last executing test programs: 2m51.693988444s ago: executing program 0 (id=1120): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r5, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r4) 2m49.212919308s ago: executing program 0 (id=1128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x127) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x48) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, 0x0}, 0x20) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000100)='asymmetric\x00', &(0x7f00000003c0)=@secondary) keyctl$get_persistent(0x16, 0x0, r6) 2m45.322939612s ago: executing program 0 (id=1138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x4800) 2m45.134399856s ago: executing program 0 (id=1140): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x745}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c", 0x52, 0x14008885, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4140aecd, &(0x7f0000000500)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 2m44.30780524s ago: executing program 0 (id=1144): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3357, 0x40800) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmmsg$inet_sctp(r1, &(0x7f0000003780), 0x0, 0x400c044) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd7d}, 0x40000043) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000180)={0xa01a, 0xb700, "61e279b55575fff94ab39115ee67545d89865fa2f186d249", {0x7fffffff, 0x3ff}, 0x172}) 2m44.074554896s ago: executing program 0 (id=1146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xd162, 0x2, 0x8, 0x5, 0x80, 0x1000, 0xc, 0x9}) r0 = getpid() syz_pidfd_open(r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5}, 0x0, 0x7ecb, 0x7fff, 0x789, r0, r1, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000240)=0xfffffff9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r10, 0xc02c5341, &(0x7f0000000800)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m36.333161646s ago: executing program 4 (id=1161): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newqdisc={0x14c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x49, 0x7, 0x7, 0x1d, 0x21, 0x18, 0x5}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x44004}, 0x44010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f0000000000)=0xd) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) 2m35.988967788s ago: executing program 4 (id=1162): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000005c0)={0x0}) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r3, 0x3, r0, 0x5}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x55056226, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) 2m33.800903426s ago: executing program 4 (id=1169): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x9, 0x94, 0xe3, 0x8, 0x1199, 0x683b, 0x95ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xaf, 0x0, 0x2, [{{0x9, 0x4, 0x99, 0x5, 0x0, 0x92, 0x9c, 0x12, 0x4}}]}}]}}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FIBMAP(r2, 0x1, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000540)={0x3, "2a123b084c1295533fd0a4bb9ad6ca7be3ced96f00000000010100", 0x0, 0xfffffffe, 0x1, 0x7, 0x4000200}) 2m32.005075009s ago: executing program 4 (id=1175): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="b6037ffa812b3ecd8841e207ab6520d213f96743912e748ff531880c75a4f3d593f5e4beeec4d4483d6fd2c76ecf38da35ec336846317c6543a626832bd4c94e37866990c376663ad8cd43517b7079ddc8c7291ef89ea4557c86cd03a430c5dbc368c715d314f57cfb4993cd91945377b48effab441750d2a46cff7f25ecce4e0003710078031f6bad468ef3add7048efb8516479adcb953d529ba3b7c1d1004a2df16f7ae09a743d99d7cb758c32bf30e341063db704c9267dd29db6213697807fdf8ab4006e44f14438ce005a7663ebd5a65aa0669a069c35c3cd83ce9a49d36936b40c354c0401e4e13f26db24c8a2f77384f788af107cd75cc4c0e4ca039dec9b12551c71c24388a11846986311492c33cebc1259e090a863ac4cb61fc56a35821d6649301f9aee24c5c51610d1faf6ebd3334d36a5b1a4dd4156b3e808ff834dc51542a481b39d43493d564cae80502e30d4dc4d17aad08d7fc1a19bdcdbc335783532370be295dd2f9bcfb6020740e319053fd8a3cf62556b9da15444ab9243ff2165ce40c7a201f4eca41fd772110e8f9a85232f63588ae91390f62effb4d3773594de3119666ea847d4d8226d7816520378d4f83722434d668229ab1befc4c8e84061ed58ed1bcf596500c650f6bf6d24b7a6de7735c1d06f86b5e1f608fcb52b1cb63e289d91bff66d3f9efd2815d8782795271cba634187a9a117f84eb777dd9c7f4fae5ba049ecf3092dad14ceddd3eb7055ea9caf552e6d3450f562e831291bb1e1ff8462047d26afdfdaaf51e61ee299668209167717d3cc181ac91e29759dc66270e27509dc251eb18f4ba4fa6b24d10a943e089d6deb46780eb85fc65388c9159bb900f83613aecd1c72376e8b1c7b366efb26a489eb0d0f41558cc1f552845c8acc8ecc48913f07a36ed8d852492c228b3a0a34a23939035fe8ba0ab700f8c0bc379d92901b3ec2bb6256c3012fea25f9764698fb54228468f9f9738352c094bcc06f2c56bbc994f40bda790a6d5d8c3418d50e2e1659f0d69806c6ed66be51b2e014fcbddfdfa5aa576d6662e6a1e390c4414971c76d79ccfe9790c9129bd2c0f475d8cdba58e20b4944e52ee265a5bd70e9567b239a99ad8caf82de3220719a235aafafa4d110269bcd9897b3125e27b351e5d30770734911635e1b6af69b4b73484d424c9c6f0f9e4e05a224be4349dda745fea628bcae2a6dfa06ece7248335564f25c0fc9f9442871bd8ad7959ce0f654dbe45e918f29e8fadb7cb2c162483b0fbba9accf8063d38c00f3c083601580de58020aa3e8ae123fe1b06caefbfce73379aeed7c9537e299ed7041893a139b75f443bf80a95e0ea9bf5382bcccbd6a5d268a15639c54c12feb35c069ff7022c0cddbb00653747fb0bded8be153e361db1b23dfdcc11d527a15c008611ba4dc9288da40edf5a8dcea30b3127bb59ff7c891e59f9daf1d3409b199e1ac3050431ec6af76574c1c0023d2590cfce82c94042cb7bf9eb806ce9d44a8510a7a75bf3ca266586c7191350e8a54df13aebb963585312967dab6ef9db75b0920345aeb4dfe6f35494adb7061ba211645c9eea279448f7c3d5d16cf831e57732d1b1228a84ac5a11f1f28c73a0279a9f68ee2003e2745e25c3b85474ae905121ae2f3afad8cf86b2d7b11456be6dd5ae79188661ea0a9ee2397a2feb9f12fc015f1db86bd112d156e681a3347d27a029b45ca231ed72f309047cdd5f75a8707e8ac7e27b2fbd65a0a79f520e185137b8816c85de749e0cb2a3d400105d450afb395f387abfeafb414db4dbdfeea254d1325947e06943bc76ba41b140dfc2f5572131909867dd30de52c4eb46d3edea32c79364209898348c6980ac391caa732d03e757d77e59157cc0839723d73af8e6d387bc48a1aa060b311e8689b3df5721820f2d02e51fc09c636c330fb2ee118352f7bb87828a4fd55fddf2ac350e07c711dd883092b7d381615270efd67405e8dcf51bc23a298d7a388db0250b6339e8b72c4015e6e9f4d16ed51ba2800986ec7d1177784d156bf5c2660f29f8d31c18e856bfdc5080334b8053d829e28c0a10949473f781921f60fb2908bf0d2aa0f9e7b3c1ffe0236c0bfb930c7b1730d486931e78ee35ca7a6da6d4c8221d44597dc9e96a6b5e95483b4d9507fe3b540feaaaf7d27005aec2b494bbde6ab6f2cae8727c00a724a54bc71c9b2c4d4607eec212f7d7630109337aa39ee7ea0a3fe48a29d9cf610e439899c3a18ba817e558985b39f51989bc46e19e95ab388fe7c11a912150e4d655a8d565beed2994e507127b817bb6113f099b8e36bcde1940f8e488673997f279ffc4a72fe02fd1c5ddd649eb2dcafc1ea1cf11ce4c552a6b94bd9038f8d5f89fa044835bdea8ca495474c4708f9868f980627cddcef728409b9a222bd6476f407a00a3897c2acc1a4778b7c27e54155844191ced5c0a0f69cedbd1b71ef8a3ebb40163879ca8e6a7ba09d817c7a4743e592fc44007ab1b686272b5de1941bdcc7d522ecb2b868fe2f2d286504b4475fd7781b57d70970137656f086353a392e6f5a93647f05b92571c8f4524adfe2a17ae4033e9fa91f5b686798a0573072076a9db0a059cf04b31e", 0x745}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c", 0x52, 0x14008885, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f0000000500)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 2m31.618808369s ago: executing program 4 (id=1176): prctl$PR_SET_UNALIGN(0x6, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f0000000000)=0x6e) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) ioctl$VIDIOC_TRY_DECODER_CMD(r4, 0xc0485661, &(0x7f0000000280)={0x0, 0x1, @stop_pts=0x5}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',w~dno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x76, &(0x7f0000001a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x6, 0x0, 0x4}}, {@generic={0x1b, "eebc8b091993f794854fe479a8995fc24caa4a0c5691e8cd903438aa2d94838faa6b2f0bae788a6c57244d0e87ade65a8a2c26f09f3dd6a40665ec72569a899c91a8e61c52b9921b2d9a7d5aed9ff232d963e403c9c70d68280887d92303deb9"}}}, &(0x7f0000001ac0)={0x1, 0x1, [0x9dd, 0xe8c, 0xa54, 0x36e]}) r8 = socket$key(0xf, 0x3, 0x2) accept4$llc(0xffffffffffffffff, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000600)=0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000640)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xe8) r11 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) sendmmsg$unix(r1, &(0x7f0000001a00)=[{{&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000002c0)="182dc217687260aa42952fcf54a2a4e88678c6ce8eb23c1ab225e67b8c5f8be76a6b8a76969fecf054d551aa8a0e28158f77cad9ac8ef6fcf15392dea989c75ab2a7e776ca7e18641ad1198d750807a569dc4112c362ae51f8437f73a2fad27b4eacb47614373f1e59caf2d1ad4baf170855ac765afc82702d11eab3d7de350d0d6af0530bdf5436adabcb109ec0", 0x8e}], 0x2, &(0x7f00000018c0)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c00de00000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x4001}}], 0x1, 0x5) r12 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240008d0}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m31.564733272s ago: executing program 4 (id=1178): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x81, 0xffffffff, 0x47, @mcast1, @loopback, 0x700, 0x8, 0x3, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f800b00000000000119078000000000000000000004e22009c9078010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d00000000000000000000000000000000000000005b6ad7"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x15, 0x2, 0x80000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00') sync() sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) setfsgid(0xee00) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) 2m28.387562888s ago: executing program 32 (id=1146): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xd162, 0x2, 0x8, 0x5, 0x80, 0x1000, 0xc, 0x9}) r0 = getpid() syz_pidfd_open(r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5}, 0x0, 0x7ecb, 0x7fff, 0x789, r0, r1, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x30, 0x1411, 0x1, 0xfffffffe, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000240)=0xfffffff9, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x18, 0x0) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r9, r8, &(0x7f00000000c0)=0x58, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r10, 0xc02c5341, &(0x7f0000000800)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m16.457513038s ago: executing program 33 (id=1178): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x81, 0xffffffff, 0x47, @mcast1, @loopback, 0x700, 0x8, 0x3, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f800b00000000000119078000000000000000000004e22009c9078010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d00000000000000000000000000000000000000005b6ad7"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x15, 0x2, 0x80000000) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000005c0)='fd', 0x0, r7) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r9, &(0x7f00000000c0)='./file0\x00') sync() sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) setfsgid(0xee00) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) 1m16.053535768s ago: executing program 6 (id=1409): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x515041, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x30044011) r4 = syz_open_procfs(0x0, 0x0) read$FUSE(r4, &(0x7f0000004dc0)={0x2020}, 0x2020) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fcdbdf2508000000480006800800060006000000060005004e230000080006001900000014000400fe8000000000000000000000000000100600010002000000050002000700000008000700", @ANYRES32=0x0, @ANYBLOB="080002"], 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m14.777694225s ago: executing program 6 (id=1412): ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r0 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63b, 0x0, 0x0, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x10000000, 0x2, 0xf, &(0x7f0000000000), 0x18) 1m14.518682544s ago: executing program 6 (id=1414): r0 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x80281, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x18) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000010000040000000000000000030000000000000000000000000000020000000000000000000000040000"], 0x0, 0x4a}, 0x28) r6 = socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x10) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa4}, &(0x7f0000000040)=0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) shmat(r0, &(0x7f0000ff6000/0x4000)=nil, 0x7000) mremap(&(0x7f0000448000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000444000/0x1000)=nil) 1m13.578940185s ago: executing program 6 (id=1419): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x55056226, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @dstopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "58090e541b64f22a8982d3f5aaacd21a0ca186608b74f1"}]}]}}}}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400400bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) syz_clone3(&(0x7f0000000640)={0x10230000, &(0x7f0000000080), &(0x7f00000001c0)=0x0, &(0x7f00000002c0), {0x10}, &(0x7f0000000440)=""/252, 0xfc, &(0x7f0000000540)=""/221, &(0x7f0000000300)=[0xffffffffffffffff], 0x1}, 0x58) ptrace$ARCH_GET_CPUID(0x1e, r4, 0x0, 0x1011) 1m12.286869198s ago: executing program 6 (id=1422): syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000480)={'rti800\x00', [0x2f00, 0x1, 0xd09a, 0x2, 0x3, 0x0, 0x20002004, 0x3, 0xffe, 0xf723, 0xc, 0x3, 0x1000002, 0x0, 0xffff, 0x100006, 0x5, 0x6, 0x1000, 0x30000, 0xfff, 0x2, 0x2, 0xe2de, 0x2, 0x5, 0xff, 0xb, 0x7, 0x7, 0x470f]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001800)={{0x12, 0x1, 0x141, 0x14, 0xdf, 0x51, 0x20, 0x46d, 0x8dd, 0xd579, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x20, 0x0, 0x0, 0x40, [{{0x9, 0x4, 0x4d, 0x8, 0x0, 0x3e, 0xcf, 0xec, 0x10}}]}}]}}, 0x0) listen(0xffffffffffffffff, 0xfffffffe) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001900)={0x24, &(0x7f0000001700)={0x40, 0x0, 0x2, {0x2, 0x5}}, 0x0, 0x0, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x94de7000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000040000000100000000000000000a14000000000a050000000000000000000700ffff14000000090a0104000000000000000007000000680100001a0a050000000000000000000200000808000240000000035a000600733672afb44e46ff0dcb1c227e105131fe0a5960c2bf528e6665c1b4550bbdd7d20a44a0aa6e87f69160ff37cf12c75527a4f3384c93b3f594a2da8ea3f6b1e0692723aa1e385b4806360895fccbe211d53d0b6aa5b800000800024000000003090001"], 0x1b8}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x48001) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x4a00) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r6, 0x6, {0x0, 0x0, 0x0, 0xb7, 0x5, 0x0, 0x9, 0xb, 0xd, "dcf0834f99328d03b72085f227b08cea9a291e613e844dcc71cc73523b8cc3ca489cff4fbccef42acf987beff5f39b0039d4155244ed015462060d37e84fdded", "a292be453384f16ababccf269935da27e6761c821ec2d7caeb893452a737a632e5cd919f6e1fe86f4ffc0516c423630ee125ff36439dc37e9701a872d2470f6d", "3a8205385b5594319e1ab3173ad37d07bee1ab51b35fd76381e60ccbc48bdf8d", [0x7f, 0x9]}}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) 1m10.285593789s ago: executing program 6 (id=1431): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=0xffffffffffffffff], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000cb351612f92a48c9d022ad5f96d98960de89013edd0740b694bb9bbeb49ac0f6fc1e50fb503be7", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006d6163766c616e3100000000000000008800018014000200776c616e300000000000000000000000080003000100000014000200626f6e645f736c6176655f300000000008000100", @ANYRESHEX=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d30000000000000140002006970365f7674693000000000000000001c000180080003000200000008000300000000000800030000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x840}, 0x4005094) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x81, 0xffffffff, 0x47, @mcast1, @loopback, 0x700, 0x8, 0x3, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f800b00000000000119078000000000000000000004e22009c9078010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d00000000000000000000000000000000000000005b6ad7"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x2, 0x80000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r10, &(0x7f00000000c0)='./file0\x00') sync() sendfile(r7, r6, &(0x7f00000000c0)=0x8b, 0x100000500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 54.39906947s ago: executing program 34 (id=1431): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=0xffffffffffffffff], 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000cb351612f92a48c9d022ad5f96d98960de89013edd0740b694bb9bbeb49ac0f6fc1e50fb503be7", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002006d6163766c616e3100000000000000008800018014000200776c616e300000000000000000000000080003000100000014000200626f6e645f736c6176655f300000000008000100", @ANYRESHEX=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d30000000000000140002006970365f7674693000000000000000001c000180080003000200000008000300000000000800030000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x840}, 0x4005094) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x81, 0xffffffff, 0x47, @mcast1, @loopback, 0x700, 0x8, 0x3, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f800b00000000000119078000000000000000000004e22009c9078010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d00000000000000000000000000000000000000005b6ad7"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x15, 0x2, 0x80000000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x5, 0x20, 0x8, 0x1}, &(0x7f0000000280)=0x18) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) rseq(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r10, &(0x7f00000000c0)='./file0\x00') sync() sendfile(r7, r6, &(0x7f00000000c0)=0x8b, 0x100000500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}}, 0x44080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x0, 0x8, 0x2}}) 11.665008476s ago: executing program 3 (id=1599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x402802, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(0x0, &(0x7f00000002c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) 10.69844723s ago: executing program 3 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) (async) close(0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) gettid() (async) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) (async) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x25dfdbfc, [@sadb_x_filter={0x5, 0x1a, @in6=@mcast2, @in=@multicast2, 0x3, 0x10, 0xf397b1f1b3ee0762}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8}, @sadb_address={0x3, 0x5, 0x31, 0x80, 0x0, @in={0x2, 0x4e23, @local}}]}, 0x60}}, 0x4) (async, rerun: 64) timer_settime(0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x6, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x9, 0xffffffffffffff93, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x6}, 0x94) (async) socket$rds(0x15, 0x5, 0x0) 10.294227527s ago: executing program 3 (id=1601): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x104) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f00000001c0), 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_usb_connect$uac1(0x3, 0x102, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000002540)={0xa, &(0x7f0000002000)={0xa, 0x6, 0x310, 0x8, 0x4, 0x9, 0x10, 0x9}, 0xa2, &(0x7f0000002300)={0x5, 0xf, 0xa2, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x5, 0x6}, @ssp_cap={0x10, 0x10, 0xa, 0xa4, 0x1, 0xac00, 0x9611, 0x3ff, [0xff0000]}, @generic={0x6f, 0x10, 0x3, "ed8d07c166d73f96d54644446256434d1f5a390ef278dcd588331b0742e2b0ebae0ca0ee171ee69bf3a240e6298cd277a08c2f845fbb1a5f7b8d68417a3d2d4656905b7e4454eb8cafed15bd80ae48fb97ef918d2c21010c53a78e30525d6ab1b495148a4b8d7a7b7847c0ef"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x4, 0xe2, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x5, 0xa, 0x3}]}, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x406}}, {0xc6, &(0x7f00000023c0)=@string={0xc6, 0x3, "956de1fa0968a0bd9934596f3bd1bbe72c9714af07e88fd6d2b9e370243061cfd559cef2f2aae61325c8c0816148cd910a111e3151545fa65c8af79d128ad44b4858a78fc75bd2c4255f0d3e7253695d16761bdd5dd0ded6e757b8708898e94036972cc94193f004989f16b130c69312aae1139810561e98a39d0452dab6a26ff0e78b9ba03602fc057e6b73377388b190d00a897f8a644418dcf6b4f68e7b02d8a26f23aebfc262a18c6e498cdb54ae2b488d8e69f00990853c63017dc1d90ebf400eb4"}}, {0x7e, &(0x7f00000024c0)=@string={0x7e, 