last executing test programs: 28m57.851192956s ago: executing program 0 (id=83): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4000010) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x142000, 0x0) sendmmsg$alg(r1, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="662ce3e5a36fb179360a8a38bdf1", 0xe}, {&(0x7f0000000680)="b130f338d50f63a0f23af56daa12db2a323f6ee3fb4faff0ced29c2a00bb763d0d5629a44df4b344b844e908a3512d14e50c1b3b623c169b145621c9a8f394f0f3f6123496e08ad5ed58893cd199a121132ba20f8af6c04a5b9c5485e2e4978f0afec231f0ff6de49971ccd54d0ef7c3eb70e9c3ffd21c9cc13b711db2eb98460934853eee87916f3f026dfc17b8", 0x8e}, {&(0x7f0000000780)="3d458ec63f72d3f5dfe1b6e2e313575f1aeb3767f96845452f8df721b558c062bd36dbf3c0b1b0b91282bcba5717ec851cea9f7170acbc1f5bb8b1b5a58a6781e617ac0c9de50d0211cb008f14a12ef6e39a5b9e25b23caae08f9b01ceb31146a2714fd7c1da72a342ffe907a2f675e8950acbc17c9f370b3277e38d6933cb04900118ebef8c33cd9b0c23eaad51eabb8416e976362e15de3f8b3e6f002bbc4655c87dc434baf69e1fc7cbff7e6da8", 0xaf}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x210, 0x4050}, {0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000d40)="8600499f3b1c3d19ec182fd3bebba6ca9374fa61f0c133171a6d0735bfa38a0e97957bab1907eff508663da034f9b109af7a172dd0b15018b92a54abf04a9292a0fc08b0e603ece66eecf224a19e1972e66e22c8ad9fcdccf40fab8bc36df3c71eb598368c28c7fbcb4a5b8a8a95364d3a05ec1f046c92963639c4f341b5079867381d2457545307784228120f360f32c7bf284212a01a8f70844588b1a6e88eca78b4c5de3dfb50a57dc60eee436576d2fe60f358864e1004f668b684f46597e9d9459f8cf4890fdd5fedecec7469a4456039b2a87108eca679b35753f1efb2f6fbb088", 0xe4}, {&(0x7f0000000e40)="3eba3d9d9f3d8853006eefd4b84f7a1d7ebc5034b04106ecc3359e7b6f874d1ba78c060cd7634a829d80438151ac1731bafc87802ad5a6544f1f57d3a8c868368022175885658755ba1318d129a66b7b4ad9c497f60ef10c76f1934a766b7ea4b01087ad57f9af521f2a5d005c65d099556029cab872448215ccfb22d0ead05864ac1bcf45d96273408be1b0c2ac294ae9d887fe13114d83f332cc363504e5a29584e9efeaddd1290a4b24677ca732ebfba51b15313f20cbb516570d0d4b1b092bdc1ec7601b4d48ab3111a7a9f18ebcd1f61642854004dce85751b15dc273ddc88eef5e8c", 0xe5}, {&(0x7f0000000f40)="6c3da6b546637c9ce403291e4b71d35562be8e7ac9df1e4c09cca150c8fd275d43204aa8d9102bc7a1afd456dcb6bfa29308c8c9b5f369f9f42eb2e9e78a3cba32434ed947582036b97bf2d6c108eca28e6b661bc1bd4143c5f4f0b318b47451865fe4590610a45bc10d9986c8fc741e7c50fd7d9167b536c3a7800fd27e191094d82074fd3b78a3e9856d90fd8874180f15", 0x92}, {&(0x7f0000000840)="12911ee873d2b3508fe863700bd5078ccac99c1e534f1528330cc256336d4afa07e754fd5bc0d895df347063ca0753d44e80941859e8983fb6d05992b123381fbbac18e7fd3a87a98bce0e156660ca4734d2b88a881c51a1cc1a7651", 0x5c}, {&(0x7f0000001000)="71b6c95509140152e39f41a6165d078d9ae4bd98668680886365e619c434fccef75904972c55876ea7fd17bbe32d374340a71c1a9caf49675fb7418cd3161faa9b31", 0x42}], 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="280000000000000017010000020000180d00000061aa243a7ce10d6942e8f209d200000000000000180000000000000017010000030000000000000000000000180000000000000017010000030000000000000000000000180000000000000017010000030000000100000000000000180000000000000017010000040000006a9f0000000000001800000000000000000000000000000000180000000000000017010000040000000600"/184], 0xb8, 0x800}], 0x2, 0x24000005) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=@newlink={0xcc, 0x10, 0x401, 0x70bd2c, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_AF_SPEC={0x74, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x58, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}]}, @AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x8}]}}]}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x59c11}]}, 0xcc}}, 0x0) r3 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='+\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x3}, {}, 0x0, 0x3f0}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_GET_XSAVE2(r0, 0x9000aecf, &(0x7f00002ab000/0x800000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) io_submit(0x0, 0x1, &(0x7f0000000740)=[0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 28m54.852853775s ago: executing program 0 (id=90): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r6, &(0x7f0000000080)=""/75, 0x8e, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x2, 0x20, r1, 0x726e, '\x00', 0x0, r2, 0x5, 0x0, 0x2, 0x8, @void, @value, @void, @value}, 0x48) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r7}, 0x0, 0x0, 0x3}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x100) r8 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r8, &(0x7f00000001c0)=""/68, 0x44) unshare(0x20060000) 28m53.055498691s ago: executing program 0 (id=92): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) readv(r2, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = syz_open_pts(r2, 0x801) r7 = dup3(r6, r2, 0x80000) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x15) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB]) ioctl$KDGKBTYPE(r8, 0x4b48, &(0x7f0000002340)) dup3(r9, r6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001540)=@newtaction={0xc4, 0x30, 0x80d, 0x0, 0x0, {}, [{0xb0, 0x1, [@m_simple={0xac, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x80, 0x6, "84935f3c43fa0646d92c05086d70e9ff5f0a9abdabe3e610fb525679dace854828cbfa4c1712c690196658d7bdf3bb19deffd9569b41814c2a2fdc28013a34b1535974d94a9124847f0d57b07df28ac1da6d8f4bba6b6d44a0710b0104a5c183aae6febde0d97d9790fcfae57cdff745b952ab9da284cf2599d3127f"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x0, 0x0, 0x4, 0x0, "3e8c178b2784d4e7508a6330d08169a2c14bd6b0f9aadb277017dc2ca94db58ff37be2ca1b376e5721393286c75e5579b15272037f8647e6429c4114d233a58fea385da8612e833278a38970ac38ce0b"}, 0xd8) 28m51.400251318s ago: executing program 0 (id=93): prlimit64(0x0, 0xe, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000001a40)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000009500000000000000c2bb88e31626b42d383b1dfc2831ce96af2312cee6efc461f3612eafe902f3a80f5723856edb2d74eb5e563aa5417c0ec9d1e3e4ba98b9fc0e0ec1ae4a1363e679b87b1b9ec23ca5268e834ceca8329aba35ca88f55a6ceca38a7add39eca06fd2b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(r1, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain) keyctl$link(0x8, r4, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xb0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x400, 0x0) 28m47.575054367s ago: executing program 0 (id=103): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x358, 0x0) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400001fb7030000000000008500000083000000b70900000000000055090100000000007b00000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 28m45.416908801s ago: executing program 0 (id=106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x23) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ee5000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlockall() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, 0x0, &(0x7f0000000280)=0x92) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x1}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 28m29.038178605s ago: executing program 32 (id=106): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0xc0046209, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x23) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ee5000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) munlockall() r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) open(0x0, 0x143c62, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, 0x0, &(0x7f0000000280)=0x92) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x1}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 26m46.774367147s ago: executing program 2 (id=300): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r7, &(0x7f0000000080)=""/75, 0x8e, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x8, 0x2, 0x20, r1, 0x726e, '\x00', 0x0, r2, 0x5, 0x0, 0x2, 0x8, @void, @value, @void, @value}, 0x48) rseq(0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, 0x0, 0x0, 0x3}, 0x20) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x100) r9 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r9, &(0x7f00000001c0)=""/68, 0x44) unshare(0x20060000) 26m42.90453717s ago: executing program 2 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000003"], 0x8) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r5, 0x301}, 0x14}}, 0x0) wait4(0x0, &(0x7f0000000100), 0x1, &(0x7f0000000300)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a001000000002", 0x29}], 0x1}, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="2c726f6fcf8972d3978166cc5764653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f00000004c0)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x0, 0x4, 0x0, 0x10, 0x200}}, 0x50) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b"], 0x58}, 0x1, 0x2}, 0x0) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) 26m38.826612788s ago: executing program 2 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f00005b2000/0x3000)=nil, 0x3000, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x6c40) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}], 0x0, 0x0, 0x0}) r3 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000004bc0)={0x2020}, 0x2020) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f330063090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b5b070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210380106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b07c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x2b) ioctl$EVIOCGKEY(r5, 0x80404518, 0x0) 26m37.79124977s ago: executing program 2 (id=313): ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d}) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) get_robust_list(0x0, 0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x2f8f, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x2) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r3}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syslog(0x3, &(0x7f0000002180)=""/183, 0xb7) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r6, 0x8b2c, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x1, 0x6}) fsopen(&(0x7f0000000200)='fuseblk\x00', 0x0) 26m33.950370597s ago: executing program 2 (id=316): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioperm(0x0, 0x7, 0x7) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioperm(0xbc31, 0x6, 0x5) shutdown(r2, 0x0) gettid() socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000006980)={0x3, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x3, 0x7) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)=""/12, 0xc}, {0x0}], &(0x7f0000000340)=[0x7], 0x2}, 0x20) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) getpeername$ax25(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) 26m33.253114817s ago: executing program 2 (id=321): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800a8380000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x81, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @loopback, @local}}}}) io_setup(0x6, &(0x7f00000005c0)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r2, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$vim2m(0x0, 0x2, 0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 26m17.682188924s ago: executing program 33 (id=321): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800a8380000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x81, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @loopback, @local}}}}) io_setup(0x6, &(0x7f00000005c0)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r2, 0x1, &(0x7f0000000640)=[&(0x7f0000000600)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_open_dev$sg(0x0, 0x0, 0x8002) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$vim2m(0x0, 0x2, 0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 24m19.662325442s ago: executing program 5 (id=546): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x21, 0x121}, 0x1c}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r5) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x100000002) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r6) ioctl$KDSIGACCEPT(r4, 0x400455c8, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000006800e97800000000000000000a00000000000000140006000000000000000000000000000000000108000500"], 0x34}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7a, 0xdd, 0x15, 0x20, 0x545, 0x8080, 0x301, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa1, 0xc3, 0x85}}]}}]}}, 0x0) ioperm(0xf1, 0x3, 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0x4000004]}, 0x0, 0x8) 24m16.947717953s ago: executing program 5 (id=551): r0 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000900"/52]) keyctl$KEYCTL_WATCH_KEY(0x15, r0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendmmsg$inet6(r3, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8f15fff2559eb545e1e8cfcb73d18c15dfaf04550bbd479aca9d59f408a7f8647ee014f5c0325ae447fc915d6a5ba5ddd204b1d4f3c83fc3a8b2e79726653e96d", 0x80}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e04023c20"], 0x7) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) ioperm(0x0, 0xe4d, 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x16}, 0x0, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7, 0x2bfc, 0xffffffff}}, 0xe8) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) socket$unix(0x1, 0x5, 0x0) 24m14.875284002s ago: executing program 5 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) chdir(0x0) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000600, 0x0, 0x0) setsockopt$llc_int(r5, 0x10c, 0x2, &(0x7f00000000c0)=0xfffffff8, 0x4) shutdown(0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @remote, 0x3}, {0xa, 0x0, 0x0, @remote}, r7}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x7, @empty}, @in={0x2, 0x4f27, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) 24m13.650658755s ago: executing program 5 (id=558): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x1, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) socket$netlink(0x10, 0x3, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08", 0x2f}], 0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r3, &(0x7f0000000580)={0x208, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/202, 0xca}, {&(0x7f0000000180)=""/182, 0xb6}], 0x2) msgrcv(0x0, &(0x7f00000000c0), 0x8, 0x2, 0x800) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) 24m7.966562118s ago: executing program 5 (id=567): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000002e00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20024094, 0x0, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2080) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000005240)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84a01, 0x120) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r6 = dup(r0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000280)=0x3, 0x4) ioctl$UI_END_FF_UPLOAD(r6, 0x406855c9, &(0x7f0000000040)={0x9, 0x1, {0x53, 0xe74, 0xfffe, {0xfffd, 0x9}, {0x8000, 0xfffc}, @const={0x3d2, {0x9, 0x9, 0x4, 0x2}}}, {0x56, 0x4, 0x6, {0x6, 0x5}, {0x200, 0xe}, @period={0x58, 0x6, 0x2ec, 0xb3, 0x0, {0x8d, 0x1, 0x0, 0x2}, 0x1, &(0x7f0000000180)=[0xffa8]}}}) 24m4.460576664s ago: executing program 5 (id=571): r0 = socket(0x2a, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) syz_emit_ethernet(0xa2, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r1 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1a06, &(0x7f0000000340)={0x0, 0xf51b, 0xe61decb38a98842b, 0x3, 0xaa, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c0", 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e06f40908"], 0xa) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, 0x0) 23m49.10355341s ago: executing program 34 (id=571): r0 = socket(0x2a, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) syz_emit_ethernet(0xa2, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r1 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1a06, &(0x7f0000000340)={0x0, 0xf51b, 0xe61decb38a98842b, 0x3, 0xaa, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r7, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c0", 0x4) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040e06f40908"], 0xa) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='pagemap\x00') r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) keyctl$join(0x1, 0x0) 39.644044298s ago: executing program 7 (id=5249): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x2000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@union={0x0, 0x0, 0x0, 0xd}, @var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x17, 0x7}]}}, 0x0, 0x46, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 