last executing test programs: 9m12.313625185s ago: executing program 3 (id=2953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 9m12.20128145s ago: executing program 3 (id=2954): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) 9m12.102085986s ago: executing program 3 (id=2955): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRES16=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000810281e0000000e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000001c0)={'erspan0\x00', r4, 0x1, 0x0, 0x81, 0x5, {{0x8, 0x4, 0x0, 0x4, 0x20, 0x65, 0x0, 0xd, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@timestamp={0x44, 0xc, 0xa5, 0x0, 0x0, [0xa, 0x4]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {0x1}, {0x8, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x2, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 9m11.249156569s ago: executing program 3 (id=2958): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./file0/file0\x00', 0x1ea) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f00000010c0)='./file0/file0\x00', 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x11) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7) 9m10.157153838s ago: executing program 3 (id=2963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYBLOB="03000000000000000000375c4799becec7790000", @ANYRES32=0x0, @ANYRESHEX], 0x50) sendmmsg$unix(r0, &(0x7f0000001740)=[{{&(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000012c0)="09779f1d236e40b64870bfdf38c87f581da54fd2108168023341b2b226fc435d71afb8eedff0aaf5d10c60c7db4f8c375a802462fca0aed42eb5098c640a76f91821c253168d14cae63d70ccc8af95c69156c30a5d326167387b7f5751949a2733bbcbcb6d4a85a512fb0d85dd697ddea8d5616172e5b708ff751f60282b12097ced90f8cf26b13778bf6177242d9385c72c39f32845dea6d24a67246ad287d2f6e0b5b893", 0xa5}, {&(0x7f0000001380)="5b06e3a96ce63e42681e96223b43552e2b3b6cfb55b490c78f542a4de0b7b6c380108583f75fb7de1facaac1cba314dc024ee1aedb0774db7964760a731d9102a5575571d3939369600f33ff234da15f875f8b8ff6f6838a2dfcf1535d8b58b4d5308bcbe6ba813b71592e24f4b97ef2bcaae4cdcebaf8846f309ea05ba8b6b2f5dd2fde04db9e95bd0064ec4326b402f540044743e7adc994030a85a41373a8c3cac2d1ecb4994dabd4e89f611584b4727a2f76a4c8e02a47587421b05fd9451d6fb55621bec192d55ca0661e5ffb4de8f1cb7b5d89dc4364645b575e47e28d703127211e991fcf6f78617f5267bcce8bbc61c0", 0xf4}, {&(0x7f0000001a80)="ebe3e08736c8655c9ed428d57580683917fb94e90b3d4e9ba9003332f83b27fbd92cf10f6c44f4e8c5b855ef66c4c0d2436e0f1da1903d7cb89ac1a954b2683ef86cbe29168a5906e65997f20c0b6e0c5d030f2e776f289fa3f861b20623d7f9b1171eaf522ef60af81f33a7794d890cecfd0de869cb55044e2e9ee1ade0f2fbe85ea29d940a45e81e2b71fd4d63fb5c42c9a990a673202064e6aae358d75317135617320d2aca2f37111ba9da3a34eff0314d5106bd5a86821a90f6d3ba7959a3c44af10b0ea1cccd25315a683e", 0xce}, {&(0x7f0000001b80)="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", 0xfe}, {&(0x7f0000001c80)="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", 0xfc}, {&(0x7f0000001480)="2ad58c6d0497653cfa94523cd08924146d9a87792badabbff9745662247f797139be14a9a74cbdb102ce0f8678ce0551f066b3a659d543dd66b638cb307d68e5a48bd6ccc5f2edd070d1d905249968a688fee4dfcf596040d677a3b051124f063ce33a6bb3a64ef6ba25aafd0601fef0f414f283480a1d6926581854015a74c0f4d062dcbee543cbe7d7ed246a43eb976c930a8cc087271cfc3c022cb9c4af7378d09144a4844d2128812c415656857d03f77d1bc804e2a82be7eb35fe", 0xbd}, {&(0x7f00000016c0)="ef6a672a406bd585146e50f1d323120d04bc4ff03076336dd8e18119b4fe8473fab896f4b9582b9e0a497ee5ad15ea3870c215e43e0da1173e7b468c6b2c3dda4c013663be07c8335e96183d737a821167c3fb9a59b3a7827f668b2ecb77d616deee9bcd9b5c9cef114d261bc70cf945f73a234aaf72a54b29d063ccf9", 0x7d}], 0x7, 0x0, 0x0, 0x14}}], 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) 9m8.700806848s ago: executing program 3 (id=2968): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4074, 0xfea}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000ac0)=""/229, 0xe5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000480)=""/186, 0xba}], 0x7}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 9m8.142548479s ago: executing program 32 (id=2968): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000001ec0)=""/4074, 0xfea}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f0000000ac0)=""/229, 0xe5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000140)=""/59, 0x3b}, {&(0x7f0000000480)=""/186, 0xba}], 0x7}, 0x100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 2m48.789913508s ago: executing program 4 (id=4348): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf0500a0000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 2m46.89159472s ago: executing program 4 (id=4355): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) epoll_create1(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1}}]}}]}}]}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000e004b1af8a600080045060014006400000489907864010102e0000001"], 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f00000001c0)="13", 0x1}], 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r2}) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000340)={r3}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 2m45.212571432s ago: executing program 4 (id=4361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x547d97f4e614acc2, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x2c) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)}, 0x2400c810) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4c, 0x1, 0x1, 0x8001, 0x1ff, 0xa36, 0x6, 0x6}, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) socket(0x22, 0x2, 0x3) socket(0x40000000015, 0x5, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) 2m43.934913042s ago: executing program 4 (id=4365): r0 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r2, &(0x7f0000000380)={0x2020}, 0x2020) r3 = dup3(r1, r0, 0x80000) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x7, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x3}, @struct={0x7, 0x4, 0x0, 0x4, 0x0, 0x4, [{0x6, 0x5, 0x7}, {0x7, 0x5, 0x4}, {0x1, 0x0, 0x560a}, {0xf, 0x0, 0xfffffffe}]}, @restrict={0x3, 0x0, 0x0, 0xb, 0x2}, @enum64={0x6, 0x2, 0x0, 0x13, 0x1, 0x1c, [{0x1, 0x5, 0x642818ea}, {0xe, 0xfffff000, 0x7}]}]}, {0x0, [0x0, 0x0, 0x30, 0x5f, 0x61]}}, &(0x7f0000000280)=""/231, 0x9b, 0xe7, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1300000006000000000000000000000000c00000", @ANYRES32=r2, @ANYBLOB="0002000000000000f05b0ea30000000000000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="040000000400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1b0000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08", 0x1b}], 0x1}, 0x40400) 2m42.449068035s ago: executing program 4 (id=4367): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f00000003c0)=0xc) prlimit64(r1, 0x0, &(0x7f0000000140)={0xa, 0x100000000008b}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x334e88}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000000c0)={0x0, 0xa, 0xd, "98a77986732141203b3b6356a9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x30000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r8, 0x6431) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="faef520b097600000c0111"], 0x15c}}, 0x20008080) 2m39.13316277s ago: executing program 4 (id=4376): syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x3f73, 0x2, 0x0, 0x19}, &(0x7f0000000340), &(0x7f0000000600)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c040) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x2202) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x8145, 0x1fc}) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x40b02020) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) 2m33.438108852s ago: executing program 5 (id=4389): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x104, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000100)) 2m32.170204243s ago: executing program 5 (id=4392): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2110000003000000080029000b0b0000b656106be4ad4ca9fe5387a6de3797c9c6893b957a9a30d303ac08fc7c7e6d2e67283457afd2cfc4c0ff4fef53dca87973e73d35c76b127557463b89db942ad583b36bf8d4e339655c89be1d621f0ba1deff30a7ba543b4aafc958756431d9276985d123bff314f0d325a91a75a3946bfd62cf83315cdf0bcf61cbda91bf0bafaeaf8847dc33aee08aebceb205a59f9fce1408330e90eecd1041c1328d754778f99074aac6da5838b1a2b29e7b041bda1ac32a30fefb532d7cd138291d77fbfdd9430051166329a4ddb359ea95e3c08609bb0facc75d874d3e2641684052ebddd2bfe15896210712acc9c690e5fa29b9cd7d0b0a4eb6e18668547ca671c0ec58397565354dfb85ff9dfbe2991b7c0f6da8ddb0c57622a839c13d537607488135aa0c333dde2eee6692b6382fd75e0b287e276eec9e49adc0569b00000000000000080f94fc7699320a62897eacde58fd24cf19d863a035bdbce35ed367ba2ae9310a695d216537a1cb07f75b8071dfba8d9eb9b1f08e"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000280)=0x80007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b000000000000001c000000000004"], 0x48) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000001c0)=r1) sendmsg$FOU_CMD_ADD(r6, 0x0, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="60000000100001072cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8c1604001411000019002200f4f80100ffffffffadaba399f9c9d4b5b10000001400350070696d36726567000000000000000000080004000004000008001e000000000000000000e6396206cf8f6f981b4a0d23aa9d76635455e031a0e4cc1b9e2743ef5e863abf8ac818516b55f1d1a215e9fafbe2b2989fad1028d3a20d9cd427d936387ae97142f9"], 0x60}, 0x1, 0x0, 0x0, 0x20000006}, 0x40084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setresuid(0x0, 0xee00, 0x0) setpriority(0x1, 0x0, 0x4af) 2m29.953282751s ago: executing program 5 (id=4400): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000200)={@remote}, 0x14) syz_emit_ethernet(0x62, &(0x7f0000000080)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x2c, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x9, "305cdb499b17bc9a55d8f52e3256fe465fdd93a9959f6b9b364ff46e831ccabb42230a48"}}}}}}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000040, 0x0, 0x0) syz_usb_connect(0x2, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904ab6b2f681402030109022300010000c0050904970001ff70795108640300000026ff0905850308"], 0x0) 2m26.713131602s ago: executing program 5 (id=4407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='setgroups\x00') r6 = openat$cgroup_int(r5, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x51) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x1411, 0x1, 0x1, 0xffff}, 0x10}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x3e1, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000a000000076000000000000002700000000ea00009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, r7}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0x4, 0x0, &(0x7f0000000080)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r9, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 2m25.728263392s ago: executing program 5 (id=4410): syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1e4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004}, 0x4000048) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) (async) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x1e4, r1, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4004}, 0x4000048) (async) 2m25.107595965s ago: executing program 5 (id=4412): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000002c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYRESHEX=r3], 0x3}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) semget(0x3, 0x3, 0x388) 2m23.754538812s ago: executing program 33 (id=4376): syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x3f73, 0x2, 0x0, 0x19}, &(0x7f0000000340), &(0x7f0000000600)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c040) keyctl$clear(0x5, 0xffffffffffffffff) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x2202) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setrlimit(0xa, &(0x7f00000001c0)={0x8145, 0x1fc}) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x40b02020) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0xffff, 0x100}}) 2m9.729615651s ago: executing program 34 (id=4412): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000002c0)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYRESHEX=r3], 0x3}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe2, 0x0) semget(0x3, 0x3, 0x388) 2m5.370903448s ago: executing program 0 (id=4484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20048800) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xaf4, 0x0) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1}, 0x6}], 0x1, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) 2m3.838345328s ago: executing program 0 (id=4486): r0 = socket$inet6(0xa, 0x802, 0x3a) r1 = socket$inet6(0xa, 0x3, 0xfffdfffc) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb, @empty, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="800009e91a08a1ce", 0x8, 0x2000c844, &(0x7f0000000140)={0xa, 0x4e26, 0x0, @mcast1, 0x4}, 0xfffffffffffffe3e) 2m3.7372001s ago: executing program 0 (id=4487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) r2 = accept$alg(r0, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) 2m3.706967133s ago: executing program 0 (id=4488): getpgid(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085000000230000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r1, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) writev(r4, &(0x7f0000004280)=[{&(0x7f00000000c0)='(', 0x1}], 0x1) syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x400, 0x200, 0x0, 0x0, 0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=0x0, @ANYBLOB="040006000000000010000200000011002000000000000000"], 0x2c, 0x2) syz_fuse_handle_req(r2, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6afd86f706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce1b1973717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ed22d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e519619393cb66b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e08374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddca13bbc0e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb3d88eb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0caa0c2c5620abf503deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5628886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b", 0x2000, &(0x7f00000003c0)={&(0x7f0000000740)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17c22, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) timer_gettime(r1, &(0x7f00000000c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x224e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m1.154622323s ago: executing program 0 (id=4498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20048800) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) 1m57.301941278s ago: executing program 0 (id=4504): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0xf622, 0x7ff, 0x6, 0x1, 0xddf, 0x7, 0x7, [0xfffffffa, 0xa7000000]}}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) epoll_create(0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x1a3) 1m41.479552604s ago: executing program 35 (id=4504): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) creat(&(0x7f00000002c0)='./file0\x00', 0x51) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_eee={0x45, 0xf622, 0x7ff, 0x6, 0x1, 0xddf, 0x7, 0x7, [0xfffffffa, 0xa7000000]}}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_readahead}], [{@euid_lt}], 0x6b}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) epoll_create(0x400) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0x1a3) 1m38.939206051s ago: executing program 1 (id=4560): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x43, 0x80300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r0, 0xd0678000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x1aeb, 0x6}) 1m38.724956794s ago: executing program 1 (id=4561): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r0, 0x80285442, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f000001d340)=@deltclass={0xa4, 0x29, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {0xfff1, 0x6}, {0xb, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0xfa}}, @TCA_RATE={0x6, 0x5, {0x7, 0x5}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x6e4}, @TCA_QFQ_LMAX={0x8, 0x2, 0x7}, @TCA_QFQ_LMAX={0x8, 0x2, 0x3}]}}]}, 0xa4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB="010002006401010000000000000000000000000086dd"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x48001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x400000) write$sndseq(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c007a6b616c6c65723000000000000008000500040000000000000000000000200000000000"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) ptrace$getregset(0x4204, 0x0, 0x201, 0x0) timer_create(0x0, 0x0, &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000080), &(0x7f0000000280)=0x4) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f00000004c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {}, @queue={0x5, {0x77, 0x3e17}}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x70) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310) syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) 1m38.175054302s ago: executing program 1 (id=4562): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x88001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = timerfd_create(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) readv(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000200)=""/68, 0x44}, {0x0}], 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x1b, 0x0, &(0x7f0000000500)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000002440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000002240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000300)=""/254, 0xfe, 0x0, &(0x7f00000000c0)=""/119, 0x77}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r8, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket(0x2, 0x80805, 0x0) 1m37.226208737s ago: executing program 1 (id=4566): shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="28fdffffff5786addd36bd5e60ee7c5c8bdfdb0a4f9f5dd95d909da0db11df8660245435d270fa8e18a10cfc8b0ebb4f0fae62f8cfb30400000094d17861f7098a5758e5511ceaa27bf0e4a1bcf881443c3b465c6d5f913f5cab5b4ac706ab", @ANYRES16=r4, @ANYBLOB="010000000004ad7e547348bb884a820000000001000000085a010003000000080002000100000004000480"], 0x28}}, 0x0) (async) r5 = accept4(r2, 0x0, 0x0, 0x800) (async) select(0x0, 0x0, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000000c0)) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socket$inet(0xa, 0x801, 0x84) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') (rerun: 32) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x10810}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x14, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x947, 0x0, 0x1b, 0x4b, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa9a0a349a8e46d661af6e7ee8cdb5e97e738fe54"}, 0x50) (async) read$FUSE(r6, &(0x7f0000004680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendto$phonet(r5, &(0x7f0000000280)="c601a966e09869f41f513b2323b84126eb0cf620efdfa7e41a853771738a6e20c6c72d73a2d1352ad26f613c84053fb3a8c825b1", 0x34, 0x24000080, &(0x7f0000000300)={0x23, 0x9, 0x1f, 0x26}, 0x10) (async) syz_open_procfs(r8, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x501081, 0x0) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 32) 1m31.965129234s ago: executing program 1 (id=4576): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000150000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 1m28.432441194s ago: executing program 1 (id=4580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) openat$null(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x9, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m13.384757227s ago: executing program 36 (id=4580): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) openat$null(0xffffffffffffff9c, 0x0, 0x40001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r7, 0x0, 0x1}, 0x18) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000000)={0x2000}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x9, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 11.805212185s ago: executing program 7 (id=4783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf980000000000005608000000000000850000000000ffb0b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.224918842s ago: executing program 7 (id=4787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) socket$kcm(0x2d, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000500050001000000080004000000000005000600000000000800030001"], 0x34}}, 0x0) 8.993479369s ago: executing program 2 (id=4791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x2000000}}, 0x88}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 8.548405243s ago: executing program 2 (id=4794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010003000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007"], 0x25c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mlockall(0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x4000000000000001, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x6, 0xebd, 0x9, 0xfffffffffffffe00, 