] usb usb6-port1: attempt power cycle Stopping network: [ 161.159519][ T30] audit: type=1400 audit(2000000041.910:513): avc: denied { setattr } for pid=7337 comm="syz.3.334" name="NETLINK" dev="sockfs" ino=14790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 161.220168][ T1207] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 161.282219][ T1207] usb 6-1: device descriptor read/8, error -71 [ 161.298451][ T30] audit: type=1400 audit(2000000042.030:514): avc: denied { create } for pid=7342 comm="syz.0.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 161.409797][ T30] audit: type=1400 audit(2000000042.160:515): avc: denied { read write } for pid=7344 comm="ip" path="/dev/console" dev="rootfs" ino=78 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 161.581689][ T1207] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 161.591691][ T5906] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.615983][ T1207] usb 6-1: device descriptor read/8, error -71 [ 161.626981][ T5965] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.783751][ T1207] usb usb6-port1: unable to enumerate USB device [ 161.891826][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.892435][ T5906] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 161.918798][ T5965] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.948269][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.953063][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.985355][ T5965] usb 2-1: config 0 descriptor?? [ 161.985961][ T5906] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 162.024252][ T5906] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 162.060109][ T5906] usb 4-1: Manufacturer: syz [ 162.088152][ T5906] usb 4-1: config 0 descriptor?? OK [ 162.215012][ T30] audit: type=1400 audit(2000000042.960:516): avc: denied { append } for pid=7363 comm="syz.2.341" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 162.282992][ T5906] rc_core: IR keymap rc-hauppauge not found [ 162.450627][ T5965] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 162.459468][ T5906] Registered IR keymap rc-empty Stopping iptables: [ 162.694736][ T5965] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input19 [ 162.697905][ T5906] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 162.718122][ T5906] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 162.823264][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 162.839754][ T30] audit: type=1400 audit(2000000043.590:517): avc: denied { read write } for pid=7373 comm="iptables" path="/dev/console" dev="rootfs" ino=78 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 163.041396][ T1207] usb 4-1: USB disconnect, device number 19 modprobe: can't change directory to 'syzkaller': No such file or directory iptables v1.8.11 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded. FAIL [ 163.164347][ T5965] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 163.226186][ T5965] usb 2-1: USB disconnect, device number 9 [ 163.248356][ T7383] input: syz1 as /devices/virtual/input/input20 Stopping system message bus: [ 163.281500][ T7383] binder: 7382:7383 unknown command 0 [ 163.287301][ T7383] binder: 7382:7383 ioctl c0306201 200000000080 returned -22 [ 163.302926][ T7385] netlink: 'syz.5.345': attribute type 1 has an invalid length. [ 163.436597][ T7388] fido_id[7388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 163.487297][ T7385] bond1: entered promiscuous mode [ 163.509403][ T7385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.562793][ T5906] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 163.567805][ T7392] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.627354][ T7392] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 163.643872][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 163.643885][ T30] audit: type=1400 audit(2000000044.400:527): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 done [ 163.722970][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 163.728476][ T7392] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 163.738627][ T6006] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 163.754762][ T30] audit: type=1400 audit(2000000044.430:528): avc: denied { open } for pid=5844 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.760738][ T7392] bond1: (slave wireguard0): making interface the new active one [ 163.780165][ T30] audit: type=1400 audit(2000000044.430:529): avc: denied { ioctl } for pid=5844 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 163.812644][ T7392] wireguard0: entered promiscuous mode [ 163.819744][ T7392] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 163.874458][ T5906] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 163.921128][ T5906] usb 3-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 163.980471][ T6006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.989405][ T5906] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 164.023421][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.028071][ T6006] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 164.102490][ T5906] usb 3-1: Product: syz [ 164.116530][ T7385] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 164.127187][ T5906] usb 3-1: Manufacturer: syz [ 164.338509][ T30] audit: type=1400 audit(2000000045.090:530): avc: denied { read } for pid=7402 comm="syz.3.349" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.351635][ T5906] usb 3-1: SerialNumber: syz [ 164.379361][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.420976][ T6006] usb 1-1: config 0 descriptor?? [ 164.441353][ T30] audit: type=1400 audit(2000000045.090:531): avc: denied { open } for pid=7402 comm="syz.3.349" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 164.469102][ T7403] smc: removing ib device syz! [ 165.132485][ T7403] ------------[ cut here ]------------ [ 165.138002][ T7403] WARNING: CPU: 0 PID: 7403 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 165.148714][ T7403] Modules linked in: [ 165.152786][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 165.162048][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.172144][ T7403] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 165.177864][ T7403] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 f8 fc f8 e8 a0 f8 fc f8 90 <0f> 0b 90 5b e9 96 f8 fc f8 e8 c1 58 63 f9 eb da 66 66 2e 0f 1f 84 [ 165.197749][ T7403] RSP: 0018:ffffc900237ef1c8 EFLAGS: 00010246 [ 165.203870][ T7403] RAX: 0000000000080000 RBX: ffff888055459358 RCX: ffffc9000cd72000 [ 165.211882][ T7403] RDX: 0000000000080000 RSI: ffffffff88be9630 RDI: ffff8880554593d8 [ 165.219860][ T7403] RBP: ffffffff88bcfad0 R08: 0000000000000005 R09: 0000000000000001 [ 165.227898][ T7403] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888055458698 [ 165.235891][ T7403] R13: ffff888055457fe0 R14: ffff888055457fe0 R15: ffff8880554590b8 [ 165.244018][ T7403] FS: 00007f19a32756c0(0000) GS:ffff8881246b5000(0000) knlGS:0000000000000000 [ 165.252981][ T7403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.259602][ T7403] CR2: 00007f19a3232f98 CR3: 000000004195f000 CR4: 00000000003526f0 [ 165.267601][ T7403] Call Trace: [ 165.270908][ T7403] [ 165.273870][ T7403] rxe_dealloc+0x25/0xc0 [ 165.278136][ T7403] ib_dealloc_device+0x46/0x230 [ 165.283240][ T7403] __ib_unregister_device+0x396/0x480 [ 165.288652][ T7403] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 165.294595][ T7403] ib_unregister_device_and_put+0x5a/0x80 [ 165.300329][ T7403] nldev_dellink+0x21f/0x320 [ 165.304971][ T7403] ? __pfx_nldev_dellink+0x10/0x10 [ 165.310125][ T7403] ? cap_capable+0xb3/0x250 [ 165.314667][ T7403] ? bpf_lsm_capable+0x9/0x10 [ 165.319381][ T7403] ? security_capable+0x7e/0x260 [ 165.324348][ T7403] ? ns_capable+0xd7/0x110 [ 165.328758][ T7403] ? __pfx_nldev_dellink+0x10/0x10 [ 165.333883][ T7403] rdma_nl_rcv_msg+0x38a/0x6e0 [ 165.338662][ T7403] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 165.343989][ T7403] ? __lock_acquire+0x62e/0x1ce0 [ 165.348941][ T7403] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 165.355402][ T7403] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 165.362452][ T7403] ? netlink_deliver_tap+0x1ae/0xd30 [ 165.367739][ T7403] ? selinux_netlink_send+0x578/0x830 [ 165.373146][ T7403] ? is_vmalloc_addr+0x86/0xa0 [ 165.377934][ T7403] netlink_unicast+0x5aa/0x870 [ 165.382921][ T7403] ? __pfx_netlink_unicast+0x10/0x10 [ 165.388242][ T7403] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 165.394270][ T7403] netlink_sendmsg+0x8d1/0xdd0 [ 165.399058][ T7403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.404393][ T7403] ____sys_sendmsg+0xa98/0xc70 [ 165.409180][ T7403] ? copy_msghdr_from_user+0x10a/0x160 [ 165.414676][ T7403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.419998][ T7403] ? __pfx_futex_wake_mark+0x10/0x10 [ 165.425327][ T7403] ___sys_sendmsg+0x134/0x1d0 [ 165.430011][ T7403] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.435265][ T7403] __sys_sendmsg+0x16d/0x220 [ 165.439887][ T7403] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.445031][ T7403] ? __x64_sys_futex+0x1e0/0x4c0 [ 165.450005][ T7403] do_syscall_64+0xcd/0x4c0 [ 165.454549][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.460449][ T7403] RIP: 0033:0x7f19a238eba9 [ 165.464881][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.484732][ T7403] RSP: 002b:00007f19a3275038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.493305][ T7403] RAX: ffffffffffffffda RBX: 00007f19a25d5fa0 RCX: 00007f19a238eba9 [ 165.501285][ T7403] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 165.509313][ T7403] RBP: 