0x3, "860f931141c109dc71712d0da8aaf1db6cdd9cbe94b1934b18cd0e76965fff2d85600967856e85d03adf0e817a8b504d5110777b01fb2bc610f492ba5a0150cc70b4197ad849b1ba50b4449ea646abc5b144cc7fa184bf9b93cd65f4dc8edd6b41af6184fca52075c537390d78ef28afe5caabce02e285d3a9686738"}}]}) syz_usb_control_io$uac1(r4, &(0x7f00000026c0)={0x14, &(0x7f0000002580)={0x40, 0x4, 0xed, {0xed, 0x23, "4596ad3e260a4f09c4a5eef2b07df8db1167ab7f57f771050b094007762c79093e1e03a93f63fb2ed0f64e70efa167af0b3d4280475d8c0ec3928580a0b99c875e488f3f6bf87bf8d95ff026a650cec4ecba8866fc50ee0481f3deae2ba33fb601a4138d3b7be97bf27295c63c30cf4f1a9563fcdcef30012194281ebb9c1c9c7f382ccd65236dc0055ec7fd201b23652aa02367748c4f22deb44d2421b604c6b15c9836159e7b10b9124bb55755426aa94cbbdaf592867692dabfb0f344cc7f66069edf229c0bf6c4fdde763573c2e6399f9b3b0319441da0afaa729cc00242cd44a309c449d718c06008"}}, &(0x7f0000002680)=ANY=[@ANYBLOB="05000400000004030a52"]}, &(0x7f0000002980)={0x44, &(0x7f0000002700)={0x0, 0x15, 0xa1, "8cb881c77b942fab736bfc2c0d56c9391a46b5decb06ad61dc0af1f03c02a1b76688b1e4218eef7c27d3d5e1620efa68d65f1d64e7c32aa0abc8c0db076ca240f5c75568c73a1e59e760590cea2d1068156f4c84a89d7ede4ce556f0d60b040421ac9ad41241d684e9d844b78b0b786c362fbb9a442a3f6b427d8d9d53a85e4d87ede8bd32674fb6a6d371127cb4ba5cd21f9985b798419d97f571962fd287a0a5"}, &(0x7f00000027c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000002800)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002840)={0x20, 0x81, 0x2, "d075"}, &(0x7f0000002880)={0x20, 0x82, 0x3, "0780a2"}, &(0x7f00000028c0)={0x20, 0x83, 0x2, "5bd9"}, &(0x7f0000002900)={0x20, 0x84, 0x4, "fb2e881e"}, &(0x7f0000002940)={0x20, 0x85, 0x3, "84521a"}}) read$FUSE(r3, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r3, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_fuse_handle_req(r3, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r6, r7, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, r6, &(0x7f0000000200)) openat$sequencer2(0xffffff9c, 0x0, 0x143240, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r9, 0x540b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r10 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) read$eventfd(r1, &(0x7f0000000140), 0x8) 9.167476198s ago: executing program 7 (id=1604): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x8801}}], 0x1, 0x20044034) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x210100, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r4, 0x7b3, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000100)={0x0, 0xe12d}, &(0x7f0000000140)=0x8) 9.094731976s ago: executing program 5 (id=1605): setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x41) r7 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r7, &(0x7f000000ae80)={0x2020}, 0x2020) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) getuid() 9.094277745s ago: executing program 1 (id=1606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) r1 = socket(0x25, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x664e21aa45677f15, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xeaed}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r5, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='few default'], 0x2d, 0xfffffffffffffff9) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2663}, 0x0) 8.101852754s ago: executing program 5 (id=1607): socket$inet6(0xa, 0x805, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xa2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2c, &(0x7f0000000040)) mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="040d", 0x2}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0), 0x4000000000001a1, 0x10103, 0x0) ppoll(&(0x7f0000000440)=[{r3, 0x2}], 0x1, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_open_dev$radio(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 7.989829174s ago: executing program 7 (id=1608): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x1f, 0xffffc000, 0x8000}}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10004}, [@FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = creat(0x0, 0xecf86c37d53049cc) setpriority(0x1, r6, 0x9) close(r10) execve(0x0, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, 0x0, 0x0) 7.934880414s ago: executing program 2 (id=1609): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x745}], 0x1}}], 0x1, 0xc0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c", 0x52, 0x14008885, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000178, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f0000000500)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 7.91816776s ago: executing program 1 (id=1610): setresuid(0xee00, 0xee00, 0x0) rename(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x20004000) socket$caif_stream(0x25, 0x1, 0x0) ptrace(0x10, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0x8a) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000040)=0x2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[], 0x6c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7.226748306s ago: executing program 1 (id=1611): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000001c0)="0b08b212f35e64e1f7e54bb820fc75ee92fc684c205a68dd5fdb2c91352542865fb177f494c0596acf5e2e0f69bfea59499fb056530999aa661f397e51b6299f05aae304b5aabda2cbb7a76bdfb7e5afa1b5f66f5b368c6637a0a8b204e4984d7e2dc94c8418e5fd02c8db5586f9fc3d8425ee100f4e924bdc785bebe41ae7d779014ef6e48d0068ca40434b5e3927651b4223fe6dfe8a9785f22189ba785adb902f65371ecbdacb197b57f3bd6d8176f0ffd349", 0xb4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000180)=0x4, 0x4) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8953, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000640)=0x13) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x15, &(0x7f0000000140)=0x3, 0x4) r7 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b80)="afd1c9ef", 0x4}], 0x1}, 0x40810) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xfffffffe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01070001779b9a2564657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x4c000) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r10, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r11, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) 7.098884176s ago: executing program 3 (id=1612): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x800000000ff, 0x28000) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc038563b, &(0x7f0000000080)={0x1000000, 0x1, @raw_data=[0x7fffffff, 0x0, 0x5, 0x800, 0x4, 0x8, 0x4, 0xc, 0xc8, 0x1, 0xffff, 0x9, 0x6, 0x5, 0x5, 0xff]}) inotify_init1(0x80000) 6.739869566s ago: executing program 1 (id=1613): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x1000, 0x200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r2 = socket(0x1e, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="b744f10a46e06c", 0x7) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f00000000c0)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000080)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0xc}) 6.571636427s ago: executing program 2 (id=1614): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe50a10a000600014002020c600e41b0000900acfe0a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) 6.560022786s ago: executing program 5 (id=1615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r3, 0x10, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 6.523401079s ago: executing program 1 (id=1616): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0xffffffffffffffff, 0x0, 0x8) tkill(r6, 0x7) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffffff, 0x8000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000180012800c0001006d615e766c616e000800028004000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000001040)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046b4c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x4, 0x7, 0x4000000000000e54, 0x1, 0x5479, 0x103f, 0x200000000006, 0x80, 0xffffffffffffffff, 0xfffffffffffffffe, 0xa768, 0x1, 0x4000000000c, 0x8000000000005, 0x800040068], 0x2000, 0x90}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.39076079s ago: executing program 2 (id=1617): setreuid(0xee01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) r0 = getpid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x88) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, 0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r6], 0x41) r7 = syz_open_procfs(0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) read$FUSE(r7, &(0x7f000000ae80)={0x2020}, 0x2020) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) getuid() 5.027644795s ago: executing program 2 (id=1618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="091f000000a9c53546", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x12, &(0x7f00000004c0)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x3, 0x1, 0x0, r0}, @ldst={0x1, 0x0, 0x2, 0xa, 0x2, 0x80, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}], 0x0, 0x6, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, 0xffffffffffffffff, 0x0, 0x40001) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="aa01cbe18f63ced1c1fb2ddac08da5dcbbbbb36a17c2000000080014bbac1414328903ef00"], 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 4.422655676s ago: executing program 7 (id=1619): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = io_uring_setup(0x7939, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x1, 0x215}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0xffffffff9e484420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab6e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) preadv(r1, &(0x7f0000001740)=[{&(0x7f00000000c0)=""/20, 0x14}, {&(0x7f0000000140)=""/37, 0x25}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000001540)=""/229, 0xe5}, {&(0x7f0000001640)=""/221, 0xdd}, {&(0x7f0000004200)=""/4096, 0x1000}], 0xa, 0xfbef, 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 4.319423997s ago: executing program 3 (id=1620): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102f2e1d507090582030002800000090503"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) (async) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x24) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x50}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.316839778s ago: executing program 5 (id=1621): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4000, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f00008e1000/0x4000)=nil, 0x4000, 0x9) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x2, 0x3, 0x5) write(r0, &(0x7f0000000080)="3c99ac2aaf5bce2b642e4718dc93da3978deb7a79768c587949c1b10b217d062e1aec9b0c14417fe17de4d2a927d6df1364ca19eacf175234421b9bca67227234638d5296603d997bc7414659fffca2a11b4c9f53a9b3325b1bfd84af589f7cfc17f7a80e1570587c7d38241e32b769ceadd23c0b2547558a966ada72b608a07ee7b186f972ff8cd0324cb6145dc2ba8edc56cc34b91a6e4e8cad21cf0c2827429219f0511c08c3eb432afe3e2c4e6ee40a1a1e46c11f7946170aa57b958d47742eb2d672e9e3f34723314d4837ff54a6e9a149a1571a97587257b6dc03b155f02c09ffd7bff59a32459851a91b4279b596803beabf07fbe", 0xf8) sendmmsg$inet(r1, &(0x7f0000004240)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000200)="359c8ad117abfbd451346486f2e39dd874a5180d", 0x14}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x18}}], 0x2, 0x2400d000) 4.00514174s ago: executing program 7 (id=1622): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)={0x124, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8001, 0x19}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xee6b}, @NL80211_ATTR_FRAME_MATCH={0x68, 0x5b, "36cd209110cfb4c56b42e670de5066a2ee33e65f18549cee05cc14d8c30f68d367075f8126815bc870298a7d6cb5b0a92c7d63ce28054951ebb00e283ffc94e46fb36270e283f55658c0979c6af3c02d55a2b02a3e3dc82b3f9233c37a42fbf97a39aa65"}, @NL80211_ATTR_FRAME_MATCH={0x7b, 0x5b, "d393b0fe2b0537099cc395fb7bb6b8a56bf1521eb128040ae8b6479bd288a8335b75eafc0ad07af64a81e625dd27385cee0b82380da688cf42991da7ce44bfef0730fc043c15b13cd657d66ab819df9bd468c9ae50a0ae01a88dd66544c757fe6e5caadf7271b4f0c6302a813d3e162a4ca921e5200c14"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x124}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x4040004) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x60000) socket(0x400000000010, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 2.345183064s ago: executing program 2 (id=1623): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(r4, 0x10, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.225157805s ago: executing program 7 (id=1624): rt_sigaction(0x2c, &(0x7f0000000080)={0x0, 0x40000004, 0xfffffffffffffffe, {[0xa]}}, 0x0, 0xc, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x108}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 2.081950232s ago: executing program 5 (id=1625): socket$inet6(0xa, 0x805, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xa2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b2c, &(0x7f0000000040)) mremap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000ffb000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="040d", 0x2}], 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000048c0), 0x4000000000001a1, 0x10103, 0x0) ppoll(&(0x7f0000000440)=[{r3, 0x2}], 0x1, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) 1.898792378s ago: executing program 7 (id=1626): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) ioctl$TUNGETSNDBUF(r2, 0x400454dc, &(0x7f0000001700)) socketpair(0x11, 0x3, 0x80000001, &(0x7f0000000240)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0x80000d61, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) write$cgroup_int(r4, &(0x7f0000000000)=0x2b00, 0x12) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x4, 0xff7ffffe, 0x4, 0xd, 0x7, 0x1000, 0x5}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0x5}, {&(0x7f0000000500)="86e9a0", 0x3}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 1.199985847s ago: executing program 3 (id=1627): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xfffffffe) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r5 = accept4$unix(r2, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='afs_make_fs_call2\x00', r6}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x800003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 674.250568ms ago: executing program 2 (id=1628): r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r5, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 397.268835ms ago: executing program 5 (id=1629): mkdir(0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000740)={0x2, 0x10008b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000500)) timer_create(0x7, 0x0, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0xc9b5080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=""/40, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}}, {{0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfff}}}, 0x108) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) syz_usb_connect(0x4, 0xdf4, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0xc5, 0xc, 0x12, 0x8, 0xccd, 0x102, 0x782e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde2, 0x4, 0x8, 0x8, 0x10, 0x1, [{{0x9, 0x4, 0x52, 0x10, 0x9, 0xc, 0x72, 0xf4, 0x1, [], [{{0x9, 0x5, 0x0, 0x3, 0x200, 0x29, 0x6f, 0x3}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x1, 0xb1, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x6}]}}, {{0x9, 0x5, 0x9, 0x3, 0x8, 0x7f, 0xe, 0x1}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x8, 0x2, 0xa, [@generic={0x3f, 0xc, "663069a60ebcf046c5e1a2fa647a7d162c600d3358d1d752d5c69f4f6db26f9c4bce23842c4f645eb580a14a9093bd7d8ee77993a623f1c7b47fe6afe1"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xd}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xff, 0x8, 0x8, [@generic={0xdc, 0xf, "98fe8c256cf6c717da49d154dda37ac2dad893403a5dfa6dfb2d535177d9c3c140ae22e1d4688a7d63d0e6397a62f97a4195521e91fbe13a067376133c5e1b9a84879d96fc11ddab756400587ac810fe5de04797a7b281e221b83d2e9904f23020049675c2fe34f117e3490a0e1c4edc0aef2f763a097f5f8ef342454e716254d00eada9f1733e6935c93f1c165859a684be78cb1ae59d57f5c19c886160861cf6d67e384ad8667a047855b562f3a57748c3ab0d250d65382469d19b3cc10bdb08a84e3dec65855e73b677a71dffca773ffef3294ad3a1fc1e5c"}, @generic={0x82, 0x10, "7000dbf91d8a00b42daf787f49c2ae4e8000a7681fb86ea0d5e277ac6c8d1b10d70546c3b44bca1488407bbb1a263aa37454427c1103b3b827934e884285b30b184f8ef766fe9054131c6205f0d781c69a1d7d22f278ed190b4a754ab8dc8f053c7370871bb9d415f757c855f62295615cb1b135e0d7d1298e9f534461f4441f"}]}}, {{0x9, 0x5, 0x80, 0x2, 0x40, 0x8, 0x3, 0xc, [@generic={0xe0, 0x22, "cc846e2104ee6807ed7ed7eaf13c4c501a45d32ec1115aa008d03bcc2435cef87e57022eb12d2aa1cb50ec1e0da02664039a5e29a1cdbd43b3051e84bbc2fdcbf233543d006b3a3a3c3cdc6f17969eee595d159cde3deb5576ff373e02003835cb10ebdbff8b0507232121201aba2cf021beff2cfa19a72c8faba9d0e2a751d8fa3ee657be0d885114f83ab09f3d2769a57834ec14a51cfdf84a02a0ce4a98460a3090ea639aba5747bf281487d9931b9743d2b28df91e4f1aff31a530384af616e24f762d0d863d45a76d83532b90de374bfa31f23663b492638f202187"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x3f6, 0x7, 0x7, 0x7, [@generic={0x89, 0x31, "2bc62387035e8787385e2ec5ba382f198b22b1062e1c14bbdd817a6178bb6bdfc62e94fb70f0b583622499f4b24172abdcd9928f0f0db431fd074a51c2487f45b9ab9d910dea1dc087122cc293dfdbfa5343af1c83f6b6ce1a1dd32305ac7887ed668d4018f89e530505579cc27882b07c9bd106f46d7bf0cd5f3d336250295949495def00e3fe"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x3, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0xfbd7}]}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x9, 0x7f, [@generic={0xa6, 0x22, "74e67c37ec3df5db950e7d8b043227b4770211367f1eb9dba0d8efdf80bd461d64bb39396d3e0696e3c6cf6dcf84a54b4e078749b7f50f42428d879ce89c313748e59876d33dcc418f808afd860ac3dbb673bc4fc98bb973c637e74da72a747bfe276911a15700f154f0359b5b14ebe9a82c85c69975d651b6daa229b8b77a5f2599c4b8089fb5c5634540f42fa0f08baf2f79bbbf93927063bb63948686395f187a9dcc"}]}}]}}, {{0x9, 0x4, 0x76, 0x0, 0x10, 0x2b, 0xc7, 0x71, 0x8, [@hid_hid={0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0xfd3}}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xd, 0x7, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@mdlm={0x15, 0x24, 0x12, 0x7f}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xa, 0x8, 0x40, 0x5, 0xa5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x7}, @generic={0x64, 0x30, "d6c07223ae2d59d1fe65d2775cd57d1dcc4a7d9601afe3f2c2b9d074a43a0448ac7b89797b6bbf4fd0169a0bdd62ad702f2dd303865fc740671238206e7c584c624207fd630a0640faee92bc96a1d1bdb4286b14a8fce951fd52f7380f211986bfb0"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x10, 0x9, 0x2, 0xba, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0xe}]}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x4, 0x3, 0xa2}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x40, 0xf3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x5, 0x5}]}}, {{0x9, 0x5, 0x1, 0x10, 0x610, 0x0, 0x62, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x8, 0x40, 0xc}}, {{0x9, 0x5, 0x4, 0x18, 0x20, 0x0, 0xb0, 0x3, [@generic={0x7f, 0xd, "f60cbe841d11d7f51d39a593924be6eaa307f937d1d4b161d6a7ad404623ea21b55fd8d4395afdff20377de2d4fc82599c56863772f410e24cc22a93eddfa13db36bda7fb608b4fecda3f7e944421f0c69f8b6bb84d923fab10df8c77fd1ba92721678bc14b29448700f413035119e42ac50b3f5e1329e0931da7c218d"}, @generic={0x39, 0x1, "7a8b79c3f34a26d1da87222bb248620ddb7c2f33c44285eefd2a728840e692207a73fe43da45f8d32ad08d22aa9c903ae79c6a6f727a72"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0x0, 0x1}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0x5, 0x4, 0x80, [@generic={0xeb, 0x30, "91e0efb386b2c754549fd314e2ddbb7fc623598ffb7484664c67789619abad2b0b19315840510aae39eab43eaa2df161af4e6a91cffbcebdd45fe8f77df96bab9aa87d7081162a690c7228d3ce0c2243c5c1b46f5f7ec42fe5361c651d44cf05ae759b384a55b6bb07acef2ddaeda493f699f817ea19154bf3bea5eed7a555121e5f62c6d04fc1443a172c490fb3721a7827d2949bc0a8374d2013a811c096d4476bfa36f5526f284db81372520fc41763051f0df2a7ecd655c1c8e59d00d509c94e2ea8db162da4e26e129690fa770da48d2b0abf1a3c13a359f41fcaaa06fc11991e9979170b0f5b"}, @uac_iso={0x7, 0x25, 0x1, 0x101, 0x2, 0xfb56}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0x10, 0x7f, 0xf0, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x5}]}}, {{0x9, 0x5, 0x7, 0x1, 0x8, 0x3, 0x6d, 0x2, [@generic={0xec, 