0x8c0d93b, 0xfa11, 0xffffffff}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r6 = dup(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket(0x8, 0x802, 0x4) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x124c1, 0x0) 8.092846584s ago: executing program 9 (id=4796): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r1, 0x1, {0x2, 0xff, 0x2}, 0x2}, 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x2, {0x1, 0x0, 0x4}}, 0x18) (async) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@multicast2, @broadcast, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000280)={'erspan0\x00', r3, 0x8, 0x80, 0x4, 0xc0, {{0x9, 0x4, 0x0, 0x3b, 0x24, 0x65, 0x0, 0x99, 0x4, 0x0, @broadcast, @private=0xa010102, {[@generic={0x7, 0xf, "d2f62e871863d1467e2ac95247"}]}}}}}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000680)={0x344, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8, 0x1, r9}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40000000}}, {0x8, 0x6, r3}}}]}}]}, 0x344}}, 0x881) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0xf0}}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0xef) (async) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r11 = dup(r10) (async) read$FUSE(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x3c8e, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async) mmap(&(0x7f000001c000/0x3000)=nil, 0x3000, 0x5, 0x28011, r11, 0x2d5c8000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r14 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r14, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) (async, rerun: 32) ioctl$EVIOCGRAB(r14, 0x40044590, &(0x7f0000000200)=0x8) (rerun: 32) write$char_usb(r14, &(0x7f0000000040)="e2", 0xff0f) 7.593913161s ago: executing program 2 (id=4797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf98000000000000560800000000000085000000000000d3b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.502624431s ago: executing program 9 (id=4798): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x11}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 6.718418061s ago: executing program 2 (id=4799): prctl$PR_SCHED_CORE(0x3e, 0x200000001, 0x0, 0x1, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000002ed325fb73bd6e74d88f929a"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYRES32=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() 6.604735658s ago: executing program 9 (id=4801): syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) close(0x3) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000001200)=0x2, 0x12) socket$inet_udp(0x2, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffffffffffff9c, 0x0, 0x181000, 0x0) syz_open_dev$video(0x0, 0xd, 0x4080c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) 6.535732913s ago: executing program 7 (id=4802): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = epoll_create(0x10003) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x3}}, 0x20000000) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 6.353232105s ago: executing program 6 (id=4803): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf0500ffc00000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 5.838577553s ago: executing program 8 (id=4804): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r1 = getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000000)={0x1}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r9, 0xffffffffffffffff}) close_range(r0, r7, 0x0) ioctl$SYNC_IOC_FILE_INFO(r10, 0x40103e05, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xf03b, 0x10000, 0x3, 0x34d}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) ptrace$getenv(0x4201, r1, 0x648, 0x0) 4.976899369s ago: executing program 8 (id=4805): socket$nl_route(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) epoll_create1(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1}}]}}]}}]}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000e004b1af8a600080045060014006400000489907864010102e0000001"], 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000340)={r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4.898317181s ago: executing program 7 (id=4806): r0 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x8031, 0xffffffffffffffff, 0x6a855000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 4.89689813s ago: executing program 2 (id=4807): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20048800) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x3, 0x0, 0x7, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/46, 0x2e}], 0x1}, 0x6}], 0x1, 0x100, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x0) 4.609051203s ago: executing program 6 (id=4808): sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) (async) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, 0x0, 0x0) (async) recvfrom$packet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) epoll_create(0x7) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4, 0xd000], 0x100, 0x42}) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01022ccd8b00fedbdf252800000005002b000000000006000400a1aa000006000600020000000a0001007770616e30"], 0x38}, 0x1, 0x0, 0x0, 0x4002080}, 0x4000) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x1) (async) prctl$PR_SET_THP_DISABLE(0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1d1) (async) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x10000000000, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) fstat(0xffffffffffffffff, 0x0) (async) open_by_handle_at(0xffffffffffffffff, 0x0, 0x3) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) 4.325764561s ago: executing program 6 (id=4809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf980000000000005608000000000000850000000000fff3b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.876395936s ago: executing program 7 (id=4810): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000240)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x6, 0x0, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="007cbf00000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.269149054s ago: executing program 6 (id=4811): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x88001) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = timerfd_create(0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) readv(r2, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)=""/202, 0xca}, {&(0x7f0000000200)=""/68, 0x44}, {0x0}], 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x1b, 0x0, &(0x7f0000000500)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000300)=""/254, 0xfe, 0x0, &(0x7f00000000c0)=""/119, 0x77}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002c80)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r8 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 1.460527359s ago: executing program 9 (id=4812): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000040)=@get={0x1, 0x0, 0xffffffffffffffff}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0x4018aee2, &(0x7f0000000040)) (async) setsockopt(r0, 0x0, 0x54, &(0x7f00000001c0)='\x00\x00\x00n', 0x4) (async) r2 = msgget$private(0x0, 0xafb0e20fef6483ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) ppoll(&(0x7f00000002c0)=[{r3, 0x40}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r4) (async) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 32) set_tid_address(0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000100)=0x840f3b, 0x4) (async) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) (async) msgrcv(r2, 0x0, 0x0, 0x1, 0x1000) (async) msgsnd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="c62f7c16fd2138914c3e1a0d769240280445bc59b54f8516e1d561f58713384a27cdbf78cfbf9d1ff15f31043ae2a6b7b0ffd7a2fa38e0461cf6929364f3632a8d421b8eb8ce10d23b39e6c16c624597d9c8e70027a643a9fa15ff3abbc8475a17dcb4989bd087ad6a46083685a1105c0220357922d64fddd63026dfb635bdba3a42ce9f7d"], 0x8, 0x800) (async, rerun: 32) msgctl$MSG_STAT(r2, 0xb, &(0x7f00000000c0)=""/124) (rerun: 32) 1.360622464s ago: executing program 6 (id=4813): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) getgroups(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000640)=""/4096) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3c}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) pwritev(r3, 0x0, 0x0, 0xfffffff7, 0x1) connect$inet6(r2, 0x0, 0x0) 1.272023098s ago: executing program 8 (id=4814): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000002d00090027bd7000000022000600000008000a"], 0x1c}}, 0x84) 867.45278ms ago: executing program 8 (id=4815): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=r3}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r4, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r5}, 0x20) 738.304076ms ago: executing program 2 (id=4816): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x0, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x40fb, 0x10080217, 0x0, 0x0, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r11], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000840)={r5, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb7}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1, 0x8}, {0x10}, {0xe}}, [@TCA_STAB={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x6, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x67}}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) 696.041283ms ago: executing program 6 (id=4817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000000), 0x40, 0xffffffffffffffff, 0x4}, 0x38) socket$alg(0x26, 0x5, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/181, 0xb5}, {&(0x7f0000000380)=""/118, 0x76}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f0000000500)=""/113, 0x71}, {&(0x7f0000000580)=""/204, 0xcc}, {&(0x7f0000000680)=""/199, 0xc7}], 0x6, &(0x7f0000000800)=""/180, 0xb4}, 0x7}, {{&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000940)=""/6, 0x6}], 0x1, &(0x7f00000009c0)=""/67, 0x43}, 0x1000}, {{&(0x7f0000000a40)=@x25, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000ac0)=""/238, 0xee}], 0x1, &(0x7f0000000c00)=""/175, 0xaf}, 0x1310}, {{&(0x7f0000000cc0)=@nl=@proc, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000000d40)=""/208, 0xd0}, {&(0x7f0000000e40)=""/80, 0x50}, {&(0x7f0000000ec0)=""/189, 0xbd}, {&(0x7f0000000f80)=""/186, 0xba}, {&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001080)=""/94, 0x5e}, {&(0x7f0000001100)=""/117, 0x75}, {&(0x7f0000001180)=""/227, 0xe3}, {&(0x7f00000066c0)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/158, 0x9e}, {&(0x7f0000001480)=""/47, 0x2f}], 0xb, &(0x7f0000002940)=""/256, 0x100}, 0x7}, {{&(0x7f0000001400)=@ax25={{0x3, @bcast}, [@default, @null, @default, @null, @remote, @bcast, @default, @default]}, 0x80, &(0x7f0000001640)=[{&(0x7f0000005e80)=""/118, 0x76}, {&(0x7f0000001500)=""/68, 0x44}, {&(0x7f0000001580)=""/190, 0xbe}], 0x3, &(0x7f0000001680)=""/227, 0xe3}, 0x8001}, {{&(0x7f0000001780)=@isdn, 0x80, &(0x7f0000002880)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/71, 0x47}], 0x2}, 0x101}, {{&(0x7f00000028c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003940)=[{&(0x7f00000076c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003980)=""/251, 0xfb}, 0x1ff}, {{&(0x7f0000003a80)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000005c40)=[{&(0x7f0000003b00)=""/228, 0xe4}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/34, 0x22}], 0x4}, 0x1}], 0x8, 0x4002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) sigaltstack(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x80000001, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, 0x0, &(0x7f0000000040)) 646.485515ms ago: executing program 8 (id=4818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18f8ff00000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 377.168096ms ago: executing program 8 (id=4819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_WAIT_FOR_RESUME(r3, 0x5523) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050009000400"], 0x24}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x2, 0x0, &(0x7f0000004000)=0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2}) r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r9, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x40, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x8, 0x4}, {0x1, 0x8080, 0x7, 0x0, 0x8, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x1, 0x2, 0x3}], 0xf87}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r7, 0x6628) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) 376.197771ms ago: executing program 9 (id=4820): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x104, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x38, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x14, 0x1, 0x0, 0x1, [@generic="991a54fc28d627d80740ede1a4724090"]}]}, 0x38}], 0x1}, 0x0) ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000100)) 344.731675ms ago: executing program 9 (id=4821): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, 0x0, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='mce_record\x00', r4, 0x0, 0x3}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='mctp_key_release\x00', r4, 0x0, 0x5}, 0x18) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffa7, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3, r7}) r8 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_GET_REPORT_REPLY(r6, &(0x7f0000000300)={0xa, {0xa, 0x4, 0x2}}, 0xa) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x30, 0x0, r12, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad019645804", 0x29, 0xebec93e810f96115, 0x1}) io_uring_enter(r8, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0) shutdown(r11, 0x1) signalfd4(r0, 0x0, 0x0, 0x0) r13 = socket$inet(0x2, 0x3, 0x80) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) unshare(0x22020600) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) syz_emit_ethernet(0x32, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073900900000000e004000100000000001090780202000000000000ce8e031157ad2ed1f2486da22c707de07ddd65485896e73494e558cb6822320050439f5fde627ba83e51c48cd33aa4a55e4be865390ff240bf66411170e16661ac053030d2cb991857ed0fce2c7127250994bb17e310838451661d9e446561c67adcad799f23bffdfdd215addca3a29c190c51154cd009d927aa414af39e6a7c4b9bc02e6522e1cc4db82a8e1c2be8cf8142d99b981ec09f10be064df290c81b9ab3a65300abb350ea5bd8d33a6f0f48bb390faef078f422aebf60d2d5b372c780"], 0x0) 0s ago: executing program 7 (id=4822): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="5b095762e4ceba7d280612b7511913c90df9e94f4e38e6e5dd2dac0bd4683a92d758ad90f9e2842073d15a2d5baa4db0b69c47e278e3f50f394189dd7fce63890ce3ed1f24e67a79c1cbc5eae3984e9d3e8759a9229593ad412b129b68928ed908711b6d1213f9355ff80c2579fa58ced926b267a2264063dd3fdea384c58f4ac5bf66c361e8ec046ddf824495c5b6947ebab4e24257d117313fd45b6873262073e64e3da2431276466d75447ae3eb562d00423b8edb3729fa059a5f004010d551edb43813821d27006eb0eefa536590139123f218b3b0e2d994953269636885ffa849a905e62cfe5f64cd04940568809738ed7306e2430d382667d87f54013a5cee43dae2ee75111ed33350d86c757a8362a81375befca2d0f555cfcc58af87c184bf154694ebb8f0b6ef09f13370833a44cedd5b3091768bbbbfa1d0859a114ea6b4d9f25c11d9f3f45db19fa5586d36bb6a8a15f9d55210caaeb983f1d2e6688e107b6de6cca9d9c640afab7620dc440e93f9d5e920e8fe7e74bbf8754a7195110fedcd8269be84a945305ee09de4997a5a2796f5090d2f9ee3bc0b2228c389ecb6468c24d2c5699dc30e2c9ad71ab272e16a4a645516458bb1f2a92b6ff06bf697503a43205473baf112ffe468a9c727ace967ad603d335ac634db4534540ef15611f113ca28c3a3cbc7f6c96945bdf291cf39a5bae0277b51e959dcd26d1117ff63f1bf748c845b7641905f83f6a0e468c75f88fd74d36ca638e5fb055dbd55c14fe30813e2518e390dc65db7372755306779d7fb13fb9403578fe91422cdb8dc8db0cbbc986369ff7780afab5755a039b37364347d73835c96389288b3768e1d4e59cf77fd58228100d397badfdf52dd5eb453ccaad785d21418e509f734f19e8cdb5a0993ba59abcf654625000eddf387d0c291a3000e87c4fec269a9c787997e0d106fcbd9f488c75559c0664be295d8dc20d214f17c392ba0bb73df8bcde0f47e449ab40f51b02bec01fa48171e5e39777aa7fd94525e76d78e2f2e692eea0ed254b2ce1db59e5cfa91d9b30ec2d39868c32afc6797ff333b1ce9dd2c0b3034124b1c004d9dc0cbcd4432006d54528e3e28e96e911eba7681a035d4e4551c7b497cb0fde2845ba18c4b8b19efe147d90394ebed77e7c0a3702fe2b6df71ff354ea5d55a77c899975df86aab5abb2ce370f3d8f4bfcb417ecb82ea0746997a1ca1e9765251a6d33402ad0c0c151fa1930d557248f2aef24e59821f7c649f6824f3a00cbc60c78fc3478969443b03cff9bd6dd1944f79fa7b55005874a7c3b6e6e4e19c84975dbf266a572fa0653111af78e2637f9588ae0cb8283f29f55b5e03bfa9caabdb322be5a2c097b8ed1fc6b5de9e2d9833840da9a036738f5a260b2bbbe0392ba7d982bd567573c9a8c3558103dc62e16c0072a97e2355629fc50960bc3b89949a2aa52bce12379c500e767a986762628cff8f69f73d359ef604a48dd15e7d5c298330ba5be94afcfc913f8329aabae358a9b936e6c19f9a0a45f239eccebcae9143aeb66dda74a0a9714038db0986fcd6c8b2f27330657cc35a1e1da3e4805d4f360cd2de4f798bebaf60daa49e5e4abef7dfb930080bc962d66f859c2138c3d72cbbb8ab11ba47d19406e2fbefb30751631e1fad5cab36fc18907fc4790534fe4ef07b2b0058ae14e0762a4a185f1008f4f4f7b8f30aa62f83806a7ff0e0bca2178981a472071f7bd2ba12578b53a131ad4643caacb8cba98caca210e732e7f2df5373f0c637826c4daedcee4d8439392e9e817fc01f3b504142639273a73cd6f5c8c8033e8aa145359ee6808e4f7b10d35646e642f1c2693002f4bf321c72b33d2a7c6bf1864cbc543d1b07785c12ae87f908498a18b32be69f11d8db79d899f605b4c8bf74ae5cdedd5bfd17cb24469076e9d357b7a0abd9a55384f70ad49997948037a630d2d016e85d468c53127b09ac8d7314245ee0082aaa56559c41ce1a986b04bc21fbabaab0731a870eb0aa98d02ce78ec899b8d1ca5488d0492ad0eafb7c17170806f229fb01739d6ec50040cdbcfe16089e478ffc1713c06bb0b7db29f6a5c5ff20c5d1168ec0f138d36a9465e304c3ef6bbee4f6adb26348b469c0718ecd34f0f4ce7886690fe17c8160ec5ba873483ade45233392be8ad11c97f95509d8ae60846c62f0ba45f5f23cc4840280f043677ffda3385d8f4a3a2bad3bb8f9077dfadfe230e6e093eccb4ff6c0e7cab3df81e073c880f9fc41a404ec3144507ebc53c0778068a3ed3abce5d90ba084d71d221373663e9a9686ab654eecbc45fb0bf308ae22543ebbe65996d329018bbd6d4426d774a4babcc3e97c95acc40877bd1120f0208b54541138f4eb88517e2ca4562b409de39c41d636a0f3594f3d065c2e710af90aa55d0ecd20f383dd6fac7c93cc6011469fe5f4fabefc0c12ac0b77a1f44da769a1b6720a29a7969459feb18f61f73457b2aff8b410ff264d10f4be0ac000c4c6f29d656b9a1887df1eeb786bed0c5ff84be315167ad0506786a9cbf64fbebb4d7eab1d9bd9108bf10dfce2559007edcd6fab26b195534e06a6f3f862e351b7b68fe9e3eb6bd9f47f83a6bf49a36c8ed2f6c8c5d3bd2f4a33d791ea61ee2e21a46e46807add328bb3c3109ef7a402b9e3fa16957693dba1d4a4c361bf6848114cbe29e601bb38a532a387edcd5c39b1171471d8590dd4fda56c7d43b9007b1490ab3219d598048fb50d9290713c079031642fcee9d2ebf03c193ea152b30a1ef9e1b30cfb7c3069432295befdd94bb04c8e9d67e367b787031515dc4f64e3496e8c2c390676c7a89a85c02fd681fc7851c0f652b3d9444002991620ac3a0ba7a77139bea95fa8d053359fbc58c392cb194ec3e6903b841404f735f37e5d1608606be851db16bb9d0d659cb16a3edebbd3613f16cd52b5398196d3fc031a611e7b8d61e4f91c2ab9310a6ae26321c7486568f23298552b4a824cb797b3171bf2f7e2d8444734aa8af3a720cbc8a61161b462f9189c11d687948b7271226406f37429ef09d13b17dd21c4e72be1bc0b816fdc096312aff7f19f3a2181ccb08d1f92aa003c284fcebcc8584cfe242dc8fb0e8cedd71dc2ca48df33c9e650e8bc6f331f9eecb4c2de8b75133760b4c51948b990675e724a68ecae3f2d88c7abfc9bee0875f7feb691b813c1825a0326d887032b5016b69c228cb01243d150c6a188cca6d22f469e6195bf2f3d6d4cedd8ef43e9486f5e9cb9f70e5a92cd2e62bd9c70775d900784bf6283b074c9c0df6e5da7465fe30fd723cd4918dd3da6b7e5475c89d34a4075e94a938047625efa4fb8d02b8616f4f84378ca26c875a364e68e3a02ce5dccb0dc0b686ec52384c076133ddbf7eebf178411109c72171a87625ee0607f94f1ad9dc795906ec7012a51d3621f4fa19f25891d8415bc4a0e3273c21159bff5ceeba3767445fa6a24383e5f165a6fd4fa579a02935943aded524f6d6a540d67b44f4d7d0cefd1c08a53a1a06a4ab5157f8f64b22f3875f6c9fdd76507e277691aaaef9a90352cfbe5005d13b35fe0ce04d3b3362590053c5a7e3b6932364426aeba2bd79943a2b50d5856d3ecfc74bc02318f9eaffdd08f20560bd1d0f7f643ec8e05fc19a3188fa77913092b0ddf40f8be0cc278998dc32da328ddead37f6659d780bd530a48b4bfa230370853db872385b5ece3a9a1f39c69a2f7290ae92f769cc996ad69e22038352fffddfde95f9951c4e0029e6244809bc8d77f262cd3057ab49277ad4edc55f94235c01f774de6a7e61f5e688d71e26348cd61c30348bdc9debb28eff7206bd67bd92b038b584afa3526c32cdcad81402b3642ee9fb608a4e18da9b4250c54feb404cf636caa798bd7e1087f60f424904616c959548650976d8577176356b2d47f46417f00000000000000b1b7f9ac7220efbdb49c081dd38f7c8f718f2969237a49f6200d62e879030b0b6229f39dcac78af38be9287fe0bd04b2e65e8555399ec5613856688d547bb43b472ce03ba3190112a004def789771f83faf390ea062a2b093aea35027c6331d097db997a612bfddeda832226851a751b2116ede07459e6e1717a47cb2f93d7f140361183f5d2a0773b8ef0e458b3489176672223eff9701ddf0a3caa2848feaa54ebf4943b409fbe9369b8c2d0f27a9fa6caeb6c321b19f9e7daf7410142a8e1f1649a855165b6dbfa61570926069d94894f616ef85469113add5fce8db6f22a1bcc3f93b75d94644ff75e5716536c727747621e7664a93519faf3acdab5f29b346172892697909f01051474bb8811d4cf1bdb32ead2364a2d89965fb7d523d5d31f7c7bb891e49d0387c2b235f610fadc23b4463f6a31d4a8a068b8e392ed3d27dd27832c9fa6a7d9a170137cef0bea684311e098b6cc60f36e09b1abc09cb089364e0e256f5d624e6098f02e53fc74724ce9f1d13517fa53968554b523c973ecb03643ec452addd7b566d6d12cad7a0acfdd8a97fffeae567c87aff01b2be11e3a95c54bcce3449c4564132be69c08f309ab97c57349f29a1b8d3d78bcd623409966550e294523e21750930b97f012c4129dd0b55142b4c559fba8cd07083cf6cdd0fd36cfd38f3e0de2da821f2d9f79f82239d6ec1db4dc9dde063e35b1d5ffe929c56744c56c3862b8bd8b95dee19254cd480500c2942b594f0eaae14c3eb07d9d1c5d201425e9e3923b41457