38.004846948s ago: executing program 7 (id=5254): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) 36.67640797s ago: executing program 7 (id=5256): syz_usb_connect(0x6, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000018ca74206d04f6080df50102030509021200010900006709043e00000101"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x54, 0x0, &(0x7f00000003c0)=[@increfs={0x40046304, 0x2}, @dead_binder_done, @release, @free_buffer, @dead_binder_done, @free_buffer, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 31.947446343s ago: executing program 7 (id=5269): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x1}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) fcntl$dupfd(r0, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000001180)='net/ip6_mr_cache\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r9, 0xc004510e, &(0x7f0000000800)=0xffffffff) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) 30.569437965s ago: executing program 7 (id=5272): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(0xffffffffffffffff, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r3, &(0x7f0000000380)={{0x3, @null, 0x5}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 30.332820092s ago: executing program 7 (id=5273): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000002100)=0x80008, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\b\x00', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10008001}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 14.935145629s ago: executing program 35 (id=5273): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000002100)=0x80008, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0xf000000}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='\b\x00', @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x10008001}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x404c880) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000414010026bd7000ffdbdf250800010000000000080003"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) 13.339338618s ago: executing program 3 (id=5311): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x103002, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4e, 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x1de) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.872774442s ago: executing program 4 (id=5313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = creat(0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x9a) socket(0x1e, 0xa, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSISO7816(r1, 0xc0285443, &(0x7f0000000100)={0x8, 0x4, 0xf72, 0x200, 0x6}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0x1, 0x70bd25, 0x8, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 10.736046821s ago: executing program 4 (id=5316): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48}) 10.57627414s ago: executing program 3 (id=5317): r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r5, 0x40140921, 0x20000001) 10.536508693s ago: executing program 1 (id=5318): syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x7) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) mount$bind(0x0, 0x0, 0x0, 0x89101a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 9.260347663s ago: executing program 6 (id=5319): gettid() r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x4) accept$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00') bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0200000001"], 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 9.187769401s ago: executing program 4 (id=5320): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.805078889s ago: executing program 1 (id=5321): io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000440)) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r7, &(0x7f0000000000), 0x0, 0x0, 0xfff) 8.660890429s ago: executing program 6 (id=5322): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x840) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) fsopen(0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.730034382s ago: executing program 6 (id=5323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) accept$alg(r3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000000)={@private2}, 0x20) 7.66016035s ago: executing program 1 (id=5324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x86, 0x4, 0x5, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) connect$pppl2tp(r3, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) 6.654663797s ago: executing program 3 (id=5325): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 6.591195417s ago: executing program 6 (id=5326): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x3, 0x8) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "e4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}}], 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32], 0x2c}}, 0x0) 6.525019544s ago: executing program 1 (id=5327): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) 4.411151916s ago: executing program 3 (id=5328): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xffffffffffffff61) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x13c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.306167592s ago: executing program 6 (id=5329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) sendmsg$can_bcm(r2, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x400, 0xc6025) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x80) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x0, 0x5, 0xfeff, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f000000e0c0), 0x10010) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={r6, 0x2cb5}, 0x8) 3.280861954s ago: executing program 3 (id=5330): r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8000000000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x20040001, 0x0, 0x0, 0x4}}) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x200002) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.962499974s ago: executing program 1 (id=5331): r0 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r0, 0x114, 0x271f, 0x0, 0x20000008) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x1966cd75, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x641, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff122]}, 0x45c) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={0x0}, 0x1) r5 = epoll_create1(0x0) times(0xfffffffffffffffe) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0x6000001f}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000800)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000009c0)={r1, r7, r8}, 0xc) read$char_usb(r6, &(0x7f00000004c0)=""/185, 0xb9) write$sndseq(r6, &(0x7f0000000740)=[{0x9, 0x3, 0xa, 0x9, @time={0xb, 0x8}, {0xa, 0x9}, {0xb4, 0x9}, @connect={{0x8, 0x5}, {0x2, 0x1}}}, {0x7f, 0x33, 0x2, 0x4, @time={0x2, 0x3}, {0x13, 0x10}, {0x4, 0x74}, @note={0xe7, 0x3, 0x5, 0xe, 0x10}}, {0x4, 0x6, 0x7, 0x1, @time={0x2, 0x4}, {0x1}, {0xec, 0xf}, @raw8={"70b58d0402656854db618200"}}, {0x3, 0x4, 0x1, 0xb, @tick=0x90b, {0x8, 0x47}, {0x2, 0x9}, @ext={0xa6, &(0x7f0000000580)="830a8d460d92ba26b9e837fed8dd58e8e4f8002f90dd92ad824b2e38bc1a3a967063b0c79095bc7ccb4692aebfd75d5aaf65ac1baad8cf3b4f1ef13bef7669cf6986ac4e3a3d23ded7f7c277724fc2ec9074af50796c75486a543f9f02a62199f91d4d12ca636cdbab687b8b53cfb49d9a509944008dfe66ff249dae53004b9f0d9ecc670e6f7b0f3f78d5fe6a67fd5b2351e6573f6206e1c6122f119b9a3a37c016623abe72"}}, {0x40, 0x9, 0x3, 0x1, @tick=0x3, {0x7, 0x5}, {0x1}, @ext={0xbc, &(0x7f0000000680)="819d50310d0f3cf0020891b2ea95c47c8f497b6fccbf984557866b6fedc4f828cf2af31db05cfa4d11bb2cf9582b3e0f4664519da94fc8c0bf698365a46ca229feda437da0c02f6d6141fab1c22ec00366662d242f5633d49e30266b62d5ecc02c230ce619da144aafcd5185d744cd417410b8b040e85b25842fbf4a417efc6419c3d87f93f69a9dee785f9a6abb97d5dbf9db134576b092366858c122b6ac6ed2a32604e18c4d26b974e3c98f7cb8bb37fc5774ff8bf0bbbaa4a9c7"}}, {0x81, 0xf5, 0x3, 0x9, @tick=0x4, {0x80}, {0x4, 0x6}, @queue={0x7, {0x97d5, 0x5}}}], 0xa8) r9 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r10, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000020}, 0x0) syz_genetlink_get_family_id$nbd(0x0, r10) ftruncate(r9, 0x0) 2.946358738s ago: executing program 4 (id=5332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) close(0xffffffffffffffff) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='e', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="60cd153f5954e3b7cefddfbed84b91d3d9a9fd43dd92f43358ada528c9975f6a54460d82bfed69629ca866d8c96bcfa57faa0d6331c47570853a59d9c3a0115e550c32a738277dac34c4f099d5baf5375003b36317e98386e681a1aa460047b346ce5323723800283a5bbb1414629063c33634e02855543b4c7c8959c4bcba5fd364f3ef6f17ea7ff6abd4c5f19a620098fcac44ba30b9fa29c34e67aef6f4d42ed06c8f61c9e9094c5d46e8e24bce13d71a1f0c09dbc7b73a7ad36e7f288650", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, &(0x7f0000000140)=""/245, 0xf5, &(0x7f0000000340)={&(0x7f0000000280)={'sm3\x00'}}) 1.578108053s ago: executing program 4 (id=5333): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000680)=""/217, 0xd9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.46425606s ago: executing program 6 (id=5334): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 855.834252ms ago: executing program 1 (id=5335): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r2, 0x1, 0x1}, 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r3 = socket$packet(0x11, 0x3, 0x300) dup(r3) fcntl$dupfd(r0, 0x0, r3) syz_open_procfs(0x0, &(0x7f0000001180)='net/ip6_mr_cache\x00') syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r10, 0xc004510e, &(0x7f0000000800)=0xffffffff) ioctl$vim2m_VIDIOC_QBUF(r9, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "66864e02"}, 0x0, 0x1, {0x0}}) 22.745662ms ago: executing program 4 (id=5336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) 0s ago: executing program 3 (id=5337): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000280)) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @empty}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) splice(r5, &(0x7f0000000740)=0x58b, r4, 0x0, 0x3ff, 0xa) kernel console output (not intermixed with test programs): 9.966814][ T8990] usb 5-1: Manufacturer: syz [ 1709.979996][ T8990] usb 5-1: SerialNumber: syz [ 1710.015167][ T8990] usb 5-1: config 0 descriptor?? [ 1710.229378][T25786] xt_policy: output policy not valid in PREROUTING and INPUT [ 1710.300681][ T29] audit: type=1400 audit(1732274379.873:2883): avc: denied { bind } for pid=25789 comm="syz.1.4711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1710.333260][ T8990] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 1710.343410][ T8990] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1710.353965][ T8990] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 1710.361824][ T8990] usb 5-1: media controller created [ 1710.380598][ T8990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1710.400151][ T52] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1710.630329][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 1710.672731][ T52] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1710.838955][T25795] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1710.861415][ T52] usb 7-1: config 0 has no interface number 0 [ 1710.961409][ T52] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1710.991596][ T52] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.009119][ T52] usb 7-1: Product: syz [ 1711.014303][ T8990] DVB: Unable to find symbol dib8000_attach() [ 1711.020633][ T52] usb 7-1: Manufacturer: syz [ 1711.025398][ T8990] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 1711.033347][ T52] usb 7-1: SerialNumber: syz [ 1711.043390][ T52] usb 7-1: config 0 descriptor?? [ 1711.053918][ T52] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1711.063190][ T52] usb 7-1: selecting invalid altsetting 1 [ 1711.069271][ T52] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1711.079925][ T52] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1711.090906][ T52] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1711.099252][ T52] usb 7-1: media controller created [ 1711.116741][ T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1711.290117][ T8990] rc_core: IR keymap rc-dib0700-nec not found [ 1711.304315][ T52] usb 7-1: DVB: registering adapter 2 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1711.890029][ T8990] Registered IR keymap rc-empty [ 1711.895140][ T8990] dvb-usb: could not initialize remote control. [ 1711.905390][ T52] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1711.915374][ T8990] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 1711.929864][ T8990] usb 5-1: USB disconnect, device number 61 [ 1712.009222][ T8990] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 1712.048623][ T52] DVB: Unable to find symbol mxl5005s_attach() [ 1712.183089][ T52] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1712.383825][T25810] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1712.560486][ T52] usb 7-1: USB disconnect, device number 71 [ 1713.695651][T25855] vivid-004: disconnect [ 1713.725555][T25852] vivid-004: reconnect [ 1714.094253][ T52] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1714.312203][ T52] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1714.395058][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.491401][ T52] usb 2-1: Product: syz [ 1714.518918][ T52] usb 2-1: Manufacturer: syz [ 1714.532212][ T52] usb 2-1: SerialNumber: syz [ 1714.542298][ T52] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1714.562096][T23669] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1714.606290][ T8990] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1714.723579][T23669] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1714.734611][T23669] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1714.746987][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1714.758171][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1714.768081][T23669] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1714.783717][T23669] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1714.793020][T23669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.801128][T23669] usb 5-1: Product: syz [ 1714.805454][T23669] usb 5-1: Manufacturer: syz [ 1714.810392][T23669] usb 5-1: SerialNumber: syz [ 1714.818237][T23669] usb 5-1: config 0 descriptor?? [ 1714.881066][T23669] rc_core: IR keymap rc-imon-rsc not found [ 1714.886936][T23669] Registered IR keymap rc-empty [ 1714.892980][T23669] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1714.903911][T23669] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input85 [ 1714.916371][T23669] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90 [ 1714.960438][ T52] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1715.059787][T24255] usb 5-1: USB disconnect, device number 62 [ 1715.063761][T23669] usb 2-1: USB disconnect, device number 69 [ 1715.131795][ T52] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.142879][ T52] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.152958][ T52] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1715.159618][ T52] usb 8-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1715.168757][ T52] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.178389][ T52] usb 8-1: config 0 descriptor?? [ 1715.598083][ T52] uclogic 0003:5543:0781.0044: item fetching failed at offset 5/7 [ 1715.618364][ T52] uclogic 0003:5543:0781.0044: parse failed [ 1715.624446][ T52] uclogic 0003:5543:0781.0044: probe with driver uclogic failed with error -22 [ 1715.656827][ T8990] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1715.682782][ T8990] ath9k_htc: Failed to initialize the device [ 1715.690960][T25885] netlink: 'syz.4.4748': attribute type 12 has an invalid length. [ 1715.708115][T23669] usb 2-1: ath9k_htc: USB layer deinitialized [ 1715.709908][T25885] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4748'. [ 1715.795889][ T964] usb 8-1: USB disconnect, device number 53 [ 1716.339015][T25894] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1717.439494][T25902] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1717.898068][T25933] tipc: Started in network mode [ 1717.903087][T25933] tipc: Node identity fff, cluster identity 7 [ 1717.909230][T25933] tipc: Node number set to 4095 [ 1719.590186][ T8990] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1719.680139][T24255] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1719.750144][ T8990] usb 7-1: Using ep0 maxpacket: 32 [ 1719.758740][ T8990] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1719.767535][ T8990] usb 7-1: config 0 has no interface number 0 [ 1719.775809][ T8990] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1719.785376][ T8990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.793445][ T8990] usb 7-1: Product: syz [ 1719.797709][ T8990] usb 7-1: Manufacturer: syz [ 1719.802812][ T8990] usb 7-1: SerialNumber: syz [ 1719.809413][ T8990] usb 7-1: config 0 descriptor?? [ 1719.819507][ T8990] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1719.828725][ T8990] usb 7-1: selecting invalid altsetting 1 [ 1719.834767][ T8990] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1719.844423][ T8990] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1719.855410][T24255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1719.867052][ T8990] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1719.875651][T24255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1719.886388][ T8990] usb 7-1: media controller created [ 1719.892132][T24255] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1719.908093][ T8990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1719.916631][T24255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.931548][T24255] usb 2-1: config 0 descriptor?? [ 1719.940439][T24255] hub 2-1:0.0: USB hub found [ 1720.028863][ T8990] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1720.037203][ T8990] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1720.152040][T24255] hub 2-1:0.0: 1 port detected [ 1720.293887][ T8990] usb 7-1: USB disconnect, device number 72 [ 1720.556331][T24255] usb 2-1: USB disconnect, device number 70 [ 1721.183804][T25961] Cannot find set identified by id 0 to match [ 1722.095288][T25968] pimreg: left allmulticast mode [ 1722.159340][T25974] bond0: (slave team0): Releasing backup interface [ 1722.196077][T25974] team0 (unregistering): Port device team_slave_0 removed [ 1722.790638][T25974] team0 (unregistering): Port device team_slave_1 removed [ 1723.024412][T25994] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4790'. [ 1723.040862][ T29] audit: type=1400 audit(1732274392.633:2884): avc: denied { connect } for pid=25995 comm="syz.4.4791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1723.220238][T24255] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1723.313765][ T29] audit: type=1400 audit(1732274392.913:2885): avc: denied { mount } for pid=26000 comm="syz.7.4793" name="/" dev="hugetlbfs" ino=80235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1723.337371][T26002] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 1723.337371][T26002] [ 1723.388185][T24255] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.532084][T24255] usb 7-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.547200][ T29] audit: type=1400 audit(1732274392.933:2886): avc: denied { remount } for pid=26000 comm="syz.7.4793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1723.600366][T24255] usb 7-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1723.616871][T24255] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1723.623779][T24255] usb 7-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 1723.633043][T24255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.647585][T24255] usb 7-1: config 0 descriptor?? [ 1723.684454][ T29] audit: type=1400 audit(1732274393.253:2887): avc: denied { unmount } for pid=9476 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1723.849508][T26009] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1724.170084][ T29] audit: type=1400 audit(1732274393.763:2888): avc: denied { listen } for pid=26011 comm="syz.4.4797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1724.237276][ T29] audit: type=1400 audit(1732274393.793:2889): avc: denied { ioctl } for pid=26011 comm="syz.4.4797" path="socket:[79755]" dev="sockfs" ino=79755 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1724.403896][T24255] aquacomputer_d5next 0003:0C70:F001.0045: unknown main item tag 0x0 [ 1724.416823][T24255] aquacomputer_d5next 0003:0C70:F001.0045: unknown main item tag 0x0 [ 1724.426124][T24255] aquacomputer_d5next 0003:0C70:F001.0045: unknown main item tag 0x0 [ 1724.435156][T24255] aquacomputer_d5next 0003:0C70:F001.0045: unknown main item tag 0x0 [ 1724.486117][T24255] aquacomputer_d5next 0003:0C70:F001.0045: unknown main item tag 0x0 [ 1724.744183][T24255] aquacomputer_d5next 0003:0C70:F001.0045: hidraw0: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.6-1/input0 [ 1725.380950][T24255] usb 7-1: USB disconnect, device number 73 [ 1726.000064][T26036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1726.052794][ T29] audit: type=1326 audit(1732274395.613:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26025 comm="syz.4.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1726.394797][ T29] audit: type=1326 audit(1732274395.613:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26025 comm="syz.4.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1726.539123][ T29] audit: type=1326 audit(1732274395.613:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26025 comm="syz.4.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1726.570834][ T29] audit: type=1326 audit(1732274395.613:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26025 comm="syz.4.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1727.302799][T26052] netlink: 'syz.1.4808': attribute type 23 has an invalid length. [ 1727.310948][T26052] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1727.360238][T23669] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1727.722170][T23669] usb 7-1: Using ep0 maxpacket: 8 [ 1727.728960][T23669] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 1727.740640][T23669] usb 7-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 1727.749706][T23669] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.369673][T23669] usb 7-1: config 0 descriptor?? [ 1728.768732][T26066] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1728.967679][T23669] wacom 0003:056A:00B8.0046: unknown main item tag 0x0 [ 1728.975217][T23669] wacom 0003:056A:00B8.0046: unknown main item tag 0x0 [ 1728.983109][T23669] wacom 0003:056A:00B8.0046: unknown main item tag 0x0 [ 1728.990329][T23669] wacom 0003:056A:00B8.0046: unknown main item tag 0x0 [ 1729.007460][T23669] wacom 0003:056A:00B8.0046: unknown main item tag 0x0 [ 1729.020256][T24255] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1729.025319][T23669] wacom 0003:056A:00B8.0046: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 1729.064113][T23669] wacom 0003:056A:00B8.0046: hidraw0: USB HID vff.80 Device [HID 056a:00b8] on usb-dummy_hcd.6-1/input0 [ 1729.094236][T23669] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B8.0046/input/input86 [ 1729.195467][T23669] usb 7-1: USB disconnect, device number 74 [ 1729.212014][T24255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.230096][T24255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1729.244159][T24255] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1729.256843][T24255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.267701][T24255] usb 2-1: config 0 descriptor?? [ 1729.350126][ T8990] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1729.405840][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 1729.405856][ T29] audit: type=1400 audit(1732274399.003:2914): avc: denied { append } for pid=26085 comm="syz.7.4823" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1729.405990][T26086] random: crng reseeded on system resumption [ 1729.412372][ T29] audit: type=1400 audit(1732274399.003:2915): avc: denied { open } for pid=26085 comm="syz.7.4823" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1729.540650][ T8990] usb 5-1: Using ep0 maxpacket: 32 [ 1729.548236][ T8990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1729.557381][ T8990] usb 5-1: config 127 has an invalid interface number: 25 but max is 0 [ 1729.565819][ T8990] usb 5-1: config 127 has no interface number 0 [ 1729.572424][ T8990] usb 5-1: config 127 interface 25 has no altsetting 0 [ 1729.582953][ T8990] usb 5-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1729.598311][ T8990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.607567][ T8990] usb 5-1: Product: syz [ 1729.612095][ T8990] usb 5-1: Manufacturer: syz [ 1729.616722][ T8990] usb 5-1: SerialNumber: syz [ 1729.696142][T24255] vrc2 0003:07C0:1125.0047: fixing up VRC-2 report descriptor [ 1729.722192][ T29] audit: type=1400 audit(1732274399.313:2916): avc: denied { ioctl } for pid=26085 comm="syz.7.4823" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1729.753146][T24255] input: HID 07c0:1125 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:07C0:1125.0047/input/input89 [ 1729.848614][T24255] vrc2 0003:07C0:1125.0047: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.1-1/input0 [ 1729.860623][ T8990] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1729.919464][T24255] usb 2-1: USB disconnect, device number 71 [ 1730.060106][ T964] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1730.214636][ T964] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1730.232571][ T964] usb 7-1: not running at top speed; connect to a high speed hub [ 1730.246695][ T964] usb 7-1: config 9 has an invalid interface number: 218 but max is 0 [ 1730.256324][ T964] usb 7-1: config 9 has no interface number 0 [ 1730.267558][ T964] usb 7-1: config 9 interface 218 has no altsetting 0 [ 1730.278920][ T964] usb 7-1: string descriptor 0 read error: -22 [ 1730.291290][ T964] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d7.19 [ 1730.304474][ T964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.528667][ T8990] usb 5-1: reset high-speed USB device number 63 using dummy_hcd [ 1730.560562][ T964] peak_usb 7-1:9.218: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1730.780362][ T964] peak_usb 7-1:9.218 can0: sending command failure: -22 [ 1730.793379][ T964] peak_usb 7-1:9.218 can0: sending command failure: -22 [ 1730.803252][ T964] peak_usb 7-1:9.218 can0: sending command failure: -22 [ 1730.871499][ T8990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1731.069114][ T8990] usb 5-1: device firmware changed [ 1731.215288][ T8990] ueagle-atm 5-1:127.25: usbatm_usb_probe: bind failed: -19! [ 1731.332439][ T964] peak_usb 7-1:9.218: probe with driver peak_usb failed with error -22 [ 1731.350330][ T964] usb 7-1: USB disconnect, device number 75 [ 1731.360431][ T8990] usb 5-1: USB disconnect, device number 63 [ 1731.880053][ T8990] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1732.020117][ T964] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1732.040152][ T8990] usb 2-1: Using ep0 maxpacket: 8 [ 1732.070161][ T8990] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1732.070163][T23669] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1732.097296][ T8990] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1732.106198][ T8990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.116467][ T8990] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1732.125488][ T8990] usb 2-1: config 1 has no interface number 1 [ 1732.132006][ T8990] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1732.144899][ T8990] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has an invalid bInterval 97, changing to 7 [ 1732.155806][ T8990] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x2 has invalid maxpacket 24929, setting to 1024 [ 1732.168820][ T8990] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1732.178009][ T8990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.186056][ T8990] usb 2-1: Product: syz [ 1732.190247][ T8990] usb 2-1: Manufacturer: syz [ 1732.195009][ T8990] usb 2-1: SerialNumber: syz [ 1732.206345][ T964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1732.217649][ T964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1732.229383][T23669] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1732.240362][T23669] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1732.251826][ T964] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1732.260987][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1732.269026][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1732.280561][ T964] usb 7-1: SerialNumber: syz [ 1732.285196][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.296154][T23669] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1732.311150][T23669] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1732.321328][ T964] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1732.329846][ T964] usb-storage 7-1:1.0: USB Mass Storage device detected [ 1732.337278][T23669] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.347506][ T964] usb-storage 7-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1732.355947][T23669] usb 5-1: config 0 descriptor?? [ 1732.360154][T24255] usb 8-1: new low-speed USB device number 54 using dummy_hcd [ 1732.368837][ T964] scsi host1: usb-storage 7-1:1.0 [ 1732.419314][ T8990] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1732.430139][ T8990] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1732.438599][ T8990] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 1732.447553][ T8990] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1732.456641][ T8990] usb 2-1: 2:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1732.465370][ T8990] usb 2-1: found format II with max.bitrate = 0, frame size=39301 [ 1732.502919][ T8990] usb 2-1: USB disconnect, device number 72 [ 1732.523531][T24255] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.540877][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1732.576950][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1732.588554][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1732.601009][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1732.613189][T24255] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.620928][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1732.631171][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1732.641283][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1732.652792][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1732.664277][T24255] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1732.671856][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1732.682289][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1732.692456][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1732.704040][T24255] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1732.717136][T24255] usb 8-1: string descriptor 0 read error: -22 [ 1732.724045][T24255] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1732.733453][T24255] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.743294][T24690] udevd[24690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1732.776902][T24255] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1732.800661][T23669] hid-u2fzero 0003:20A0:4287.0048: hidraw0: USB HID vff.fd Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 1732.815684][T23669] hid-u2fzero 0003:20A0:4287.0048: NitroKey U2F LED initialised [ 1732.827298][T23669] hid-u2fzero 0003:20A0:4287.0048: NitroKey U2F RNG initialised [ 1732.986729][T26126] usb 8-1: Couldn't submit interrupt_out_urb -90 [ 1733.009623][ T8990] usb 8-1: USB disconnect, device number 54 [ 1733.015701][T24255] usb 5-1: USB disconnect, device number 64 [ 1733.611990][ T29] audit: type=1400 audit(1732274403.183:2917): avc: denied { mounton } for pid=26134 comm="syz.1.4842" path="/996/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1733.785185][T23669] usb 7-1: USB disconnect, device number 76 [ 1734.127917][ T29] audit: type=1400 audit(1732274403.723:2918): avc: denied { setopt } for pid=26150 comm="syz.3.4848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1734.856968][ T29] audit: type=1400 audit(1732274404.453:2919): avc: denied { ioctl } for pid=26170 comm="syz.4.4856" path="/newroot/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1735.009494][T26180] kvm: kvm [26179]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xaf [ 1735.050271][T24255] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1735.150140][ T964] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1735.210221][T24255] usb 2-1: Using ep0 maxpacket: 32 [ 1735.230758][T24255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.252192][T24255] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.278056][T24255] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1735.297533][T24255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.316640][T24255] usb 2-1: config 0 descriptor?? [ 1735.320214][ T964] usb 8-1: Using ep0 maxpacket: 16 [ 1735.359169][ T964] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1735.370212][ T964] usb 8-1: config 0 has no interface number 0 [ 1735.384495][ T964] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1735.404437][ T964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.425581][ T964] usb 8-1: Product: syz [ 1735.429805][ T964] usb 8-1: Manufacturer: syz [ 1735.460519][ T964] usb 8-1: SerialNumber: syz [ 1735.466951][ T964] usb 8-1: config 0 descriptor?? [ 1735.477961][ T964] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1735.670279][ T8990] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1735.737547][T24255] greenasia 0003:0E8F:0012.0049: unknown main item tag 0x0 [ 1735.760127][T24255] greenasia 0003:0E8F:0012.0049: unknown main item tag 0x0 [ 1735.767380][T24255] greenasia 0003:0E8F:0012.0049: unknown main item tag 0x0 [ 1735.791693][T24255] greenasia 0003:0E8F:0012.0049: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 1735.808255][T24255] greenasia 0003:0E8F:0012.0049: no inputs found [ 1735.865925][ T8990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1735.890375][ T8990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1735.902000][ T8990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1735.912758][ T8990] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1735.923319][ T8990] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1735.936873][ T8990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.958827][ T8990] usb 5-1: config 0 descriptor?? [ 1735.979262][T23669] usb 2-1: USB disconnect, device number 73 [ 1736.107685][ T29] audit: type=1400 audit(1732274405.703:2920): avc: denied { connect } for pid=26210 comm="syz.6.4874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1736.114787][ T964] gspca_spca1528: reg_w err -71 [ 1736.146982][ T29] audit: type=1400 audit(1732274405.703:2921): avc: denied { bind } for pid=26210 comm="syz.6.4874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1736.170337][ T964] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1736.175590][ T8990] hdpvr 5-1:0.0: firmware version 0x1e dated þÀq|RC¾@µ2£¹ö2[Ì7ÔB½ËDŠ^jvi0ì [ 1736.175590][ T8990] †Ã“‘êpY [ 1736.204432][ T964] usb 8-1: USB disconnect, device number 55 [ 1736.964935][ T8990] hdpvr 5-1:0.0: Could not setup controls [ 1736.971204][ T8990] hdpvr 5-1:0.0: registering videodev failed [ 1737.019256][ T8990] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 1737.072766][ T8990] usb 5-1: USB disconnect, device number 65 [ 1737.219232][T26230] sctp: [Deprecated]: syz.6.4881 (pid 26230) Use of int in max_burst socket option deprecated. [ 1737.219232][T26230] Use struct sctp_assoc_value instead [ 1737.424077][ T29] audit: type=1400 audit(1732274407.023:2922): avc: denied { ioctl } for pid=26236 comm="syz.1.4885" path="socket:[81263]" dev="sockfs" ino=81263 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1738.148410][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4892'. [ 1738.167180][T26253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4892'. [ 1738.330885][ T8990] usb 8-1: new full-speed USB device number 56 using dummy_hcd [ 1738.507732][ T8990] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.510605][T23669] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1738.572549][ T8990] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1738.621576][ T8990] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1738.660481][ T964] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1738.665462][ T8990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.743806][ T8990] usb 8-1: config 0 descriptor?? [ 1738.803060][T23669] usb 2-1: Using ep0 maxpacket: 32 [ 1738.807642][ T8990] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1738.833755][ T8990] dvb-usb: bulk message failed: -22 (3/0) [ 1738.875539][ T8990] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1738.886552][ T8990] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1738.901384][ T964] usb 7-1: Using ep0 maxpacket: 16 [ 1738.911555][ T8990] usb 8-1: media controller created [ 1738.917791][T23669] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1738.918418][ T8990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1738.929827][T23669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1738.949621][ T964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1738.968238][ T964] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1738.978780][ T964] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1738.992018][T23669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1739.003152][T23669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1739.014792][ T964] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1739.026554][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.036012][T23669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1739.049929][ T964] usb 7-1: config 0 descriptor?? [ 1739.061637][T23669] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1739.074393][ T8990] dvb-usb: bulk message failed: -22 (6/0) [ 1739.074943][T23669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1739.096850][T23669] usb 2-1: Product: syz [ 1739.096956][ T8990] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1739.101579][T23669] usb 2-1: Manufacturer: syz [ 1739.114061][T23669] usb 2-1: SerialNumber: syz [ 1739.130919][T23669] usb 2-1: config 0 descriptor?? [ 1739.131365][ T8990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input90 [ 1739.167161][ T8990] dvb-usb: schedule remote query interval to 150 msecs. [ 1739.177325][ T8990] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1739.198314][ T8990] usb 8-1: USB disconnect, device number 56 [ 1739.243273][ T8990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1739.472773][ T964] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1739.487554][ T964] microsoft 0003:045E:07DA.004A: ignoring exceeding usage max [ 1739.497964][ T964] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1739.513377][ T964] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1739.524456][ T964] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1739.536310][ T964] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1739.549028][ T964] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0 [ 1739.561443][T23669] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1739.580086][T23669] input input91: Device does not respond to id packet M [ 1739.602943][T23669] input input91: Device does not respond to id packet P [ 1739.615935][ T964] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.004A/input/input92 [ 1739.675129][T26285] rdma_op ffff88805c04a9f0 conn xmit_rdma 0000000000000000 [ 1739.704027][ T964] microsoft 0003:045E:07DA.004A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1739.747549][ T964] usb 7-1: USB disconnect, device number 77 [ 1739.805392][T26289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4908'. [ 1739.811446][T23669] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1739.842394][T23669] input input91: Device does not respond to id packet B [ 1739.849702][T23669] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1739.865590][T23669] input input91: Device does not respond to id packet N [ 1739.874442][T23669] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1739.889043][T23669] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1739.897118][T23669] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1739.909219][T23669] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1739.950553][T23669] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input91 [ 1740.086098][T23669] usb 2-1: USB disconnect, device number 74 [ 1740.632409][T26308] netlink: 'syz.6.4916': attribute type 9 has an invalid length. [ 1741.411559][T26329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4925'. [ 1741.820673][ T964] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1741.899039][T26354] overlayfs: workdir and upperdir must reside under the same mount [ 1741.980331][ T964] usb 7-1: Using ep0 maxpacket: 8 [ 1742.000501][ T964] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1742.012097][ T964] usb 7-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1742.028553][ T964] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.039025][ T964] usb 7-1: Product: syz [ 1742.070129][ T964] usb 7-1: Manufacturer: syz [ 1742.074789][ T964] usb 7-1: SerialNumber: syz [ 1742.080162][T23669] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1742.107843][ T964] usb 7-1: config 0 descriptor?? [ 1742.128164][ T964] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1742.228674][ T29] audit: type=1400 audit(1732274411.823:2923): avc: denied { ioctl } for pid=26367 comm="syz.3.4944" path="socket:[81752]" dev="sockfs" ino=81752 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1742.282299][T23669] usb 2-1: config 0 has no interfaces? [ 1742.318612][T23669] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1742.341748][T23669] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1742.349824][T23669] usb 2-1: Manufacturer: syz [ 1742.375169][T23669] usb 2-1: config 0 descriptor?? [ 1742.541694][ T964] gspca_zc3xx: reg_w_i err -71 [ 1742.597660][T23669] usb 2-1: USB disconnect, device number 75 [ 1743.370168][ T964] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1743.378907][ T964] gspca_zc3xx 7-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1743.404001][ T964] usb 7-1: USB disconnect, device number 78 [ 1744.092693][T26411] hub 6-0:1.0: USB hub found [ 1744.100187][T26411] hub 6-0:1.0: 1 port detected [ 1746.054997][ T964] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1746.184208][ T29] audit: type=1400 audit(1732274415.783:2924): avc: denied { bind } for pid=26429 comm="syz.4.4965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1746.400093][ T964] usb 7-1: Using ep0 maxpacket: 32 [ 1746.420574][T26431] ALSA: mixer_oss: invalid OSS volume '' [ 1746.433620][ T964] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1746.500176][ T964] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1746.509261][ T964] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1746.536025][ T29] audit: type=1326 audit(1732274416.133:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26433 comm="syz.7.4968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eb597e819 code=0x0 [ 1746.561726][ T964] usb 7-1: Product: syz [ 1746.565916][ T964] usb 7-1: Manufacturer: syz [ 1746.571218][ T964] usb 7-1: SerialNumber: syz [ 1746.578089][ T964] usb 7-1: config 0 descriptor?? [ 1746.584899][T26418] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1746.676539][ T29] audit: type=1400 audit(1732274416.273:2926): avc: denied { read write } for pid=26441 comm="syz.1.4971" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1746.707578][ T29] audit: type=1400 audit(1732274416.273:2927): avc: denied { open } for pid=26441 comm="syz.1.4971" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1746.812109][ T964] usb 7-1: USB disconnect, device number 79 [ 1746.846562][ T29] audit: type=1400 audit(1732274416.443:2928): avc: denied { append } for pid=26445 comm="syz.4.4973" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1746.876438][ T29] audit: type=1400 audit(1732274416.473:2929): avc: denied { bind } for pid=26447 comm="syz.1.4974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1746.899655][ T29] audit: type=1400 audit(1732274416.503:2930): avc: denied { setopt } for pid=26447 comm="syz.1.4974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1747.057736][T26456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4977'. [ 1747.166116][ T29] audit: type=1400 audit(1732274416.763:2931): avc: denied { map } for pid=26460 comm="syz.4.4979" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1747.516918][ T29] audit: type=1400 audit(1732274417.113:2932): avc: denied { listen } for pid=26471 comm="syz.7.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1747.851466][T23778] bond0: (slave bond_slave_0): interface is now down [ 1747.883995][T23778] bond0: (slave bond_slave_1): interface is now down [ 1747.925716][ T1327] Bluetooth: hci1: Frame reassembly failed (-84) [ 1748.077987][T23778] bond0: now running without any active interface! [ 1748.465870][T26499] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1749.514598][T26514] hub 6-0:1.0: USB hub found [ 1749.520278][T26514] hub 6-0:1.0: 1 port detected [ 1749.874373][ T29] audit: type=1400 audit(1732274419.473:2933): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1749.967465][ T5835] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1749.977269][T24084] Bluetooth: hci1: command 0x1003 tx timeout [ 1750.206756][ T29] audit: type=1400 audit(1732274419.803:2934): avc: denied { view } for pid=26515 comm="syz.4.5002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1750.473906][ T964] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1750.767947][ T964] usb 2-1: Using ep0 maxpacket: 16 [ 1750.775356][ T964] usb 2-1: config 0 has an invalid interface number: 248 but max is 0 [ 1750.800117][ T964] usb 2-1: config 0 has no interface number 0 [ 1750.806270][ T964] usb 2-1: config 0 interface 248 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.830097][ T964] usb 2-1: config 0 interface 248 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.853213][ T964] usb 2-1: config 0 interface 248 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1750.866503][ T964] usb 2-1: config 0 interface 248 has no altsetting 0 [ 1750.876797][ T964] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 1750.890138][ T964] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1750.898422][ T964] usb 2-1: Manufacturer: syz [ 1750.911002][ T964] usb 2-1: config 0 descriptor?? [ 1751.001093][ T8990] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1751.027421][ T29] audit: type=1400 audit(1732274420.623:2935): avc: denied { map } for pid=26533 comm="syz.7.5008" path="socket:[83193]" dev="sockfs" ino=83193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1751.052122][ T29] audit: type=1400 audit(1732274420.623:2936): avc: denied { read } for pid=26533 comm="syz.7.5008" path="socket:[83193]" dev="sockfs" ino=83193 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1751.080593][T24255] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1751.170994][ T8990] usb 5-1: Using ep0 maxpacket: 16 [ 1751.178735][ T8990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.194815][ T8990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.205625][ T8990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1751.222929][ T8990] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1751.232918][ T8990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.250085][T24255] usb 7-1: Using ep0 maxpacket: 8 [ 1751.255849][ T8990] usb 5-1: config 0 descriptor?? [ 1751.262613][T24255] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1751.279837][T24255] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 1751.293695][T24255] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1751.300706][T24255] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1751.309841][T24255] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.326755][T24255] usb 7-1: config 0 descriptor?? [ 1751.907428][T22582] usb 2-1: USB disconnect, device number 76 [ 1752.018927][T26546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5012'. [ 1752.144555][ T8990] input: HID 0955:7214 Haptics as /devices/virtual/input/input93 [ 1752.185957][T24255] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.004D/input/input94 [ 1752.186405][T26550] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 1752.209508][ T8990] shield 0003:0955:7214.004C: Registered Thunderstrike controller [ 1752.225439][T26550] macvlan0: entered allmulticast mode [ 1752.228033][ T8990] shield 0003:0955:7214.004C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1752.232715][T26550] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 1752.258205][T26550] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 1752.295061][T24255] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.004D/input/input95 [ 1752.307665][T26526] random: crng reseeded on system resumption [ 1752.321559][ T29] audit: type=1400 audit(1732274421.903:2937): avc: denied { read write } for pid=26525 comm="syz.4.5005" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1752.387084][T24255] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.004D/input/input96 [ 1752.483407][T24255] kye 0003:0458:5016.004D: input,hiddev0,hidraw0: USB HID v0.05 Mouse [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 1752.545205][T24255] usb 7-1: USB disconnect, device number 80 [ 1752.774737][ T29] audit: type=1400 audit(1732274422.373:2938): avc: denied { write } for pid=26563 comm="syz.7.5020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1753.085099][ T29] audit: type=1400 audit(1732274422.683:2939): avc: denied { name_bind } for pid=26568 comm="syz.7.5022" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1753.308112][ T8990] shield 0003:0955:7214.004C: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1753.424461][ T8990] shield 0003:0955:7214.004C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1753.463326][T24255] usb 5-1: reset high-speed USB device number 66 using dummy_hcd [ 1753.482440][ T8990] shield 0003:0955:7214.004C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1753.506235][ T8990] shield 0003:0955:7214.004C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1753.674671][ T29] audit: type=1326 audit(1732274423.273:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26581 comm="syz.7.5026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1eb597e819 code=0x0 [ 1753.707401][ T29] audit: type=1400 audit(1732274423.303:2941): avc: denied { bind } for pid=26586 comm="syz.1.