0x4, "9b836fce040beb4c67ddf4f7deda489a8e4b2f366455c71e298f8b02f0d459ef047d201538e52ce482db8f201ad1a13b17fc1786f7d984dfad25bcbf2f6147e548072104fcd13162644b92e8bea69539dd305ec92acfa7ecd6b94573a6fa15a94ad052e0373443b2bb1da13163e651a7ca32e09f87d28da9fe320e66d07166e8d38b9f3950e2631a3209614dd6204253b7dbd3de1f297f1ab580907beb687d27e81fa63a25761af14a00b2df4068614b34c08606b6ba02a3d5af4ed4a20b7f9754dbf31843423a34ae5a73b98c10a8fae113ef87bbbc778a7ec8515bd8d93bcbbbe8654d0ee213f933f3"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x20, 0x0, 0xd5, 0x5, [@generic={0x9d, 0x22, "04263a3a290faa0c2a104212d2d1787875873704eab7860bbabd74ce7fdaf2cb851f8500b0082a831f4d4d0c84a47cdc73657c5a663e712a5071713c8f3ec11d253faa9b4d85d197886553894408ca1e23c13e568e3d7d1ff4a98524d362b2c8803d0eac88948db6fab1cfe0dddb28d6968d58963a7f675a34c8fee9d38616c61aaf14657f89374469de5365a9f7ace8431ebce9efbae6dc742dc3"}]}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x10, 0xb, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x4}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0x3, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7}]}}, {{0x9, 0x5, 0x7, 0x8, 0x30, 0xff, 0x81}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x8, 0x37, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x2}]}}]}}, {{0x9, 0x4, 0x47, 0xf8, 0x0, 0x55, 0x9, 0x3a, 0xfd, [@generic={0xcf, 0x6, "92d19baebaf78201434127bbbe5533edd018afc5245e97a5d6a93f5b3ac1a92a0ec9598925a012971865154e19a7050e90baedc77cfbff507b95bd2211174a060943245a54b44c4bf320e048f561c1ca857e74cb83e8ab677506c1b4822693a78a7bb36213a6d46fd3058b60843d6ac3d2d91e6202027de4edc9e044e4e1dcdfc8faaf146c11bf25a55bbee26041f0b5f4c23f40570a8caafa50e28ded4e58ab794fdc70ecfa2ec7e2bf766153fcd4571942bab431daba64636bc728ba9fea29319732b001ad5ffac0dc9fdba2"}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "7146e7"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x101, 0x0, 0x7}, [@mdlm_detail={0xc2, 0x24, 0x13, 0xd, "59e176427d9719b1f4521aba02e3f64b0d8e0cb14f5ebc54bbfc080306a5bf1e9a203bb0992b41420037959b27e497c6649be45cf6b0e061e1ee782a56a0e284380f57fe934b0ed9e1710220d2b22e5d3d601fc3d39a96fa1f0b23942a271cf677d54df7fc49edd9a89381d27eed8bcddb64968c1230c1bf1c40670c7e677fedcf7e41265a7db9b6938fc5d5146f0274261d84014c788415137d54eaadfc8d044983e873b74fec6709c23f65ddeb1e571db816b1eb3e34285dce41dbe952"}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0xfd, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xd5}, @network_terminal={0x7, 0x24, 0xa, 0x8e, 0xf, 0x8}]}]}}, {{0x9, 0x4, 0x4f, 0x3, 0x7, 0x18, 0x37, 0xcb, 0x8, [@generic={0x70, 0x3, "9228ca82a1bcc331a29b699243b2febac56a816d640569659ce956a6e055415bf22730f2ec6000a48fb5e2a3b6ffcff5dfb1e4e679afe8e847b3d20ea239f9991d853cc376a138903a85a37fcef40c24533b9de5eefe7555a53645b5168e25d76c4ed8b5cc083bc814f9b3fd072b"}, @hid_hid={0x9, 0x21, 0x136, 0x1, 0x1, {0x22, 0x56d}}], [{{0x9, 0x5, 0xc, 0x0, 0x8, 0xff, 0xcc, 0x9}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x4, 0xff, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x2}, @generic={0xec, 0xf, "9a8bac665812ed11c4691e12e497aa65d64c51f0f94ede0d5d1a6e0f66dcf8356172694d4a4f8667c8835ba2f64bf35f99784c357b8c0489ac4d595185228be5f5c9d44c6a40a2acbf97654523550deac836906c8799d7c688430a494b2d7cf9d263f7c2cea1ef61a07570845641c9ecfc1ea5e1d4fd75564b7f5cde1d39b81fcfa9ec79f69988f7f01a9e492cf2a04ed312faf241be1995ca978ae8f8f07ca2670957f9ea93a2520b40ef9183ecfa04717b3d6c395ee8a8a00767b5dd5e76189bc5ee4cf235af62c87f076a85a5003b25a18bbcea8d5cf4c7f9c454aa47a242fbe60e6d4b6dc4ec9366"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x4, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x3, 0x400, 0x6, 0x1, 0x0, [@generic={0x21, 0x3, "b3bcf97b718bc87d8de374969ac71b8b2b6fba57e8cd05abcf6d148fb753ac"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf, 0x4, 0x1, [@generic={0x7b, 0x22, "510abd98ead5169f86b0c04c1a6f87b346e117bfa35ec1ff7e7d67562cfa4656e8744adf80dafdeac16a137ebda89843bc5a9c0bad325b05eabd68a0d297ff7587f2c87dd559f121311debfbb0e9629831bd24d50a32d5e24c254d4b0e725781c625442b2b7f96075220686d1ae742d4b5041ced59841b56e1"}, @generic={0x76, 0x11, "15d27a21b2836a56f4990c7476946d14c04eb92544326c3b79480bcc29a2360595fde326f37a8c3b5f923df5781b2eb2943971d72270f3b510fd0b88ae4eda69ec266711dc7f0497787a9f4d20de8da0a54e4bd0143cc94a662cd6cbbe3cda5e9947d17dd22326c0e8e7f75ca088c32a92a32a46"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x43, 0x5, 0x0, [@generic={0x5e, 0x30, "fd0a9ca0d74f37a1830d0b96be5b78cbb2e3e33184f3a442c5d0020bbff2b396b77dbf5f5558da229fc061ba1d243c7b2af039aa5e88b9923c14aa5152c48429dfba9ca04b030da2417b17d31ed200f107224984c9a30122046164e4"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x1, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x400}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x8, 0x9, 0xa, 0xff, 0xf8}, 0x20, &(0x7f0000000100)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0xf, 0x0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "a2f96da11070f627a23a686b31d41d0f"}]}, 0x2, [{0xc1, &(0x7f0000000540)=@string={0xc1, 0x3, "9852199c1450e8dc354caf92762b26e9c0f1d8744576f92a235391e42561e4dad9d39c4f6848331d8fdbb2174b02843b62ce60d1c4bd5707a0e69b8c8b60fa7b3bffbdadd27b20c0fe62956f9468d4245cbf85085fa99f6e02b0fa5ed3d95c037c0194c935c4f4f4c13698688198775ad8a45e35ba97c56cb57990e8caa75842322f3ff17b82a0614c19042ba6a86283321d756f84b25a3ba1802133420c54c9ee0eafa40f7c422c1c12e4eb071d6da976df3677ca08454818685b85118705"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x83e}}]}) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) 0s ago: executing program 1 (id=1630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x5, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}]}}}}}}, 0x46) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x680400, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3}, 0x18) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = creat(&(0x7f0000019080)='./file0\x00', 0xecf86c37d530494c) syz_clone3(&(0x7f0000001240)={0x200200000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) kernel console output (not intermixed with test programs): 006] usb 5-1: config 0 has no interface number 0 [ 693.747580][ T6006] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 693.794856][ T6006] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 693.824887][ T6006] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 693.855585][ T6006] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 693.870187][ T5915] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 693.883738][ T6006] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 693.894585][ T6006] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 693.907634][ T6006] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 693.916749][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.957125][ T6006] usb 5-1: config 0 descriptor?? [ 693.971091][T10372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 693.980926][T10372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 694.016147][ T6006] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 694.101367][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 694.107473][ T5915] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 694.116895][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.127954][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.138921][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.150116][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.161077][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.284918][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.305093][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.319615][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.353708][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 694.363283][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 694.372648][ T5915] usb 2-1: SerialNumber: syz [ 694.439451][ T5915] usb 2-1: config 0 descriptor?? [ 694.504431][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35 [ 694.746083][T10374] input: syz1 as /devices/virtual/input/input36 [ 694.933643][T10372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 694.948768][ T6006] usb 5-1: USB disconnect, device number 24 [ 694.979648][T10382] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1157'. [ 694.979827][ T6006] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 694.996537][T10382] openvswitch: netlink: EtherType 0 is less than min 600 [ 695.136869][ T5168] bcm5974 2-1:0.0: could not read from device [ 695.231901][ T5168] bcm5974 2-1:0.0: could not read from device [ 695.360984][ T5168] bcm5974 2-1:0.0: could not read from device [ 695.370401][ T5915] usb 2-1: USB disconnect, device number 17 [ 695.409456][ T5168] bcm5974 2-1:0.0: could not read from device [ 696.081644][T10401] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 696.089689][T10401] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 696.102032][T10401] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 696.102165][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 696.102175][ T30] audit: type=1400 audit(1760013883.160:1137): avc: denied { create } for pid=10399 comm="syz.3.1163" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 696.110570][T10401] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 696.394561][T10402] ipvlan1: entered promiscuous mode [ 696.601565][ T30] audit: type=1400 audit(1760013883.680:1138): avc: denied { unlink } for pid=5849 comm="syz-executor" name="file0" dev="tmpfs" ino=1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 696.648988][ T30] audit: type=1400 audit(1760013883.720:1139): avc: denied { create } for pid=10405 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 696.708045][ T30] audit: type=1400 audit(1760013883.790:1140): avc: denied { read write } for pid=10407 comm="syz.3.1165" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 696.754728][T10408] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 696.886098][T10411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1164'. [ 697.861565][ T30] audit: type=1400 audit(1760013883.830:1141): avc: denied { open } for pid=10407 comm="syz.3.1165" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 697.967948][ T30] audit: type=1400 audit(1760013883.970:1142): avc: denied { read write } for pid=10405 comm="syz.1.1164" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 698.058923][ T30] audit: type=1400 audit(1760013883.970:1143): avc: denied { open } for pid=10405 comm="syz.1.1164" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 698.100713][ T30] audit: type=1400 audit(1760013883.980:1144): avc: denied { setopt } for pid=10405 comm="syz.1.1164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 698.129936][T10421] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 698.256564][ T30] audit: type=1400 audit(1760013885.320:1145): avc: denied { write } for pid=10420 comm="syz.1.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 698.381624][ T1205] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 698.390885][T10424] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 698.398505][ T30] audit: type=1400 audit(1760013885.460:1146): avc: denied { mounton } for pid=10416 comm="syz.3.1167" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 698.457548][T10424] UDF-fs: Scanning with blocksize 512 failed [ 698.582202][T10429] vivid-003: disconnect [ 698.620651][T10429] vivid-003: reconnect [ 698.710092][T10424] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 698.769922][ T1205] usb 5-1: Using ep0 maxpacket: 8 [ 698.775328][T10424] UDF-fs: Scanning with blocksize 1024 failed [ 698.777005][ T1205] usb 5-1: unable to get BOS descriptor or descriptor too short [ 698.790442][ T1205] usb 5-1: config 2 has an invalid interface number: 153 but max is 0 [ 698.801297][T10424] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 698.808886][T10424] UDF-fs: Scanning with blocksize 2048 failed [ 698.815198][ T1205] usb 5-1: config 2 has no interface number 0 [ 698.821776][ T1205] usb 5-1: config 2 interface 153 has no altsetting 0 [ 698.821776][ T5795] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 698.840706][T10424] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 698.848581][T10424] UDF-fs: Scanning with blocksize 4096 failed [ 698.869739][ T1205] usb 5-1: New USB device found, idVendor=1199, idProduct=683b, bcdDevice=95.ac [ 698.879066][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.887368][ T1205] usb 5-1: Product: syz [ 698.895548][ T1205] usb 5-1: Manufacturer: syz [ 698.900757][ T1205] usb 5-1: SerialNumber: syz [ 699.025154][T10432] vivid-000: disconnect [ 699.249220][T10418] vivid-000: reconnect [ 699.256407][ T5795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 699.266923][ T5795] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 699.279089][ T1205] hub 5-1:2.153: bad descriptor, ignoring hub [ 699.287701][ T1205] hub 5-1:2.153: probe with driver hub failed with error -5 [ 699.289176][ T5795] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 699.296273][ T1205] sierra 5-1:2.153: Sierra USB modem converter detected [ 699.322295][ T5795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.330866][ T5795] usb 4-1: Product: syz [ 699.335165][ T5795] usb 4-1: Manufacturer: syz [ 699.341326][ T5795] usb 4-1: SerialNumber: syz [ 699.393438][ T1205] usb 5-1: USB disconnect, device number 25 [ 699.400329][ T1205] sierra 5-1:2.153: device disconnected [ 699.612609][ T5795] usb 4-1: invalid UAC_HEADER (v1) [ 699.631356][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 699.643898][ T5795] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 699.655023][ T5795] usb 4-1: USB disconnect, device number 23 [ 699.655692][ T6191] udevd[6191]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.761506][ T10] usb 2-1: device descriptor read/64, error -71 [ 700.131332][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 700.195929][T10447] 9pnet_fd: Insufficient options for proto=fd [ 700.263950][ T10] usb 2-1: device descriptor read/64, error -71 [ 700.461694][ T10] usb usb2-port1: attempt power cycle [ 700.491422][T10455] netlink: 'syz.2.1179': attribute type 6 has an invalid length. [ 700.640087][T10458] ======================================================= [ 700.640087][T10458] WARNING: The mand mount option has been deprecated and [ 700.640087][T10458] and is ignored by this kernel. Remove the mand [ 700.640087][T10458] option from the mount to silence this warning. [ 700.640087][T10458] ======================================================= [ 700.823426][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 700.885909][T10464] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1181'. [ 701.286668][ T10] usb 2-1: device descriptor read/8, error -71 [ 701.293372][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 701.293404][ T30] audit: type=1400 audit(1760013888.350:1160): avc: denied { create } for pid=10462 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 701.372697][ T30] audit: type=1400 audit(1760013888.380:1161): avc: denied { write } for pid=10462 comm="syz.3.1182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 701.403476][ T30] audit: type=1400 audit(1760013888.420:1162): avc: denied { lock } for pid=10462 comm="syz.3.1182" path="socket:[27145]" dev="sockfs" ino=27145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 701.691322][ T30] audit: type=1400 audit(1760013888.770:1163): avc: denied { mount } for pid=10467 comm="syz.2.1183" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 701.725199][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 701.753664][ T10] usb 2-1: device descriptor read/8, error -71 [ 701.912004][T10472] vivid-002: disconnect [ 701.930716][T10472] vivid-002: reconnect [ 702.002104][ T10] usb usb2-port1: unable to enumerate USB device [ 702.022238][ T30] audit: type=1400 audit(1760013889.110:1164): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 702.063560][ T30] audit: type=1400 audit(1760013889.150:1165): avc: denied { unlink } for pid=10473 comm="syz.2.1185" name="#29" dev="tmpfs" ino=1433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 702.087877][T10474] overlayfs: conflicting lowerdir path [ 702.571630][T10487] 9pnet_fd: Insufficient options for proto=fd [ 703.398562][ T30] audit: type=1400 audit(1760013889.990:1166): avc: denied { kexec_image_load } for pid=10485 comm="syz.2.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 703.501564][ T30] audit: type=1400 audit(1760013890.560:1167): avc: denied { ioctl } for pid=10488 comm="syz.1.1189" path="socket:[27193]" dev="sockfs" ino=27193 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 703.564160][T10497] netlink: 'syz.2.1191': attribute type 6 has an invalid length. [ 703.708754][ T30] audit: type=1400 audit(1760013890.710:1168): avc: denied { search } for pid=10495 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 703.781399][ T30] audit: type=1400 audit(1760013890.710:1169): avc: denied { search } for pid=10495 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1831 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.225472][ T9889] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.235230][ T9889] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.243400][ T9889] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.251930][ T9889] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.260669][ T9889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.284906][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.301459][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.310180][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.317822][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.325406][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.576698][T10509] chnl_net:caif_netlink_parms(): no params data found [ 704.745316][T10523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10523 comm=syz.3.1194 [ 705.026752][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.043463][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.068815][T10509] bridge_slave_0: entered allmulticast mode [ 705.089691][T10509] bridge_slave_0: entered promiscuous mode [ 705.100654][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.108587][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.117952][T10509] bridge_slave_1: entered allmulticast mode [ 705.125662][T10509] bridge_slave_1: entered promiscuous mode [ 705.208257][T10509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.240189][T10509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.345402][T10509] team0: Port device team_slave_0 added [ 705.363813][T10509] team0: Port device team_slave_1 added [ 705.755908][T10509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.778492][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.809100][T10509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.824359][T10509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.832489][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.867630][T10509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.878922][T10550] netlink: 'syz.3.1201': attribute type 6 has an invalid length. [ 706.039338][T10509] hsr_slave_0: entered promiscuous mode [ 706.216364][T10562] 9pnet_fd: Insufficient options for proto=fd [ 706.401496][ T5857] Bluetooth: hci5: command tx timeout [ 706.462545][T10509] hsr_slave_1: entered promiscuous mode [ 706.468736][T10509] debugfs: 'hsr0' already exists in 'hsr' [ 706.474606][T10509] Cannot create hsr debugfs directory [ 706.923961][T10509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 706.993429][T10509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 707.045443][T10509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 707.077821][T10509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.108252][T10575] fuse: Bad value for 'user_id' [ 707.113243][T10575] fuse: Bad value for 'user_id' [ 707.361491][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 707.507494][ T10] usb 4-1: device descriptor read/64, error -71 [ 707.566756][T10590] batadv_slave_0: entered allmulticast mode [ 707.739020][T10509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.770110][T10509] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.786069][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.793263][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.801067][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 707.801081][ T30] audit: type=1400 audit(1760013894.880:1190): avc: denied { create } for pid=10598 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 707.833095][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.840248][ T7867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.861406][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 707.994741][ T30] audit: type=1400 audit(1760013895.080:1191): avc: denied { sys_module } for pid=10509 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 708.037822][ T10] usb 4-1: device descriptor read/64, error -71 [ 708.145611][ T30] audit: type=1400 audit(1760013895.230:1192): avc: denied { write } for pid=10598 comm="syz.2.1207" name="fib_trie" dev="proc" ino=4026532953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 708.179694][T10604] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1207'. [ 708.189092][ T10] usb usb4-port1: attempt power cycle [ 708.222220][T10509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.321450][ T5795] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 708.473153][ T5795] usb 2-1: Using ep0 maxpacket: 8 [ 708.482730][ T5857] Bluetooth: hci5: command tx timeout [ 708.497082][ T5795] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 708.506560][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.520227][T10509] veth0_vlan: entered promiscuous mode [ 708.532035][ T5795] usb 2-1: config 0 descriptor?? [ 708.536218][T10509] veth1_vlan: entered promiscuous mode [ 708.542844][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 708.563445][ T10] usb 4-1: device descriptor read/8, error -71 [ 708.579200][T10509] veth0_macvtap: entered promiscuous mode [ 708.587971][T10509] veth1_macvtap: entered promiscuous mode [ 708.603995][T10509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.616764][T10509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.630785][ T5938] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.652010][ T5938] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.682776][ T5938] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.695073][ T5938] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.743123][ T30] audit: type=1400 audit(1760013895.820:1193): avc: denied { create } for pid=10620 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 708.763292][ T5795] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 708.775711][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.787621][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.810724][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.818734][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.830742][ T30] audit: type=1400 audit(1760013895.910:1194): avc: denied { mounton } for pid=10509 comm="syz-executor" path="/root/syzkaller.STDEFN/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 708.861285][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 708.879550][ T30] audit: type=1400 audit(1760013895.940:1195): avc: denied { mount } for pid=10509 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 708.964071][ T30] audit: type=1400 audit(1760013895.940:1196): avc: denied { mounton } for pid=10509 comm="syz-executor" path="/root/syzkaller.STDEFN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 709.031548][ T10] usb 4-1: device descriptor read/8, error -71 [ 709.081184][ T30] audit: type=1400 audit(1760013895.940:1197): avc: denied { mounton } for pid=10509 comm="syz-executor" path="/root/syzkaller.STDEFN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=27563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 709.172507][ T10] usb usb4-port1: unable to enumerate USB device [ 709.188778][ T30] audit: type=1400 audit(1760013895.960:1198): avc: denied { unmount } for pid=10509 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 709.230610][ T30] audit: type=1400 audit(1760013896.140:1199): avc: denied { mounton } for pid=10509 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 709.411705][T10607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.423139][T10607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.731323][ T42] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 710.052936][ T42] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A [ 710.070645][T10636] netlink: 'syz.2.1211': attribute type 6 has an invalid length. [ 710.104136][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 4 [ 710.115389][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 14585, setting to 1023 [ 710.139069][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 710.159506][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.184971][ T42] usb 6-1: Product: syz [ 710.196599][ T42] usb 6-1: Manufacturer: syz [ 710.207484][ T42] usb 6-1: SerialNumber: syz [ 710.217752][ T1205] libceph: connect (1)[c::]:6789 error -101 [ 710.224292][ T1205] libceph: mon0 (1)[c::]:6789 connect error [ 710.229085][ T42] usb 6-1: config 0 descriptor?? [ 710.305745][T10638] ceph: No mds server is up or the cluster is laggy [ 710.571835][ T5857] Bluetooth: hci5: command tx timeout [ 710.789945][T10646] 9pnet_fd: Insufficient options for proto=fd [ 710.860673][ T42] usb 6-1: USB disconnect, device number 2 [ 711.082189][ T5795] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 711.104926][ T5795] asix 2-1:0.0: probe with driver asix failed with error -71 [ 711.114526][ T5795] usb 2-1: USB disconnect, device number 22 [ 711.601648][T10654] fuse: Unknown parameter '0x0000000000000008' [ 712.473916][T10665] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 712.645182][ T5857] Bluetooth: hci5: command tx timeout [ 713.080446][T10670] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1219'. [ 713.735842][T10682] fuse: Unknown parameter '' [ 714.252514][ T122] block nbd0: Possible stuck request ffff888026170000: control (read@0,1024B). Runtime 210 seconds [ 714.271397][ T122] block nbd0: Possible stuck request ffff8880261701c0: control (read@1024,1024B). Runtime 210 seconds [ 714.282491][ T122] block nbd0: Possible stuck request ffff888026170380: control (read@2048,1024B). Runtime 210 seconds [ 714.293680][ T122] block nbd0: Possible stuck request ffff888026170540: control (read@3072,1024B). Runtime 210 seconds [ 714.650516][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 714.650532][ T30] audit: type=1400 audit(1760013901.730:1249): avc: denied { mount } for pid=10691 comm="syz.3.1226" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 715.451341][ T42] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 716.055762][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 716.071775][ T42] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 716.108188][ T42] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 716.170449][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 716.256342][ T42] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 716.270510][ T42] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 716.323781][ T42] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 716.379553][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.541638][ T30] audit: type=1400 audit(1760013903.630:1250): avc: denied { sqpoll } for pid=10711 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 716.652392][ T30] audit: type=1400 audit(1760013903.740:1251): avc: denied { create } for pid=10711 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 716.653282][T10721] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1233'. [ 716.703475][T10724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 716.730504][ T42] usb 6-1: GET_CAPABILITIES returned 0 [ 716.823706][ T30] audit: type=1400 audit(1760013903.740:1252): avc: denied { write } for pid=10711 comm="syz.1.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 716.854502][ T42] usbtmc 6-1:16.0: can't read capabilities [ 717.065146][ T9889] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 717.078037][ T9889] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 717.090693][ T9889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 717.121550][ T9889] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 717.132654][ T9889] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 717.265404][ T30] audit: type=1400 audit(1760013904.350:1253): avc: denied { ioctl } for pid=10752 comm="syz.3.1235" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 717.394405][ T30] audit: type=1400 audit(1760013904.470:1254): avc: denied { write } for pid=10699 comm="syz.5.1227" name="usbtmc0" dev="devtmpfs" ino=3148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 717.898161][T10725] chnl_net:caif_netlink_parms(): no params data found [ 718.352318][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.359647][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.367315][T10725] bridge_slave_0: entered allmulticast mode [ 718.375129][T10725] bridge_slave_0: entered promiscuous mode [ 718.383784][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.391394][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.398674][T10725] bridge_slave_1: entered allmulticast mode [ 718.406561][T10725] bridge_slave_1: entered promiscuous mode [ 718.618111][T10725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.680548][ T30] audit: type=1400 audit(1760013905.690:1255): avc: denied { bind } for pid=10781 comm="syz.2.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 718.735101][ T5986] usb 6-1: USB disconnect, device number 3 [ 718.798649][T10725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.204797][ T9889] Bluetooth: hci6: command tx timeout [ 719.702189][T10787] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 719.708755][T10787] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 719.742076][ T30] audit: type=1400 audit(1760013906.760:1256): avc: denied { ioctl } for pid=10786 comm="syz.2.1239" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 719.783999][T10787] vhci_hcd vhci_hcd.0: Device attached [ 720.141873][ T5986] vhci_hcd: vhci_device speed not set [ 720.247809][ T5986] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 721.108003][T10725] team0: Port device team_slave_0 added [ 721.140175][T10725] team0: Port device team_slave_1 added [ 721.282364][ T9889] Bluetooth: hci6: command tx timeout [ 721.476173][T10796] overlayfs: missing 'lowerdir' [ 722.582203][T10791] vhci_hcd: connection reset by peer [ 722.595984][T10756] vhci_hcd: stop threads [ 722.600267][T10756] vhci_hcd: release socket [ 722.621457][T10756] vhci_hcd: disconnect device [ 722.632083][T10725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.639046][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.681085][T10725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.697048][T10725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.704871][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.736400][T10725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.790690][T10725] hsr_slave_0: entered promiscuous mode [ 722.798399][T10725] hsr_slave_1: entered promiscuous mode [ 722.806094][T10725] debugfs: 'hsr0' already exists in 'hsr' [ 722.814372][T10725] Cannot create hsr debugfs directory [ 723.170796][ T1205] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 723.219236][T10827] nvme_fabrics: missing parameter 'transport=%s' [ 723.225963][T10827] nvme_fabrics: missing parameter 'nqn=%s' [ 723.234113][T10827] binder: 10826:10827 ioctl c0306201 0 returned -14 [ 723.241027][ T30] audit: type=1400 audit(1760013910.320:1257): avc: denied { ioctl } for pid=10826 comm="syz.5.1248" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 723.403245][ T9889] Bluetooth: hci6: command tx timeout [ 723.403348][ T1205] usb 4-1: device descriptor read/64, error -71 [ 724.011708][ T1205] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 724.053400][T10833] vivid-000: disconnect [ 724.156227][T10833] vivid-000: reconnect [ 724.202256][ T1205] usb 4-1: device descriptor read/64, error -71 [ 724.291862][T10841] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1250'. [ 724.325894][ T1205] usb usb4-port1: attempt power cycle [ 724.696659][T10725] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 724.707902][T10725] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 724.718763][T10725] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 724.729364][T10725] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 724.782690][T10725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.801044][T10725] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.816077][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.823295][T10717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.860620][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.867794][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.011317][ T30] audit: type=1400 audit(1760013912.020:1258): avc: denied { firmware_load } for pid=10842 comm="syz.1.1251" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 725.041400][ T1205] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 725.087350][ T30] audit: type=1400 audit(1760013912.150:1259): avc: denied { mount } for pid=10842 comm="syz.1.1251" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 725.110712][ T1205] usb 4-1: device descriptor read/8, error -71 [ 725.415684][T10855] vivid-001: disconnect [ 725.424312][T10855] vivid-001: reconnect [ 725.434588][ T30] audit: type=1400 audit(1760013912.150:1260): avc: denied { mounton } for pid=10842 comm="syz.1.1251" path="/264/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 725.458066][ T1205] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 725.466260][ T9889] Bluetooth: hci6: command tx timeout [ 725.472160][ T30] audit: type=1400 audit(1760013912.150:1261): avc: denied { mount } for pid=10842 comm="syz.1.1251" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 725.511911][ T1205] usb 4-1: device descriptor read/8, error -71 [ 725.621399][ T30] audit: type=1400 audit(1760013912.700:1262): avc: denied { write } for pid=10859 comm="syz.2.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 725.621640][ T1205] usb usb4-port1: unable to enumerate USB device [ 725.917916][ T30] audit: type=1400 audit(1760013913.000:1263): avc: denied { unmount } for pid=5859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 726.019055][T10725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.094920][ T30] audit: type=1326 audit(1760013913.180:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10866 comm="syz.3.1254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8db918eec9 code=0x0 [ 726.168686][ T30] audit: type=1400 audit(1760013913.250:1265): avc: denied { setopt } for pid=10866 comm="syz.3.1254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 726.701583][ T5986] vhci_hcd: vhci_device speed not set [ 727.062222][ T30] audit: type=1326 audit(1760013914.140:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10886 comm="syz.1.1258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe84f18eec9 code=0x0 [ 727.889141][T10725] veth0_vlan: entered promiscuous mode [ 727.910203][T10725] veth1_vlan: entered promiscuous mode [ 728.508157][T10725] veth0_macvtap: entered promiscuous mode [ 728.989529][T10725] veth1_macvtap: entered promiscuous mode [ 729.007577][ T30] audit: type=1400 audit(1760013916.070:1267): avc: denied { unmount } for pid=10509 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 729.023963][T10725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 729.186317][T10725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 729.217327][T10741] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.226608][T10741] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.240710][T10741] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.252395][T10741] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.323120][T10798] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 729.406639][T10759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.428508][T10759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.531668][T10798] usb 4-1: Using ep0 maxpacket: 16 [ 729.661627][T10798] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 729.751551][T10798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 729.765012][T10759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 729.775591][T10759] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.784029][T10798] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 729.795457][T10798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.806674][T10798] usb 4-1: Product: syz [ 729.820817][T10798] usb 4-1: Manufacturer: syz [ 729.841568][T10798] usb 4-1: SerialNumber: syz [ 729.863290][T10798] usb 4-1: config 0 descriptor?? [ 729.893038][T10798] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 729.906260][T10798] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 729.929608][T10919] overlayfs: workdir and upperdir must be separate subtrees [ 730.021166][T10919] loop2: detected capacity change from 0 to 7 [ 730.137747][ T6191] Dev loop2: unable to read RDB block 7 [ 730.143516][ T6191] loop2: unable to read partition table [ 730.151561][ T6191] loop2: partition table beyond EOD, truncated [ 730.166126][T10919] Dev loop2: unable to read RDB block 7 [ 730.171903][T10919] loop2: unable to read partition table [ 730.177744][T10919] loop2: partition table beyond EOD, truncated [ 730.184314][T10919] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 730.943791][T10798] em28xx 4-1:0.0: unknown em28xx chip ID (53) [ 731.008048][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 731.008063][ T30] audit: type=1400 audit(1760013918.090:1269): avc: denied { read write } for pid=10928 comm="syz.1.1270" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 732.199766][T10940] overlayfs: missing 'lowerdir' [ 732.637073][T10798] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 732.654187][T10798] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 732.661286][ T30] audit: type=1400 audit(1760013918.090:1270): avc: denied { open } for pid=10928 comm="syz.1.1270" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 732.941328][T10798] em28xx 4-1:0.0: No AC97 audio processor [ 733.044101][ T42] usb 4-1: USB disconnect, device number 32 [ 733.092754][ T42] em28xx 4-1:0.0: Disconnecting em28xx [ 733.148039][ T42] em28xx 4-1:0.0: Freeing device [ 733.214866][T10953] tmpfs: Unknown parameter 'nr_blʩe @}g#ocks' [ 733.368855][T10948] IPv6: Can't replace route, no match found [ 734.683731][T10968] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1275'. [ 734.861371][ T5795] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 735.094508][ T30] audit: type=1400 audit(1760013922.180:1271): avc: denied { create } for pid=10964 comm="syz.3.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 735.189034][ T30] audit: type=1400 audit(1760013922.180:1272): avc: denied { connect } for pid=10964 comm="syz.3.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 735.208848][ C0] vkms_vblank_simulate: vblank timer overrun [ 735.223132][ T5795] usb 4-1: Using ep0 maxpacket: 16 [ 735.235126][ T5795] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 735.246459][ T5795] usb 4-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.259821][ T5795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 735.266615][ T5795] usb 4-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 735.276268][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.290346][ T5795] usb 4-1: config 0 descriptor?? [ 735.465129][T10972] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1278'. [ 735.469617][T10969] netlink: 'syz.5.1276': attribute type 8 has an invalid length. [ 735.506237][ T5795] usbhid 4-1:0.0: can't add hid device: -71 [ 735.531428][ T5795] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 735.544531][ T5795] usb 4-1: USB disconnect, device number 33 [ 735.597275][ T30] audit: type=1400 audit(1760013922.680:1273): avc: denied { append } for pid=10973 comm="syz.2.1279" name="dlm-monitor" dev="devtmpfs" ino=95 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 735.655606][ T30] audit: type=1400 audit(1760013922.730:1274): avc: denied { create } for pid=10973 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 735.675174][ C0] vkms_vblank_simulate: vblank timer overrun [ 736.048215][T10986] overlayfs: missing 'lowerdir' [ 736.554143][ T30] audit: type=1400 audit(1760013923.640:1275): avc: denied { name_bind } for pid=10988 comm="syz.3.1284" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 736.576186][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.029128][ T30] audit: type=1400 audit(1760013924.100:1276): avc: denied { append } for pid=10995 comm="syz.1.1285" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 737.119005][T11001] netlink: 'syz.1.1285': attribute type 1 has an invalid length. [ 737.128597][T11001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1285'. [ 737.219788][ T30] audit: type=1400 audit(1760013924.300:1277): avc: denied { ioctl } for pid=11002 comm="syz.3.1287" path="socket:[30060]" dev="sockfs" ino=30060 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 737.244507][ C0] vkms_vblank_simulate: vblank timer overrun [ 737.335736][ T30] audit: type=1400 audit(1760013924.360:1278): avc: denied { create } for pid=11002 comm="syz.3.1287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 738.296371][T11017] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 738.750136][ T30] audit: type=1400 audit(1760013925.820:1279): avc: denied { setattr } for pid=11030 comm="syz.1.1295" name="dmmidi2" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 739.426348][T11035] 9pnet_fd: Insufficient options for proto=fd [ 743.260041][T11071] input input38: cannot allocate more than FF_MAX_EFFECTS effects [ 744.326127][ T122] block nbd0: Possible stuck request ffff888026170000: control (read@0,1024B). Runtime 240 seconds [ 744.341302][ T122] block nbd0: Possible stuck request ffff8880261701c0: control (read@1024,1024B). Runtime 240 seconds [ 744.352908][ T122] block nbd0: Possible stuck request ffff888026170380: control (read@2048,1024B). Runtime 240 seconds [ 744.366731][ T122] block nbd0: Possible stuck request ffff888026170540: control (read@3072,1024B). Runtime 240 seconds [ 744.892886][ T30] audit: type=1400 audit(1760013931.980:1280): avc: denied { bind } for pid=11093 comm="syz.3.