fd7fbdf747b2fbc61480aad014d8917ff8f5bd048458c55348b292ff00026690a04a07e90fc0373e1b6ed62ba81af0bc4bda161ef8400887481fcfb8cdc4127500e3fb2a071896f657d6fb04912f3395e5f9e66eab3b85c28a2e37b156511bad5b0d2720670e2b1a762333f42ba528668fda6ea0a80a398129eb3347310260f9f26d5ae249bef77d51d2ed248e0775cb634e48c830cc2c2512376bc411258edd8f73a2d7adbaef40ab79d2ae37f27e2893048d59693a355c87e43b53d545c16997fa318f1bff6a7edb29a7ab80a2381ca828b6d8c5d7976abb11d955faef8b8d5589fea555be1803eac4730a4b9ff3477cf462dda1fadbbdbbcf6826276144875d58e12eb9670c6324f0249b220f1336f9ba43b732bd8c421b040680417a1f68977d6beefbfa9358a4d861cdbcab618043e661208b6939313e2bb01d77509c1df93d87d94da5737d2a10a935b44b264fd232dbc2e59036e0d690431627e0903343b8352ac291eea31d1424c34f9f8fff7fd8df9f6330f88598004a353bfaa5e71d039b8caa33770f9050dbce61ed1c2c0285d23bd4a0b4cd9237ec7c2773474d02881cd7d5541dabca4bafb11f7362160c4a871716720d8d2e26c0400b4abd45c93ff25602d93a1031ffaca642d6f88f8b7ba38de3d8cdaeb89f8fe8de3f0c089bd8b360552d1c26845ccabd2d86acedb16f20640648527a420c497c4af51ef463ce1e3fd8f70f06fa016f12b307e1d846ca35e0f22654456705ce42334401fd2e993c6744918f578fe4d1e6e434d53cb8960008357036ea2c3b03ed9676094fa9693345b0db656273e350b10815755ff9010769af2fb6c5cbc859cce9c8a313cf802a2375d1664b61716067fec9609928f0ccb97397f52765a00334c5a620203977c1df6f9a6f13e46e3be2503ca6e1b1332293dcb2babf2f6019a99274621d0ffdafd9447ba70c948d4c8d9b5b093d36f8e6b8136b16a7da020cf6022b10cd13237aee15319c83b0522aebf523b13ca037d0aa604c5a53fb6536edb8a3d0fafcd66dfd4cdb461f8195c41df043fa6f46e490f43c71422e6de020dbe2ac543c516446ce1ee5890df424ba716eb91da1f8e127777a0e4396fb35654468747179d2884951e06c952f7f1ea15ee46b60aa15e562023eebfc3a79693adcd67fb23ab6b74b55b65d8421be9f454f8d89bd76340c46d5309c892121dc19f8124cacd2b8da3fc0c0ab92dbb5e0537bdbfcffacce03376cd10223815f7801b1e20e32080694dfc8a416e0aa0fc76dcfd037366406aaa84d48a8cbad3fa48ba342ec4aa02f391c6039403fd4dfd8a5cdf4b8c4345febc085798b5c7dace7a3646e2b9e4cf57c13b959f21e33bbfec54c85922a8095f2c2de1f1db72493fa9756d69b0ace403bc48adde75bfaa4d723a8dac4dfd370cf02329df1a8e8576e11fb8137910cf753cc76585a2d1c7a0da1304f44c26076d87b5d402c72a724b464b5cc2c0ee6d1fb472a40a41e858697dbb82b6103fce576063d2aae0b4dcefef78f8de0640c82d955c72f5b1280973410100000000000000b419e18c7c62e080b8034ac7e1134524c1fcc4f93833280fecd0ff424e39cfecb21e714e0f9e1843296cfddea2e35fa6a7bfe6069b366316ef5e6b73aea9e069d1538eaf11cd503b50435e976dfdd39e05918be1b4f91005583c8b84c33b13692bb8ff005fb9d29958f9697cc83c48a0f3666dfc6cdff0d5f923ddeb4c74db22597414f1973d3cf339af2b5b2640857c232788e21ab92cfecf7938d7ccc0162cf913d88967b5abe80c61d3ce1efd120a856ae450e4d7593ebad568a74c7f5ee1bdfd17ef1f72e7703b36b5001e593f1c6908edcb023095fa059e97d68af2ea295b766aaf819eacd85946bfc5bf0c35363530870cd8ce3931ce7c3885fbae123dd924871797070b80ff914b7bfaed7d0a54a372716bbead8797a49524e77025bd9b62e1fd69ec8a7d55741716df76be640ab8e7c44600882d316f220780013a80ca957fa9ad31c910e3565a8e1e1a1e96c5362bd0cbfac2a53328df35fbadc141f10e5a1ef3d1bbaf877d0659b051de0f7636712cbbbebf095718c96349a96fbe6e0389a511635f0cf31906fd6bb6c2d7ad9be31e9293b418f13c22929c90eb0950aeb343b61401e632fe3de3dabf51dd308d17d6d6643f08c757ee17131cb91b611d20ab2ab35190859d8e4d76a44199765c1efa2bdf5e3c3994585e0a7d866dfe5be4601442da0b686f4f44ba8dae33d639ec2a5acf11e6650593bdfdcbfc5860144a15734eaf58e9e2f5495471ead9a25ec659df37e11e84f4dd7283687533de576a9de4b705f9e35964849206259862a5a4c956d26945ff0b8456e536d72136b4989ca135f00026107662cfae9696f2bf46a8b3207330961c8b31c8bb8dd2b0a6c3a833ab7b7aa97df0c14941d1833db60892511ce0a77f87bf54927f3d912de88581cbd301e87554f76b46a850177e550924db74794f6b5f8db5a74c1f932b3b4bf4ece2cf045c4fd490906f2ff09bdc8f683cc61a5923be82011fed297c962f8d7690a9fe980130d4b6545cbdad82ce198c8a1b884bb36288dac252c69b0d8a4eb53767d297eb64ef7e9f90faa994863efe194040a984a1461b04d1baa746afc353e006b71d4839d4b2ba10d681c344642fedeb8d6a2d518a42c9b252a7d6ba4ee5cbc7a81d543af5fccbc284df3ccc226dcd79b20b987b30ef767d2f810fcc55266802abc38cbed144621a6c0c52bec0706bda66bf7d5e957210e2eb6fba79d7deafbea073c1e298861f46c6e17523182f67e133121f3ea2d8316ffe6de51fb3717edc99361c979e9ecb51e3474a15accb8254003358975b786d81281bacfdffb655a5855da5c5edabcfc5e3e5ca570c16efae87032d3b85cf3d52b020fef5fa8339f776a2d629173252fefc9fb2085b49354fb255b0ca941d60c41a2cb10c742af0ea277b65b960f49184297336f1a8e049eb80c3d40ef78b0e8a9a4b5848caf5131b2773a7c18421db56afea355d869ab81f0f7e753651e8ce742c379ee4f08fe23e7c1307bb9f00e60a4cc804f4b47ac42903e1b1ad99ff795130833a202c36afa8851a7ae7c0eb7d25b006bafbf6b0f579e910c9207bce105f73cd219dd352af1b3250a273a7eae3fbbb8ece80d2b61591dd25679e541bef9579a538e0c0fde66ddb176c84c235de570860128ae90a44e8219841a1ed84d5a3721afce3b24e0173542644cffa2b2603171bdbf3a5b2d7c9d51b7a31f7b6675d98938c8e003fc26a2931811dfcce100fd5eed707884c9f1a9ff629967eaab2908f2988378a271c373828a9a836dbc6b1db9881bb30509f693a92daf26f0741b01855af81e594c318f0dd13a89e87fb3d7b3527e7b007bb2e744a322ac3a40e05d24619c3d41643b6b811af49eda5448c21af06b8707baa6b8a2f7690966152ada65a5253aaece296c1ef46a12b399074fbc40a791f4677f05109bbc103c5bd37ccf7b67e4fd6b6ad97314a9dd236dee6e1371186ccc03d4d8560a22cb6709c35a391481d659d7ebeae325f5c9a20de7374b6715b4d8e77997873929d7339b20ed8172d68b0510defabae5712e5509e41afc5d8bc531e296832d285d9410a0d1173d194b3d15571773c97fd12b817fc2d3e0eb6a4bd6720f57d487023f52e3e0f7dbb0e8a7807283951bc8dc7344afb95d8d93f34020d7b1d6b90bf0520a35cefcc8895807286f624c7df58c89d3fcc2495e3acbb98d4424b1c1d199878dcd9ac5e7a2b216aeaff32d04b74495d16a20aa5854e750c0a66f60c69db44674d695eb8d3bb7ae36065d1e6efe9d68527e57c21dc4bfb33f4d8625a95fe3d2d3ac42abf540dd46e32619e63f9cb40e2de1b6c2102553c1907f6c62c0c689c85a1aa0b1e801b0115aeffb9618d1b412d9d7be9fda786fc9729c6819f60dff95c14720ef7afd69e92fd36fcb3f25b5388f15e621593132418a5caf60074ced3e1f6b0120fd162ac0e13395cb8d4462dc32406c9a04252666ae7e74e9da335522da7ac76d377ee77a1a4d4fb0ceacc3259d486466f8f45f795bcf04ad2935d7a4b0aed6eafd4bcf1830480d044af5fba3146a7730aa87b3b33494fcc3f4111507f059c65b82171acfb5a3f6c7c9d3b156788ecaf9b3581b36d0a059e28fae2f3f40fa631342dbdd89c28429e1eb511121f2dff45f73a8eebca82caa064c1e158dec6d8fed2d05e3090f70cc8406d3d9cc429783f60e63bbddb2a61d6e995238ee4f0e3eeb23bc529535dbdafd7db565541ca2dccba24388c7cbf1989e9d71eb2a3804b224350fa30e979c08871e5010a32ec886ed30128f6e509ed87056fb45e1845282b5acb1262fbcf5361284a12a009c0dc914a20572e6c4c61bfbc5a01fd9e605aa95ae85fb704e8a59580fc00d0720c1b212c44d33c05193d4c6f9f87406c0be25e5d9cf7f548a2ab9cf829a543cbea4c9d338790100fac6cb3a3c989a1c53f581b459e5b4d90a4c08b633d54c9687b33da736ec62f141b50bcb4ecc13044a598696ba9c0f9bb9644565ab5c2163df0a47f0b7362c0e51746ad2fdebb31b57c1ccbcd8dbb0071c0a69280bd8a7e97abeb6ee17e8cf704d24229e55905b5799ed5d7b98b08a6a7da5c31225edf80a487fb897301b0d134b953c918b320bda3ab29e69f759f1bece2910079d3aea3da89fd6cff8e4c2e24c1dc1a1d6f222f45f61747c2e0d5962846a85180d0b0963d33b24a2daf082b69f2957f6e90e69841b4cbfa1166226cdd6c06c24dd89c2e9b1a495851e1e5f7e1cb6944f660f65ce5e41b12d003e365393b15f13fcaf21031ca6ef8f270c0109b1298ac11c6fc87397bfd5b6e96339f2449082488e9f74cc5cb08f85d9705c53477f25d2f988f817014f2065261e568d3e8175da7811f1a05cbeb07f9b0a156b6abe016e9b8300e212b5e5453c765e5c466e88a5d8f98ec785df0267349c8ee49c18de6d3910d09843310a390522b8751433ebfc6206f6c3e654e710d3a3f76b1ac79842c0451d4904bb82fb631d94dfa7658727f2ac53feaa2f120202d616a9db782f5c25a2b8c6ab387cf3c5dbfdc2631891d875a0ce758bd35772efd9eb1c18a1d92e7a45f958721216585f2d85b8826a16c5bc4e528626e80851f49f29e2cf7f6ef9a6b8b3faee63c8da84b12ce71a153db2af86b29496e52ef13f9f9c86f05001b61f3290b565af6c8c404d2bbdfee74c1f623660647150d487bc5c4a0ec8509c47e89e795ad207463e1bd4f0aadda0d735a2f69028e8b361e4b259eeb81113587fc2fc28c26e82949a3f0a6e9f86247d8408ffbfbf96dc892dce4d8759130198b54e6305d2cd07835c5cf9659920a4cf024285b7584b70e831256813fa3a200f3ab8851b411d6cfb91bce34fb0cf503d439ee1b8fc434cac3a318f1bf65402487503b5c7bbb076ebeaddb2ed22b444902b24cd9c3375621684dc854c4af685b6f768c1085862e94ef0337a4458b1dbb3ff0c724041c82aa956636c40d15dbf0ba1f7b8188d48b5520fbbe65df81bdf86fc2480f65c8ac523b1cf57a37904ebb704b4c27b01f60b514cfe990220f187943ec138a673e08a52477cc2f3cad746ee251ddbba7ba13101eae9d32a20df248569d1ab882aff778c544c7b530d5171f04d3518b4ee6a99e07212f8bd72697037551ef3ff35794e01cba640041fc910e599e3d163577f6c837280f84fdbf9a54a1744b32f62834c9d5cdcb94cbd184687b89b3a9cb8a76be61e5f8bf5528baffa774cba2577ffddec869bc24eaa6ec0cec8c6afc3cba22891e8b09fdb5254dca8117e927d4d8ac2ee20775ca7793b82a1d94c0555df748fab1ba794fa608ed282190e5f84eebd49fa12943ad56f205a2e843429bb550d5b160c74083be846d4d70e4e5bb6c2bc5ac764e5c29029604b2bac9eed579184f7b8f98dbd1a168196b42cb57347f6e55d8e4126e9a51ac2daa61e74ba71188606e2a175028b8634fe1c9a636061e163b993068a13c5e9904e1e2c128596768eb842111569526d128f249fc3f7ad4bc3999b1001af8faffe9b264697bfa964e4d5ca4218d1fe0307052057c04435e4a853f44fdedb07083c85fd32a5ce0e0179d97ab921cd541a5def8c3aaf2b63857c195098783e340675e41fbd73657c83fa94781b910a61d4ceec44d7b8865f5a983b56503647f8fe63fd81f67484753a550e1f3b19ecf5c82e0a84e45ef36da1506cb0c083cb8f24808e1d4a9e2990a25ba8dbb6f5d3eb94bf5d9dcd65ed15fea1a995578b8ffe8ffa8f59eab41607774998459527c2f5447e0076506a3b10dd03ab7c858ed9f800ac489e1cedbddbaae0245dc1bb7b3256e686c9b280c50c49333f6d461db5d3e945309014528bfdbaa6b5c94efce80be1b9174a42bd08d2113bb26a0168c8d25758c993e9623ef9a35724e689a903c0712792d9e76f3e2399ff371d47151c9cd559f53a3e338acfe715ba3ede12f8fbe62cb1ffceee3de90d78f63db72474caa58c4e2cc1436419de2f6c8b738125b0ad76ad393eb162aae5d1fc501e6ba51a2ae5a47628a92bdddec71bbde7587613e293be04d6a9a3e6f886f25aebf4569a0e1ea5b3102efbbc051d368b005c791e0ad48b0569f4c3918080383f7789447e5a658e26646d39a8c827339255e766e2535ca2a0c87d3153823a27b8ccf1cf4c30c71fd9b265b00a955caeb7241a894a86e32e51ac7c729c98f4ea46e1fc90da62b1150afdec4c1a0994594bd14e59ae2abe2c4eee60194eba156e1aaf118d017c2ce4b3e92004aa6718e4abf7ce72df63fe0ce6496cba35df00d5760d634e1e934bd", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0x400, 0x200, 0x0, 0x0, 0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=0x0, @ANYBLOB="0400060000000000100002000000110020"], 0x2c, 0x2) (fail_nth: 5) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f0000000740)={0x50, 0x0, 0x0, {0x7, 0x29, 0x25c17c22, 0x0, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 7] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1480.646512][T18897] pvrusb2: ********** [ 1480.654120][T18203] usb 6-1: USB disconnect, device number 37 [ 1480.660890][ T5934] pvrusb2: ********** [ 1480.675260][T18897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1480.706310][ T2336] pvrusb2: Invalid write control endpoint [ 1480.725613][T18897] pvrusb2: Important functionality might not be entirely working. [ 1480.749190][T18897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1480.766296][T18897] pvrusb2: ********** [ 1480.805589][ T5934] usb 2-1: USB disconnect, device number 95 [ 1480.908882][ T2336] pvrusb2: Invalid write control endpoint [ 1480.925890][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1480.966894][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1480.984926][ T30] audit: type=1400 audit(1757677042.065:1915): avc: denied { getopt } for pid=23373 comm="syz.0.4320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1481.004074][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1481.026772][ T2336] pvrusb2: Device being rendered inoperable [ 1481.060662][T23326] pvrusb2: Attempted to execute control transfer when device not ok [ 1481.092111][T23329] pvrusb2: Attempted to execute control transfer when device not ok [ 1481.127782][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1481.137435][T18897] usb 5-1: USB disconnect, device number 122 [ 1481.161021][T23385] ptrace attach of "./syz-executor exec"[18508] was attempted by "./syz-executor exec"[23385] [ 1481.209102][ T5963] usb 3-1: USB disconnect, device number 108 [ 1481.221250][ T5963] pvrusb2: Device being rendered inoperable [ 1481.239012][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1481.274263][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1481.299508][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1481.354792][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1481.580168][ T43] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1481.759990][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1481.773378][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.802511][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1481.835243][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1481.871444][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.881474][T23403] mkiss: ax0: crc mode is auto. [ 1481.930471][ T43] usb 6-1: config 0 descriptor?? [ 1481.955193][ T43] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1482.199931][ T5963] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1482.352084][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1482.366151][ T5963] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1482.422420][ T5963] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1482.478225][ T5963] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1482.493204][ T5963] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1482.504966][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1482.527058][ T5963] usb 5-1: config 0 descriptor?? [ 1482.812192][ T5963] hdpvr 5-1:0.0: firmware version 0x0 dated [ 1482.828958][ T5963] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1482.981473][T23420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4329'. [ 1483.120592][T23402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.203557][T23402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.247758][T23402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1483.256720][T23402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1483.444603][ T5963] hdpvr 5-1:0.0: max device number reached, device register failed [ 1483.517608][ T5963] usb 5-1: USB disconnect, device number 123 [ 1484.056067][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.863737][ T5934] usb 6-1: USB disconnect, device number 38 [ 1486.429966][ T5963] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1486.611487][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 1486.618985][ T5963] usb 1-1: config 254 has an invalid interface number: 235 but max is 0 [ 1486.629619][ T5963] usb 1-1: config 254 has no interface number 0 [ 1486.644953][ T5963] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 1486.664881][ T5963] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 1486.684660][ T5963] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1486.705686][ T5963] usb 1-1: config 254 interface 235 has no altsetting 0 [ 1486.722860][ T5963] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 1486.732558][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.740762][ T5963] usb 1-1: Product: syz [ 1486.744959][ T5963] usb 1-1: Manufacturer: syz [ 1486.749879][ T5963] usb 1-1: SerialNumber: syz [ 1486.772910][T23453] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1486.813179][ T30] audit: type=1400 audit(1757677047.895:1916): avc: denied { module_load } for pid=23454 comm="syz.5.4340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1486.814861][ T5963] usbtest 1-1:254.235: couldn't get endpoints, -22 [ 1486.844045][ T5963] usbtest 1-1:254.235: probe with driver usbtest failed with error -22 [ 1487.019455][ T5963] usb 1-1: USB disconnect, device number 109 [ 1488.165154][ T30] audit: type=1400 audit(1757677049.235:1917): avc: denied { execute } for pid=23471 comm="syz.0.4344" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1488.595747][T23481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23481 comm=syz.1.4345 [ 1488.731707][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4343'. [ 1488.743406][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4343'. [ 1490.021791][T23500] loop6: detected capacity change from 0 to 6 [ 1490.057517][T23500] Dev loop6: unable to read RDB block 6 [ 1490.068054][T23500] loop6: unable to read partition table [ 1490.078297][T23500] loop6: partition table beyond EOD, truncated [ 1490.088553][T23500] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1490.197669][T23496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1490.248740][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4348'. [ 1491.625367][T23518] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1491.741304][T18897] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1492.223200][T18897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1492.241953][T18897] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1492.267189][T18897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1492.411410][T18897] usb 5-1: config 0 descriptor?? [ 1492.811972][T16063] usb 5-1: USB disconnect, device number 124 [ 1492.884361][T18897] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1493.270316][T18897] usb 2-1: Using ep0 maxpacket: 8 [ 1493.276687][T18897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1493.289819][T18897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1493.310679][T18897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1493.355126][T18897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.461849][T18897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1493.471628][T18897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.095252][T18897] usb 2-1: GET_CAPABILITIES returned 0 [ 1494.120794][T18897] usbtmc 2-1:16.0: can't read capabilities [ 1494.287457][T23554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23554 comm=syz.2.4364 [ 1494.537005][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4363'. [ 1494.596369][T23559] erofs (device nbd5): cannot find valid erofs superblock [ 1494.819990][ T30] audit: type=1400 audit(1757677055.545:1918): avc: denied { setattr } for pid=23546 comm="syz.5.4363" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1495.341068][T23565] vxfs: WRONG superblock magic 00000000 at 1 [ 1495.347323][T23565] vxfs: WRONG superblock magic 00000000 at 8 [ 1495.353387][T23565] vxfs: can't find superblock. [ 1495.361013][T16063] libceph: connect (1)[c::]:6789 error -101 [ 1495.367098][T16063] libceph: mon0 (1)[c::]:6789 connect error [ 1495.656260][ T30] audit: type=1400 audit(1757677056.735:1919): avc: denied { link } for pid=23566 comm="syz.2.4366" name="file1" dev="tmpfs" ino=1527 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1495.678685][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.754504][ T30] audit: type=1400 audit(1757677056.765:1920): avc: denied { setattr } for pid=23566 comm="syz.2.4366" name="#34" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1495.777030][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.780132][ T5934] usb 5-1: new full-speed USB device number 125 using dummy_hcd [ 1495.783956][T16063] libceph: connect (1)[c::]:6789 error -101 [ 1495.801064][T16063] libceph: mon0 (1)[c::]:6789 connect error [ 1495.807044][ T30] audit: type=1400 audit(1757677056.765:1921): avc: denied { rename } for pid=23566 comm="syz.2.4366" name="#34" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1496.012061][ T5934] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1496.027404][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.053798][ T5934] usb 5-1: config 0 descriptor?? [ 1496.073025][ T5934] cp210x 5-1:0.0: cp210x converter detected [ 1496.315699][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 1496.562829][T23578] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4369'. [ 1496.659947][T23561] ceph: No mds server is up or the cluster is laggy [ 1497.227057][ T5934] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1497.240527][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 1497.401330][ T5963] usb 2-1: USB disconnect, device number 96 [ 1498.559922][T23591] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1498.744163][T16063] usb 5-1: USB disconnect, device number 125 [ 1498.764222][T16063] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1499.793115][T16063] cp210x 5-1:0.0: device disconnected [ 1500.506151][ T30] audit: type=1400 audit(1757677061.275:1922): avc: denied { write } for pid=23606 comm="syz.4.4376" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1500.584309][ T30] audit: type=1400 audit(1757677061.655:1923): avc: denied { create } for pid=23611 comm="syz.0.