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1753.800398][ T964] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1753.952206][ T964] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1753.961307][ T964] usb 7-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1753.975337][ T964] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1753.984545][ T964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 1753.995877][ T964] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 1754.007224][T22582] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1754.028532][ T964] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1754.039699][ T964] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1754.048164][ T964] usb 7-1: Product: syz [ 1754.052662][ T964] usb 7-1: Manufacturer: syz [ 1754.060587][T26578] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1754.081096][ T964] cdc_wdm 7-1:1.0: skipping garbage [ 1754.086316][ T964] cdc_wdm 7-1:1.0: skipping garbage [ 1754.098055][ T964] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1754.104449][ T964] cdc_wdm 7-1:1.0: Unknown control protocol [ 1754.170239][T22582] usb 2-1: Using ep0 maxpacket: 8 [ 1754.176695][T22582] usb 2-1: config index 0 descriptor too short (expected 36, got 18) [ 1754.188120][T22582] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1754.204806][T22582] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice= 0.00 [ 1754.213954][T22582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.226486][T22582] usb 2-1: config 0 descriptor?? [ 1754.233924][T22582] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1754.278481][ T52] usb 5-1: USB disconnect, device number 66 [ 1754.296424][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1754.303225][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1754.309773][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1754.316388][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1754.326791][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1754.333419][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1754.336130][ T964] usb 7-1: USB disconnect, device number 81 [ 1754.339488][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1754.764366][T26601] lo speed is unknown, defaulting to 1000 [ 1754.772699][T26601] ip_vti0 speed is unknown, defaulting to 1000 [ 1755.038338][T26605] syz_tun: entered promiscuous mode [ 1755.045988][T26605] batadv_slave_0: entered promiscuous mode [ 1755.053723][T26605] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1755.069615][T22582] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1755.077402][T26605] Cannot create hsr debugfs directory [ 1755.085085][T26605] hsr1: entered allmulticast mode [ 1755.090413][T26605] syz_tun: entered allmulticast mode [ 1755.096304][T26605] batadv_slave_0: entered allmulticast mode [ 1755.570749][ T52] usb 2-1: USB disconnect, device number 77 [ 1755.984844][T26617] netlink: 'syz.3.5037': attribute type 4 has an invalid length. [ 1756.071731][T26620] netlink: 'syz.3.5037': attribute type 4 has an invalid length. [ 1756.128849][T22582] lo speed is unknown, defaulting to 1000 [ 1756.141399][T23669] lo speed is unknown, defaulting to 1000 [ 1756.284458][T26627] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5040'. [ 1756.601916][ T29] audit: type=1400 audit(1732274426.203:2942): avc: denied { write } for pid=26641 comm="syz.7.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1758.336068][ T29] audit: type=1400 audit(1732274427.933:2943): avc: denied { read } for pid=26664 comm="syz.6.5054" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1758.415953][ T29] audit: type=1400 audit(1732274427.933:2944): avc: denied { open } for pid=26664 comm="syz.6.5054" path="/863/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1758.474241][ T29] audit: type=1400 audit(1732274427.953:2945): avc: denied { ioctl } for pid=26664 comm="syz.6.5054" path="/863/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1758.593020][ T29] audit: type=1400 audit(1732274428.193:2946): avc: denied { name_bind } for pid=26677 comm="syz.7.5060" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1759.469302][T26695] syz.1.5068[26695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1759.469410][T26695] syz.1.5068[26695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1759.508378][T26695] syz.1.5068[26695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1759.549394][T26696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1759.592954][ T29] audit: type=1400 audit(1732274429.183:2947): avc: denied { bind } for pid=26700 comm="syz.3.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1760.070351][T22582] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1760.494249][T22582] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1760.506260][T22582] usb 8-1: no configurations [ 1760.516369][T22582] usb 8-1: can't read configurations, error -22 [ 1760.776889][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5082'. [ 1760.815824][ T52] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1760.834977][ T29] audit: type=1400 audit(1732274430.433:2948): avc: denied { read } for pid=26740 comm="syz.3.5084" path="socket:[83813]" dev="sockfs" ino=83813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1760.862076][T26744] binder: BINDER_SET_CONTEXT_MGR already set [ 1760.868090][T26744] binder: 26742:26744 ioctl 4018620d 20000100 returned -16 [ 1760.878953][ T29] audit: type=1400 audit(1732274430.473:2949): avc: denied { map } for pid=26742 comm="syz.4.5085" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1760.903851][T26744] binder: BINDER_SET_CONTEXT_MGR already set [ 1760.913028][T26744] binder: 26742:26744 ioctl 4018620d 200001c0 returned -16 [ 1760.959725][T26747] dvmrp0: entered allmulticast mode [ 1760.980214][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 1760.992112][ T52] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1761.005022][ T52] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1761.052624][ T52] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1761.127828][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1761.187035][ T52] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1761.243432][ T52] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1761.324381][ T52] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1761.373671][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.462055][ T52] usb 7-1: config 0 descriptor?? [ 1762.006676][ T52] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 82 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1762.130234][ T52] usb 7-1: USB disconnect, device number 82 [ 1762.177422][ T52] usblp0: removed [ 1762.268668][ T29] audit: type=1400 audit(1732274431.863:2950): avc: denied { read } for pid=26764 comm="syz.4.5093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1762.509731][ T29] audit: type=1400 audit(1732274432.103:2951): avc: denied { bind } for pid=26762 comm="syz.7.5092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1762.590233][ T52] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1762.605468][ T29] audit: type=1400 audit(1732274432.103:2952): avc: denied { write } for pid=26762 comm="syz.7.5092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1762.800274][ T52] usb 7-1: Using ep0 maxpacket: 32 [ 1762.821142][ T52] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1762.829520][ T52] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1762.850529][ T52] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1762.859529][ T52] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1762.875619][ T52] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1762.885469][ T52] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1762.904561][ T52] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1762.938307][ T52] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.953781][ T52] usb 7-1: config 0 descriptor?? [ 1763.020108][T23669] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1763.185811][T23669] usb 5-1: Using ep0 maxpacket: 16 [ 1763.196127][ T52] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1763.209541][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.246604][T23669] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.274490][T23669] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1763.291844][T23669] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 1763.305697][T23669] usb 5-1: Product: syz [ 1763.309886][T23669] usb 5-1: Manufacturer: syz [ 1763.320746][T23669] usb 5-1: config 0 descriptor?? [ 1763.394691][ T29] audit: type=1400 audit(1732274432.993:2953): avc: denied { read write } for pid=26727 comm="syz.6.5078" name="lp0" dev="devtmpfs" ino=4354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1763.422984][T22582] usb 7-1: USB disconnect, device number 83 [ 1763.436038][T22582] usblp0: removed [ 1763.443254][ T29] audit: type=1400 audit(1732274432.993:2954): avc: denied { open } for pid=26727 comm="syz.6.5078" path="/dev/usb/lp0" dev="devtmpfs" ino=4354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1763.467861][ T29] audit: type=1400 audit(1732274433.023:2955): avc: denied { ioctl } for pid=26727 comm="syz.6.5078" path="/dev/usb/lp0" dev="devtmpfs" ino=4354 ioctlcmd=0x5003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1763.740787][T23669] kovaplus 0003:1E7D:2D50.004E: unknown main item tag 0xd [ 1763.749810][T23669] kovaplus 0003:1E7D:2D50.004E: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 1764.606503][T23669] kovaplus 0003:1E7D:2D50.004E: couldn't init struct kovaplus_device [ 1764.615394][T23669] kovaplus 0003:1E7D:2D50.004E: couldn't install mouse [ 1764.626421][T23669] kovaplus 0003:1E7D:2D50.004E: probe with driver kovaplus failed with error -71 [ 1764.628952][T26793] kvm: pic: single mode not supported [ 1764.635840][T26793] kvm: pic: level sensitive irq not supported [ 1764.646129][T23669] usb 5-1: USB disconnect, device number 67 [ 1764.647960][T26793] kvm: pic: non byte read [ 1764.669799][T26793] kvm: pic: non byte read [ 1764.674580][T26793] kvm: pic: single mode not supported [ 1764.674909][T26793] kvm: pic: non byte read [ 1764.691680][T26793] kvm: pic: non byte read [ 1764.696120][T26793] kvm: pic: single mode not supported [ 1764.696916][T26793] kvm: pic: single mode not supported [ 1764.704596][T26793] kvm: pic: single mode not supported [ 1764.711496][T22582] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1764.712462][T26793] kvm: pic: non byte read [ 1764.870267][T22582] usb 7-1: Using ep0 maxpacket: 8 [ 1764.881285][T22582] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1764.891826][T22582] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1764.907380][T22582] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1764.917659][T22582] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1764.935661][T22582] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1764.946572][T22582] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1765.171133][T22582] usb 7-1: usb_control_msg returned -32 [ 1765.176992][T22582] usbtmc 7-1:16.0: can't read capabilities [ 1765.309125][ T29] audit: type=1400 audit(1732274434.903:2956): avc: denied { connect } for pid=26805 comm="syz.4.5107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1765.862767][ T29] audit: type=1400 audit(1732274435.463:2957): avc: denied { listen } for pid=26813 comm="syz.1.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1765.884843][ T29] audit: type=1400 audit(1732274435.483:2958): avc: denied { accept } for pid=26813 comm="syz.1.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1766.844057][ T29] audit: type=1400 audit(1732274436.443:2959): avc: denied { mount } for pid=26825 comm="syz.1.5116" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1766.868317][ T29] audit: type=1326 audit(1732274436.463:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26825 comm="syz.1.5116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7b2cf7e819 code=0x0 [ 1767.030097][ T52] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1767.100296][ T29] audit: type=1400 audit(1732274436.693:2961): avc: denied { mount } for pid=26833 comm="syz.3.5117" name="/" dev="ocfs2_dlmfs" ino=84164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1767.230350][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 1767.245401][ T52] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1767.269328][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1767.328528][ T52] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1767.398726][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1767.460365][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1767.583085][ T52] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1767.614628][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1767.631237][T24255] usb 7-1: USB disconnect, device number 84 [ 1767.638509][ T52] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1767.652106][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1767.692915][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1767.749366][ T52] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1767.786594][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1767.906424][ T52] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1767.983829][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1768.088427][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1768.235269][ T52] usb 5-1: string descriptor 0 read error: -22 [ 1768.249891][ T52] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1768.263279][ T8990] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1768.459413][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.501500][ T8990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.511789][ T52] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1768.520415][ T8990] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1768.541306][ T8990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1768.552646][ T8990] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1768.569506][ T8990] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1768.583453][ T8990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.603750][ T8990] usb 2-1: Product: syz [ 1768.607938][ T8990] usb 2-1: Manufacturer: syz [ 1768.621658][ T8990] usb 2-1: SerialNumber: syz [ 1768.630417][ T8990] usb 2-1: config 0 descriptor?? [ 1768.637739][ T8990] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 1768.659231][ T8990] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1768.689145][ T8990] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1768.932848][T22582] usb 2-1: USB disconnect, device number 78 [ 1768.950599][T22582] garmin_gps 2-1:0.0: device disconnected [ 1769.016914][T23669] usb 5-1: USB disconnect, device number 68 [ 1769.090188][ T8990] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1769.190673][ T29] audit: type=1800 audit(1732274438.793:2962): pid=26864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.5125" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1769.371890][ T8990] usb 8-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 1769.382372][ T8990] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1769.396390][ T8990] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1769.405761][ T8990] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1769.413827][ T8990] usb 8-1: SerialNumber: syz [ 1769.517491][ T8990] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1770.062117][T26855] syzkaller0: entered promiscuous mode [ 1770.067641][T26855] syzkaller0: entered allmulticast mode [ 1770.638774][T26882] vlan0: entered promiscuous mode [ 1770.668580][T23669] usb 8-1: USB disconnect, device number 59 [ 1770.680935][T26882] vlan0: entered allmulticast mode [ 1770.810482][ T29] audit: type=1326 audit(1732274440.393:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1770.835671][ T29] audit: type=1326 audit(1732274440.393:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1770.867016][ T29] audit: type=1326 audit(1732274440.413:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1770.891024][ T29] audit: type=1326 audit(1732274440.413:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf2057e819 code=0x7ffc0000 [ 1770.916960][ T29] audit: type=1326 audit(1732274440.413:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf2057d1b0 code=0x7ffc0000 [ 1770.945551][ T29] audit: type=1326 audit(1732274440.413:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf2057e41b code=0x7ffc0000 [ 1770.970069][ T964] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1770.978688][ T29] audit: type=1326 audit(1732274440.413:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf2057e41b code=0x7ffc0000 [ 1771.002617][ T29] audit: type=1326 audit(1732274440.433:2970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf2057e41b code=0x7ffc0000 [ 1771.025974][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.033366][ T29] audit: type=1326 audit(1732274440.433:2971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26891 comm="syz.4.5134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbf2057e41b code=0x7ffc0000 [ 1771.040110][T22582] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1771.056733][ C1] vkms_vblank_simulate: vblank timer overrun [ 1771.120116][ T8990] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1771.150210][ T964] usb 7-1: Using ep0 maxpacket: 8 [ 1771.157922][ T964] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1771.168273][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.178177][ T964] usb 7-1: config 0 descriptor?? [ 1771.220075][T22582] usb 2-1: Using ep0 maxpacket: 32 [ 1771.227353][T22582] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1771.253128][T22582] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1771.264709][T22582] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1771.279351][T22582] usb 2-1: Product: syz [ 1771.293174][ T8990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1771.297045][T22582] usb 2-1: Manufacturer: syz [ 1771.313669][ T8990] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1771.327722][T22582] usb 2-1: SerialNumber: syz [ 1771.330316][ T8990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.348180][T22582] usb 2-1: config 0 descriptor?? [ 1771.348254][ T8990] usb 5-1: config 0 descriptor?? [ 1771.398271][ T8990] pwc: Askey VC010 type 2 USB webcam detected. [ 1771.407852][T26890] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1771.959773][ T8990] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1771.976133][ T8990] pwc: recv_control_msg error -71 req 02 val 2700 [ 1771.985335][ T8990] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1771.996175][ T8990] pwc: recv_control_msg error -71 req 04 val 1000 [ 1772.008377][ T8990] pwc: recv_control_msg error -71 req 04 val 1300 [ 1772.032162][ T8990] pwc: recv_control_msg error -71 req 04 val 1400 [ 1772.059531][ T8990] pwc: recv_control_msg error -71 req 02 val 2000 [ 1772.075483][ T8990] pwc: recv_control_msg error -71 req 02 val 2100 [ 1772.100514][ T8990] pwc: recv_control_msg error -71 req 04 val 1500 [ 1772.117502][ T8990] pwc: recv_control_msg error -71 req 02 val 2500 [ 1772.135022][ T8990] pwc: recv_control_msg error -71 req 02 val 2400 [ 1772.142054][ T8990] pwc: recv_control_msg error -71 req 02 val 2600 [ 1772.151277][ T8990] pwc: recv_control_msg error -71 req 02 val 2900 [ 1772.164798][ T8990] pwc: recv_control_msg error -71 req 02 val 2800 [ 1772.173666][ T8990] pwc: recv_control_msg error -71 req 04 val 1100 [ 1772.184875][ T8990] pwc: recv_control_msg error -71 req 04 val 1200 [ 1772.192816][ T52] usb 2-1: USB disconnect, device number 79 [ 1772.214518][ T8990] pwc: Registered as video103. [ 1772.220635][ T8990] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input97 [ 1772.236560][ T8990] usb 5-1: USB disconnect, device number 69 [ 1773.865468][ T964] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 1773.921053][ T964] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1774.066777][ T964] usb 7-1: USB disconnect, device number 85 [ 1774.377056][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1774.377074][ T29] audit: type=1400 audit(1732274443.973:3010): avc: denied { call } for pid=26921 comm="syz.7.5143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1774.619759][ T29] audit: type=1400 audit(1732274444.213:3011): avc: denied { watch watch_reads } for pid=26931 comm="syz.7.5146" path="/931/bus/bus" dev="overlay" ino=4912 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1774.816718][ T29] audit: type=1804 audit(1732274444.223:3012): pid=26932 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.5146" name="/newroot/931/bus/bus" dev="overlay" ino=4912 res=1 errno=0 [ 1775.108534][ T29] audit: type=1400 audit(1732274444.703:3013): avc: denied { write } for pid=26936 comm="syz.7.5148" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1775.175407][T26937] tipc: Enabled bearer , priority 0 [ 1775.182373][ T29] audit: type=1400 audit(1732274444.703:3014): avc: denied { open } for pid=26936 comm="syz.7.5148" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1775.339820][T26937] tipc: Resetting bearer [ 1775.956257][T26937] tipc: Resetting bearer [ 1776.016741][ T29] audit: type=1400 audit(1732274445.613:3015): avc: denied { connect } for pid=26943 comm="syz.6.5150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1776.138423][ T29] audit: type=1400 audit(1732274445.643:3016): avc: denied { accept } for pid=26943 comm="syz.6.5150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1776.280776][ T29] audit: type=1400 audit(1732274445.643:3017): avc: denied { read } for pid=26943 comm="syz.6.5150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1777.952899][T26963] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1777.977473][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5155'. [ 1778.560148][T22582] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1778.722277][T22582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.732868][T22582] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1778.742184][T22582] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1778.751630][T22582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1778.768630][T22582] usb 5-1: config 0 descriptor?? [ 1778.785326][T22582] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1778.793756][T22582] dvb-usb: bulk message failed: -22 (3/0) [ 1778.816354][T22582] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1778.825831][T22582] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1778.833354][T22582] usb 5-1: media controller created [ 1778.839624][T22582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1778.854598][T22582] dvb-usb: bulk message failed: -22 (6/0) [ 1778.870401][T22582] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1778.879912][T22582] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input98 [ 1778.911450][T22582] dvb-usb: schedule remote query interval to 150 msecs. [ 1778.918487][T22582] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1779.018832][T22582] usb 5-1: USB disconnect, device number 70 [ 1779.052474][T22582] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1781.729124][T26937] tipc: Disabling bearer [ 1782.297863][T26979] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5162'. [ 1782.360326][T22582] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1782.432675][ T29] audit: type=1400 audit(1732274452.023:3018): avc: denied { shutdown } for pid=26986 comm="syz.7.5164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1782.505592][ T29] audit: type=1400 audit(1732274452.023:3019): avc: denied { name_connect } for pid=26986 comm="syz.7.5164" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1782.530243][T22582] usb 2-1: Using ep0 maxpacket: 32 [ 1782.548518][T22582] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1782.560315][T22582] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.571214][T22582] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1782.578015][T22582] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 1782.587787][T22582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.604560][T22582] usb 2-1: config 0 descriptor?? [ 1782.640282][ T8990] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 1782.791430][T24255] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1782.810226][ T8990] usb 7-1: Using ep0 maxpacket: 8 [ 1782.837389][ T8990] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 1782.845920][ T8990] usb 7-1: config 0 has no interface number 0 [ 1782.852591][ T8990] usb 7-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1782.868018][ T8990] usb 7-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1782.878920][ T8990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.887623][ T8990] usb 7-1: Product: syz [ 1782.893393][ T8990] usb 7-1: Manufacturer: syz [ 1782.906866][ T8990] usb 7-1: SerialNumber: syz [ 1782.931937][ T8990] usb 7-1: config 0 descriptor?? [ 1782.950142][T24255] usb 8-1: Using ep0 maxpacket: 32 [ 1782.962592][T24255] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 1782.972693][T24255] usb 8-1: config 0 has no interface number 0 [ 1782.995723][T24255] usb 8-1: New USB device found, idVendor=0586, idProduct=3402, bcdDevice=fa.65 [ 1783.021073][T24255] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1783.037771][T22582] wacom 0003:056A:00C4.004F: unknown main item tag 0x0 [ 1783.040767][T24255] usb 8-1: Product: syz [ 1783.062156][T24255] usb 8-1: Manufacturer: syz [ 1783.070994][T24255] usb 8-1: SerialNumber: syz [ 1783.079050][T22582] wacom 0003:056A:00C4.004F: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 1783.095199][T24255] usb 8-1: config 0 descriptor?? [ 1783.113503][ T8990] msi2500 7-1:0.246: Registered as swradio24 [ 1783.119590][ T8990] msi2500 7-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1783.173782][ T8990] usb 7-1: USB disconnect, device number 86 [ 1783.389615][T22582] usb 2-1: USB disconnect, device number 80 [ 1783.698181][T27010] vlan0: entered promiscuous mode [ 1783.732912][T27010] team0: Port device vlan0 added [ 1783.771300][T22582] usb 8-1: USB disconnect, device number 60 [ 1784.555771][ T964] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1784.880621][ T964] usb 5-1: Using ep0 maxpacket: 16 [ 1784.910113][ T964] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1784.938601][ T964] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 1785.020517][ T964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1785.130544][ T964] usb 5-1: Product: syz [ 1785.270045][ T964] usb 5-1: Manufacturer: syz [ 1785.360530][ T964] usb 5-1: SerialNumber: syz [ 1785.380888][ T964] usb 5-1: config 0 descriptor?? [ 1786.672650][ T29] audit: type=1400 audit(1732274456.273:3020): avc: denied { connect } for pid=27042 comm="syz.6.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1786.838550][ T29] audit: type=1400 audit(1732274456.313:3021): avc: denied { write } for pid=27049 comm="syz.7.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1786.932546][T27056] binder: BINDER_SET_CONTEXT_MGR already set [ 1786.938882][T27056] binder: 27055:27056 ioctl 4018620d 20000100 returned -16 [ 1786.947947][ T29] audit: type=1400 audit(1732274456.323:3022): avc: denied { write } for pid=27042 comm="syz.6.5180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1786.952663][T27056] binder: BINDER_SET_CONTEXT_MGR already set [ 1786.994253][ T8990] usb 5-1: USB disconnect, device number 71 [ 1787.013572][T27056] binder: 27055:27056 ioctl 4018620d 20004a80 returned -16 [ 1787.106648][ T29] audit: type=1400 audit(1732274456.703:3023): avc: denied { read write } for pid=27057 comm="syz.4.5184" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1787.164321][ T29] audit: type=1400 audit(1732274456.733:3024): avc: denied { open } for pid=27057 comm="syz.4.5184" path="/1100/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1787.257510][ T29] audit: type=1800 audit(1732274456.743:3025): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.5184" name="/" dev="9p" ino=2 res=0 errno=0 [ 1787.436426][ T29] audit: type=1400 audit(1732274456.933:3026): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1788.211198][ T29] audit: type=1400 audit(1732274457.673:3027): avc: denied { relabelfrom } for pid=27066 comm="syz.4.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1788.310351][ T29] audit: type=1400 audit(1732274457.813:3028): avc: denied { relabelto } for pid=27066 comm="syz.4.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1788.970512][T24255] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1789.410096][T24255] usb 5-1: Using ep0 maxpacket: 8 [ 1789.427818][T24255] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.445409][T24255] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1789.454648][T24255] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.212217][T24255] usb 5-1: Product: syz [ 1790.216511][T24255] usb 5-1: Manufacturer: syz [ 1790.225525][T24255] usb 5-1: SerialNumber: syz [ 1790.389730][T27094] random: crng reseeded on system resumption [ 1790.850610][ T8990] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1790.880236][ T964] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 1791.020084][ T8990] usb 8-1: Using ep0 maxpacket: 8 [ 1791.029588][ T8990] usb 8-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 1791.042315][ T964] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1791.044460][ T8990] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1791.051979][ T964] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.068898][ T8990] usb 8-1: Product: syz [ 1791.071293][ T964] usb 7-1: config 0 descriptor?? [ 1791.079567][ T8990] usb 8-1: Manufacturer: syz [ 1791.084007][ T964] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1791.085393][ T8990] usb 8-1: SerialNumber: syz [ 1791.115667][ T8990] usb 8-1: config 0 descriptor?? [ 1791.375119][T24255] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1791.409902][T24255] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 1791.492219][ T964] cpia1 7-1:0.0: unexpected state after lo power cmd: 4e [ 1791.526115][ T8990] usb 8-1: USB disconnect, device number 61 [ 1791.633478][T24255] cdc_ncm 5-1:1.0 eth9: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1791.720239][T24255] usb 5-1: USB disconnect, device number 72 [ 1791.726855][T24255] cdc_ncm 5-1:1.0 eth9: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1791.766190][T27106] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1791.772791][T27106] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1791.795514][T27106] vhci_hcd vhci_hcd.0: Device attached [ 1791.908497][ T964] gspca_cpia1: usb_control_msg 02, error -71 [ 1791.918246][ T964] gspca_cpia1: usb_control_msg 05, error -71 [ 1791.931346][ T964] cpia1 7-1:0.0: unexpected systemstate: 4e [ 1791.959348][ T964] usb 7-1: USB disconnect, device number 87 [ 1791.970793][T22582] vhci_hcd: vhci_device speed not set [ 1792.030296][T22582] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 1792.395031][T27111] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1792.407326][T27111] kvm: pic: single mode not supported [ 1792.407344][T27111] kvm: pic: level sensitive irq not supported [ 1792.413217][T27111] kvm: pic: non byte read [ 1792.424538][T27111] kvm: pic: non byte read [ 1792.429120][T27111] kvm: pic: non byte read [ 1792.781815][T27111] kvm: pic: single mode not supported [ 1792.904907][T27111] kvm: pic: non byte read [ 1792.980459][T27111] kvm: pic: non byte read [ 1792.985132][T27111] kvm: pic: single mode not supported [ 1792.985150][T27111] kvm: pic: level sensitive irq not supported [ 1792.991001][T27111] kvm: pic: non byte read [ 1793.002347][T27111] kvm: pic: non byte read [ 1793.006983][T27111] kvm: pic: single mode not supported [ 1793.007000][T27111] kvm: pic: level sensitive irq not supported [ 1793.050574][T27111] kvm: pic: non byte read [ 1794.800986][T27107] vhci_hcd: connection