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 744.923698][ T30] audit: type=1400 audit(1760013931.980:1281): avc: denied { write } for pid=11093 comm="syz.3.1308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 744.982884][T11098] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 744.991922][T11098] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 745.000961][T11098] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 745.087965][T11098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=11098 comm=syz.2.1309 [ 745.103364][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 745.345542][T11103] netlink: 51 bytes leftover after parsing attributes in process `syz.6.1311'. [ 745.721366][ T42] usb 6-1: Using ep0 maxpacket: 16 [ 745.726608][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031a55000: rx timeout, send abort [ 745.728535][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031a56400: rx timeout, send abort [ 745.728677][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031a55000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 745.729516][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888031a56400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 745.762062][ T30] audit: type=1400 audit(1760013932.820:1282): avc: denied { read } for pid=5165 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 745.868347][ T30] audit: type=1400 audit(1760013932.820:1283): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.896892][ T30] audit: type=1400 audit(1760013932.820:1284): avc: denied { search } for pid=5165 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.986791][ T30] audit: type=1400 audit(1760013932.820:1285): avc: denied { add_name } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.009534][ T30] audit: type=1400 audit(1760013932.820:1286): avc: denied { create } for pid=5165 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 746.030471][ T30] audit: type=1400 audit(1760013932.820:1287): avc: denied { append open } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 746.054363][ T30] audit: type=1400 audit(1760013932.820:1288): avc: denied { getattr } for pid=5165 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 746.129825][ T42] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 746.142122][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 746.153253][ T30] audit: type=1400 audit(1760013933.070:1289): avc: denied { connect } for pid=11106 comm="syz.3.1312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 746.323234][ T42] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 746.332396][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.340430][ T42] usb 6-1: Product: syz [ 746.344751][ T42] usb 6-1: Manufacturer: syz [ 746.349379][ T42] usb 6-1: SerialNumber: syz [ 746.360439][ T42] usb 6-1: config 0 descriptor?? [ 746.447984][ T42] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 746.726307][ T42] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 746.886224][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.892912][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.093432][T11114] FAULT_INJECTION: forcing a failure. [ 747.093432][T11114] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 747.146111][T11114] CPU: 0 UID: 0 PID: 11114 Comm: syz.1.1314 Not tainted syzkaller #0 PREEMPT(full) [ 747.146136][T11114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 747.146145][T11114] Call Trace: [ 747.146150][T11114] [ 747.146157][T11114] dump_stack_lvl+0x16c/0x1f0 [ 747.146185][T11114] should_fail_ex+0x512/0x640 [ 747.146211][T11114] should_fail_alloc_page+0xe7/0x130 [ 747.146231][T11114] prepare_alloc_pages+0x3c2/0x610 [ 747.146254][T11114] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 747.146284][T11114] ? find_held_lock+0x2b/0x80 [ 747.146307][T11114] ? is_bpf_text_address+0x8a/0x1a0 [ 747.146328][T11114] ? bpf_ksym_find+0x127/0x1c0 [ 747.146351][T11114] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 747.146374][T11114] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 747.146409][T11114] ? kernel_text_address+0x8d/0x100 [ 747.146429][T11114] ? __kernel_text_address+0xd/0x40 [ 747.146458][T11114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.146481][T11114] ? policy_nodemask+0xea/0x4e0 [ 747.146501][T11114] alloc_pages_mpol+0x1fb/0x550 [ 747.146520][T11114] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 747.146543][T11114] ? __lock_acquire+0x62e/0x1ce0 [ 747.146570][T11114] folio_alloc_mpol_noprof+0x36/0x2f0 [ 747.146593][T11114] vma_alloc_folio_noprof+0xed/0x1e0 [ 747.146613][T11114] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 747.146642][T11114] do_pte_missing+0x2202/0x3ba0 [ 747.146666][T11114] ? find_held_lock+0x2b/0x80 [ 747.146694][T11114] __handle_mm_fault+0x1556/0x2aa0 [ 747.146723][T11114] ? __pfx___handle_mm_fault+0x10/0x10 [ 747.146748][T11114] ? lock_vma_under_rcu+0x176/0x530 [ 747.146777][T11114] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 747.146804][T11114] handle_mm_fault+0x589/0xd10 [ 747.146828][T11114] ? __pkru_allows_pkey+0x11/0xb0 [ 747.146847][T11114] do_user_addr_fault+0x60c/0x1370 [ 747.146867][T11114] ? rcu_is_watching+0x12/0xc0 [ 747.146893][T11114] exc_page_fault+0x64/0xc0 [ 747.146919][T11114] asm_exc_page_fault+0x26/0x30 [ 747.146935][T11114] RIP: 0033:0x7fe84f05a75b [ 747.146948][T11114] Code: 00 00 00 48 8d 3d dd 39 19 00 48 89 c1 31 c0 e8 fb 3a ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 747.146964][T11114] RSP: 002b:00007fe85003dfb0 EFLAGS: 00010202 [ 747.146978][T11114] RAX: 0000000000000000 RBX: 00007fe84f3e5fa0 RCX: 0000000000000000 [ 747.146988][T11114] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000300 [ 747.146998][T11114] RBP: 00007fe85003f090 R08: 0000000000000000 R09: 0000000000000000 [ 747.147008][T11114] R10: 0000200000000300 R11: 0000000000000000 R12: 0000000000000001 [ 747.147017][T11114] R13: 00007fe84f3e6038 R14: 00007fe84f3e5fa0 R15: 00007ffc28bfe358 [ 747.147043][T11114] [ 747.147236][T11114] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 747.424882][ T42] em28xx 6-1:0.0: chip ID is em2874 [ 747.961727][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1307'. [ 749.879716][ T5795] usb 6-1: USB disconnect, device number 4 [ 749.905587][ T5795] em28xx 6-1:0.0: Disconnecting em28xx [ 749.995623][ T5795] em28xx 6-1:0.0: Freeing device [ 750.018195][T11148] netlink: 'syz.1.1320': attribute type 13 has an invalid length. [ 750.029435][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1320'. [ 750.049930][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 750.049945][ T30] audit: type=1400 audit(1760013937.130:1294): avc: denied { unmount } for pid=10725 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 750.147095][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 750.178990][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1320'. [ 750.573138][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1324'. [ 750.584090][T11160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1324'. [ 750.595984][ T30] audit: type=1400 audit(1760013937.670:1295): avc: denied { write } for pid=11159 comm="syz.6.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 750.615752][ T30] audit: type=1400 audit(1760013937.680:1296): avc: denied { bind } for pid=11159 comm="syz.6.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 750.704828][T11162] FAULT_INJECTION: forcing a failure. [ 750.704828][T11162] name failslab, interval 1, probability 0, space 0, times 0 [ 750.722035][T11162] CPU: 1 UID: 0 PID: 11162 Comm: syz.6.1326 Not tainted syzkaller #0 PREEMPT(full) [ 750.722063][T11162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.722074][T11162] Call Trace: [ 750.722079][T11162] [ 750.722086][T11162] dump_stack_lvl+0x16c/0x1f0 [ 750.722117][T11162] should_fail_ex+0x512/0x640 [ 750.722141][T11162] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 750.722170][T11162] should_failslab+0xc2/0x120 [ 750.722189][T11162] kmem_cache_alloc_node_noprof+0x78/0x770 [ 750.722212][T11162] ? __alloc_skb+0x2b2/0x380 [ 750.722239][T11162] ? __alloc_skb+0x2b2/0x380 [ 750.722259][T11162] ? __pfx_netlink_insert+0x10/0x10 [ 750.722284][T11162] __alloc_skb+0x2b2/0x380 [ 750.722305][T11162] ? __pfx___alloc_skb+0x10/0x10 [ 750.722328][T11162] ? netlink_autobind.isra.0+0x158/0x370 [ 750.722358][T11162] netlink_alloc_large_skb+0x69/0x140 [ 750.722385][T11162] netlink_sendmsg+0x698/0xdd0 [ 750.722403][T11162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 750.722428][T11162] ____sys_sendmsg+0xa95/0xc70 [ 750.722446][T11162] ? copy_msghdr_from_user+0x10a/0x160 [ 750.722470][T11162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 750.722497][T11162] ___sys_sendmsg+0x134/0x1d0 [ 750.722521][T11162] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.722574][T11162] __sys_sendmsg+0x16d/0x220 [ 750.722598][T11162] ? __pfx___sys_sendmsg+0x10/0x10 [ 750.722637][T11162] do_syscall_64+0xcd/0xfa0 [ 750.722662][T11162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.722678][T11162] RIP: 0033:0x7f5b8a58eec9 [ 750.722701][T11162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.722717][T11162] RSP: 002b:00007f5b8b48e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 750.722733][T11162] RAX: ffffffffffffffda RBX: 00007f5b8a7e5fa0 RCX: 00007f5b8a58eec9 [ 750.722744][T11162] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 750.722753][T11162] RBP: 00007f5b8b48e090 R08: 0000000000000000 R09: 0000000000000000 [ 750.722762][T11162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.722772][T11162] R13: 00007f5b8a7e6038 R14: 00007f5b8a7e5fa0 R15: 00007ffc980205b8 [ 750.722795][T11162] [ 751.200882][T11166] netlink: 51 bytes leftover after parsing attributes in process `syz.1.1327'. [ 752.131581][ T30] audit: type=1400 audit(1760013939.070:1297): avc: denied { setopt } for pid=11169 comm="syz.3.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.420996][ T30] audit: type=1400 audit(1760013939.080:1298): avc: denied { map } for pid=11169 comm="syz.3.1329" path="socket:[30515]" dev="sockfs" ino=30515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 752.475669][ T30] audit: type=1400 audit(1760013939.080:1299): avc: denied { read accept } for pid=11169 comm="syz.3.1329" path="socket:[30515]" dev="sockfs" ino=30515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 753.166246][T10914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 753.581266][T10914] usb 3-1: Using ep0 maxpacket: 16 [ 753.597910][T10914] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 753.619747][T10914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 753.643932][T10914] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 753.664666][T10914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.668155][T11197] vivid-003: disconnect [ 753.688644][T10914] usb 3-1: Product: syz [ 753.700158][T10914] usb 3-1: Manufacturer: syz [ 753.718439][T10914] usb 3-1: SerialNumber: syz [ 753.723466][T11196] vivid-003: reconnect [ 753.771335][T10914] usb 3-1: config 0 descriptor?? [ 753.815358][ T30] audit: type=1400 audit(1760013940.900:1300): avc: denied { create } for pid=11200 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 753.952567][T10914] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 753.959108][ T30] audit: type=1400 audit(1760013940.900:1301): avc: denied { bind } for pid=11200 comm="syz.3.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 753.973104][T10914] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 754.653026][T10914] em28xx 3-1:0.0: chip ID is em2874 [ 754.861495][ T30] audit: type=1400 audit(1760013941.890:1302): avc: denied { setopt } for pid=11208 comm="syz.1.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 755.121841][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 756.609979][ T30] audit: type=1400 audit(1760013943.580:1303): avc: denied { append } for pid=11222 comm="syz.3.1344" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 757.174268][ T30] audit: type=1400 audit(1760013944.260:1304): avc: denied { read } for pid=11232 comm="syz.1.1345" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 757.238247][ T30] audit: type=1400 audit(1760013944.260:1305): avc: denied { open } for pid=11232 comm="syz.1.1345" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 757.348253][T11230] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 757.641317][ T5986] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 757.679465][ T6006] usb 3-1: USB disconnect, device number 15 [ 757.702306][ T6006] em28xx 3-1:0.0: Disconnecting em28xx [ 757.741177][ T6006] em28xx 3-1:0.0: Freeing device [ 758.065797][ T5986] usb 2-1: Using ep0 maxpacket: 16 [ 758.169427][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.210409][T10740] Bluetooth: hci7: Frame reassembly failed (-84) [ 758.243847][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.623251][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 758.660639][ T5986] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 758.699265][ T5986] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 758.742573][ T5986] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 758.752106][ T5986] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 758.762520][ T5986] usb 2-1: Manufacturer: syz [ 758.782981][ T5986] usb 2-1: config 0 descriptor?? [ 759.823796][ T30] audit: type=1400 audit(1760013946.160:1306): avc: denied { ioctl } for pid=11257 comm="syz.5.1352" path="socket:[30701]" dev="sockfs" ino=30701 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 759.881532][ T30] audit: type=1400 audit(1760013946.230:1307): avc: denied { shutdown } for pid=11257 comm="syz.5.1352" lport=57468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 759.959294][ T30] audit: type=1400 audit(1760013946.230:1308): avc: denied { read } for pid=11257 comm="syz.5.1352" lport=57468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 760.051361][ T5986] rc_core: IR keymap rc-hauppauge not found [ 760.057330][ T5986] Registered IR keymap rc-empty [ 760.065237][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.095048][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.131831][ T5986] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 760.158010][ T5986] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input39 [ 760.211995][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.231617][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.241350][ T9889] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 760.322285][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.351675][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.373231][ T30] audit: type=1400 audit(1760013947.460:1309): avc: denied { ioctl } for pid=11232 comm="syz.1.1345" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x5437 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 760.441716][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.483255][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.531537][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.551326][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.571940][T11253] vxcan3: entered promiscuous mode [ 760.613048][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.682592][ T5986] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 760.733755][ T5986] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 760.761768][ T5986] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 760.866457][ T6006] usb 2-1: USB disconnect, device number 23 [ 760.876845][T11277] vivid-000: disconnect [ 760.891253][T11277] vivid-000: reconnect [ 762.105396][ T30] audit: type=1400 audit(1760013949.190:1310): avc: denied { bind } for pid=11297 comm="syz.1.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 762.131449][ T5986] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 762.241357][T10914] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 762.351308][ T5986] usb 3-1: Using ep0 maxpacket: 16 [ 762.366667][ T5986] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 762.486119][ T5986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 762.511256][T10914] usb 7-1: Invalid ep0 maxpacket: 32 [ 762.616009][ T5986] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 762.625295][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.651314][T10914] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 762.735996][ T5986] usb 3-1: Product: syz [ 762.740879][ T5986] usb 3-1: Manufacturer: syz [ 762.746016][ T5986] usb 3-1: SerialNumber: syz [ 762.753741][ T5986] usb 3-1: config 0 descriptor?? [ 762.765415][ T5986] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 762.775485][ T5986] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 762.882447][T10914] usb 7-1: Invalid ep0 maxpacket: 32 [ 762.895882][T10914] usb usb7-port1: attempt power cycle [ 763.251580][T10914] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 763.277087][T10914] usb 7-1: Invalid ep0 maxpacket: 32 [ 763.371850][ T5986] em28xx 3-1:0.0: chip ID is em2874 [ 763.411322][T10914] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 763.452399][T10914] usb 7-1: Invalid ep0 maxpacket: 32 [ 763.458031][T10914] usb usb7-port1: unable to enumerate USB device [ 763.640008][T11304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1360'. [ 764.781274][ T6006] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 765.202216][ T6006] usb 7-1: device not accepting address 6, error -71 [ 765.857243][T10914] usb 3-1: USB disconnect, device number 16 [ 765.876443][T10914] em28xx 3-1:0.0: Disconnecting em28xx [ 765.912352][T10914] em28xx 3-1:0.0: Freeing device [ 765.956221][ T30] audit: type=1400 audit(1760013953.040:1311): avc: denied { execute } for pid=11316 comm="syz.5.1365" path="/33/cpuacct.usage_percpu" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 767.036835][T11334] vivid-002: disconnect [ 767.071405][T11334] vivid-002: reconnect [ 767.441297][ T5931] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 767.461288][ T6006] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 767.485426][ T30] audit: type=1400 audit(1760013954.570:1312): avc: denied { read write } for pid=11337 comm="syz.5.1373" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 767.510974][ T30] audit: type=1400 audit(1760013954.570:1313): avc: denied { open } for pid=11337 comm="syz.5.1373" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 767.623453][ T6006] usb 7-1: config 0 has an invalid interface number: 111 but max is 0 [ 767.632259][ T5931] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 767.643340][ T6006] usb 7-1: config 0 has no interface number 0 [ 767.649616][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.661570][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 767.684383][ T6006] usb 7-1: New USB device found, idVendor=07ca, idProduct=a800, bcdDevice=8f.43 [ 767.701376][ T5931] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 767.710448][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.718601][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.726708][ T6006] usb 7-1: Product: syz [ 767.730950][ T6006] usb 7-1: Manufacturer: syz [ 767.749565][ T5931] usb 2-1: config 0 descriptor?? [ 767.754773][ T6006] usb 7-1: SerialNumber: syz [ 767.772420][ T6006] usb 7-1: config 0 descriptor?? [ 767.792082][ T6006] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 767.816924][ T30] audit: type=1400 audit(1760013954.900:1314): avc: denied { write } for pid=11350 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 767.857277][ T6006] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 767.899968][ T30] audit: type=1400 audit(1760013954.980:1315): avc: denied { write } for pid=11350 comm="syz.3.