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1500.695648][ T30] audit: type=1400 audit(1757677061.755:1924): avc: denied { cmd } for pid=23611 comm="syz.0.4378" path="socket:[79364]" dev="sockfs" ino=79364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1501.742508][ T5963] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1502.339858][ T5963] usb 1-1: device descriptor read/64, error -71 [ 1502.676969][ T5963] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1503.150197][ T5963] usb 1-1: device descriptor read/64, error -71 [ 1503.294043][ T5963] usb usb1-port1: attempt power cycle [ 1503.597730][ T30] audit: type=1400 audit(1757677064.675:1925): avc: denied { remove_name } for pid=23645 comm="syz.1.4386" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1503.628411][ T30] audit: type=1400 audit(1757677064.705:1926): avc: denied { unlink } for pid=23645 comm="syz.1.4386" name="binder1" dev="binder" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1503.719094][T23651] tipc: Started in network mode [ 1503.719218][T23651] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1503.728583][T23651] tipc: Enabled bearer , priority 10 [ 1504.628466][ T5963] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1504.645080][ T5963] usb 1-1: device descriptor read/8, error -71 [ 1504.882722][ T5934] tipc: Node number set to 4269801488 [ 1505.955524][T23664] lo speed is unknown, defaulting to 1000 [ 1507.196621][T23676] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4392'. [ 1507.463971][T23664] lo speed is unknown, defaulting to 1000 [ 1507.484128][T23664] lo speed is unknown, defaulting to 1000 [ 1507.919520][T23690] binder: Unknown parameter 'stat' [ 1507.926005][ T30] audit: type=1400 audit(1757677068.995:1927): avc: denied { remount } for pid=23688 comm="syz.0.4397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1508.040371][ T43] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1508.628857][T23702] team0: Device gtp0 is of different type [ 1508.695265][ T43] usb 3-1: not running at top speed; connect to a high speed hub [ 1508.707887][ T43] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1508.720387][ T43] usb 3-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1508.733636][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1508.753470][ T43] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 1508.765806][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.774157][ T43] usb 3-1: Product: syz [ 1508.779642][ T43] usb 3-1: Manufacturer: syz [ 1508.786851][ T43] usb 3-1: SerialNumber: syz [ 1509.065129][T23686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1509.108226][T23705] SELinux: failed to load policy [ 1509.130132][ T5963] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1509.224643][ T30] audit: type=1400 audit(1757677070.305:1928): avc: denied { ioctl } for pid=23710 comm="syz.1.4403" path="net:[4026532785]" dev="nsfs" ino=4026532785 ioctlcmd=0x64bd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1509.303814][ T5963] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 1509.330245][ T5963] usb 6-1: config 0 has no interface number 0 [ 1509.386463][ T5963] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1509.445169][ T30] audit: type=1326 audit(1757677070.525:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23716 comm="syz.1.4404" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa10b18eba9 code=0x0 [ 1509.450267][ T5963] usb 6-1: New USB device found, idVendor=0499, idProduct=6bab, bcdDevice=68.2f [ 1509.508924][ T5963] usb 6-1: New USB device strings: Mfr=20, Product=2, SerialNumber=3 [ 1509.580073][ T5963] usb 6-1: Product: syz [ 1509.585793][ T5963] usb 6-1: Manufacturer: syz [ 1509.591512][ T5963] usb 6-1: SerialNumber: syz [ 1509.600568][ T5963] usb 6-1: config 0 descriptor?? [ 1509.740437][T18203] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1509.890663][T18203] usb 2-1: Using ep0 maxpacket: 32 [ 1510.634304][ T43] usbhid 3-1:1.0: can't add hid device: -71 [ 1510.652780][ T43] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1510.685618][ T43] usb 3-1: USB disconnect, device number 109 [ 1511.258830][ T5963] usb 6-1: USB disconnect, device number 39 [ 1511.325364][T18904] udevd[18904]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.199871][ T5963] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1512.260274][ T43] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1512.472064][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 1512.494083][T18203] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1512.500622][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.512698][T18203] usb 2-1: no configurations [ 1512.512715][T18203] usb 2-1: can't read configurations, error -22 [ 1512.658989][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.868469][ T30] audit: type=1400 audit(1757677073.855:1930): avc: denied { mount } for pid=23740 comm="syz.5.4410" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1512.870288][ T5963] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1512.890558][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.906763][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.919562][ T5963] usb 1-1: config 0 descriptor?? [ 1512.927043][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1512.938954][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1512.953677][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.954517][ T30] audit: type=1400 audit(1757677073.995:1931): avc: denied { unmount } for pid=18085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1512.968427][ T43] usb 3-1: config 0 descriptor?? [ 1513.173751][T23751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1513.187555][T23751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1513.215686][ T5963] hid (null): invalid report_size 24940 [ 1513.232291][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.239379][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.262393][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.273849][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.282575][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.290037][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.297375][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.305152][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.313074][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.320307][ T5963] hid-led 0003:0FC5:B080.005D: unknown main item tag 0x0 [ 1513.328271][ T5963] hid-led 0003:0FC5:B080.005D: invalid report_size 24940 [ 1513.337408][ T5963] hid-led 0003:0FC5:B080.005D: item 0 2 1 7 parsing failed [ 1513.345536][ T5963] hid-led 0003:0FC5:B080.005D: probe with driver hid-led failed with error -22 [ 1513.375301][ T43] usb 3-1: USB disconnect, device number 110 [ 1513.423401][ T5934] usb 1-1: USB disconnect, device number 114 [ 1513.770699][T23755] SELinux: failed to load policy [ 1514.590322][T23770] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=4633 sclass=netlink_xfrm_socket pid=23770 comm=syz.2.4418 [ 1514.879860][ T30] audit: type=1400 audit(1757677075.825:1932): avc: denied { connect } for pid=23762 comm="syz.1.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1515.400435][ T30] audit: type=1400 audit(1757677076.415:1933): avc: denied { shutdown } for pid=23780 comm="syz.2.4419" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1515.412569][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1515.477094][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1515.488967][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1515.499581][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1515.508784][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1515.532548][T23783] lo speed is unknown, defaulting to 1000 [ 1515.835244][T23783] lo speed is unknown, defaulting to 1000 [ 1515.842895][T23783] lo speed is unknown, defaulting to 1000 [ 1516.085514][T23793] loop6: detected capacity change from 0 to 6 [ 1516.107580][T18904] Dev loop6: unable to read RDB block 6 [ 1516.115582][T18904] loop6: unable to read partition table [ 1516.125869][T18904] loop6: partition table beyond EOD, truncated [ 1516.161366][T23793] Dev loop6: unable to read RDB block 6 [ 1516.166983][T23793] loop6: unable to read partition table [ 1516.189033][ T30] audit: type=1400 audit(1757677077.265:1934): avc: denied { append } for pid=23797 comm="syz.1.4423" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1516.216512][T23793] loop6: partition table beyond EOD, truncated [ 1516.229021][T23783] chnl_net:caif_netlink_parms(): no params data found [ 1516.234866][ T30] audit: type=1400 audit(1757677077.265:1935): avc: denied { ioctl } for pid=23797 comm="syz.1.4423" path="socket:[80042]" dev="sockfs" ino=80042 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1516.245987][T23793] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1516.410548][ T43] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1516.411207][T23783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.427309][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.435407][T23783] bridge_slave_0: entered allmulticast mode [ 1516.443614][T23783] bridge_slave_0: entered promiscuous mode [ 1516.452621][T23783] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.461204][T23783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.469596][T23783] bridge_slave_1: entered allmulticast mode [ 1516.481673][T23783] bridge_slave_1: entered promiscuous mode [ 1516.550402][ T43] usb 1-1: device descriptor read/64, error -71 [ 1516.558239][T23783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.577243][T23783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.628165][T23783] team0: Port device team_slave_0 added [ 1516.636246][T23783] team0: Port device team_slave_1 added [ 1516.661467][T23783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.668429][T23783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.694291][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.711972][T23783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1516.740086][T23783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1516.747101][T23783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1516.773043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1516.870000][ T43] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1516.916508][T23783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1517.094213][T23783] hsr_slave_0: entered promiscuous mode [ 1517.102371][T23783] hsr_slave_1: entered promiscuous mode [ 1517.108493][T23783] debugfs: 'hsr0' already exists in 'hsr' [ 1517.114948][T23783] Cannot create hsr debugfs directory [ 1517.130326][ T43] usb 1-1: device descriptor read/64, error -71 [ 1517.284616][ T43] usb usb1-port1: attempt power cycle [ 1517.373074][T23783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1517.392044][T23783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1517.669889][ T5852] Bluetooth: hci2: command tx timeout [ 1517.850772][T23783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1517.872536][T23783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1518.032189][T23783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1518.050021][ T43] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1518.076018][T23783] 8021q: adding VLAN 0 to HW filter on device team0 [ 1518.085164][ T43] usb 1-1: device descriptor read/8, error -71 [ 1518.095166][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.102315][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1518.206104][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.213257][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.254700][T23829] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4431'. [ 1518.330526][ T43] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1518.360816][T18203] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1518.370343][ T43] usb 1-1: device descriptor read/8, error -71 [ 1518.476723][T23783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1518.494622][ T43] usb usb1-port1: unable to enumerate USB device [ 1518.531886][T18203] usb 3-1: config 0 has no interfaces? [ 1518.537527][T18203] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1518.547663][T18203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.557927][T18203] usb 3-1: config 0 descriptor?? [ 1519.107968][T23783] veth0_vlan: entered promiscuous mode [ 1519.172268][T23783] veth1_vlan: entered promiscuous mode [ 1519.535929][T23783] veth0_macvtap: entered promiscuous mode [ 1519.548324][T23783] veth1_macvtap: entered promiscuous mode [ 1519.651636][T23783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1519.674351][T23783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1519.692480][T13047] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.704126][T13047] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.727048][T13047] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.740614][ T5852] Bluetooth: hci2: command tx timeout [ 1519.770655][T13047] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1519.902680][T23849] SELinux: failed to load policy [ 1519.984273][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.155777][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.304235][T13047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.346672][T13047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.364619][T23860] sctp: [Deprecated]: syz.0.4436 (pid 23860) Use of int in max_burst socket option. [ 1520.364619][T23860] Use struct sctp_assoc_value instead [ 1521.345332][T18203] usb 3-1: USB disconnect, device number 111 [ 1521.820115][ T5852] Bluetooth: hci2: command tx timeout [ 1522.289228][T23876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4438'. [ 1522.316493][T23876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4438'. [ 1522.545408][T23886] 9pnet_fd: Insufficient options for proto=fd [ 1523.010529][ T5934] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1523.171513][ T5934] usb 1-1: Using ep0 maxpacket: 8 [ 1523.178808][ T5934] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1523.188518][ T5934] usb 1-1: config 0 has no interface number 0 [ 1523.220843][ T5934] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1523.241038][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.258396][ T5934] usb 1-1: Product: syz [ 1523.263292][ T5934] usb 1-1: Manufacturer: syz [ 1523.268007][ T5934] usb 1-1: SerialNumber: syz [ 1523.290732][ T5934] usb 1-1: config 0 descriptor?? [ 1524.039863][ T5852] Bluetooth: hci2: command tx timeout [ 1524.222149][T23901] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4448'. [ 1524.259361][ T5934] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 1524.271085][ T5934] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 1524.282520][ T5934] usb 1-1: Failed to create links for entity 5 [ 1524.288771][ T5934] usb 1-1: Failed to register entities (-22). [ 1524.312807][ T5934] usb 1-1: USB disconnect, device number 119 [ 1525.961925][T23921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4455'. [ 1526.081378][T23930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4457'. [ 1526.110706][T23926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 1526.117328][T23926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1526.148363][T23926] vhci_hcd vhci_hcd.0: Device attached [ 1526.173389][T23934] geneve2: entered promiscuous mode [ 1526.248167][T23936] fuse: Bad value for 'rootmode' [ 1526.660681][ T5905] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1526.737409][T23931] vhci_hcd: connection closed [ 1526.737443][T23932] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1526.791706][ T7825] vhci_hcd: stop threads [ 1526.837845][T23945] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4461'. [ 1526.915805][ T7825] vhci_hcd: release socket [ 1526.939005][ T7825] vhci_hcd: disconnect device [ 1527.307767][T23950] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4463'. [ 1528.255954][ T30] audit: type=1400 audit(1757677089.325:1936): avc: denied { read append } for pid=23956 comm="syz.0.4466" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1528.281045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.309939][ T30] audit: type=1400 audit(1757677089.335:1937): avc: denied { open } for pid=23956 comm="syz.0.4466" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1528.390044][ T30] audit: type=1400 audit(1757677089.335:1938): avc: denied { ioctl } for pid=23956 comm="syz.0.4466" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1528.416295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1528.709755][ T30] audit: type=1326 audit(1757677089.775:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23963 comm="syz.0.4469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f612778eba9 code=0x0 [ 1528.905717][T13995] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1528.921910][T13995] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1528.934614][T13995] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1528.943890][T13995] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1528.953982][T13995] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1529.028278][T23973] lo speed is unknown, defaulting to 1000 [ 1530.072751][T23980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23980 comm=syz.6.4473 [ 1530.136071][ T1148] Bluetooth: hci7: Frame reassembly failed (-84) [ 1530.140506][T23973] lo speed is unknown, defaulting to 1000 [ 1530.331853][T23973] lo speed is unknown, defaulting to 1000 [ 1530.431332][ T30] audit: type=1400 audit(1757677091.515:1940): avc: denied { append } for pid=23992 comm="syz.1.4475" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1530.633525][ T30] audit: type=1400 audit(1757677091.715:1941): avc: denied { mount } for pid=23998 comm="syz.1.4477" name="/" dev="hugetlbfs" ino=80889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1530.757511][T24001] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1530.765944][ T30] audit: type=1400 audit(1757677091.835:1942): avc: denied { mounton } for pid=23998 comm="syz.1.4477" path="/bus" dev="hugetlbfs" ino=81676 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 1530.769356][T23973] chnl_net:caif_netlink_parms(): no params data found [ 1530.798361][T24001] overlayfs: failed to set xattr on upper [ 1530.829089][T24001] overlayfs: ...falling back to redirect_dir=nofollow. [ 1530.863603][T24001] overlayfs: ...falling back to index=off. [ 1530.879145][T24001] overlayfs: ...falling back to uuid=null. [ 1530.896410][T24001] overlayfs: maximum fs stacking depth exceeded [ 1531.030878][T13995] Bluetooth: hci6: command tx timeout [ 1531.121972][T23973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.192395][T23973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.199976][T23973] bridge_slave_0: entered allmulticast mode [ 1531.395852][T23973] bridge_slave_0: entered promiscuous mode [ 1531.591808][T23973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.617642][T23973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.632571][T23973] bridge_slave_1: entered allmulticast mode [ 1531.642934][T23973] bridge_slave_1: entered promiscuous mode [ 1531.720391][T23973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.733320][T23973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.804614][ T5905] vhci_hcd: vhci_device speed not set [ 1531.901162][T23973] team0: Port device team_slave_0 added [ 1531.908996][T23973] team0: Port device team_slave_1 added [ 1531.956080][T23973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1531.970234][T23973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1531.996139][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.056035][T23973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.084758][T23973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.125266][T23973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1532.160252][ T5852] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1532.656240][T23973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.719352][T24033] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4483'. [ 1532.734487][T23973] hsr_slave_0: entered promiscuous mode [ 1532.748770][ T30] audit: type=1400 audit(1757677093.825:1943): avc: denied { name_bind } for pid=24031 comm="syz.2.4483" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1532.751097][T23973] hsr_slave_1: entered promiscuous mode [ 1532.778744][T23973] debugfs: 'hsr0' already exists in 'hsr' [ 1532.785230][T23973] Cannot create hsr debugfs directory [ 1532.870614][ T5963] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1533.002258][ T5963] usb 7-1: device descriptor read/64, error -71 [ 1533.093900][ T5852] Bluetooth: hci6: command tx timeout [ 1533.130565][T18093] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1533.162393][T23973] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1533.187048][T23973] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1533.216214][T23973] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1533.264110][ T5963] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1533.309977][T18093] usb 3-1: Using ep0 maxpacket: 8 [ 1533.317365][T18093] usb 3-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 1533.331473][T23973] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1533.338203][T18093] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1533.365998][T18093] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1533.397266][T18093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.428527][T18093] usb 3-1: config 0 descriptor?? [ 1533.434215][ T5963] usb 7-1: device descriptor read/64, error -71 [ 1533.556023][ T5963] usb usb7-port1: attempt power cycle [ 1533.644822][T23973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.684552][T23973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.705336][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.712287][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1533.712484][T13094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.720052][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1533.734985][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1533.744455][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1533.751657][T18093] usb 