reset by peer [ 1794.818389][ T7037] vhci_hcd: stop threads [ 1794.840560][ T7037] vhci_hcd: release socket [ 1794.854197][ T7037] vhci_hcd: disconnect device [ 1795.170190][ T52] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 1795.403257][ T52] usb 7-1: Using ep0 maxpacket: 8 [ 1795.443965][ T52] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1795.474965][ T52] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1795.489999][ T52] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1795.508001][ T52] usb 7-1: Product: syz [ 1795.521374][ T52] usb 7-1: Manufacturer: syz [ 1795.529171][ T52] usb 7-1: SerialNumber: syz [ 1795.760316][ T52] usb 7-1: Handspring Visor / Palm OS: No valid connect info available [ 1795.768596][ T52] usb 7-1: Handspring Visor / Palm OS: port 13, is for unknown use [ 1795.831157][ T52] usb 7-1: Handspring Visor / Palm OS: port 183, is for unknown use [ 1795.881232][ T52] usb 7-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1795.896455][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5214'. [ 1795.957934][ T52] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 1796.050512][ T52] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1796.176223][ T52] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1796.847631][T24084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1796.862152][T24084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1796.870887][T24084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1796.880204][T24084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1796.899349][T24084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1796.907694][T24084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1796.942548][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1796.950777][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1796.960227][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1796.970399][ T964] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1797.003688][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1797.012620][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1797.019880][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1797.063509][ T29] audit: type=1400 audit(1732274466.653:3029): avc: denied { mounton } for pid=27162 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1797.180457][T22582] vhci_hcd: vhci_device speed not set [ 1797.193562][ T964] usb 8-1: Using ep0 maxpacket: 8 [ 1797.200141][T27162] lo speed is unknown, defaulting to 1000 [ 1797.206749][T27162] ip_vti0 speed is unknown, defaulting to 1000 [ 1797.278784][ T964] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1797.454574][ T964] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.657330][ T964] usb 8-1: Product: syz [ 1797.670149][ T964] usb 8-1: Manufacturer: syz [ 1797.674955][ T964] usb 8-1: SerialNumber: syz [ 1797.699688][ T964] usb 8-1: config 0 descriptor?? [ 1797.907076][T23669] usb 7-1: USB disconnect, device number 88 [ 1797.928720][ T964] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1797.949607][T23669] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1797.969196][T23669] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1797.991076][T23669] visor 7-1:1.0: device disconnected [ 1798.065041][T27162] chnl_net:caif_netlink_parms(): no params data found [ 1798.139432][T27162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.146653][T27162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1798.153987][T27162] bridge_slave_0: entered allmulticast mode [ 1798.161192][T27162] bridge_slave_0: entered promiscuous mode [ 1798.173855][T27162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.181397][T27162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1798.188545][T27162] bridge_slave_1: entered allmulticast mode [ 1798.195517][T27162] bridge_slave_1: entered promiscuous mode [ 1798.218885][T27162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.230364][T27162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.259830][T27162] team0: Port device team_slave_0 added [ 1798.260818][ T5883] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1798.267993][T27162] team0: Port device team_slave_1 added [ 1798.295487][T27162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.302593][T27162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.336174][T27162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.348602][T27162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.355795][T27162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1798.382387][T27162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.416927][T27162] hsr_slave_0: entered promiscuous mode [ 1798.424884][T27162] hsr_slave_1: entered promiscuous mode [ 1798.430238][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 1798.435703][T27162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1798.444852][T27162] Cannot create hsr debugfs directory [ 1798.450315][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.450370][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1798.450412][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1798.450436][ T5883] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1798.450460][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.451892][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1798.513498][ T5883] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1798.521981][ T5883] usb 5-1: Manufacturer: syz [ 1798.536482][ T5883] usb 5-1: config 0 descriptor?? [ 1799.082265][ T5835] Bluetooth: hci1: command tx timeout [ 1799.310223][ T5883] rc_core: IR keymap rc-hauppauge not found [ 1799.318504][ T5883] Registered IR keymap rc-empty [ 1799.332897][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.360361][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.388284][ T5883] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1799.413601][ T5883] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input103 [ 1799.421467][T27162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1799.437689][T27162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1799.439186][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.454180][T27162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1799.466133][T27162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1799.525853][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.550346][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.563507][ T964] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1799.590511][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.792823][ T964] usb 8-1: USB disconnect, device number 62 [ 1799.811141][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1799.847585][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1800.002386][T27162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.010577][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1800.024875][T27162] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.030241][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1800.037713][ T7026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.045802][ T7026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.073033][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1800.073974][ T7026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.087356][ T7026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.130201][ T5883] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1800.159517][ T5883] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1800.177155][ T5883] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1800.446052][T27162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1800.535830][T27162] veth0_vlan: entered promiscuous mode [ 1800.563607][T27162] veth1_vlan: entered promiscuous mode [ 1800.631186][T27162] veth0_macvtap: entered promiscuous mode [ 1800.639839][T27162] veth1_macvtap: entered promiscuous mode [ 1800.668999][T27162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.686209][T27162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.705601][T27162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.718220][T27162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.732218][T27162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.745374][T27162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.761480][T27162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1801.160930][ T5835] Bluetooth: hci1: command tx timeout [ 1801.183745][T27162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1801.229556][ T5883] usb 5-1: USB disconnect, device number 73 [ 1801.250141][T27162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.300168][T27162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1801.474265][T27162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.706169][T27162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1801.841273][T27162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.876145][T27162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.877885][T27162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.911216][T27162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.920204][T27162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.929260][T27162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.251427][ T5835] Bluetooth: hci1: command tx timeout [ 1803.345091][ T7037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.370320][ T7037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.488564][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.510040][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.573750][ T29] audit: type=1400 audit(1732274474.163:3030): avc: denied { mounton } for pid=27162 comm="syz-executor" path="/root/syzkaller.0wDX2j/syz-tmp" dev="sda1" ino=1957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1804.641707][T27253] 9pnet: bogus RWRITE count (512 > 32) [ 1804.650092][ T29] audit: type=1400 audit(1732274474.193:3031): avc: denied { mounton } for pid=27162 comm="syz-executor" path="/root/syzkaller.0wDX2j/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1804.678851][ T7026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.690361][ T7026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.709046][ T29] audit: type=1400 audit(1732274474.193:3032): avc: denied { mounton } for pid=27162 comm="syz-executor" path="/root/syzkaller.0wDX2j/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=87343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1805.018893][T27259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5238'. [ 1805.062516][ T29] audit: type=1400 audit(1732274474.223:3033): avc: denied { mounton } for pid=27162 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1805.089617][ T29] audit: type=1400 audit(1732274474.223:3034): avc: denied { mounton } for pid=27162 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1805.321731][ T5835] Bluetooth: hci1: command tx timeout [ 1806.020217][T24255] libceph: connect (1)[c::]:6789 error -22 [ 1806.031205][T24255] libceph: mon0 (1)[c::]:6789 connect error [ 1806.042887][T27269] batman_adv: batadv0: Removing interface: team0 [ 1806.083633][T27269] bridge_slave_0: left allmulticast mode [ 1806.098246][T27269] bridge_slave_0: left promiscuous mode [ 1806.104328][T27269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.129648][T27275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5242'. [ 1806.146999][T27269] bridge_slave_1: left promiscuous mode [ 1806.154427][T27269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.167407][T27266] ceph: No mds server is up or the cluster is laggy [ 1806.313047][T27269] team0: Port device team_slave_0 removed [ 1806.366040][T27269] team0: Port device team_slave_1 removed [ 1806.388791][T27269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1806.425330][T27269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1806.438804][T27269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1806.461101][T27269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1807.151149][T27269] team0: Port device vlan0 removed [ 1807.298199][T24255] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1807.640349][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1808.167657][T27289] kvm: kvm [27288]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1808.200446][T27289] kvm: kvm [27288]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1809.404261][ T29] audit: type=1400 audit(1732274479.003:3035): avc: denied { bind } for pid=27303 comm="syz.7.5249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1810.950661][T27320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1812.379824][T27330] binder: 27324:27330 ioctl c0306201 0 returned -14 [ 1813.823790][ T29] audit: type=1400 audit(1732274483.423:3036): avc: denied { accept } for pid=27341 comm="syz.3.5260" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1814.401383][T27349] netlink: 'syz.4.5262': attribute type 1 has an invalid length. [ 1815.004284][T27356] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1815.013430][T27356] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1816.295372][ T29] audit: type=1400 audit(1732274485.683:3037): avc: denied { mount } for pid=27361 comm="syz.6.5266" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1816.828224][ T29] audit: type=1400 audit(1732274486.363:3038): avc: denied { unmount } for pid=7645 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1817.580209][T24255] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1818.022953][T27376] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.049624][T27376] binder: 27375:27376 ioctl 4018620d 20000100 returned -16 [ 1818.076372][T27376] binder: BINDER_SET_CONTEXT_MGR already set [ 1818.097835][T27376] binder: 27375:27376 ioctl 4018620d 200002c0 returned -16 [ 1818.210067][T24255] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 1818.219173][T24255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.233890][T24255] usb 2-1: Product: syz [ 1818.240992][T24255] usb 2-1: Manufacturer: syz [ 1818.245931][T24255] usb 2-1: SerialNumber: syz [ 1818.289794][T24255] usb 2-1: config 0 descriptor?? [ 1818.317292][T24255] usb 2-1: disable ehci-hcd to run US-144 [ 1818.960140][T27385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.975630][T27385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.009715][ T29] audit: type=1400 audit(1732274488.603:3039): avc: denied { ioctl } for pid=27367 comm="syz.1.5268" path="socket:[87587]" dev="sockfs" ino=87587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1819.350130][ T5883] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1819.511448][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.521800][ T5883] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1819.532122][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.542322][ T5883] usb 7-1: config 0 descriptor?? [ 1819.549206][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 1819.751064][ T5883] pwc: send_video_command error -71 [ 1819.756742][ T5883] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1819.768217][ T5883] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1819.782000][ T5883] usb 7-1: USB disconnect, device number 89 [ 1820.052389][ T5883] usb 2-1: USB disconnect, device number 81 [ 1820.270103][ T8990] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1820.447756][ T8990] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.460177][ T8990] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1820.469817][ T8990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.482292][ T8990] usb 7-1: config 0 descriptor?? [ 1820.500555][ T8990] pwc: Askey VC010 type 2 USB webcam detected. [ 1820.912933][ T8990] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1820.930294][ T8990] pwc: recv_control_msg error -32 req 02 val 2700 [ 1820.941545][ T8990] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1820.960072][ T8990] pwc: recv_control_msg error -32 req 04 val 1000 [ 1820.970052][ T8990] pwc: recv_control_msg error -32 req 04 val 1300 [ 1820.990198][ T8990] pwc: recv_control_msg error -32 req 04 val 1400 [ 1821.000030][ T8990] pwc: recv_control_msg error -32 req 02 val 2000 [ 1821.020093][ T8990] pwc: recv_control_msg error -32 req 02 val 2100 [ 1821.027989][ T8990] pwc: recv_control_msg error -32 req 04 val 1500 [ 1821.040781][ T8990] pwc: recv_control_msg error -32 req 02 val 2500 [ 1821.050438][ T8990] pwc: recv_control_msg error -32 req 02 val 2400 [ 1821.070027][ T8990] pwc: recv_control_msg error -32 req 02 val 2600 [ 1821.245751][ T29] audit: type=1400 audit(1732274490.843:3040): avc: denied { getopt } for pid=27402 comm="syz.3.