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.911875][ T6006] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 767.954949][ T30] audit: type=1400 audit(1760013955.000:1316): avc: denied { write } for pid=11350 comm="syz.3.1378" path="socket:[31596]" dev="sockfs" ino=31596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 767.961365][ T6006] usb 7-1: media controller created [ 768.009267][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.027541][T11353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.268478][T11353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.268617][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.295566][ T5931] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 768.325515][ T6006] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.341430][ T5931] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 768.361936][ T5931] waterforce 0003:1044:7A4D.0005: unknown main item tag 0x0 [ 768.381690][ T6006] dvb-usb: bulk message failed: -22 (6/0) [ 768.387606][ T6006] dvb-usb: bulk message failed: -22 (6/0) [ 768.395138][ T5931] waterforce 0003:1044:7A4D.0005: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 768.421437][ T6006] dvb-usb: no frontend was attached by 'AVerMedia AverTV DVB-T USB 2.0 (A800)' [ 768.431456][ T30] audit: type=1400 audit(1760013955.510:1317): avc: denied { mount } for pid=11355 comm="syz.3.1379" name="/" dev="rpc_pipefs" ino=31611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 768.481672][ T5931] waterforce 0003:1044:7A4D.0005: fw version request failed with -38 [ 768.842525][ T5931] usb 2-1: USB disconnect, device number 24 [ 768.861119][T11357] fido_id[11357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1044:7A4D.0005/report_descriptor': No such device [ 768.922774][ T6006] rc_core: IR keymap rc-avermedia-m135a not found [ 768.929311][ T6006] Registered IR keymap rc-empty [ 768.944669][ T6006] rc rc0: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 768.985905][ T6006] input: AVerMedia AverTV DVB-T USB 2.0 (A800) as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input40 [ 769.038721][ T6006] dvb-usb: schedule remote query interval to 150 msecs. [ 769.067833][ T6006] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully initialized and connected. [ 769.108099][ T6006] usb 7-1: USB disconnect, device number 8 [ 769.742985][ T6006] dvb-usb: AVerMedia AverTV DVB-T USB 2.0 (A800) successfully deinitialized and disconnected. [ 770.241543][T10914] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 770.446829][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.864010][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.919276][T10914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 771.386554][T10914] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 771.458925][T10914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.517359][T10914] usb 4-1: config 0 descriptor?? [ 771.548393][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 771.986607][T11409] overlayfs: missing 'lowerdir' [ 772.716790][T10914] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 773.611024][ T30] audit: type=1400 audit(1760013960.690:1318): avc: denied { ioctl } for pid=11423 comm="syz.6.1397" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 774.023279][T11432] sp0: Synchronizing with TNC [ 774.380076][T11428] [U] `` [ 774.408403][ T122] block nbd0: Possible stuck request ffff888026170000: control (read@0,1024B). Runtime 270 seconds [ 774.419462][ T122] block nbd0: Possible stuck request ffff8880261701c0: control (read@1024,1024B). Runtime 270 seconds [ 774.440118][ T122] block nbd0: Possible stuck request ffff888026170380: control (read@2048,1024B). Runtime 270 seconds [ 774.453880][ T122] block nbd0: Possible stuck request ffff888026170540: control (read@3072,1024B). Runtime 270 seconds [ 774.812729][T10914] usb 4-1: USB disconnect, device number 34 [ 775.164215][T10798] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 775.381311][T10798] usb 6-1: Using ep0 maxpacket: 8 [ 775.400297][T10798] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.416176][T10798] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 775.428382][T10798] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 775.465127][T11459] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 775.465127][T11459] The task syz.3.1405 (11459) triggered the difference, watch for misbehavior. [ 775.519406][T10798] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 775.538893][T10798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.550375][T10798] usb 6-1: Product: syz [ 775.567876][T10798] usb 6-1: Manufacturer: syz [ 775.573142][T10798] usb 6-1: SerialNumber: syz [ 775.639365][ T30] audit: type=1400 audit(1760013962.720:1319): avc: denied { create } for pid=11460 comm="syz.6.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 775.738728][ T30] audit: type=1400 audit(1760013962.820:1320): avc: denied { create } for pid=11463 comm="syz.2.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 775.776392][ T30] audit: type=1400 audit(1760013962.820:1321): avc: denied { write } for pid=11463 comm="syz.2.1408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 776.530115][T11475] overlayfs: overlapping lowerdir path [ 777.941449][T10914] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 778.113293][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.133986][T10914] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 778.238568][T10914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.262211][T10914] usb 4-1: config 0 descriptor?? [ 778.633843][T11504] 9pnet_fd: Insufficient options for proto=fd [ 778.720640][T10798] usb 6-1: found format II with max.bitrate = 0, frame size=2 [ 778.758898][T10798] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 778.775047][T11500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.803366][T10798] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 779.035378][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=11508 comm=syz.5.1420 [ 779.383967][T10798] usb 6-1: USB disconnect, device number 5 [ 779.534082][T10511] udevd[10511]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.041527][ T5931] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 780.212558][ T5931] usb 7-1: config 32 has an invalid interface number: 77 but max is 0 [ 780.257559][ T5931] usb 7-1: config 32 has no interface number 0 [ 780.311584][ T5931] usb 7-1: config 32 interface 77 has no altsetting 0 [ 780.391893][ T5931] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=d5.79 [ 780.403696][ T5931] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.426892][ T5931] usb 7-1: Product: syz [ 780.601258][ T5931] usb 7-1: Manufacturer: syz [ 780.611565][ T5931] usb 7-1: SerialNumber: syz [ 780.699940][T10914] usbhid 4-1:0.0: can't add hid device: -71 [ 780.728291][T10914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 780.776942][T10914] usb 4-1: USB disconnect, device number 35 [ 780.806182][ T30] audit: type=1400 audit(1760013967.880:1322): avc: denied { ioctl } for pid=11524 comm="syz.3.1426" path="socket:[32239]" dev="sockfs" ino=32239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 780.814911][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.839140][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.960421][T11513] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1422'. [ 780.984800][ T5931] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 781.050610][ T5931] gspca_zc3xx: reg_w_i err -71 [ 781.056747][ T5931] gspca_zc3xx 7-1:32.77: probe with driver gspca_zc3xx failed with error -71 [ 781.109948][ T5931] usb 7-1: USB disconnect, device number 9 [ 781.278110][T11533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.318406][T11533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.561513][T10798] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 781.622076][ T5831] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 781.803895][T11541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11541 comm=syz.6.1431 [ 781.896897][T10798] usb 4-1: Using ep0 maxpacket: 16 [ 781.905328][T10798] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 781.982858][ T30] audit: type=1400 audit(1760013969.010:1323): avc: denied { getopt } for pid=11540 comm="syz.6.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.004708][T10798] usb 4-1: config 0 has no interface number 0 [ 782.051110][T10798] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 782.067892][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 782.190567][T10798] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 782.200933][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 782.216636][ T5831] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 782.236554][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.245617][ T5831] usb 3-1: Product: syz [ 782.251960][T10798] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 782.261105][T10798] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 782.269475][ T5831] usb 3-1: Manufacturer: syz [ 782.274477][T10798] usb 4-1: Product: syz [ 782.280749][ T5831] usb 3-1: SerialNumber: syz [ 782.285640][T10798] usb 4-1: Manufacturer: syz [ 782.298628][T10798] usb 4-1: SerialNumber: syz [ 782.303991][ T5831] usb 3-1: config 0 descriptor?? [ 782.326149][ T5831] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 782.337873][T10798] usb 4-1: config 0 descriptor?? [ 782.345592][T10798] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 782.370225][T10798] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 782.386021][T10798] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 782.444362][T10798] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 782.472728][T10798] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 782.484208][T10798] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 782.501816][ T30] audit: type=1400 audit(1760013969.590:1324): avc: denied { listen } for pid=11550 comm="syz.1.1433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.524441][T10798] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 782.556792][T10798] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 782.899935][T10798] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 782.932067][T10798] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 782.942732][T10741] usb 3-1: Failed to submit usb control message: -71 [ 782.950071][ T5831] usb 3-1: USB disconnect, device number 17 [ 782.977037][T10741] usb 3-1: unable to send the bmi data to the device: -71 [ 782.990761][T10741] usb 3-1: unable to get target info from device [ 782.999082][T10741] usb 3-1: could not get target info (-71) [ 783.012946][T10741] usb 3-1: could not probe fw (-71) [ 783.061575][T10798] usb 4-1: USB disconnect, device number 36 [ 783.075492][T10798] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 783.088623][T10798] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 783.103417][T10798] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 783.116925][T10798] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 783.127512][T10798] keyspan 4-1:0.107: device disconnected [ 784.065730][ T30] audit: type=1400 audit(1760013971.150:1325): avc: denied { ioctl } for pid=11567 comm="syz.1.1437" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 784.851421][ T30] audit: type=1400 audit(1760013971.930:1326): avc: denied { bind } for pid=11569 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 784.901467][ T30] audit: type=1400 audit(1760013971.940:1327): avc: denied { write } for pid=11569 comm="syz.3.1438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 785.238361][T11591] NILFS (loop1): device size too small [ 786.400471][T11597] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1445'. [ 786.534874][T11597] FAULT_INJECTION: forcing a failure. [ 786.534874][T11597] name failslab, interval 1, probability 0, space 0, times 0 [ 786.627505][T11597] CPU: 0 UID: 0 PID: 11597 Comm: syz.1.1445 Not tainted syzkaller #0 PREEMPT(full) [ 786.627522][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 786.627528][T11597] Call Trace: [ 786.627532][T11597] [ 786.627537][T11597] dump_stack_lvl+0x16c/0x1f0 [ 786.627558][T11597] should_fail_ex+0x512/0x640 [ 786.627575][T11597] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 786.627595][T11597] should_failslab+0xc2/0x120 [ 786.627608][T11597] kmem_cache_alloc_node_noprof+0x78/0x770 [ 786.627624][T11597] ? __alloc_skb+0x2b2/0x380 [ 786.627642][T11597] ? __alloc_skb+0x2b2/0x380 [ 786.627655][T11597] __alloc_skb+0x2b2/0x380 [ 786.627669][T11597] ? __pfx___alloc_skb+0x10/0x10 [ 786.627684][T11597] ? genl_rcv_msg+0x4bb/0x800 [ 786.627700][T11597] netlink_ack+0x15d/0xb80 [ 786.627714][T11597] netlink_rcv_skb+0x332/0x420 [ 786.627724][T11597] ? __pfx_genl_rcv_msg+0x10/0x10 [ 786.627736][T11597] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 786.627752][T11597] ? netlink_deliver_tap+0x1ae/0xd30 [ 786.627770][T11597] genl_rcv+0x28/0x40 [ 786.627780][T11597] netlink_unicast+0x5aa/0x870 [ 786.627792][T11597] ? __pfx_netlink_unicast+0x10/0x10 [ 786.627807][T11597] netlink_sendmsg+0x8c8/0xdd0 [ 786.627819][T11597] ? __pfx_netlink_sendmsg+0x10/0x10 [ 786.627834][T11597] ____sys_sendmsg+0xa95/0xc70 [ 786.627847][T11597] ? copy_msghdr_from_user+0x10a/0x160 [ 786.627862][T11597] ? __pfx_____sys_sendmsg+0x10/0x10 [ 786.627880][T11597] ___sys_sendmsg+0x134/0x1d0 [ 786.627896][T11597] ? __pfx____sys_sendmsg+0x10/0x10 [ 786.627929][T11597] __sys_sendmsg+0x16d/0x220 [ 786.627945][T11597] ? __pfx___sys_sendmsg+0x10/0x10 [ 786.627969][T11597] do_syscall_64+0xcd/0xfa0 [ 786.627986][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.627997][T11597] RIP: 0033:0x7fe84f18eec9 [ 786.628007][T11597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 786.628018][T11597] RSP: 002b:00007fe85003f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 786.628029][T11597] RAX: ffffffffffffffda RBX: 00007fe84f3e5fa0 RCX: 00007fe84f18eec9 [ 786.628036][T11597] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 786.628043][T11597] RBP: 00007fe85003f090 R08: 0000000000000000 R09: 0000000000000000 [ 786.628049][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.628055][T11597] R13: 00007fe84f3e6038 R14: 00007fe84f3e5fa0 R15: 00007ffc28bfe358 [ 786.628069][T11597] [ 787.378600][T11616] overlayfs: overlapping lowerdir path [ 787.781110][T11623] overlayfs: missing 'workdir' [ 788.319998][T11625] overlayfs: missing 'workdir' [ 789.632859][ T30] audit: type=1400 audit(1760013975.890:1328): avc: denied { setopt } for pid=11620 comm="syz.2.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 790.119361][T11633] input: syz1 as /devices/virtual/input/input42 [ 790.264373][T11637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1450'. [ 790.697080][T11643] 9pnet_fd: Insufficient options for proto=fd [ 793.311304][T11677] vivid-000: disconnect [ 793.324302][T11677] vivid-000: reconnect [ 793.545658][ T5831] IPVS: starting estimator thread 0... [ 793.554770][T11681] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 793.660085][T11692] raw_sendmsg: syz.1.1463 forgot to set AF_INET. Fix it! [ 793.661384][T11683] IPVS: using max 47 ests per chain, 112800 per kthread [ 793.871421][ T6006] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 794.091306][ T6006] usb 4-1: Using ep0 maxpacket: 16 [ 794.134997][ T6006] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 794.146644][ T6006] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 794.160170][ T6006] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 794.169425][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.177613][ T6006] usb 4-1: Product: syz [ 794.181855][ T6006] usb 4-1: Manufacturer: syz [ 794.186538][ T6006] usb 4-1: SerialNumber: syz [ 794.662602][ T6006] usb 4-1: config 0 descriptor?? [ 794.675845][ T6006] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 794.694569][ T6006] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 795.793508][ T5931] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 795.801629][ T6006] em28xx 4-1:0.0: chip ID is em2874 [ 795.910676][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1469'. [ 795.920003][T11716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1469'. [ 795.964572][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1469'. [ 796.022663][T11716] ubi31: attaching mtd0 [ 796.041144][T11716] ubi31: scanning is finished [ 796.045969][T11716] ubi31: empty MTD device detected [ 796.230120][ T30] audit: type=1400 audit(1760013983.090:1329): avc: denied { connect } for pid=11710 comm="syz.5.