3-1: string descriptor 0 read error: -32 [ 1533.764464][T18093] usb 3-1: USB disconnect, device number 112 [ 1533.873894][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.881025][T13094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.940336][ T5963] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1533.961009][ T5963] usb 7-1: device descriptor read/8, error -71 [ 1534.315690][ T5963] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1534.395518][ T5963] usb 7-1: device descriptor read/8, error -71 [ 1534.520242][ T5963] usb usb7-port1: unable to enumerate USB device [ 1534.759832][T18897] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1534.872266][T23973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1534.919628][T18897] usb 1-1: Using ep0 maxpacket: 8 [ 1534.929104][T18897] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1535.022744][T18897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.052759][T18897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1535.121927][T24074] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4491'. [ 1535.158994][T18897] pvrusb2: ********** [ 1535.171058][ T5852] Bluetooth: hci6: command tx timeout [ 1535.176642][T18897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1535.199502][T18897] pvrusb2: Important functionality might not be entirely working. [ 1535.242429][T24077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4491'. [ 1535.318018][T18897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1535.762008][T18897] pvrusb2: ********** [ 1535.771114][ T2336] pvrusb2: Invalid write control endpoint [ 1535.898125][ T2336] pvrusb2: Invalid write control endpoint [ 1535.914620][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1535.928187][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1535.938238][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1535.967034][ T2336] pvrusb2: Device being rendered inoperable [ 1536.005938][ T5919] usb 1-1: USB disconnect, device number 120 [ 1536.043318][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1536.052292][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1536.066766][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1536.078274][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1536.094787][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1536.127932][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4494'. [ 1536.172800][T24092] macvlan2: entered promiscuous mode [ 1536.178356][T24092] macvlan2: entered allmulticast mode [ 1536.249554][T23973] veth0_vlan: entered promiscuous mode [ 1536.268825][T23973] veth1_vlan: entered promiscuous mode [ 1536.496586][T23973] veth0_macvtap: entered promiscuous mode [ 1536.802360][T23973] veth1_macvtap: entered promiscuous mode [ 1536.858753][T23973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.123991][T23973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.239006][ T1108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.254207][ T5852] Bluetooth: hci6: command tx timeout [ 1537.273254][ T1108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.304372][ T1108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.315670][ T1108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.382493][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.402386][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1537.439012][ T7825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1537.450746][ T7825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.142903][T24115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1538.150183][T24115] IPv6: NLM_F_CREATE should be set when creating new route [ 1538.157402][T24115] IPv6: NLM_F_CREATE should be set when creating new route [ 1538.164642][T24115] IPv6: NLM_F_CREATE should be set when creating new route [ 1539.058118][T24125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1540.080521][ T30] audit: type=1326 audit(1757677100.765:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24123 comm="syz.7.4467" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35b418eba9 code=0x0 [ 1540.757604][ T30] audit: type=1400 audit(1757677101.835:1945): avc: denied { ioctl } for pid=24136 comm="syz.0.4504" path="socket:[82666]" dev="sockfs" ino=82666 ioctlcmd=0x8993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1542.489660][T24150] SELinux: failed to load policy [ 1542.590150][T18203] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1542.742739][T18203] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1542.772778][T18203] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1542.796389][T18203] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1542.806265][T18203] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1542.821544][T18203] usb 8-1: SerialNumber: syz [ 1542.959097][T24159] netlink: 288 bytes leftover after parsing attributes in process `syz.6.4510'. [ 1543.068144][T18203] usb 8-1: 0:2 : does not exist [ 1543.086590][T18203] usb 8-1: USB disconnect, device number 2 [ 1543.221853][T18904] udevd[18904]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1543.437528][T24177] /dev/nullb0: Can't open blockdev [ 1543.462895][T24177] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 1543.474744][T24177] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 1543.492214][T24177] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1543.505474][ T30] audit: type=1400 audit(1757677104.575:1946): avc: denied { firmware_load } for pid=24173 comm="syz.6.4514" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1544.907665][T24190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24190 comm=syz.7.4517 [ 1545.527556][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.889085][ T5963] libceph: connect (1)[c::]:6789 error -101 [ 1545.930023][ T5963] libceph: mon0 (1)[c::]:6789 connect error [ 1546.031860][T24197] ceph: No mds server is up or the cluster is laggy [ 1546.425164][ T5963] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1546.478283][T24208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1546.598196][ T5963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 209, changing to 11 [ 1546.625252][ T5963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8200, setting to 1024 [ 1546.637718][ T5963] usb 8-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1546.653257][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.407223][T24221] tmpfs: Bad value for 'huge' [ 1547.901483][ T5963] usb 8-1: config 0 descriptor?? [ 1548.471137][ T5963] holtek 0003:1241:5015.005E: hidraw2: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.7-1/input0 [ 1548.521554][ T5963] holtek 0003:1241:5015.005E: no inputs found [ 1548.687320][ T5963] usb 8-1: USB disconnect, device number 3 [ 1549.013735][ T30] audit: type=1400 audit(1757677110.085:1947): avc: denied { mounton } for pid=24249 comm="syz.2.4528" path="/syzcgroup/unified/syz2" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 1549.319759][ T5963] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1549.480651][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 1549.489148][ T5963] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1549.508703][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.524710][ T5963] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1549.536580][ T5963] pvrusb2: ********** [ 1549.541004][T16063] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1549.549222][ T5963] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1549.560740][ T5963] pvrusb2: Important functionality might not be entirely working. [ 1549.568893][ T5963] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1549.581878][ T5963] pvrusb2: ********** [ 1549.731518][ T2336] pvrusb2: Invalid write control endpoint [ 1549.769168][ T2336] pvrusb2: Invalid write control endpoint [ 1550.156748][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1550.166771][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1550.175165][T16063] usb 8-1: Using ep0 maxpacket: 16 [ 1550.234384][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1550.279856][T16063] usb 8-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1550.288948][T16063] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.299785][ T2336] pvrusb2: Device being rendered inoperable [ 1550.313839][T24253] pvrusb2: Attempted to execute control transfer when device not ok [ 1550.322757][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1550.325974][T16063] usb 8-1: Product: syz [ 1550.331719][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1550.345891][T24282] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1550.353304][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1550.359779][T16063] usb 8-1: Manufacturer: syz [ 1550.363416][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1550.365453][T16063] usb 8-1: SerialNumber: syz [ 1550.367743][T16063] usb 8-1: config 0 descriptor?? [ 1550.396198][T24282] SELinux: failed to load policy [ 1550.409117][T16063] ssu100 8-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1550.412928][ T5905] usb 2-1: USB disconnect, device number 99 [ 1550.498529][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1550.814023][T16063] ssu100 8-1:0.0: probe with driver ssu100 failed with error -110 [ 1551.029378][ T30] audit: type=1400 audit(1757677112.105:1948): avc: denied { getattr } for pid=24289 comm="syz.2.4537" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1551.058703][ T30] audit: type=1400 audit(1757677112.145:1949): avc: denied { lock } for pid=24289 comm="syz.2.4537" path="socket:[83378]" dev="sockfs" ino=83378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1551.291223][ T5905] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1551.455164][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1551.477451][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.488407][ T5905] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1551.502934][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.516374][ T5905] usb 2-1: config 0 descriptor?? [ 1551.820256][T24301] overlay: filesystem on ./bus not supported as upperdir [ 1551.886718][T24301] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1552.312054][T24308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1552.347248][T24308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1552.396015][ T5919] usb 8-1: USB disconnect, device number 4 [ 1552.402265][ T5963] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1552.537570][T24317] FAULT_INJECTION: forcing a failure. [ 1552.537570][T24317] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.561658][T24317] CPU: 0 UID: 0 PID: 24317 Comm: syz.7.4544 Not tainted syzkaller #0 PREEMPT(full) [ 1552.561682][T24317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1552.561691][T24317] Call Trace: [ 1552.561700][T24317] [ 1552.561715][T24317] dump_stack_lvl+0x16c/0x1f0 [ 1552.561740][T24317] should_fail_ex+0x512/0x640 [ 1552.561760][T24317] ? __kvmalloc_node_noprof+0x124/0x620 [ 1552.561778][T24317] should_failslab+0xc2/0x120 [ 1552.561796][T24317] __kvmalloc_node_noprof+0x137/0x620 [ 1552.561812][T24317] ? io_alloc_cache_init+0x33/0x170 [ 1552.561837][T24317] ? io_alloc_cache_init+0x33/0x170 [ 1552.561856][T24317] io_alloc_cache_init+0x33/0x170 [ 1552.561877][T24317] io_uring_setup+0x61d/0x2120 [ 1552.561897][T24317] ? __pfx_io_uring_setup+0x10/0x10 [ 1552.561914][T24317] ? avc_has_perm_noaudit+0x117/0x3b0 [ 1552.561935][T24317] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1552.561969][T24317] __x64_sys_io_uring_setup+0xc2/0x170 [ 1552.561988][T24317] do_syscall_64+0xcd/0x4e0 [ 1552.562010][T24317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.562026][T24317] RIP: 0033:0x7f35b418eba9 [ 1552.562041][T24317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1552.562055][T24317] RSP: 002b:00007f35b50a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1552.562071][T24317] RAX: ffffffffffffffda RBX: 00007f35b43d5fa0 RCX: 00007f35b418eba9 [ 1552.562081][T24317] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000001694 [ 1552.562091][T24317] RBP: 00007f35b50a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1552.562100][T24317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1552.562109][T24317] R13: 00007f35b43d6038 R14: 00007f35b43d5fa0 R15: 00007ffdbeebb938 [ 1552.562131][T24317] [ 1552.749775][ T5963] usb 7-1: Using ep0 maxpacket: 16 [ 1552.762479][ T5963] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1552.777642][ T5963] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1552.787812][ T5963] usb 7-1: config 0 has no interface number 0 [ 1552.830965][ T5963] usb 7-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1552.850232][ T5963] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.870733][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 1552.876699][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1552.892825][ T5905] usb 2-1: USB disconnect, device number 100 [ 1552.945101][ T5963] usb 7-1: Product: syz [ 1552.951984][ T5963] usb 7-1: Manufacturer: syz [ 1552.956718][ T5963] usb 7-1: SerialNumber: syz [ 1552.996021][ T5963] usb 7-1: config 0 descriptor?? [ 1553.035818][ T5963] cypress_m8 7-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1553.054206][ T5963] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1553.153023][T24325] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1553.408158][ T5963] usb 7-1: USB disconnect, device number 6 [ 1553.429024][ T5963] cypress_m8 7-1:0.35: device disconnected [ 1553.468335][T24324] No source specified [ 1554.648772][T24344] overlayfs: failed to resolve './file1/file0': -2 [ 1554.700928][ T30] audit: type=1400 audit(1757677115.785:1950): avc: denied { ioctl } for pid=24342 comm="syz.6.4552" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1554.725954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1554.733409][T24346] netlink: 'syz.6.4552': attribute type 10 has an invalid length. [ 1554.743320][T24346] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1555.181590][ T30] audit: type=1400 audit(1757677116.225:1951): avc: denied { write } for pid=24347 comm="syz.7.4554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1555.413759][T24354] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4553'. [ 1557.980300][T18203] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1558.152274][T18203] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1558.170303][T18203] usb 3-1: config 0 has no interface number 0 [ 1558.180075][ T5919] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1558.184078][T18203] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.215308][T18203] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.228813][T18203] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1558.240335][ T5963] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1558.240864][T18203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.264850][T18203] usb 3-1: config 0 descriptor?? [ 1558.290993][T13995] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1558.302791][T13995] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1558.311534][T13995] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1558.324331][T13995] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1558.333092][T13995] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1558.374226][ T5919] usb 8-1: Using ep0 maxpacket: 32 [ 1558.386657][T24370] lo speed is unknown, defaulting to 1000 [ 1558.432420][ T5919] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1558.489751][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 1558.516005][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.526480][ T5963] usb 7-1: no configurations [ 1558.546017][ T5963] usb 7-1: can't read configurations, error -22 [ 1558.546927][T24370] lo speed is unknown, defaulting to 1000 [ 1558.557568][ T5919] usb 8-1: Product: syz [ 1558.561689][T24370] lo speed is unknown, defaulting to 1000 [ 1558.610826][ T5919] usb 8-1: Manufacturer: syz [ 1558.615793][ T5919] usb 8-1: SerialNumber: syz [ 1558.694559][ T5919] usb 8-1: config 0 descriptor?? [ 1558.707910][T24370] chnl_net:caif_netlink_parms(): no params data found [ 1558.730425][ T5963] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1558.897280][T18203] usbhid 3-1:0.1: can't add hid device: -71 [ 1558.914456][T18203] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 1558.927678][T24370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.952680][T18203] usb 3-1: USB disconnect, device number 113 [ 1558.971477][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 1558.990868][ T5963] usb 7-1: no configurations [ 1559.007090][ T5963] usb 7-1: can't read configurations, error -22 [ 1559.015833][T24370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.056700][ T5963] usb usb7-port1: attempt power cycle [ 1559.061986][T24370] bridge_slave_0: entered allmulticast mode [ 1559.089350][T24370] bridge_slave_0: entered promiscuous mode [ 1559.112804][T24370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.134123][T24370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.142438][T24370] bridge_slave_1: entered allmulticast mode [ 1559.152871][T24370] bridge_slave_1: entered promiscuous mode [ 1559.232141][T24370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.245481][T24370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.322276][T24370] team0: Port device team_slave_0 added [ 1559.333098][T24370] team0: Port device team_slave_1 added [ 1559.444669][T24384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4561'. [ 1559.785566][T24370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.795395][T24370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.799955][ T5963] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1559.848923][T24370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.868064][ T5919] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1559.896699][T24370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.910651][T24370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.948174][T24370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.000543][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 1560.006593][ T5963] usb 7-1: no configurations [ 1560.012027][ T5963] usb 7-1: can't read configurations, error -22 [ 1560.122519][T24391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1560.129792][T24391] IPv6: NLM_F_CREATE should be set when creating new route [ 1560.137010][T24391] IPv6: NLM_F_CREATE should be set when creating new route [ 1560.144250][T24391] IPv6: NLM_F_CREATE should be set when creating new route [ 1560.406433][ T5919] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 1560.412035][T13995] Bluetooth: hci7: command tx timeout [ 1560.428595][ T5919] usb 8-1: USB disconnect, device number 5 [ 1560.469775][ T5963] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1560.488649][T24370] hsr_slave_0: entered promiscuous mode [ 1560.497572][T24370] hsr_slave_1: entered promiscuous mode [ 1560.507680][T24370] debugfs: 'hsr0' already exists in 'hsr' [ 1560.521140][T24370] Cannot create hsr debugfs directory [ 1560.527560][ T5963] usb 7-1: Using ep0 maxpacket: 32 [ 1560.556143][ T5963] usb 7-1: no configurations [ 1560.596552][ T5963] usb 7-1: can't read configurations, error -22 [ 1560.650347][ T5963] usb usb7-port1: unable to enumerate USB device [ 1560.785136][ T43] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1561.052787][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1561.125238][ T43] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 1561.520147][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.546959][ T43] usb 3-1: Product: syz [ 1561.555921][ T43] usb 3-1: Manufacturer: syz [ 1561.650947][ T43] usb 3-1: SerialNumber: syz [ 1561.667914][ T43] usb 3-1: config 0 descriptor?? [ 1561.677823][T24392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1561.692321][T24370] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1561.892925][T24410] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4567'. [ 1562.530211][T13995] Bluetooth: hci7: command tx timeout [ 1562.854867][T24370] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1562.913666][ T5963] usb 3-1: USB disconnect, device number 114 [ 1562.943318][T24370] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1563.002523][T24370] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1563.766229][T24370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.844871][ T30] audit: type=1400 audit(1757677124.915:1952): avc: denied { ioctl } for pid=24423 comm="syz.6.4570" path="socket:[84219]" dev="sockfs" ino=84219 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1563.849524][T24370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.341037][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.348149][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.534271][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.541481][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.690328][T13995] Bluetooth: hci7: command tx timeout [ 