00007f19a2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.517310][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.525320][ T7403] R13: 00007f19a25d6038 R14: 00007f19a25d5fa0 R15: 00007ffca2b48698 [ 165.533328][ T7403] [ 165.536368][ T7403] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 165.543620][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.3.349 Not tainted syzkaller #0 PREEMPT(full) [ 165.552789][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.562821][ T7403] Call Trace: [ 165.566084][ T7403] [ 165.568996][ T7403] dump_stack_lvl+0x3d/0x1f0 [ 165.573580][ T7403] vpanic+0x6e8/0x7a0 [ 165.577542][ T7403] ? __pfx_vpanic+0x10/0x10 [ 165.582033][ T7403] ? rxe_pool_cleanup+0x41/0x60 [ 165.586876][ T7403] panic+0xca/0xd0 [ 165.590592][ T7403] ? __pfx_panic+0x10/0x10 [ 165.595012][ T7403] check_panic_on_warn+0xab/0xb0 [ 165.599924][ T7403] __warn+0xf6/0x3c0 [ 165.603812][ T7403] ? rxe_pool_cleanup+0x41/0x60 [ 165.608658][ T7403] report_bug+0x3c3/0x580 [ 165.612964][ T7403] ? rxe_pool_cleanup+0x41/0x60 [ 165.617802][ T7403] handle_bug+0x184/0x210 [ 165.622124][ T7403] exc_invalid_op+0x17/0x50 [ 165.626608][ T7403] asm_exc_invalid_op+0x1a/0x20 [ 165.631441][ T7403] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 165.636882][ T7403] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 a5 f8 fc f8 e8 a0 f8 fc f8 90 <0f> 0b 90 5b e9 96 f8 fc f8 e8 c1 58 63 f9 eb da 66 66 2e 0f 1f 84 [ 165.656480][ T7403] RSP: 0018:ffffc900237ef1c8 EFLAGS: 00010246 [ 165.662534][ T7403] RAX: 0000000000080000 RBX: ffff888055459358 RCX: ffffc9000cd72000 [ 165.670480][ T7403] RDX: 0000000000080000 RSI: ffffffff88be9630 RDI: ffff8880554593d8 [ 165.678427][ T7403] RBP: ffffffff88bcfad0 R08: 0000000000000005 R09: 0000000000000001 [ 165.686375][ T7403] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888055458698 [ 165.694331][ T7403] R13: ffff888055457fe0 R14: ffff888055457fe0 R15: ffff8880554590b8 [ 165.702278][ T7403] ? __pfx_rxe_dealloc+0x10/0x10 [ 165.707200][ T7403] ? rxe_pool_cleanup+0x40/0x60 [ 165.712046][ T7403] ? rxe_pool_cleanup+0x40/0x60 [ 165.716886][ T7403] rxe_dealloc+0x25/0xc0 [ 165.721121][ T7403] ib_dealloc_device+0x46/0x230 [ 165.725952][ T7403] __ib_unregister_device+0x396/0x480 [ 165.731303][ T7403] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 165.737188][ T7403] ib_unregister_device_and_put+0x5a/0x80 [ 165.742892][ T7403] nldev_dellink+0x21f/0x320 [ 165.747477][ T7403] ? __pfx_nldev_dellink+0x10/0x10 [ 165.752636][ T7403] ? cap_capable+0xb3/0x250 [ 165.757120][ T7403] ? bpf_lsm_capable+0x9/0x10 [ 165.761793][ T7403] ? security_capable+0x7e/0x260 [ 165.766725][ T7403] ? ns_capable+0xd7/0x110 [ 165.771117][ T7403] ? __pfx_nldev_dellink+0x10/0x10 [ 165.776210][ T7403] rdma_nl_rcv_msg+0x38a/0x6e0 [ 165.780961][ T7403] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 165.786238][ T7403] ? __lock_acquire+0x62e/0x1ce0 [ 165.791174][ T7403] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 165.797585][ T7403] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 165.804516][ T7403] ? netlink_deliver_tap+0x1ae/0xd30 [ 165.809786][ T7403] ? selinux_netlink_send+0x578/0x830 [ 165.815150][ T7403] ? is_vmalloc_addr+0x86/0xa0 [ 165.819902][ T7403] netlink_unicast+0x5aa/0x870 [ 165.824662][ T7403] ? __pfx_netlink_unicast+0x10/0x10 [ 165.829933][ T7403] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 165.835889][ T7403] netlink_sendmsg+0x8d1/0xdd0 [ 165.840643][ T7403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.845929][ T7403] ____sys_sendmsg+0xa98/0xc70 [ 165.850703][ T7403] ? copy_msghdr_from_user+0x10a/0x160 [ 165.856149][ T7403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.861422][ T7403] ? __pfx_futex_wake_mark+0x10/0x10 [ 165.866707][ T7403] ___sys_sendmsg+0x134/0x1d0 [ 165.871372][ T7403] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.876584][ T7403] __sys_sendmsg+0x16d/0x220 [ 165.881150][ T7403] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.886235][ T7403] ? __x64_sys_futex+0x1e0/0x4c0 [ 165.891155][ T7403] do_syscall_64+0xcd/0x4c0 [ 165.895633][ T7403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.901503][ T7403] RIP: 0033:0x7f19a238eba9 [ 165.905906][ T7403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.925496][ T7403] RSP: 002b:00007f19a3275038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.933879][ T7403] RAX: ffffffffffffffda RBX: 00007f19a25d5fa0 RCX: 00007f19a238eba9 [ 165.941838][ T7403] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 165.949793][ T7403] RBP: 00007f19a2411e19 R08: 0000000000000000 R09: 0000000000000000 [ 165.957738][ T7403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.965694][ T7403] R13: 00007f19a25d6038 R14: 00007f19a25d5fa0 R15: 00007ffca2b48698 [ 165.973643][ T7403] [ 165.976837][ T7403] Kernel Offset: disabled [ 165.981138][ T7403] Rebooting in 86400 seconds..