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 796.274584][ T30] audit: type=1400 audit(1760013983.100:1330): avc: denied { ioctl } for pid=11710 comm="syz.5.1469" path="socket:[33699]" dev="sockfs" ino=33699 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 796.300496][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 796.310555][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 796.333729][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 796.344590][T11719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 797.337307][ T5931] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 797.380668][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.396977][ T5931] usb 2-1: Product: syz [ 797.401283][ T5931] usb 2-1: Manufacturer: syz [ 797.406532][ T5931] usb 2-1: SerialNumber: syz [ 797.406565][T11716] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 797.419024][T11716] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 797.426341][T11716] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 797.433362][T11716] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 797.440805][T11716] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 797.447725][T11716] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 797.455775][T11716] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3882815786 [ 797.465840][T11716] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 797.477447][T11721] ubi31: background thread "ubi_bgt31d" started, PID 11721 [ 797.495867][ T5931] usb 2-1: config 0 descriptor?? [ 797.569937][ T5931] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 797.608091][ T5931] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 797.623141][T10914] usb 4-1: USB disconnect, device number 37 [ 797.629754][T10914] em28xx 4-1:0.0: Disconnecting em28xx [ 797.644846][T10914] em28xx 4-1:0.0: Freeing device [ 798.007591][ T9889] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 798.019538][ T9889] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 798.028056][ T9889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 798.038755][ T9889] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 798.046421][ T9889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 798.113790][ T5931] em28xx 2-1:0.0: chip ID is em2874 [ 798.121327][T10914] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 798.284221][T10914] usb 4-1: Using ep0 maxpacket: 16 [ 798.292650][T10914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.302982][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 798.341061][T11726] chnl_net:caif_netlink_parms(): no params data found [ 798.367696][T10914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 798.384375][T10914] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 798.400064][T10914] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 798.463658][T10914] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 798.527409][T10798] usb 2-1: USB disconnect, device number 25 [ 798.534024][T10798] em28xx 2-1:0.0: Disconnecting em28xx [ 798.547258][T10914] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 798.618058][T10798] em28xx 2-1:0.0: Freeing device [ 798.625381][T10914] usb 4-1: Manufacturer: syz [ 798.669474][T11726] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.702531][T11726] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.709784][T11726] bridge_slave_0: entered allmulticast mode [ 798.714615][T10914] usb 4-1: config 0 descriptor?? [ 798.740186][T11726] bridge_slave_0: entered promiscuous mode [ 798.759293][T11726] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.767399][T11726] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.777533][T11726] bridge_slave_1: entered allmulticast mode [ 798.786445][T11726] bridge_slave_1: entered promiscuous mode [ 798.792138][T11744] FAULT_INJECTION: forcing a failure. [ 798.792138][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 798.831405][T11726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.843914][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.5.1475 Not tainted syzkaller #0 PREEMPT(full) [ 798.843939][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 798.843950][T11744] Call Trace: [ 798.843956][T11744] [ 798.843963][T11744] dump_stack_lvl+0x16c/0x1f0 [ 798.843993][T11744] should_fail_ex+0x512/0x640 [ 798.844017][T11744] ? __kmalloc_cache_noprof+0x5f/0x780 [ 798.844042][T11744] should_failslab+0xc2/0x120 [ 798.844061][T11744] __kmalloc_cache_noprof+0x72/0x780 [ 798.844080][T11744] ? xa_load+0x153/0x2c0 [ 798.844093][T11744] ? cma_alloc_port+0x9a/0x5b0 [ 798.844113][T11744] ? cma_alloc_port+0x9a/0x5b0 [ 798.844127][T11744] cma_alloc_port+0x9a/0x5b0 [ 798.844147][T11744] rdma_bind_addr_dst+0x1c53/0x2d50 [ 798.844167][T11744] ? register_lock_class+0x41/0x4c0 [ 798.844192][T11744] cma_bind_addr+0x2b5/0x300 [ 798.844212][T11744] ? __pfx_cma_bind_addr+0x10/0x10 [ 798.844243][T11744] ? mark_held_locks+0x49/0x80 [ 798.844267][T11744] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 798.844293][T11744] rdma_resolve_addr+0x143/0x20c0 [ 798.844315][T11744] ? xa_load+0x153/0x2c0 [ 798.844331][T11744] ? find_held_lock+0x2b/0x80 [ 798.844353][T11744] ? __pfx_rdma_resolve_addr+0x10/0x10 [ 798.844373][T11744] ? do_raw_spin_unlock+0x172/0x230 [ 798.844395][T11744] ? __pfx_ucma_get_ctx+0x10/0x10 [ 798.844432][T11744] ? ucma_resolve_addr+0x1aa/0x270 [ 798.844455][T11744] ucma_resolve_addr+0x1aa/0x270 [ 798.844477][T11744] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 798.844531][T11744] ? __pfx_ucma_resolve_addr+0x10/0x10 [ 798.844555][T11744] ucma_write+0x1fb/0x330 [ 798.844576][T11744] ? __pfx_ucma_write+0x10/0x10 [ 798.844598][T11744] ? bpf_lsm_file_permission+0x9/0x10 [ 798.844613][T11744] ? security_file_permission+0x71/0x210 [ 798.844632][T11744] ? rw_verify_area+0xcf/0x6c0 [ 798.844656][T11744] ? __pfx_ucma_write+0x10/0x10 [ 798.844676][T11744] vfs_write+0x2a0/0x11d0 [ 798.844696][T11744] ? __pfx_vfs_write+0x10/0x10 [ 798.844719][T11744] ? find_held_lock+0x2b/0x80 [ 798.844739][T11744] ? __fget_files+0x204/0x3c0 [ 798.844760][T11744] ? __fget_files+0x20e/0x3c0 [ 798.844784][T11744] ksys_write+0x1f8/0x250 [ 798.844799][T11744] ? __pfx_ksys_write+0x10/0x10 [ 798.844823][T11744] do_syscall_64+0xcd/0xfa0 [ 798.844849][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.844868][T11744] RIP: 0033:0x7f536f58eec9 [ 798.844883][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.844900][T11744] RSP: 002b:00007f537041b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 798.844916][T11744] RAX: ffffffffffffffda RBX: 00007f536f7e5fa0 RCX: 00007f536f58eec9 [ 798.844927][T11744] RDX: 0000000000000118 RSI: 0000200000000280 RDI: 0000000000000003 [ 798.844937][T11744] RBP: 00007f537041b090 R08: 0000000000000000 R09: 0000000000000000 [ 798.844947][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.844957][T11744] R13: 00007f536f7e6038 R14: 00007f536f7e5fa0 R15: 00007ffcb8b70708 [ 798.844981][T11744] [ 798.847915][T11726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.233083][ T30] audit: type=1400 audit(1760013986.320:1331): avc: denied { getopt } for pid=11745 comm="syz.5.1476" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 799.255729][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.262444][T10914] rc_core: IR keymap rc-hauppauge not found [ 799.269970][T10914] Registered IR keymap rc-empty [ 799.276605][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.284066][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.371344][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.412647][T10914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 799.437669][T10914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input43 [ 799.585279][ T30] audit: type=1400 audit(1760013986.600:1332): avc: denied { accept } for pid=11745 comm="syz.5.1476" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 799.635434][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.661418][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.683883][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.714182][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.716652][T11726] team0: Port device team_slave_0 added [ 799.733648][T11755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1472'. [ 799.743010][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.771529][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.824260][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.854805][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 799.864586][T11726] team0: Port device team_slave_1 added [ 800.082479][ T5857] Bluetooth: hci7: command tx timeout [ 800.177889][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 800.288518][T10914] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 800.312367][T10914] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 800.321569][T10914] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 800.333109][T10914] usb 4-1: USB disconnect, device number 38 [ 800.410175][ T30] audit: type=1400 audit(1760013987.490:1333): avc: denied { connect } for pid=11757 comm="syz.2.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 801.317853][T11726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.325029][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.352829][T11726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.382680][T11726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.391550][T11726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 801.461282][T11726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.263100][ T5857] Bluetooth: hci7: command tx timeout [ 802.974718][T11726] hsr_slave_0: entered promiscuous mode [ 802.983449][T11726] hsr_slave_1: entered promiscuous mode [ 802.989696][T11726] debugfs: 'hsr0' already exists in 'hsr' [ 802.996317][T11726] Cannot create hsr debugfs directory [ 803.243914][ T30] audit: type=1800 audit(1760013990.310:1334): pid=11781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1483" name="bus" dev="overlay" ino=1656 res=0 errno=0 [ 803.281384][ T5931] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 803.346587][ T30] audit: type=1400 audit(1760013990.320:1335): avc: denied { getopt } for pid=11773 comm="syz.2.1482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 803.436986][T10798] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 803.613037][T10798] usb 2-1: Using ep0 maxpacket: 16 [ 803.635257][T10798] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 803.863888][ T5931] usb 6-1: unable to get BOS descriptor or descriptor too short [ 803.879382][T10798] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 803.892928][T10798] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 803.903904][T10798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.927970][T10798] usb 2-1: Product: syz [ 803.936247][T10798] usb 2-1: Manufacturer: syz [ 803.941688][ T5931] usb 6-1: not running at top speed; connect to a high speed hub [ 803.946990][T10798] usb 2-1: SerialNumber: syz [ 803.968361][T10798] usb 2-1: config 0 descriptor?? [ 803.979135][ T5931] usb 6-1: config 23 has an invalid descriptor of length 0, skipping remainder of the config [ 803.992137][T10798] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 804.009304][ T5931] usb 6-1: config 23 has 0 interfaces, different from the descriptor's value: 1 [ 804.011548][T10798] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 804.038089][ T5931] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=f1.7c [ 804.047700][T11726] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 804.050812][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.066749][T11726] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 804.082237][T11726] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 804.093957][T11726] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 804.165304][ T5931] usb 6-1: Product: syz [ 804.172586][ T5931] usb 6-1: Manufacturer: syz [ 804.178783][ T5931] usb 6-1: SerialNumber: syz [ 804.348927][ T5857] Bluetooth: hci7: command tx timeout [ 804.559252][ T122] block nbd0: Possible stuck request ffff888026170000: control (read@0,1024B). Runtime 300 seconds [ 804.570460][T11779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.570736][ T122] block nbd0: Possible stuck request ffff8880261701c0: control (read@1024,1024B). Runtime 300 seconds [ 804.590113][ T122] block nbd0: Possible stuck request ffff888026170380: control (read@2048,1024B). Runtime 300 seconds [ 804.601080][ T122] block nbd0: Possible stuck request ffff888026170540: control (read@3072,1024B). Runtime 300 seconds [ 804.640118][T11779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.711772][ T5931] usb 6-1: USB disconnect, device number 6 [ 804.761313][T10798] em28xx 2-1:0.0: chip ID is em2874 [ 804.807203][T11803] overlayfs: overlapping lowerdir path [ 804.835021][T11726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.884347][T11726] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.915134][T10756] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.922343][T10756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.952636][ T30] audit: type=1400 audit(1760013992.040:1336): avc: denied { watch_mount watch_reads } for pid=11805 comm="syz.2.1487" path="/321" dev="tmpfs" ino=1799 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 805.648283][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.655477][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.452797][ T5857] Bluetooth: hci7: command tx timeout [ 807.160511][ T5795] usb 2-1: USB disconnect, device number 26 [ 807.167579][ T5795] em28xx 2-1:0.0: Disconnecting em28xx [ 807.176897][ T5795] em28xx 2-1:0.0: Freeing device [ 807.392548][T11726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.648274][T11726] veth0_vlan: entered promiscuous mode [ 807.665133][T11726] veth1_vlan: entered promiscuous mode [ 807.724306][T11726] veth0_macvtap: entered promiscuous mode [ 807.738395][T11726] veth1_macvtap: entered promiscuous mode [ 807.765364][T11726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.783943][T11726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.802803][T10737] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.819209][T10737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.841488][T10737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.855025][T10737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.066368][T10717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.093444][T10717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.218585][T10717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.229095][T10717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.326553][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.333096][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.444957][T11850] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=11850 comm=syz.2.1497 [ 808.483290][ T5795] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 808.596215][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1498'. [ 808.678402][ T5795] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 809.062449][ T5795] usb 6-1: config 0 has no interface number 0 [ 809.069324][ T5795] usb 6-1: config 0 interface 83 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 809.093398][ T5795] usb 6-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 809.131258][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.154219][ T5795] usb 6-1: config 0 descriptor?? [ 809.179501][ T5795] ttusbir 6-1:0.83: cannot find expected altsetting [ 810.134986][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1501'. [ 810.139996][ T5795] usb 6-1: USB disconnect, device number 7 [ 810.718693][T11889] 9pnet_fd: Insufficient options for proto=fd [ 811.828463][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1509'. [ 811.850498][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1509'. [ 812.081312][ T30] audit: type=1400 audit(1760013999.160:1337): avc: denied { write } for pid=11918 comm="syz.3.1510" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 812.299651][ T30] audit: type=1400 audit(1760013999.190:1338): avc: denied { append } for pid=11918 comm="syz.3.1510" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 812.656495][ T30] audit: type=1400 audit(1760013999.660:1339): avc: denied { block_suspend } for pid=11918 comm="syz.3.1510" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 813.265342][ T30] audit: type=1400 audit(1760014000.280:1340): avc: denied { setopt } for pid=11940 comm="syz.2.1513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 813.640323][T11947] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1514'. [ 813.720705][ T30] audit: type=1400 audit(1760014000.310:1341): avc: denied { append } for pid=11940 comm="syz.2.1513" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 814.398192][ T30] audit: type=1400 audit(1760014001.480:1342): avc: denied { bind } for pid=11951 comm="syz.7.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 814.466338][ T30] audit: type=1400 audit(1760014001.510:1343): avc: denied { connect } for pid=11951 comm="syz.7.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 814.707293][ T30] audit: type=1400 audit(1760014001.510:1344): avc: denied { create } for pid=11951 comm="syz.7.1516" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 817.801046][ T30] audit: type=1400 audit(1760014004.881:1345): avc: denied { override_creds } for pid=11981 comm="syz.2.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 818.511834][T11998] xt_hashlimit: size too large, truncated to 1048576 [ 819.093621][ T30] audit: type=1400 audit(1760014006.181:1346): avc: denied { mounton } for pid=11999 comm="syz.3.1530" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 819.624891][ T30] audit: type=1400 audit(1760014006.711:1347): avc: denied { listen } for pid=11995 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 819.717911][ T30] audit: type=1400 audit(1760014006.711:1348): avc: denied { read } for pid=11995 comm="syz.2.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 819.781739][ T30] audit: type=1326 audit(1760014006.871:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.7.1532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d0318eec9 code=0x0 [ 820.171458][ T5931] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 820.401272][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 820.408687][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 820.421998][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 820.436756][ T5931] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 820.555912][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.568462][ T5931] usb 4-1: Product: syz [ 820.573339][ T5931] usb 4-1: Manufacturer: syz [ 820.578015][ T5931] usb 4-1: SerialNumber: syz [ 820.594702][ T5931] usb 4-1: config 0 descriptor?? [ 820.612579][ T5931] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 820.795098][ T5931] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 821.308930][T12047] 9pnet_fd: Insufficient options for proto=fd [ 821.362092][ T5931] em28xx 4-1:0.0: chip ID is em2874 [ 822.647760][T12048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1534'. [ 824.107661][T12055] netlink: 'syz.7.1542': attribute type 12 has an invalid length. [ 824.350946][T12055] netlink: 'syz.7.1542': attribute type 29 has an invalid length. [ 824.433280][T12055] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1542'. [ 824.681082][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1542'. [ 824.903422][ T5931] usb 4-1: USB disconnect, device number 39 [ 824.922956][ T5931] em28xx 4-1:0.0: Disconnecting em28xx [ 824.924322][ T30] audit: type=1400 audit(1760014012.011:1350): avc: denied { getopt } for pid=12057 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 824.951064][ T5931] em28xx 4-1:0.0: Freeing device [ 825.801113][T12070] can: request_module (can-proto-0) failed. [ 827.226955][ T30] audit: type=1400 audit(1760014014.261:1351): avc: denied { ioctl } for pid=12086 comm="syz.1.1551" path="socket:[36147]" dev="sockfs" ino=36147 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 829.472189][T12106] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1553'. [ 829.592002][T10798] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 829.598784][T12128] SELinux: Context system_u:object_r:memory_device_t:s0 is not valid (left unmapped). [ 829.612388][ T30] audit: type=1400 audit(1760014016.701:1352): avc: denied { relabelto } for pid=12127 comm="syz.2.1560" name=E91F7189591E9233614B dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 829.617173][T12128] netlink: 'syz.2.1560': attribute type 39 has an invalid length. [ 829.771314][ T30] audit: type=1400 audit(1760014016.701:1353): avc: denied { associate } for pid=12127 comm="syz.2.1560" name=E91F7189591E9233614B dev="tmpfs" ino=1897 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:memory_device_t:s0" [ 829.779661][T12132] 9pnet_fd: p9_fd_create_unix (12132): problem connecting socket: qY3aK: -111 [ 829.809633][T10798] usb 8-1: Using ep0 maxpacket: 32 [ 829.827368][T10798] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 829.840855][T10798] usb 8-1: config 0 has no interface number 0 [ 829.868478][T10798] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 829.880490][T10798] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.910592][T10798] usb 8-1: Product: syz [ 829.920718][ T30] audit: type=1400 audit(1760014016.861:1354): avc: denied { mounton } for pid=12127 comm="syz.2.1560" path=2F3333372FE91F7189591E9233614B dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 829.969866][T10798] usb 8-1: Manufacturer: syz [ 829.999615][ T30] audit: type=1400 audit(1760014016.861:1355): avc: denied { write } for pid=12127 comm="syz.2.1560" name=E91F7189591E9233614B dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 830.006114][T10798] usb 8-1: SerialNumber: syz [ 830.181531][ T30] audit: type=1400 audit(1760014016.991:1356): avc: denied { map } for pid=12133 comm="syz.5.1561" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 830.486890][T10798] usb 8-1: config 0 descriptor?? [ 830.712992][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.769736][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.329367][T10798] radio-si470x 8-1:0.35: si470x_get_report: usb_control_msg returned -110 [ 831.341042][ T9889] Bluetooth: hci5: command 0x0406 tx timeout [ 831.487029][T10798] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 831.521740][T10798] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 831.561743][ T30] audit: type=1400 audit(1760014018.621:1357): avc: denied { unlink } for pid=5850 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0" [ 831.610809][ T6006] usb 8-1: USB disconnect, device number 2 [ 831.799201][T12162] team0: Device gtp0 is of different type [ 831.811451][T10798] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 831.991390][T10798] usb 4-1: Using ep0 maxpacket: 16 [ 831.998420][T10798] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 832.012987][T10798] usb 4-1: config 0 has no interface number 0 [ 832.036566][T10798] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 832.055104][T10798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.104155][T10798] usb 4-1: Product: syz [ 832.115085][T10798] usb 4-1: Manufacturer: syz [ 832.216767][T10798] usb 4-1: SerialNumber: syz [ 832.231997][T10798] usb 4-1: config 0 descriptor?? [ 832.254555][T10798] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 832.806672][T10798] gspca_spca1528: reg_w err -110 [ 832.831381][T10798] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 832.840106][ T30] audit: type=1400 audit(1760014019.921:1358): avc: denied { append } for pid=12184 comm="syz.2.1571" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 832.919229][T12187] loop6: detected capacity change from 0 to 524288000 [ 834.146774][T12206] 9pnet_fd: Insufficient options for proto=fd [ 834.372011][ T30] audit: type=1400 audit(2000000000.100:1359): avc: denied { name_bind } for pid=12207 comm="syz.5.1576" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 834.558819][ T6006] usb 4-1: USB disconnect, device number 40 [ 835.202442][T10172] block nbd0: Possible stuck request ffff888026170000: control (read@0,1024B). Runtime 330 seconds [ 835.213369][T10172] block nbd0: Possible stuck request ffff8880261701c0: control (read@1024,1024B). Runtime 330 seconds [ 835.224444][T10172] block nbd0: Possible stuck request ffff888026170380: control (read@2048,1024B). Runtime 330 seconds [ 835.235551][T10172] block nbd0: Possible stuck request ffff888026170540: control (read@3072,1024B). Runtime 330 seconds [ 835.288912][T12229] 9pnet_fd: Insufficient options for proto=fd [ 836.993942][T12253] fuse: Bad value for 'user_id' [ 837.001273][T12253] fuse: Bad value for 'user_id' [ 837.221988][ T30] audit: type=1400 audit(2000000002.720:1360): avc: denied { mounton } for pid=12249 comm="syz.2.1588" path="/345/file0" dev="tmpfs" ino=1951 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 839.891732][ T5795] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 840.001567][ T5857] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 840.300856][ T30] audit: type=1400 audit(2000000006.010:1361): avc: denied { relabelfrom } for pid=12280 comm="syz.2.