1564.780187][T24438] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4573'. [ 1566.507717][T24455] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4577'. [ 1566.772535][T13995] Bluetooth: hci7: command tx timeout [ 1567.729847][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1567.740232][T24457] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4576'. [ 1568.541910][T24370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1569.927770][T24370] veth0_vlan: entered promiscuous mode [ 1569.963366][T24370] veth1_vlan: entered promiscuous mode [ 1570.097480][T24370] veth0_macvtap: entered promiscuous mode [ 1570.120897][T24370] veth1_macvtap: entered promiscuous mode [ 1570.249370][T24370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.338681][T24370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.764195][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.774055][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.887370][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.899726][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.369022][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.433732][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.500010][ T30] audit: type=1400 audit(1757677132.575:1953): avc: denied { setcheckreqprot } for pid=24505 comm="syz.2.4586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1571.617357][T13094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.634137][T13094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.816672][T24512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1573.802619][T24526] befs: (nbd6): No write support. Marking filesystem read-only [ 1573.828219][T24526] nbd_handle_cmd: 2 callbacks suppressed [ 1573.834752][T24526] block nbd6: Attempted send on invalid socket [ 1573.842385][T24526] blk_print_req_error: 2 callbacks suppressed [ 1573.842403][T24526] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1574.016270][T24533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24533 comm=syz.2.4592 [ 1574.311952][ T5934] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1574.480595][ T5934] usb 7-1: Using ep0 maxpacket: 8 [ 1574.488120][ T5934] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1574.508265][ T5934] usb 7-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 29440, setting to 1024 [ 1574.526010][ T5934] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1574.545893][ T5934] usb 7-1: config 8 interface 0 has no altsetting 0 [ 1574.558001][ T5934] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1574.574678][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.585526][ T5934] usb 7-1: Product: syz [ 1574.594975][ T5934] usb 7-1: Manufacturer: syz [ 1574.599824][ T5934] usb 7-1: SerialNumber: syz [ 1574.633348][T24530] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1575.250057][ T43] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1575.511878][ T43] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1575.523389][ T5934] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1575.538952][ T5934] usb 7-1: selecting invalid altsetting 0 [ 1575.551592][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.564453][ T43] usb 9-1: config 0 descriptor?? [ 1575.589278][ T5934] usb 7-1: USB disconnect, device number 11 [ 1576.084987][T24570] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1577.150747][T24580] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1578.264761][ T43] usb 9-1: Cannot set autoneg [ 1578.278278][ T43] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1578.293461][ T43] usb 9-1: USB disconnect, device number 2 [ 1578.322443][ T30] audit: type=1400 audit(1757677139.405:1954): avc: denied { append } for pid=24587 comm="syz.8.4607" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1578.920376][ T30] audit: type=1800 audit(1757677139.965:1955): pid=24604 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.4608" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1579.944524][ T30] audit: type=1400 audit(1757677140.505:1956): avc: denied { mounton } for pid=24602 comm="syz.6.4610" path="/54/file0" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1580.732016][ T5934] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1580.946405][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 1581.095824][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1581.127448][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.147195][T24621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4615'. [ 1581.281288][ T5934] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1581.295311][ T5934] pvrusb2: ********** [ 1581.303060][ T5934] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1581.313864][ T5934] pvrusb2: Important functionality might not be entirely working. [ 1581.326649][ T5934] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1581.342451][ T5934] pvrusb2: ********** [ 1581.559778][ T43] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1582.021721][ T2336] pvrusb2: Invalid write control endpoint [ 1582.067625][ T2336] pvrusb2: Invalid write control endpoint [ 1582.080148][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1582.097895][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1582.120541][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1582.131810][ T2336] pvrusb2: Device being rendered inoperable [ 1582.137840][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1582.145844][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1582.156278][ T2336] pvrusb2: Attached sub-driver cx25840 [ 1582.165721][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1582.177525][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1582.189778][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1582.207985][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1582.249562][T16063] usb 3-1: USB disconnect, device number 115 [ 1582.256530][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1582.290912][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1582.341704][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1582.351941][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1582.364364][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1582.374526][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1582.386919][ T43] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1582.401646][ T43] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1582.410872][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.419029][ T43] usb 7-1: Product: syz [ 1582.424635][ T43] usb 7-1: Manufacturer: syz [ 1582.431413][ T43] usb 7-1: SerialNumber: syz [ 1582.446803][ T43] usb 7-1: config 0 descriptor?? [ 1582.464880][T24621] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1582.482118][ T43] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1582.528561][ T43] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1582.679531][T18191] udevd[18191]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1582.686680][ T43] usb 7-1: USB disconnect, device number 12 [ 1584.027785][T11055] Bluetooth: hci8: Frame reassembly failed (-84) [ 1584.430629][T18203] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1584.601972][T18203] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1584.625822][T18203] usb 9-1: not running at top speed; connect to a high speed hub [ 1584.649626][T18203] usb 9-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1007, setting to 64 [ 1584.704860][T18203] usb 9-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1584.735154][T18203] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1584.753174][T18203] usb 9-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1584.766447][T18203] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.782108][T18203] usb 9-1: Product: Ñ— [ 1584.786496][T18203] usb 9-1: Manufacturer: 퉀迨兖ﯛꚷỤ娖 [ 1584.795121][T18203] usb 9-1: SerialNumber: syz [ 1584.818092][T24649] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1585.394112][T23787] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1585.407591][T23787] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1585.417499][T23787] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1585.431633][T23787] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1585.440393][T23787] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1585.446572][T18203] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input69 [ 1585.487127][T24658] lo speed is unknown, defaulting to 1000 [ 1585.515690][T18203] usb 9-1: USB disconnect, device number 3 [ 1585.676329][T24658] lo speed is unknown, defaulting to 1000 [ 1585.684375][T24658] lo speed is unknown, defaulting to 1000 [ 1585.887586][T24658] chnl_net:caif_netlink_parms(): no params data found [ 1586.051075][T13995] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1586.287742][T24658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.298523][ T30] audit: type=1400 audit(1757677147.325:1957): avc: denied { read } for pid=24672 comm="syz.8.4627" path="socket:[85637]" dev="sockfs" ino=85637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1586.326331][T24658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.328775][T24681] loop6: detected capacity change from 0 to 6 [ 1586.344767][T24658] bridge_slave_0: entered allmulticast mode [ 1586.376298][T18904] Dev loop6: unable to read RDB block 6 [ 1586.377639][T24658] bridge_slave_0: entered promiscuous mode [ 1586.383040][T18904] loop6: unable to read partition table [ 1586.383217][T18904] loop6: partition table beyond EOD, truncated [ 1586.425937][T24658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.466582][T24658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.475405][T24658] bridge_slave_1: entered allmulticast mode [ 1586.484497][T24681] Dev loop6: unable to read RDB block 6 [ 1586.494033][T24681] loop6: unable to read partition table [ 1586.532676][T24658] bridge_slave_1: entered promiscuous mode [ 1586.532770][T24681] loop6: partition table beyond EOD, truncated [ 1586.578555][T24681] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1586.590203][ T5963] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1586.628463][T24687] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4627'. [ 1586.869741][ T5963] usb 8-1: Using ep0 maxpacket: 16 [ 1586.876547][ T5963] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1586.899934][ T5963] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1586.912438][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.476893][ T5963] usb 8-1: Product: syz [ 1587.485328][ T5963] usb 8-1: Manufacturer: syz [ 1587.510803][T23787] Bluetooth: hci9: command tx timeout [ 1587.522157][ T5963] usb 8-1: SerialNumber: syz [ 1587.529853][ T5963] usb 8-1: config 0 descriptor?? [ 1587.537588][ T5963] hub 8-1:0.0: bad descriptor, ignoring hub [ 1587.544145][ T5963] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1587.555232][ T5963] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input70 [ 1587.612985][T24658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1588.173312][T24658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1588.335073][T24658] team0: Port device team_slave_0 added [ 1588.355374][T24658] team0: Port device team_slave_1 added [ 1588.592396][T24658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.599474][T24658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.186841][T24658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.208088][T24658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.228008][T24658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1589.256059][T24697] SELinux: failed to load policy [ 1589.258655][T24658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.402231][T24658] hsr_slave_0: entered promiscuous mode [ 1589.411879][T24658] hsr_slave_1: entered promiscuous mode [ 1589.418001][T24658] debugfs: 'hsr0' already exists in 'hsr' [ 1589.492657][T24658] Cannot create hsr debugfs directory [ 1589.557666][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4635'. [ 1589.574537][T23787] Bluetooth: hci9: command tx timeout [ 1589.581433][ T942] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1589.761847][ T942] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1590.782580][ T942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.103731][ T942] usb 7-1: Product: syz [ 1591.107936][ T942] usb 7-1: Manufacturer: syz [ 1591.145282][ T942] usb 7-1: SerialNumber: syz [ 1591.227705][ T942] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1591.275206][ T5905] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1591.651045][T13995] Bluetooth: hci9: command tx timeout [ 1592.473262][ T5905] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1592.485399][ T5905] ath9k_htc: Failed to initialize the device [ 1592.524482][T24658] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1592.548496][ T5905] usb 7-1: ath9k_htc: USB layer deinitialized [ 1592.653840][T24658] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1592.818814][T24658] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1593.203821][T13995] Bluetooth: hci8: command 0x1003 tx timeout [ 1593.212207][T23787] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1593.341966][T24733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1593.361253][T24658] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1593.541888][T24734] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4642'. [ 1593.558752][T24658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.573410][T24734] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4642'. [ 1593.595333][ T30] audit: type=1326 audit(1757677154.675:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24732 comm="syz.8.4642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb4db8eba9 code=0x0 [ 1593.622166][T24658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.718963][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.726109][T10087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.734080][T13995] Bluetooth: hci9: command tx timeout [ 1593.789288][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.796452][T10087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.952788][ T5934] usb 8-1: USB disconnect, device number 6 [ 1594.506232][T24658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.142084][ T30] audit: type=1400 audit(1757677155.985:1959): avc: denied { read } for pid=24758 comm="syz.8.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1595.524122][ T43] usb 7-1: USB disconnect, device number 13 [ 1595.824114][T24774] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1596.622017][T10087] Bluetooth: hci8: Frame reassembly failed (-84) [ 1596.669396][T24658] veth0_vlan: entered promiscuous mode [ 1597.122092][T24658] veth1_vlan: entered promiscuous mode [ 1597.312356][T24658] veth0_macvtap: entered promiscuous mode [ 1597.527048][T24658] veth1_macvtap: entered promiscuous mode [ 1597.768407][T24658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.809056][T24658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.878247][T13094] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.323484][T13094] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.400325][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.506206][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.574494][T13094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.611843][T13995] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1598.650800][T13094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.132590][T10087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.140898][T10087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.933890][ T30] audit: type=1400 audit(1757677163.015:1960): avc: denied { read write } for pid=23783 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1601.963370][T24817] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 1603.162889][ T30] audit: type=1400 audit(1757677163.105:1961): avc: denied { open } for pid=23783 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1603.187868][ T30] audit: type=1400 audit(1757677163.105:1962): avc: denied { ioctl } for pid=23783 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1603.214427][ T30] audit: type=1400 audit(1757677163.155:1963): avc: denied { read } for pid=24813 comm="syz.7.4659" dev="nsfs" ino=4026534634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1603.241260][T24833] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1603.513141][ T30] audit: type=1400 audit(1757677163.155:1964): avc: denied { open } for pid=24813 comm="syz.7.4659" path="net:[4026534634]" dev="nsfs" ino=4026534634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1604.709429][ T30] audit: type=1400 audit(1757677163.155:1965): avc: denied { create } for pid=24813 comm="syz.7.4659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1604.926810][ T30] audit: type=1400 audit(1757677163.185:1966): avc: denied { bpf } for pid=24803 comm="syz.9.4624" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1605.102109][ T30] audit: type=1400 audit(1757677163.225:1967): avc: denied { read write } for pid=24821 comm="syz.2.4660" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1605.155998][ T30] audit: type=1400 audit(1757677163.225:1968): avc: denied { open } for pid=24821 comm="syz.2.4660" path="/dev/udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1605.180820][ T30] audit: type=1400 audit(1757677163.225:1969): avc: denied { ioctl } for pid=24821 comm="syz.2.4660" path="/dev/udmabuf" dev="devtmpfs" ino=701 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.933290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.041128][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 1607.045246][ T30] audit: type=1400 audit(1757677168.085:2012): avc: denied { read write } for pid=24874 comm="syz.7.4672" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1607.097810][ T30] audit: type=1400 audit(1757677168.085:2013): avc: denied { open } for pid=24874 comm="syz.7.4672" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1607.153213][ T30] audit: type=1400 audit(1757677168.225:2014): avc: denied { read append } for pid=24874 comm="syz.7.4672" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1607.464452][ T30] audit: type=1400 audit(1757677168.225:2015): avc: denied { open } for pid=24874 comm="syz.7.4672" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1607.514320][T24890] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4674'. [ 1607.531868][T24890] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4674'. [ 1607.647852][ T30] audit: type=1400 audit(1757677168.235:2016): avc: denied { prog_run } for pid=24874 comm="syz.7.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1607.671062][ T30] audit: type=1400 audit(1757677168.345:2017): avc: denied { read } for pid=24880 comm="syz.8.4675" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1607.978318][ T30] audit: type=1400 audit(1757677168.355:2018): avc: denied { open } for pid=24880 comm="syz.8.4675" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1608.011715][ T30] audit: type=1400 audit(1757677168.585:2019): avc: denied { ioctl } for pid=24878 comm="syz.6.4674" path="/dev/vbi5" dev="devtmpfs" ino=979 ioctlcmd=0x565c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1608.130855][ T30] audit: type=1400 audit(1757677168.585:2020): avc: denied { create } for pid=24878 comm="syz.6.4674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1608.677077][ T30] audit: type=1400 audit(1757677168.595:2021): avc: denied { ioctl } for pid=24878 comm="syz.6.4674" path="socket:[86529]" dev="sockfs" ino=86529 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1610.257017][T24925] input: syz0 as /devices/virtual/input/input71 [ 1610.367959][T24921] IPVS: Error joining to the multicast group [ 1610.779057][T24924] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 1611.460582][T24915] mkiss: ax0: crc mode is auto. [ 1612.596686][T24947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52242 sclass=netlink_route_socket pid=24947 comm=syz.7.4689 [ 1613.107350][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1613.107372][ T30] audit: type=1400 audit(1757677174.105:2063): avc: denied { read } for pid=24945 comm="syz.9.4690" dev="sockfs" ino=86640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1613.225476][ T30] audit: type=1400 audit(1757677174.305:2064): avc: denied { create } for pid=24951 comm="syz.2.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1613.246656][ T30] audit: type=1400 audit(1757677174.305:2065): avc: denied { bind } for pid=24951 comm="syz.2.4692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1613.368578][ T30] audit: type=1400 audit(1757677174.445:2066): avc: denied { name_bind } for pid=24951 comm="syz.2.4692" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1613.518214][ T30] audit: type=1400 audit(1757677174.445:2067): avc: denied { node_bind } for pid=24951 comm="syz.2.4692" saddr=fe88::103 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1613.931890][ T30] audit: type=1400 audit(1757677175.005:2068): avc: denied { setopt } for pid=24963 comm="syz.8.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1614.736797][ T30] audit: type=1400 audit(1757677175.815:2069): avc: denied { read } for pid=24975 comm="syz.7.4698" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1614.799360][ T30] audit: type=1400 audit(1757677175.815:2070): avc: denied { open } for pid=24975 comm="syz.7.4698" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1614.880508][ T5905] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1614.966853][ T30] audit: type=1400 audit(1757677175.855:2071): avc: denied { ioctl } for pid=24975 comm="syz.7.4698" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1615.143367][ T5905] usb 9-1: Using ep0 maxpacket: 16 [ 1615.172712][ T30] audit: type=1400 audit(1757677175.865:2072): avc: denied { read write } for pid=24977 comm="syz.9.4699" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1615.174720][ T5905] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1615.283898][ T5905] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1615.298160][ T5905] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1615.308306][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.321911][ T5905] usb 9-1: config 0 descriptor?? [ 1615.337344][ T5905] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1615.429745][ T43] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1615.800947][ T43] usb 10-1: Using ep0 maxpacket: 8 [ 1615.807585][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.817762][ T43] usb 10-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 1615.847393][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.860632][ T5905] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1615.886252][ T43] usb 10-1: config 0 descriptor?? [ 1616.033372][ T5905] usb 7-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 1616.048455][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1616.078824][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1616.095137][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1616.123398][ T5905] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1616.138630][ T5905] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1616.206419][ T5905] usb 7-1: Manufacturer: syz [ 1616.230885][ T5905] usb 7-1: config 0 descriptor?? [ 1616.333228][ T43] hid_parser_main: 48 callbacks suppressed [ 1616.333249][ T43] asus 0003:0B05:1A30.005F: unknown main item tag 0x0 [ 1616.367725][ T43] asus 0003:0B05:1A30.005F: unknown main item tag 0x0 [ 1616.380757][ T43] asus 0003:0B05:1A30.005F: unknown main item tag 0x0 [ 1616.389110][ T43] asus 0003:0B05:1A30.005F: unknown main item tag 0x0 [ 1616.397230][ T43] asus 0003:0B05:1A30.005F: unknown main item tag 0x0 [ 1616.444598][ T43] asus 0003:0B05:1A30.005F: hidraw2: USB HID v2.03 Device [HID 0b05:1a30] on usb-dummy_hcd.9-1/input0 [ 1616.502601][ T43] asus 0003:0B05:1A30.005F: Asus input not registered [ 1616.537866][ T43] asus 0003:0B05:1A30.005F: probe with driver asus failed with error -12 [ 1616.586385][ T43] usb 10-1: USB disconnect, device number 2 [ 1616.610499][ T5905] rc_core: IR keymap rc-hauppauge not found [ 1616.613850][T24995] fido_id[24995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1616.616415][ T5905] Registered IR keymap rc-empty [ 1616.673753][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1616.742868][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1616.764184][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1616.781757][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input72 [ 1616.933097][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1616.971630][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1616.990480][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.530694][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.557019][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.598342][T16063] usb 9-1: USB disconnect, device number 4 [ 1617.623012][T25011] pim6reg1: entered promiscuous mode [ 1617.630486][T25011] pim6reg1: entered allmulticast mode [ 1617.636771][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.760475][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.781752][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.802006][T25011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1617.837839][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.870532][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 1617.880896][T25011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1617.936929][ T5905] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1618.018201][ T942] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0 [ 1618.040908][ T5905] mceusb 7-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 1618.108154][T25022] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1618.602664][ T942] hid-generic 0000:0000:0000.0060: hidraw2: HID v0.00 Device [syz1] on syz0 [ 1619.186257][T25026] fido_id[25026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1620.157869][T25036] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1620.465085][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1620.465101][ T30] audit: type=1400 audit(1757677181.545:2081): avc: denied { write } for pid=25033 comm="syz.9.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1620.490860][ C1] vkms_vblank_simulate: vblank timer overrun [ 1620.615373][T25041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.624584][T25041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.624967][ T30] audit: type=1400 audit(1757677181.645:2082): avc: denied { write } for pid=25038 comm="syz.8.4713" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1621.130873][T25041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1621.138273][T25041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1621.218615][T25048] overlay: Unknown parameter '/' [ 1621.223974][ T30] audit: type=1400 audit(1757677182.295:2083): avc: denied { create } for pid=25045 comm="syz.7.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1621.292650][ T30] audit: type=1400 audit(1757677182.295:2084): avc: denied { mounton } for pid=25045 comm="syz.7.4715" path="/50/file0" dev="tmpfs" ino=274 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1621.383874][ T30] audit: type=1400 audit(1757677182.465:2085): avc: denied { ioctl } for pid=25052 comm="syz.8.4717" path="socket:[87624]" dev="sockfs" ino=87624 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.462177][ T30] audit: type=1400 audit(1757677182.465:2086): avc: denied { bind } for pid=25052 comm="syz.8.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.492445][ T30] audit: type=1400 audit(1757677182.465:2087): avc: denied { connect } for pid=25052 comm="syz.8.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.503217][T18093] usb 7-1: USB disconnect, device number 14 [ 1621.838962][ T30] audit: type=1400 audit(1757677182.465:2088): avc: denied { write } for pid=25052 comm="syz.8.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.868882][ T30] audit: type=1400 audit(1757677182.465:2089): avc: denied { read } for pid=25052 comm="syz.8.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1621.965540][T25061] lo speed is unknown, defaulting to 1000 [ 1622.019230][ T30] audit: type=1400 audit(1757677182.465:2090): avc: denied { read } for pid=25052 comm="syz.8.4717" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1622.642392][ C1] vcan0: j1939_tp_rxtimer: 0xffff888092b33000: rx timeout, send abort [ 1622.656237][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888092b33000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1623.125415][T25079] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.159361][T25079] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4724'. [ 1625.095197][T25061] lo speed is unknown, defaulting to 1000 [ 1625.108425][T25061] lo speed is unknown, defaulting to 1000 [ 1625.180805][ T942] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1625.540820][ T942] usb 7-1: Using ep0 maxpacket: 32 [ 1625.547676][ T942] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1625.576266][ T942] usb 7-1: config 0 has no interface number 0 [ 1625.655293][ T942] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1625.665498][ T942] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1625.677959][ T942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.690528][ T942] usb 7-1: Product: syz [ 1625.694706][ T942] usb 7-1: Manufacturer: syz [ 1625.702961][ T942] usb 7-1: SerialNumber: syz [ 1625.726067][ T942] usb 7-1: config 0 descriptor?? [ 1625.808615][ T942] smsc75xx v1.0.0 [ 1626.795414][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1626.795431][ T30] audit: type=1400 audit(1757677187.875:2111): avc: denied { write } for pid=25123 comm="syz.2.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1626.869418][T25131] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4737'. [ 1626.886623][ T30] audit: type=1400 audit(1757677187.965:2112): avc: denied { ioctl } for pid=25130 comm="syz.9.4737" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=86935 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1626.952040][ T30] audit: type=1400 audit(1757677188.025:2113): avc: denied { read } for pid=25130 comm="syz.9.4737" path="socket:[86930]" dev="sockfs" ino=86930 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1626.981249][T25129] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1626.987806][T25129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1627.006742][T25138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.067657][T25129] vhci_hcd vhci_hcd.0: Device attached [ 1627.144249][ T30] audit: type=1400 audit(1757677188.175:2114): avc: denied { read } for pid=25091 comm="syz.6.4729" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1627.207392][T25140] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.260686][T25129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.275302][ T5919] vhci_hcd: vhci_device speed not set [ 1627.298021][T25129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.308322][ T30] audit: type=1400 audit(1757677188.175:2115): avc: denied { open } for pid=25091 comm="syz.6.4729" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1627.374863][ T5919] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1627.386548][T25129] vhci_hcd vhci_hcd.0: pdev(8) rhport(5) sockfd(19) [ 1627.393139][T25129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1627.481994][T25129] vhci_hcd vhci_hcd.0: Device attached [ 1627.519313][T25138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.555318][T25129] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1627.763237][T25129] vhci_hcd vhci_hcd.0: port 0 already used [ 1627.841807][ T30] audit: type=1400 audit(1757677188.925:2116): avc: denied { listen } for pid=25127 comm="syz.8.4736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1627.861597][T25144] vhci_hcd: connection closed [ 1627.861870][T25133] vhci_hcd: connection reset by peer [ 1627.872808][ T7825] vhci_hcd: stop threads [ 1627.877051][ T7825] vhci_hcd: release socket [ 1627.953792][ T7825] vhci_hcd: disconnect device [ 1628.005714][ T7825] vhci_hcd: stop threads [ 1628.013150][ T7825] vhci_hcd: release socket [ 1628.027958][ T942] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 1628.061067][ T7825] vhci_hcd: disconnect device [ 1628.083420][ T942] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1628.123728][ T942] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1628.250776][ T942] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1628.314360][ T942] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1628.335697][ T942] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1628.348537][ T942] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1628.411497][ T942] usb 7-1: USB disconnect, device number 15 [ 1630.524477][ T30] audit: type=1400 audit(1757677191.595:2117): avc: denied { append } for pid=25177 comm="syz.2.4741" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1630.547884][ C1] vkms_vblank_simulate: vblank timer overrun [ 1630.626496][T25181] lo speed is unknown, defaulting to 1000 [ 1630.775599][T25181] lo speed is unknown, defaulting to 1000 [ 1630.783393][T25181] lo speed is unknown, defaulting to 1000 [ 1630.835181][T23787] Bluetooth: hci2: Dropping invalid advertising data [ 1630.836345][ T30] audit: type=1400 audit(1757677191.685:2118): avc: denied { write } for pid=25177 comm="syz.2.4741" path="socket:[87813]" dev="sockfs" ino=87813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1630.844761][T23787] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1630.865997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1631.444244][T25191] netlink: 'syz.7.4743': attribute type 1 has an invalid length. [ 1631.838105][ T30] audit: type=1326 audit(1757677192.535:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25183 comm="syz.8.4742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb4db8eba9 code=0x0 [ 1632.520081][ T5919] vhci_hcd: vhci_device speed not set [ 1633.460645][ T30] audit: type=1400 audit(1757677194.525:2120): avc: denied { load_policy } for pid=25194 comm="syz.8.4744" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1634.032224][T25205] input: syz1 as /devices/virtual/input/input73 [ 1634.289752][ T30] audit: type=1400 audit(1757677195.125:2121): avc: denied { create } for pid=25194 comm="syz.8.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1634.360178][ T30] audit: type=1400 audit(1757677195.125:2122): avc: denied { bind } for pid=25194 comm="syz.8.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1634.536549][ T30] audit: type=1400 audit(1757677195.125:2123): avc: denied { create } for pid=25194 comm="syz.8.4744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1634.560846][ T30] audit: type=1400 audit(1757677195.515:2124): avc: denied { create } for pid=25211 comm="syz.2.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1634.797960][ T30] audit: type=1400 audit(1757677195.515:2125): avc: denied { write } for pid=25211 comm="syz.2.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1634.868864][T25195] SELinux: failed to load policy [ 1635.295963][ T30] audit: type=1400 audit(1757677196.375:2126): avc: denied { name_bind } for pid=25217 comm="syz.8.4751" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1636.152803][ T30] audit: type=1400 audit(1757677196.395:2127): avc: denied { read } for pid=25217 comm="syz.8.4751" path="socket:[87899]" dev="sockfs" ino=87899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1636.186917][ T30] audit: type=1400 audit(1757677196.435:2128): avc: denied { accept } for pid=25208 comm="syz.9.4748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1637.771937][T25248] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1638.507995][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1638.508005][ T30] audit: type=1400 audit(1757677199.585:2136): avc: denied { create } for pid=25254 comm="syz.9.4761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1639.733489][T23787] Bluetooth: hci2: command 0x0406 tx timeout [ 1640.250854][ T30] audit: type=1400 audit(1757677200.125:2137): avc: denied { write } for pid=25254 comm="syz.9.4761" path="socket:[88136]" dev="sockfs" ino=88136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1640.275910][T25259] overlayfs: overlapping lowerdir path [ 1640.670513][ T30] audit: type=1400 audit(1757677201.475:2138): avc: denied { mount } for pid=25254 comm="syz.9.4761" name="/" dev="pstore" ino=4110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1640.736124][ T30] audit: type=1400 audit(1757677201.495:2139): avc: denied { mounton } for pid=25254 comm="syz.9.4761" path="/" dev="pstore" ino=4110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 1640.770288][ T30] audit: type=1400 audit(1757677201.505:2140): avc: denied { mount } for pid=25254 comm="syz.9.4761" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1640.926843][ T30] audit: type=1400 audit(1757677202.005:2141): avc: denied { unmount } for pid=24658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1641.416709][T25271] FAULT_INJECTION: forcing a failure. [ 1641.416709][T25271] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.430452][ T30] audit: type=1400 audit(1757677202.095:2142): avc: denied { ioctl } for pid=25264 comm="syz.8.4762" path="socket:[87966]" dev="sockfs" ino=87966 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1641.463517][ T30] audit: type=1400 audit(1757677202.535:2143): avc: denied { unmount } for pid=24658 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1641.464008][T25269] nbd: must specify a device to reconfigure [ 1641.484546][T25271] CPU: 1 UID: 0 PID: 25271 Comm: syz.7.4764 Not tainted syzkaller #0 PREEMPT(full) [ 1641.484569][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1641.484579][T25271] Call Trace: [ 1641.484585][T25271] [ 1641.484592][T25271] dump_stack_lvl+0x16c/0x1f0 [ 1641.484619][T25271] should_fail_ex+0x512/0x640 [ 1641.484642][T25271] ? __kmalloc_noprof+0xbf/0x510 [ 1641.484667][T25271] ? nf_tables_newrule+0xbfd/0x28e0 [ 1641.484686][T25271] should_failslab+0xc2/0x120 [ 1641.484706][T25271] __kmalloc_noprof+0xd2/0x510 [ 1641.484721][T25271] ? nf_tables_newrule+0x8b0/0x28e0 [ 1641.484743][T25271] nf_tables_newrule+0xbfd/0x28e0 [ 1641.484767][T25271] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1641.484792][T25271] ? __nla_parse+0x40/0x60 [ 1641.484809][T25271] nfnetlink_rcv_batch+0x18ed/0x2330 [ 1641.484836][T25271] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 1641.484866][T25271] ? avc_has_perm_noaudit+0x149/0x3b0 [ 1641.484906][T25271] ? __nla_parse+0x40/0x60 [ 1641.484922][T25271] nfnetlink_rcv+0x3c1/0x430 [ 1641.484937][T25271] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1641.484959][T25271] netlink_unicast+0x5aa/0x870 [ 1641.484983][T25271] ? __pfx_netlink_unicast+0x10/0x10 [ 1641.485011][T25271] netlink_sendmsg+0x8d1/0xdd0 [ 1641.485034][T25271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1641.485062][T25271] ____sys_sendmsg+0xa98/0xc70 [ 1641.485086][T25271] ? copy_msghdr_from_user+0x10a/0x160 [ 1641.485105][T25271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1641.485141][T25271] ___sys_sendmsg+0x134/0x1d0 [ 1641.485161][T25271] ? __pfx____sys_sendmsg+0x10/0x10 [ 1641.485207][T25271] __sys_sendmsg+0x16d/0x220 [ 1641.485226][T25271] ? __pfx___sys_sendmsg+0x10/0x10 [ 1641.485258][T25271] do_syscall_64+0xcd/0x4e0 [ 1641.485280][T25271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.485295][T25271] RIP: 0033:0x7f35b418eba9 [ 1641.485308][T25271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1641.485322][T25271] RSP: 002b:00007f35b50a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1641.485337][T25271] RAX: ffffffffffffffda RBX: 00007f35b43d5fa0 RCX: 00007f35b418eba9 [ 1641.485347][T25271] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1641.485356][T25271] RBP: 00007f35b50a5090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.485365][T25271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.485374][T25271] R13: 00007f35b43d6038 R14: 00007f35b43d5fa0 R15: 00007ffdbeebb938 [ 1641.485395][T25271] [ 1641.958249][ T30] audit: type=1400 audit(1757677203.035:2144): avc: denied { unlink } for pid=25277 comm="syz.8.4766" name="#3d" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1642.017327][ T30] audit: type=1400 audit(1757677203.075:2145): avc: denied { connect } for pid=25280 comm="syz.7.