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 840.323512][ T5795] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 840.336699][ T30] audit: type=1400 audit(2000000006.020:1362): avc: denied { relabelto } for pid=12280 comm="syz.2.1595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 840.357863][ T5795] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 840.474742][ T5966] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 840.817582][ T5795] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 840.826910][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.954122][T12285] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 840.973052][ T5795] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 841.012567][ T5966] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 841.027946][ T5966] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x86 has invalid maxpacket 13102, setting to 64 [ 841.039367][ T5966] usb 6-1: config 0 interface 0 has no altsetting 0 [ 841.351255][ T9889] Bluetooth: hci6: command 0x0406 tx timeout [ 841.373577][ T5966] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 841.382965][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 841.391412][ T5966] usb 6-1: Product: syz [ 841.395770][ T5966] usb 6-1: Manufacturer: syz [ 841.402952][ T5966] usb 6-1: SerialNumber: syz [ 841.434287][ T5966] usb 6-1: config 0 descriptor?? [ 841.446964][ T5966] usb 6-1: selecting invalid altsetting 0 [ 841.657148][T12295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.675440][ T5795] usb 2-1: USB disconnect, device number 27 [ 841.690080][T12295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.729021][ T10] usb 6-1: USB disconnect, device number 8 [ 841.871265][ T5966] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 842.340831][ T5966] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 842.355342][ T5966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.367821][ T5966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.408293][ T5966] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 842.460119][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.481379][ T5966] usb 4-1: Product: ྆ᆓ셁煱ഭꪨ􌕬뺜놔䮓촘瘎徖ⷿ悅有溅킅脎譺䵐ၑ筷fi옫몒Ś챐둰稙䧘몱두鹄䚦얫䒱翌蒡鮿춓軜毝꽁葡ꗼ甠㟅ഹ꼨쫥캫펅梩㡧 [ 842.534193][ T5966] usb 4-1: Manufacturer: 涕﫡栉붠㒙潙턻霬꼔횏맒烣〤콡姕ꫲᏦ젥臀䡡重ᄊㄞ呑ꙟ詜鷷訒䯔塈辧寇쓒弥㸍卲嵩瘖큝훞埧炸颈䃩霶줬鍁Ӱ龘넖옰ና頓嘐頞鶣刄뛚澢鮋㚠ﰂ縅獫猷놈킐褊詿䑤듶軶ɻꋘ⍯뾮拂財䥮깔䠫躍选㲅ţ셽໙䂿됎 [ 842.563082][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.631379][ T5966] usb 4-1: SerialNumber: syz [ 843.755470][ T5966] usb 4-1: 0:2 : does not exist [ 843.842667][ T5966] usb 4-1: USB disconnect, device number 41 [ 844.425549][T11558] udevd[11558]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 844.655330][ T30] audit: type=1400 audit(2000000010.380:1363): avc: denied { getopt } for pid=12352 comm="syz.1.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 844.970925][ T30] audit: type=1400 audit(2000000010.690:1364): avc: denied { execute_no_trans } for pid=12352 comm="syz.1.1611" path="/337/file2" dev="tmpfs" ino=1838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 845.141305][ T30] audit: type=1400 audit(2000000010.830:1365): avc: denied { getopt } for pid=12364 comm="syz.1.1613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 845.315245][T12370] netlink: 'syz.2.1614': attribute type 6 has an invalid length. [ 847.357081][ T30] audit: type=1804 audit(2000000012.870:1366): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1618" name="bus" dev="ramfs" ino=37903 res=1 errno=0 [ 847.421255][ T30] audit: type=1804 audit(2000000012.880:1367): pid=12394 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1618" name="bus" dev="ramfs" ino=37903 res=1 errno=0 [ 847.660331][ T30] audit: type=1400 audit(2000000013.380:1368): avc: denied { mounton } for pid=12390 comm="syz.2.1618" path="/" dev="ramfs" ino=37902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 847.861573][ T6006] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 848.013025][ T6006] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.270960][ T6006] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 849.291536][ T6006] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 849.303924][ T6006] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.313674][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.322423][ T6006] usb 4-1: Product: syz [ 849.326677][ T6006] usb 4-1: Manufacturer: syz [ 849.331649][ T6006] usb 4-1: SerialNumber: syz [ 849.611360][ T6006] cdc_ncm 4-1:1.0: bind() failure [ 849.638591][ T6006] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 849.651078][ T6006] cdc_ncm 4-1:1.1: bind() failure [ 849.678834][ T6006] usb 4-1: USB disconnect, device number 42 [ 850.770947][ T30] audit: type=1400 audit(2000000016.490:1369): avc: denied { bind } for pid=12437 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 850.908102][ T30] audit: type=1400 audit(2000000016.490:1370): avc: denied { listen } for pid=12437 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 850.946155][ T30] audit: type=1400 audit(2000000016.500:1371): avc: denied { write } for pid=12437 comm="syz.3.1627" path="socket:[37957]" dev="sockfs" ino=37957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 851.031843][ T30] audit: type=1400 audit(2000000016.600:1372): avc: denied { accept } for pid=12437 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 851.092133][ T30] audit: type=1400 audit(2000000016.610:1373): avc: denied { read } for pid=12437 comm="syz.3.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 851.209035][ T30] audit: type=1400 audit(2000000016.930:1374): avc: denied { map } for pid=12434 comm="syz.7.1626" path="socket:[37968]" dev="sockfs" ino=37968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 851.616857][T12448] vivid-001: disconnect [ 851.622706][T12448] vivid-001: reconnect [ 851.655251][ T30] audit: type=1400 audit(2000000016.930:1375): avc: denied { read } for pid=12434 comm="syz.7.1626" path="socket:[37968]" dev="sockfs" ino=37968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 851.851810][ T31] INFO: task syz.0.1146:10335 blocked for more than 144 seconds. [ 851.859694][ T31] Not tainted syzkaller #0 [ 851.865598][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 851.885566][ T31] task:syz.0.1146 state:D stack:25288 pid:10335 tgid:10333 ppid:5863 task_flags:0x400140 flags:0x00080003 [ 851.898221][ T31] Call Trace: [ 851.901781][ T31] [ 851.905742][ T31] __schedule+0x1190/0x5de0 [ 851.913420][ T31] ? __pfx___schedule+0x10/0x10 [ 851.919967][ T31] ? find_held_lock+0x2b/0x80 [ 851.927568][ T31] ? schedule+0x2d7/0x3a0 [ 851.933016][ T31] schedule+0xe7/0x3a0 [ 851.938428][ T31] io_schedule+0xbf/0x130 [ 851.944319][ T31] folio_wait_bit_common+0x3d5/0x9e0 [ 851.950791][ T31] ? folio_wait_bit_common+0x13a/0x9e0 [ 851.957380][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 851.963805][ T31] ? irqentry_exit+0x3b/0x90 [ 851.969248][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 851.975714][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 851.981532][ T31] ? migrate_pages_batch+0x147f/0x3bb0 [ 851.987680][ T31] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 851.994644][ T31] migrate_pages_batch+0x1487/0x3bb0 [ 852.000662][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 852.006834][ T31] ? __pfx_compaction_free+0x10/0x10 [ 852.012745][ T31] ? __pfx_migrate_pages_batch+0x10/0x10 [ 852.019283][ T31] migrate_pages_sync+0x4c5/0x8a0 [ 852.024825][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 852.030263][ T31] ? __pfx_compaction_free+0x10/0x10 [ 852.038860][ T31] ? css_rstat_updated+0x1c2/0x510 [ 852.045356][ T31] ? __pfx_migrate_pages_sync+0x10/0x10 [ 852.052005][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 852.057520][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 852.063269][ T31] migrate_pages+0x1b5f/0x23a0 [ 852.068183][ T31] ? __pfx_compaction_alloc+0x10/0x10 [ 852.073895][ T31] ? __pfx_compaction_free+0x10/0x10 [ 852.079265][ T31] ? __pfx_migrate_pages+0x10/0x10 [ 852.084705][ T31] ? __pfx_isolate_migratepages_block+0x10/0x10 [ 852.091030][ T31] ? pfn_to_online_page+0x1de/0x560 [ 852.096743][ T31] compact_zone+0x2018/0x4750 [ 852.101864][ T31] ? btrfs_read_block_groups+0x1002/0x2c40 [ 852.109651][ T31] ? __pfx_compact_zone+0x10/0x10 [ 852.114861][ T31] ? __flush_work+0xa48/0xcc0 [ 852.121578][ T31] compact_node+0x1a3/0x2c0 [ 852.126450][ T31] ? __pfx_compact_node+0x10/0x10 [ 852.200642][ T31] ? __lru_add_drain_all+0xec/0x6f0 [ 852.216212][ T31] sysctl_compaction_handler+0x141/0x210 [ 852.222589][ T31] proc_sys_call_handler+0x442/0x570 [ 852.228040][ T31] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 852.233982][ T31] ? splice_from_pipe_next+0x1f7/0x5d0 [ 852.239544][ T31] iter_file_splice_write+0xa24/0x12e0 [ 852.245293][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 852.256730][ T31] ? __pfx_copy_splice_read+0x10/0x10 [ 852.263313][ T31] ? __pfx_iter_file_splice_write+0x10/0x10 [ 852.269392][ T31] direct_splice_actor+0x18f/0x6c0 [ 852.274612][ T31] splice_direct_to_actor+0x342/0xa30 [ 852.280148][ T31] ? __pfx_direct_splice_actor+0x10/0x10 [ 852.285894][ T31] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 852.292084][ T31] do_splice_direct+0x174/0x240 [ 852.296991][ T31] ? __pfx_do_splice_direct+0x10/0x10 [ 852.302997][ T31] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 852.308934][ T31] ? rw_verify_area+0xcf/0x6c0 [ 852.313889][ T31] do_sendfile+0xb06/0xe50 [ 852.318615][ T31] ? __pfx_do_sendfile+0x10/0x10 [ 852.323763][ T31] __x64_sys_sendfile64+0x154/0x220 [ 852.329298][ T31] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 852.335236][ T31] do_syscall_64+0xcd/0xfa0 [ 852.339749][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.345824][ T31] RIP: 0033:0x7f2296d8eec9 [ 852.350238][ T31] RSP: 002b:00007f2294ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 852.360614][ T31] RAX: ffffffffffffffda RBX: 00007f2296fe6090 RCX: 00007f2296d8eec9 [ 852.374392][ T31] RDX: 00002000000000c0 RSI: 000000000000000a RDI: 000000000000000c [ 852.382519][ T31] RBP: 00007f2296e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 852.390560][ T31] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 852.398655][ T31] R13: 00007f2296fe6128 R14: 00007f2296fe6090 R15: 00007fffd5d757a8 [ 852.407175][ T31] [ 852.435451][ T31] INFO: task syz.4.1178:10451 blocked for more than 144 seconds. [ 852.443849][ T31] Not tainted syzkaller #0 [ 852.451929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 852.462447][ T31] task:syz.4.1178 state:D stack:26344 pid:10451 tgid:10450 ppid:5851 task_flags:0x400140 flags:0x00080002 [ 852.476713][ T31] Call Trace: [ 852.480029][ T31] [ 852.491105][ T31] __schedule+0x1190/0x5de0 [ 852.495812][ T31] ? __pfx___schedule+0x10/0x10 [ 852.500807][ T31] ? find_held_lock+0x2b/0x80 [ 852.505580][ T31] ? schedule+0x2d7/0x3a0 [ 852.509920][ T31] ? sync_bdevs+0xfd/0x360 [ 852.514497][ T31] schedule+0xe7/0x3a0 [ 852.518579][ T31] schedule_preempt_disabled+0x13/0x30 [ 852.524149][ T31] __mutex_lock+0x818/0x1060 [ 852.528859][ T31] ? sync_bdevs+0xfd/0x360 [ 852.533419][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 852.538468][ T31] ? iput.part.0+0x181/0xb00 [ 852.543253][ T31] ? sync_bdevs+0xfd/0x360 [ 852.547709][ T31] sync_bdevs+0xfd/0x360 [ 852.552054][ T31] ksys_sync+0xb2/0x150 [ 852.556350][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 852.563274][ T31] ? rcu_is_watching+0x12/0xc0 [ 852.568199][ T31] ? do_syscall_64+0x91/0xfa0 [ 852.573208][ T31] __do_sys_sync+0xe/0x20 [ 852.577547][ T31] do_syscall_64+0xcd/0xfa0 [ 852.584243][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.590170][ T31] RIP: 0033:0x7fddca58eec9 [ 852.597694][ T31] RSP: 002b:00007fddcb4b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 852.606308][ T31] RAX: ffffffffffffffda RBX: 00007fddca7e5fa0 RCX: 00007fddca58eec9 [ 852.614445][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 852.622517][ T31] RBP: 00007fddca7e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 852.630508][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.638497][ T31] R13: 00007fddca7e6038 R14: 00007fddca7e5fa0 R15: 00007ffe96e858c8 [ 852.646563][ T31] [ 852.649672][ T31] [ 852.649672][ T31] Showing all locks held in the system: [ 852.657585][ T31] 1 lock held by khungtaskd/31: [ 852.664394][ T31] #0: ffffffff8e3c44a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 852.674771][ T31] 2 locks held by getty/5575: [ 852.679538][ T31] #0: ffff88803212f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 852.689361][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 852.699561][ T31] 1 lock held by udevd/5860: [ 852.704232][ T31] #0: ffff888143756358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 852.713617][ T31] 1 lock held by syz.0.1146/10335: [ 852.718730][ T31] #0: ffff88802d420420 (sb_writers#3){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 852.729457][ T31] 1 lock held by syz.4.1178/10451: [ 852.734628][ T31] #0: ffff888143756358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 852.744025][ T31] 5 locks held by kworker/u8:28/10741: [ 852.749480][ T31] 1 lock held by syz.6.1431/11543: [ 852.754614][ T31] #0: ffff888143756358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0xfd/0x360 [ 852.763993][ T31] 6 locks held by syz.7.1626/12440: [ 852.769469][ T31] #0: ffff88803c99a638 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 852.778885][ T31] #1: ffff88807b506420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 852.788535][ T31] #2: ffff888057d2f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 852.798429][ T31] #3: ffff88801debd878 (kn->active#79){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 852.809237][ T31] #4: ffffffff8e287928 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x65/0x4e0 [ 852.819732][ T31] #5: ffff888143756358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 852.829011][ T31] 1 lock held by syz.1.1630/12450: [ 852.834289][ T31] #0: ffffffff8e3cf900 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 852.844352][ T31] [ 852.846668][ T31] ============================================= [ 852.846668][ T31] [ 852.855150][ T31] NMI backtrace for cpu 1 [ 852.855166][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 852.855188][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 852.855198][ T31] Call Trace: [ 852.855204][ T31] [ 852.855211][ T31] dump_stack_lvl+0x116/0x1f0 [ 852.855243][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 852.855263][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 852.855291][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 852.855313][ T31] watchdog+0xf3f/0x1170 [ 852.855339][ T31] ? rcu_is_watching+0x12/0xc0 [ 852.855361][ T31] ? __pfx_watchdog+0x10/0x10 [ 852.855380][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 852.855407][ T31] ? __kthread_parkme+0x19e/0x250 [ 852.855433][ T31] ? __pfx_watchdog+0x10/0x10 [ 852.855454][ T31] kthread+0x3c2/0x780 [ 852.855472][ T31] ? __pfx_kthread+0x10/0x10 [ 852.855491][ T31] ? rcu_is_watching+0x12/0xc0 [ 852.855512][ T31] ? __pfx_kthread+0x10/0x10 [ 852.855530][ T31] ret_from_fork+0x672/0x7d0 [ 852.855545][ T31] ? __pfx_kthread+0x10/0x10 [ 852.855562][ T31] ret_from_fork_asm+0x1a/0x30 [ 852.855593][ T31] [ 852.855600][ T31] Sending NMI from CPU 1 to CPUs 0: [ 852.976430][ C0] NMI backtrace for cpu 0 [ 852.976445][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 852.976461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 852.976469][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 852.976493][ C0] Code: e7 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 f6 24 00 fb f4 0c 0a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 852.976506][ C0] RSP: 0018:ffffffff8e007df8 EFLAGS: 000002c2 [ 852.976518][ C0] RAX: 00000000024683b7 RBX: 0000000000000000 RCX: ffffffff8b6522d9 [ 852.976527][ C0] RDX: 0000000000000000 RSI: ffffffff8db026b0 RDI: ffffffff8bf1cfc0 [ 852.976535][ C0] RBP: fffffbfff1c12f40 R08: 0000000000000001 R09: ffffed1017086655 [ 852.976543][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 852.976551][ C0] R13: ffffffff8e097a00 R14: ffffffff908324d0 R15: 0000000000000000 [ 852.976560][ C0] FS: 0000000000000000(0000) GS:ffff8881249df000(0000) knlGS:0000000000000000 [ 852.976574][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.976583][ C0] CR2: 00007fe84f3b3ad8 CR3: 0000000074a3e000 CR4: 00000000003526f0 [ 852.976592][ C0] Call Trace: [ 852.976597][ C0] [ 852.976602][ C0] default_idle+0x13/0x20 [ 852.976614][ C0] default_idle_call+0x6c/0xb0 [ 852.976626][ C0] do_idle+0x38d/0x500 [ 852.976645][ C0] ? __pfx_do_idle+0x10/0x10 [ 852.976660][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 852.976677][ C0] cpu_startup_entry+0x4f/0x60 [ 852.976692][ C0] rest_init+0x16b/0x2b0 [ 852.976705][ C0] ? acpi_subsystem_init+0x133/0x180 [ 852.976723][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 852.976744][ C0] start_kernel+0x3f3/0x4e0 [ 852.976762][ C0] x86_64_start_reservations+0x18/0x30 [ 852.976780][ C0] x86_64_start_kernel+0x130/0x190 [ 852.976797][ C0] common_startup_64+0x13e/0x148 [ 852.976821][ C0] [ 852.977774][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 853.174160][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 853.183253][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 853.193292][ T31] Call Trace: [ 853.196551][ T31] [ 853.199465][ T31] dump_stack_lvl+0x3d/0x1f0 [ 853.204048][ T31] vpanic+0x640/0x6f0 [ 853.208020][ T31] panic+0xca/0xd0 [ 853.211735][ T31] ? __pfx_panic+0x10/0x10 [ 853.216141][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 853.221499][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 853.227638][ T31] ? watchdog+0xe48/0x1170 [ 853.232039][ T31] ? watchdog+0xe3b/0x1170 [ 853.236439][ T31] watchdog+0xe59/0x1170 [ 853.240667][ T31] ? rcu_is_watching+0x12/0xc0 [ 853.245417][ T31] ? __pfx_watchdog+0x10/0x10 [ 853.250079][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 853.255267][ T31] ? __kthread_parkme+0x19e/0x250 [ 853.260290][ T31] ? __pfx_watchdog+0x10/0x10 [ 853.264950][ T31] kthread+0x3c2/0x780 [ 853.268998][ T31] ? __pfx_kthread+0x10/0x10 [ 853.273571][ T31] ? rcu_is_watching+0x12/0xc0 [ 853.278408][ T31] ? __pfx_kthread+0x10/0x10 [ 853.282982][ T31] ret_from_fork+0x672/0x7d0 [ 853.287559][ T31] ? __pfx_kthread+0x10/0x10 [ 853.292143][ T31] ret_from_fork_asm+0x1a/0x30 [ 853.296900][ T31] [ 853.300121][ T31] Kernel Offset: disabled [ 853.304424][ T31] Rebooting in 86400 seconds..