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1642.182582][T25289] loop2: detected capacity change from 0 to 7 [ 1642.215274][T25289] Dev loop2: unable to read RDB block 7 [ 1642.242246][T25289] loop2: unable to read partition table [ 1642.273002][T25289] loop2: partition table beyond EOD, truncated [ 1642.287436][T25289] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1642.440140][T18897] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1642.667215][T18897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.003031][T18897] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1643.016241][T18897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.031240][T18897] usb 9-1: config 0 descriptor?? [ 1643.051895][ T5905] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1643.221994][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 1643.237906][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1643.249579][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1643.270538][ T5905] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1643.281374][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.305843][ T5905] usb 3-1: config 0 descriptor?? [ 1643.336858][ T5905] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1643.533191][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1643.533205][ T30] audit: type=1400 audit(1757677204.615:2147): avc: denied { mount } for pid=25287 comm="syz.8.4769" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1644.052820][T25317] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1644.112028][ T30] audit: type=1400 audit(1757677205.135:2148): avc: denied { mounton } for pid=25287 comm="syz.8.4769" path="/44/file0/file0" dev="afs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1644.202389][T18897] keytouch 0003:0926:3333.0061: fixing up Keytouch IEC report descriptor [ 1644.502068][T25317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1644.557344][T18897] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0061/input/input74 [ 1644.652848][T25317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1645.042144][T18897] keytouch 0003:0926:3333.0061: input,hidraw2: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0 [ 1645.050115][T25324] fuse: Bad value for 'fd' [ 1645.300048][ T30] audit: type=1400 audit(1757677206.375:2149): avc: denied { remount } for pid=25321 comm="syz.6.4778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1645.355970][ T30] audit: type=1400 audit(1757677206.375:2150): avc: denied { create } for pid=25321 comm="syz.6.4778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1645.454907][T25335] netlink: 'syz.7.4779': attribute type 1 has an invalid length. [ 1645.540400][T25336] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4779'. [ 1646.014356][T25335] batman_adv: batadv0: Adding interface: macvtap1 [ 1646.021901][T25335] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.042332][ T5919] usb 9-1: USB disconnect, device number 5 [ 1646.047835][T25335] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1646.226920][T18093] usb 3-1: USB disconnect, device number 116 [ 1646.650020][ T30] audit: type=1400 audit(1757677207.705:2151): avc: denied { mount } for pid=25339 comm="syz.6.4782" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1646.673230][T13995] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 1646.722888][T13995] Bluetooth: hci2: unexpected event for opcode 0x203e [ 1646.739773][ T30] audit: type=1400 audit(1757677207.715:2152): avc: denied { unmount } for pid=24370 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1647.068937][T25350] netlink: 'syz.8.4784': attribute type 1 has an invalid length. [ 1647.776343][ T30] audit: type=1400 audit(1757677208.855:2153): avc: denied { unmount } for pid=23783 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1648.304914][ T30] audit: type=1400 audit(1757677209.255:2154): avc: denied { create } for pid=25360 comm="syz.6.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1649.093144][ T30] audit: type=1400 audit(1757677209.255:2155): avc: denied { write } for pid=25360 comm="syz.6.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1649.265557][ T30] audit: type=1400 audit(1757677209.255:2156): avc: denied { nlmsg_write } for pid=25360 comm="syz.6.4788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1649.287526][ T30] audit: type=1400 audit(1757677210.175:2157): avc: denied { execute } for pid=25369 comm="syz.8.4790" dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1649.314850][ T30] audit: type=1400 audit(1757677210.175:2158): avc: denied { execute_no_trans } for pid=25369 comm="syz.8.4790" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1881 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1649.355125][ T30] audit: type=1400 audit(1757677210.175:2159): avc: denied { create } for pid=25369 comm="syz.8.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1649.387172][ T30] audit: type=1400 audit(1757677210.335:2160): avc: denied { write } for pid=25371 comm="syz.6.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1649.413958][ T30] audit: type=1400 audit(1757677210.335:2161): avc: denied { setopt } for pid=25371 comm="syz.6.4792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1649.688555][ T30] audit: type=1400 audit(1757677210.755:2162): avc: denied { connect } for pid=25380 comm="syz.8.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1649.901963][ T30] audit: type=1400 audit(1757677210.755:2163): avc: denied { bind } for pid=25380 comm="syz.8.4793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1650.066337][ T30] audit: type=1400 audit(1757677210.905:2164): avc: denied { read write } for pid=25382 comm="syz.2.4794" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1650.132435][T25392] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4795'. [ 1650.149505][T25395] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1650.952281][T13995] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1650.980577][T13995] Bluetooth: hci2: Injecting HCI hardware error event [ 1651.020923][T13995] Bluetooth: hci2: hardware error 0x00 [ 1652.123315][T16063] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1652.349895][T16063] usb 10-1: Using ep0 maxpacket: 8 [ 1652.357438][T16063] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.880527][T16063] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1652.890012][T16063] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1652.899358][T16063] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.912861][T16063] hub 10-1:1.0: bad descriptor, ignoring hub [ 1652.919024][T16063] hub 10-1:1.0: probe with driver hub failed with error -5 [ 1652.977071][T25406] SELinux: failed to load policy [ 1653.260856][ T5963] usb 10-1: USB disconnect, device number 3 [ 1653.330187][T13995] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1653.350290][T18897] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1653.552740][T18897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1653.564924][T18897] usb 9-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1653.575615][T18897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.614442][T18897] usb 9-1: config 0 descriptor?? [ 1654.116409][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1654.116426][ T30] audit: type=1400 audit(1757677215.155:2169): avc: denied { create } for pid=25430 comm="syz.8.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1654.580371][T18897] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1655.100095][T13995] Bluetooth: hci6: command 0x0406 tx timeout [ 1655.607862][ T30] audit: type=1400 audit(1757677215.255:2170): avc: denied { ioctl } for pid=25430 comm="syz.8.4805" path="socket:[89425]" dev="sockfs" ino=89425 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1655.707875][ T30] audit: type=1400 audit(1757677215.265:2171): avc: denied { mount } for pid=25430 comm="syz.8.4805" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1655.846073][T18897] usb 8-1: Using ep0 maxpacket: 8 [ 1655.860196][T18897] usb 8-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1655.869434][T18897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1655.880746][T18897] usb 8-1: Product: syz [ 1655.884932][T18897] usb 8-1: Manufacturer: syz [ 1655.889533][T18897] usb 8-1: SerialNumber: syz [ 1655.897502][T18897] usb 8-1: config 0 descriptor?? [ 1655.906441][T18897] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1655.966632][T25457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1656.321456][ T30] audit: type=1400 audit(1757677217.045:2172): avc: denied { write } for pid=25454 comm="syz.6.4811" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1656.737681][ T5963] usb 9-1: USB disconnect, device number 6 [ 1657.444199][T18897] gspca_sonixj: reg_w1 err -71 [ 1657.449447][T18897] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 1657.480714][T18897] usb 8-1: USB disconnect, device number 7 [ 1657.832509][ T30] audit: type=1400 audit(1757677218.905:2173): avc: denied { ioctl } for pid=25479 comm="syz.8.4819" path="socket:[89478]" dev="sockfs" ino=89478 ioctlcmd=0x6628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1657.883851][ T30] audit: type=1400 audit(1757677218.905:2174): avc: denied { setopt } for pid=25479 comm="syz.8.4819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1658.027204][ T30] audit: type=1400 audit(1757677219.025:2175): avc: denied { write } for pid=25469 comm="syz.2.4816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1658.114167][T25493] FAULT_INJECTION: forcing a failure. [ 1658.114167][T25493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1658.128451][T25493] CPU: 1 UID: 0 PID: 25493 Comm: syz.7.4822 Not tainted syzkaller #0 PREEMPT(full) [ 1658.128466][T25493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1658.128473][T25493] Call Trace: [ 1658.128476][T25493] [ 1658.128481][T25493] dump_stack_lvl+0x16c/0x1f0 [ 1658.128499][T25493] should_fail_ex+0x512/0x640 [ 1658.128516][T25493] strncpy_from_user+0x3b/0x2e0 [ 1658.128530][T25493] getname_flags.part.0+0x8f/0x550 [ 1658.128548][T25493] getname_flags+0x93/0xf0 [ 1658.128559][T25493] path_setxattrat+0x27a/0x2a0 [ 1658.128572][T25493] ? __pfx_path_setxattrat+0x10/0x10 [ 1658.128586][T25493] ? ksys_write+0x190/0x250 [ 1658.128607][T25493] ? fput+0x9b/0xd0 [ 1658.128621][T25493] ? ksys_write+0x1ac/0x250 [ 1658.128631][T25493] ? __pfx_ksys_write+0x10/0x10 [ 1658.128644][T25493] __x64_sys_setxattr+0xc6/0x140 [ 1658.128656][T25493] ? do_syscall_64+0x91/0x4e0 [ 1658.128670][T25493] ? lockdep_hardirqs_on+0x7c/0x110 [ 1658.128683][T25493] do_syscall_64+0xcd/0x4e0 [ 1658.128698][T25493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.128709][T25493] RIP: 0033:0x7f35b418eba9 [ 1658.128717][T25493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1658.128727][T25493] RSP: 002b:00007f35b50a5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1658.128738][T25493] RAX: ffffffffffffffda RBX: 00007f35b43d5fa0 RCX: 00007f35b418eba9 [ 1658.128745][T25493] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 00002000000001c0 [ 1658.128751][T25493] RBP: 00007f35b50a5090 R08: 0000000000000002 R09: 0000000000000000 [ 1658.128758][T25493] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 1658.128764][T25493] R13: 00007f35b43d6038 R14: 00007f35b43d5fa0 R15: 00007ffdbeebb938 [ 1658.128777][T25493] [ 1658.453661][T25495] IPVS: length: 24 != 792 [ 1658.496609][ T30] audit: type=1400 audit(1757677219.505:2176): avc: denied { ioctl } for pid=25482 comm="syz.9.4821" path="socket:[88545]" dev="sockfs" ino=88545 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1658.564114][ T30] audit: type=1400 audit(1757677219.535:2177): avc: denied { getopt } for pid=25482 comm="syz.9.4821" lport=128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1658.828711][ T31] INFO: task syz-executor:18085 blocked for more than 143 seconds. [ 1658.883014][ T31] Not tainted syzkaller #0 [ 1658.902214][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1658.956813][ T31] task:syz-executor state:D stack:23544 pid:18085 tgid:18085 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1658.976911][ T31] Call Trace: [ 1658.987490][ T31] [ 1659.000572][ T31] __schedule+0x1190/0x5de0 [ 1659.025392][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1659.046940][ T31] ? __pfx___schedule+0x10/0x10 [ 1659.062639][ T31] ? find_held_lock+0x2b/0x80 [ 1659.080383][ T31] ? schedule+0x2d7/0x3a0 [ 1659.091383][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1659.108108][ T31] schedule+0xe7/0x3a0 [ 1659.127407][ T31] schedule_preempt_disabled+0x13/0x30 [ 1659.149004][ T31] __mutex_lock+0x81b/0x1060 [ 1659.172316][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1659.225751][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1659.265812][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1659.283618][ T31] ? net_generic+0xea/0x2a0 [ 1659.293832][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1659.299267][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1659.304896][ T31] nfsd_umount+0x48/0xe0 [ 1659.309205][ T31] deactivate_locked_super+0xbe/0x1a0 [ 1659.314799][ T31] deactivate_super+0xde/0x100 [ 1659.319584][ T31] cleanup_mnt+0x225/0x450 [ 1659.324053][ T31] task_work_run+0x150/0x240 [ 1659.328649][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1659.334151][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1659.339556][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1659.344879][ T31] do_syscall_64+0x41c/0x4e0 [ 1659.349470][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.355392][ T31] RIP: 0033:0x7f8aa9b8fed7 [ 1659.360892][ T31] RSP: 002b:00007fff43b63fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1659.369329][ T31] RAX: 0000000000000000 RBX: 00007f8aa9c11c05 RCX: 00007f8aa9b8fed7 [ 1659.377574][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff43b64090 [ 1659.385574][ T31] RBP: 00007fff43b64090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.394159][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff43b65120 [ 1659.402203][ T31] R13: 00007f8aa9c11c05 R14: 0000000000171449 R15: 00007fff43b65160 [ 1659.412801][ T31] [ 1659.416531][ T31] [ 1659.416531][ T31] Showing all locks held in the system: [ 1659.427895][ T31] 2 locks held by kworker/u8:0/12: [ 1659.433129][ T31] #0: ffff8881405cb148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1659.445627][ T31] #1: ffffc90000117d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1659.460044][ T31] 1 lock held by khungtaskd/31: [ 1659.465653][ T31] #0: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1659.475647][ T31] 2 locks held by kworker/u8:3/49: [ 1659.481940][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1659.493219][ T31] #1: ffffc90000b97d10 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1659.505993][ T31] 2 locks held by syz-executor/18085: [ 1659.511757][ T31] #0: ffff88807c1780e0 (&type->s_umount_key#106){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1659.522224][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1659.531909][ T31] 2 locks held by getty/22465: [ 1659.536723][ T31] #0: ffff88814d2c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1659.546762][ T31] #1: ffffc9000213c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1659.556951][ T31] 2 locks held by syz.4.4376/23609: [ 1659.562183][ T31] #0: ffffffff90428550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1659.571501][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1659.581599][ T31] 2 locks held by syz.0.4504/24136: [ 1659.586788][ T31] #0: ffff8880534aa0e0 (&type->s_umount_key#106){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1659.597222][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1659.607015][ T31] 2 locks held by syz.1.4580/24494: [ 1659.612452][ T31] #0: ffffffff90428550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1659.620714][ T31] #1: ffffffff8e9dabe8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1659.631205][ T31] [ 1659.633524][ T31] ============================================= [ 1659.633524][ T31] [ 1659.665321][ T31] NMI backtrace for cpu 1 [ 1659.665333][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1659.665346][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1659.665352][ T31] Call Trace: [ 1659.665355][ T31] [ 1659.665360][ T31] dump_stack_lvl+0x116/0x1f0 [ 1659.665378][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1659.665389][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1659.665407][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1659.665419][ T31] watchdog+0xf0e/0x1260 [ 1659.665434][ T31] ? __pfx_watchdog+0x10/0x10 [ 1659.665444][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1659.665458][ T31] ? __kthread_parkme+0x19e/0x250 [ 1659.665478][ T31] ? __pfx_watchdog+0x10/0x10 [ 1659.665490][ T31] kthread+0x3c2/0x780 [ 1659.665500][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.665511][ T31] ? rcu_is_watching+0x12/0xc0 [ 1659.665525][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.665535][ T31] ret_from_fork+0x56a/0x730 [ 1659.665546][ T31] ? __pfx_kthread+0x10/0x10 [ 1659.665556][ T31] ret_from_fork_asm+0x1a/0x30 [ 1659.665574][ T31] [ 1659.665578][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1659.784504][ C0] NMI backtrace for cpu 0 [ 1659.784519][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1659.784535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1659.784544][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1659.784565][ C0] RIP: 0010:rcu_is_watching+0x0/0xc0 [ 1659.784584][ C0] Code: bb 5c 8e e8 62 ec 76 03 e9 51 ff ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 53 65 ff 05 b3 0c 36 12 e8 3e c0 f3 09 48 c7 c3 a8 [ 1659.784596][ C0] RSP: 0018:ffffc900001175f8 EFLAGS: 00000297 [ 1659.784607][ C0] RAX: 0000000000000000 RBX: ffffffff8e5c15a0 RCX: 0000000000000002 [ 1659.784615][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e5c15a0 [ 1659.784623][ C0] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1659.784630][ C0] R10: 0000000000000003 R11: 000000000000854a R12: 0000000000000000 [ 1659.784638][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1659.784646][ C0] FS: 0000000000000000(0000) GS:ffff8881246b3000(0000) knlGS:0000000000000000 [ 1659.784660][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1659.784668][ C0] CR2: 00005555576d55c8 CR3: 0000000032127000 CR4: 00000000003526f0 [ 1659.784677][ C0] DR0: 0000000000000002 DR1: 0000000000000005 DR2: 8000000000000000 [ 1659.784685][ C0] DR3: 1000000100000000 DR6: 00000000ffff4ff0 DR7: 0000000000000400 [ 1659.784694][ C0] Call Trace: [ 1659.784699][ C0] [ 1659.784703][ C0] lock_acquire+0x2cd/0x350 [ 1659.784717][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 1659.784732][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1659.784750][ C0] unwind_next_frame+0xd1/0x20a0 [ 1659.784763][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 1659.784776][ C0] ? ret_from_fork+0x56a/0x730 [ 1659.784789][ C0] ? kasan_save_stack+0x33/0x60 [ 1659.784802][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1659.784819][ C0] arch_stack_walk+0x94/0x100 [ 1659.784835][ C0] ? ret_from_fork+0x56a/0x730 [ 1659.784848][ C0] stack_trace_save+0x8e/0xc0 [ 1659.784864][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1659.784881][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 1659.784901][ C0] kasan_save_stack+0x33/0x60 [ 1659.784912][ C0] ? kasan_save_stack+0x33/0x60 [ 1659.784923][ C0] ? kasan_save_track+0x14/0x30 [ 1659.784935][ C0] ? kasan_save_free_info+0x3b/0x60 [ 1659.784951][ C0] ? __kasan_slab_free+0x60/0x70 [ 1659.784964][ C0] ? kmem_cache_free+0x2d1/0x4d0 [ 1659.784976][ C0] ? skb_free_head+0x1b7/0x210 [ 1659.784989][ C0] ? skb_release_data+0x795/0x9e0 [ 1659.785004][ C0] ? sk_skb_reason_drop+0x129/0x1a0 [ 1659.785020][ C0] ? ieee80211_iface_work+0x435/0x1360 [ 1659.785033][ C0] ? cfg80211_wiphy_work+0x2c4/0x580 [ 1659.785047][ C0] ? process_one_work+0x9cc/0x1b70 [ 1659.785061][ C0] ? worker_thread+0x6c8/0xf10 [ 1659.785074][ C0] ? kthread+0x3c2/0x780 [ 1659.785085][ C0] ? ret_from_fork+0x56a/0x730 [ 1659.785108][ C0] kasan_save_track+0x14/0x30 [ 1659.785120][ C0] kasan_save_free_info+0x3b/0x60 [ 1659.785137][ C0] __kasan_slab_free+0x60/0x70 [ 1659.785149][ C0] kmem_cache_free+0x2d1/0x4d0 [ 1659.785161][ C0] ? skb_free_head+0x1b7/0x210 [ 1659.785175][ C0] skb_free_head+0x1b7/0x210 [ 1659.785189][ C0] skb_release_data+0x795/0x9e0 [ 1659.785204][ C0] ? rcu_is_watching+0x12/0xc0 [ 1659.785225][ C0] sk_skb_reason_drop+0x129/0x1a0 [ 1659.785242][ C0] ieee80211_iface_work+0x435/0x1360 [ 1659.785255][ C0] ? rcu_is_watching+0x12/0xc0 [ 1659.785270][ C0] cfg80211_wiphy_work+0x2c4/0x580 [ 1659.785287][ C0] process_one_work+0x9cc/0x1b70 [ 1659.785303][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1659.785317][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1659.785334][ C0] ? assign_work+0x1a0/0x250 [ 1659.785347][ C0] worker_thread+0x6c8/0xf10 [ 1659.785364][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1659.785377][ C0] kthread+0x3c2/0x780 [ 1659.785390][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.785403][ C0] ? rcu_is_watching+0x12/0xc0 [ 1659.785418][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.785431][ C0] ret_from_fork+0x56a/0x730 [ 1659.785442][ C0] ? __pfx_kthread+0x10/0x10 [ 1659.785455][ C0] ret_from_fork_asm+0x1a/0x30 [ 1659.785475][ C0] [ 1659.791051][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1659.791068][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1659.791087][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1659.791096][ T31] Call Trace: [ 1659.791102][ T31] [ 1659.791110][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1660.230789][ T31] vpanic+0x6e8/0x7a0 [ 1660.234762][ T31] ? __pfx_vpanic+0x10/0x10 [ 1660.239245][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1660.245218][ T31] panic+0xca/0xd0 [ 1660.248928][ T31] ? __pfx_panic+0x10/0x10 [ 1660.253322][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1660.258680][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1660.264814][ T31] ? watchdog+0xd78/0x1260 [ 1660.269218][ T31] ? watchdog+0xd6b/0x1260 [ 1660.273618][ T31] watchdog+0xd89/0x1260 [ 1660.277848][ T31] ? __pfx_watchdog+0x10/0x10 [ 1660.282506][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1660.287692][ T31] ? __kthread_parkme+0x19e/0x250 [ 1660.292707][ T31] ? __pfx_watchdog+0x10/0x10 [ 1660.297369][ T31] kthread+0x3c2/0x780 [ 1660.301420][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.305994][ T31] ? rcu_is_watching+0x12/0xc0 [ 1660.310743][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.315316][ T31] ret_from_fork+0x56a/0x730 [ 1660.319886][ T31] ? __pfx_kthread+0x10/0x10 [ 1660.324464][ T31] ret_from_fork_asm+0x1a/0x30 [ 1660.329222][ T31] [ 1660.332429][ T31] Kernel Offset: disabled [ 1660.336729][ T31] Rebooting in 86400 seconds..