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1821.277399][ T8990] pwc: recv_control_msg error -71 req 02 val 2800 [ 1821.291146][ T8990] pwc: recv_control_msg error -71 req 04 val 1100 [ 1821.313570][ T8990] pwc: recv_control_msg error -71 req 04 val 1200 [ 1821.322488][ T8990] pwc: Registered as video103. [ 1821.327857][ T8990] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input104 [ 1821.365462][ T8990] usb 7-1: USB disconnect, device number 90 [ 1821.390275][ T5883] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1821.571315][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.593956][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1821.609876][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.637476][ T5883] usb 2-1: config 0 descriptor?? [ 1821.652777][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 1821.870135][ T5883] pwc: send_video_command error -71 [ 1821.875392][ T5883] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1821.954520][ T29] audit: type=1400 audit(1732274491.553:3041): avc: denied { watch watch_reads } for pid=27411 comm="syz.6.5282" path="/904" dev="tmpfs" ino=4785 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1821.978208][ T5883] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1821.991497][ T5883] usb 2-1: USB disconnect, device number 82 [ 1822.566254][T27413] vlan3: entered promiscuous mode [ 1822.591892][ T5883] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1822.798998][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.917464][ T5883] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1822.927326][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.147957][ T5883] usb 2-1: config 0 descriptor?? [ 1823.166656][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 1824.089429][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1824.097574][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 1824.176358][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1824.204862][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 1824.220579][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 1824.228375][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 1824.242263][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 1824.249543][ T5883] pwc: recv_control_msg error -32 req 02 val 2100 [ 1824.260651][ T5883] pwc: recv_control_msg error -32 req 04 val 1500 [ 1824.380494][ T5883] pwc: recv_control_msg error -32 req 02 val 2500 [ 1824.387796][ T5883] pwc: recv_control_msg error -32 req 02 val 2400 [ 1824.395163][ T5883] pwc: recv_control_msg error -32 req 02 val 2600 [ 1824.402858][ T5883] pwc: recv_control_msg error -32 req 02 val 2900 [ 1825.032753][ T29] audit: type=1400 audit(1732274494.123:3042): avc: denied { write } for pid=27433 comm="syz.6.5287" path="socket:[87662]" dev="sockfs" ino=87662 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1825.189381][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 1825.203095][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 1825.390394][ T5883] pwc: Registered as video103. [ 1826.134484][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input105 [ 1826.169811][ T5883] usb 2-1: USB disconnect, device number 83 [ 1826.348892][ T29] audit: type=1400 audit(1732274495.943:3043): avc: denied { getopt } for pid=27442 comm="syz.6.5289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1827.749146][ T8990] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1828.270155][ T8990] usb 2-1: Using ep0 maxpacket: 32 [ 1828.375139][ T8990] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1828.524648][ T8990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.700377][ T8990] usb 2-1: Product: syz [ 1828.704609][ T8990] usb 2-1: Manufacturer: syz [ 1828.709218][ T8990] usb 2-1: SerialNumber: syz [ 1828.781818][ T8990] usb 2-1: config 0 descriptor?? [ 1830.673804][ T29] audit: type=1400 audit(1732274500.273:3044): avc: denied { getattr } for pid=27481 comm="syz.3.5299" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1830.680649][T27482] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1830.715593][ T8990] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1830.800310][ T8990] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1830.825206][ T8990] usb 2-1: USB disconnect, device number 84 [ 1831.072024][T27489] syz.6.5302: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 1831.072557][T27489] CPU: 0 UID: 0 PID: 27489 Comm: syz.6.5302 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1831.072585][T27489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1831.072600][T27489] Call Trace: [ 1831.072608][T27489] [ 1831.072618][T27489] dump_stack_lvl+0x16c/0x1f0 [ 1831.072649][T27489] warn_alloc+0x24d/0x3a0 [ 1831.072677][T27489] ? __pfx_warn_alloc+0x10/0x10 [ 1831.072700][T27489] ? __pfx_stack_trace_save+0x10/0x10 [ 1831.072743][T27489] ? kasan_save_stack+0x42/0x60 [ 1831.072766][T27489] ? kasan_save_stack+0x33/0x60 [ 1831.072786][T27489] ? kasan_save_track+0x14/0x30 [ 1831.072806][T27489] ? __kasan_kmalloc+0xaa/0xb0 [ 1831.072836][T27489] ? xskq_create+0x52/0x1d0 [ 1831.072864][T27489] ? do_sock_setsockopt+0x222/0x480 [ 1831.072888][T27489] ? __sys_setsockopt+0x1a0/0x230 [ 1831.072916][T27489] ? __x64_sys_setsockopt+0xbd/0x160 [ 1831.072953][T27489] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 1831.073000][T27489] ? xskq_create+0xfb/0x1d0 [ 1831.073036][T27489] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1831.073079][T27489] ? xskq_create+0xfb/0x1d0 [ 1831.073111][T27489] vmalloc_user_noprof+0x6b/0x90 [ 1831.073182][T27489] ? xskq_create+0xfb/0x1d0 [ 1831.073213][T27489] xskq_create+0xfb/0x1d0 [ 1831.073246][T27489] xsk_setsockopt+0x757/0xa10 [ 1831.073276][T27489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1831.073316][T27489] ? selinux_socket_setsockopt+0x6a/0x80 [ 1831.073344][T27489] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1831.073374][T27489] do_sock_setsockopt+0x222/0x480 [ 1831.073398][T27489] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1831.073424][T27489] ? lock_acquire+0x2f/0xb0 [ 1831.073463][T27489] __sys_setsockopt+0x1a0/0x230 [ 1831.073499][T27489] __x64_sys_setsockopt+0xbd/0x160 [ 1831.073528][T27489] ? do_syscall_64+0x91/0x250 [ 1831.073550][T27489] ? lockdep_hardirqs_on+0x7c/0x110 [ 1831.073572][T27489] do_syscall_64+0xcd/0x250 [ 1831.073598][T27489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.073622][T27489] RIP: 0033:0x7fd82a17e819 [ 1831.073642][T27489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1831.073663][T27489] RSP: 002b:00007fd82aec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1831.073687][T27489] RAX: ffffffffffffffda RBX: 00007fd82a336080 RCX: 00007fd82a17e819 [ 1831.073704][T27489] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 1831.073720][T27489] RBP: 00007fd82a1f175e R08: 0000000000000020 R09: 0000000000000000 [ 1831.073735][T27489] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1831.073751][T27489] R13: 0000000000000001 R14: 00007fd82a336080 R15: 00007ffc1689b9d8 [ 1831.073783][T27489] [ 1831.073818][T27489] Mem-Info: [ 1831.073833][T27489] active_anon:29089 inactive_anon:0 isolated_anon:0 [ 1831.073833][T27489] active_file:19554 inactive_file:2650 isolated_file:0 [ 1831.073833][T27489] unevictable:763 dirty:332 writeback:0 [ 1831.073833][T27489] slab_reclaimable:8615 slab_unreclaimable:123437 [ 1831.073833][T27489] mapped:31006 shmem:22741 pagetables:1460 [ 1831.073833][T27489] sec_pagetables:0 bounce:0 [ 1831.073833][T27489] kernel_misc_reclaimable:0 [ 1831.073833][T27489] free:1286434 free_pcp:5183 free_cma:0 [ 1831.073894][T27489] Node 0 active_anon:116348kB inactive_anon:0kB active_file:78080kB inactive_file:10592kB unevictable:1524kB isolated(anon):0kB isolated(file):0kB mapped:123904kB dirty:1328kB writeback:0kB shmem:89428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12324kB pagetables:5840kB sec_pagetables:0kB all_unreclaimable? no [ 1831.073969][T27489] Node 1 active_anon:8kB inactive_anon:0kB active_file:136kB inactive_file:8kB unevictable:1528kB isolated(anon):0kB isolated(file):0kB mapped:120kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1831.074024][T27489] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1831.074086][T27489] lowmem_reserve[]: 0 2461 2461 0 0 [ 1831.074140][T27489] Node 0 DMA32 free:1250296kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:116312kB inactive_anon:0kB active_file:78052kB inactive_file:10316kB unevictable:1524kB writepending:1328kB present:3129332kB managed:2549212kB mlocked:0kB bounce:0kB free_pcp:2276kB local_pcp:916kB free_cma:0kB [ 1831.074207][T27489] lowmem_reserve[]: 0 0 0 0 0 [ 1831.074252][T27489] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:28kB inactive_file:276kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 1831.074313][T27489] lowmem_reserve[]: 0 0 0 0 0 [ 1831.074358][T27489] Node 1 Normal free:3880080kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:136kB inactive_file:8kB unevictable:1528kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18432kB local_pcp:10240kB free_cma:0kB [ 1831.074420][T27489] lowmem_reserve[]: 0 0 0 0 0 [ 1831.074463][T27489] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1831.074608][T27489] Node 0 DMA32: 248*4kB (UME) 465*8kB (UME) 635*16kB (UME) 206*32kB (UME) 255*64kB (UME) 179*128kB (UME) 61*256kB (UME) 31*512kB (UME) 17*1024kB (UME) 17*2048kB (UME) 270*4096kB (UM) = 1250328kB [ 1831.074810][T27489] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1831.074950][T27489] Node 1 Normal: 254*4kB (UME) 75*8kB (UME) 46*16kB (UME) 221*32kB (UME) 103*64kB (UME) 38*128kB (UME) 17*256kB (UM) 15*512kB (UME) 5*1024kB (UME) 8*2048kB (UME) 934*4096kB (M) = 3880080kB [ 1831.075160][T27489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1831.075180][T27489] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1831.075200][T27489] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1831.075219][T27489] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1831.075238][T27489] 44945 total pagecache pages [ 1831.075248][T27489] 0 pages in swap cache [ 1831.075256][T27489] Free swap = 124556kB [ 1831.075266][T27489] Total swap = 124996kB [ 1831.075275][T27489] 2097051 pages RAM [ 1831.075284][T27489] 0 pages HighMem/MovableOnly [ 1831.075292][T27489] 428026 pages reserved [ 1831.075301][T27489] 0 pages cma reserved [ 1834.076206][ T29] audit: type=1400 audit(1732274503.583:3045): avc: denied { setopt } for pid=27503 comm="syz.1.5306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1834.108593][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1834.219363][ T52] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1835.870079][ T29] audit: type=1400 audit(1732274505.463:3046): avc: denied { read } for pid=27521 comm="syz.3.5311" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1837.840440][T24084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1837.858088][T24084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1837.880052][T24084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1837.892331][T24084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1837.909442][T24084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1837.920264][T24084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1838.303342][T27536] lo speed is unknown, defaulting to 1000 [ 1838.346332][T27536] ip_vti0 speed is unknown, defaulting to 1000 [ 1839.366863][T27553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1839.726996][ T29] audit: type=1400 audit(1732274509.323:3047): avc: denied { create } for pid=27554 comm="syz.1.5318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1839.747641][ T29] audit: type=1400 audit(1732274509.323:3048): avc: denied { sys_admin } for pid=27554 comm="syz.1.5318" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1839.994486][T24084] Bluetooth: hci2: command tx timeout [ 1840.078131][ T29] audit: type=1400 audit(1732274509.673:3049): avc: denied { read } for pid=5192 comm="acpid" name="event8" dev="devtmpfs" ino=4461 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1840.150137][ T5883] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1840.250866][ T29] audit: type=1400 audit(1732274509.673:3050): avc: denied { open } for pid=5192 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=4461 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1840.331588][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 1840.455100][ T29] audit: type=1400 audit(1732274509.673:3051): avc: denied { ioctl } for pid=5192 comm="acpid" path="/dev/input/event8" dev="devtmpfs" ino=4461 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1840.670566][ T5883] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1840.764021][T27536] chnl_net:caif_netlink_parms(): no params data found [ 1840.790055][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1840.803502][ T5883] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1840.812843][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.820994][ T5883] usb 5-1: Product: syz [ 1840.825247][ T5883] usb 5-1: Manufacturer: syz [ 1840.830090][ T5883] usb 5-1: SerialNumber: syz [ 1840.842076][ T5883] usb 5-1: config 0 descriptor?? [ 1840.882059][T27571] block device autoloading is deprecated and will be removed. [ 1840.916662][ T5883] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1840.932016][ T5883] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1841.576721][ T29] audit: type=1400 audit(1732274511.153:3052): avc: denied { write } for pid=27580 comm="syz.1.5324" path="socket:[88687]" dev="sockfs" ino=88687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1842.029890][ T5883] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1842.040074][T24084] Bluetooth: hci2: command tx timeout [ 1842.054005][ T5883] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1842.190951][T27536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.200386][T27536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.207614][T27536] bridge_slave_0: entered allmulticast mode [ 1842.231089][T27536] bridge_slave_0: entered promiscuous mode [ 1842.245755][T27536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.257044][T27536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.273928][T27536] bridge_slave_1: entered allmulticast mode [ 1842.282791][T27536] bridge_slave_1: entered promiscuous mode [ 1842.611896][T27599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5325'. [ 1843.996922][ T5883] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1844.210350][T24084] Bluetooth: hci2: command tx timeout [ 1844.232157][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1844.317958][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1844.389854][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1844.420449][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1844.459075][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1844.489053][T27536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.537197][T27536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.566122][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1845.574491][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1845.750865][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1845.797050][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1845.798089][T27536] team0: Port device team_slave_0 added [ 1845.826516][ T5883] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1846.181859][ T5883] usb 5-1: USB disconnect, device number 74 [ 1846.190324][T27536] team0: Port device team_slave_1 added [ 1846.747788][T24084] Bluetooth: hci2: command tx timeout [ 1847.671064][T27536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1847.678126][T27536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1847.877248][T27536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1847.895702][T27536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1847.903760][T27536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1848.710280][T27536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1953.769923][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1953.776914][ C0] rcu: 1-...!: (1 GPs behind) idle=0eec/1/0x4000000000000000 softirq=117455/117456 fqs=2 [ 1953.789178][ C0] rcu: (detected by 0, t=10502 jiffies, g=110305, q=135 ncpus=2) [ 1953.797017][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1953.797056][ C1] NMI backtrace for cpu 1 [ 1953.797067][ C1] CPU: 1 UID: 0 PID: 8990 Comm: kworker/1:0 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1953.797088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1953.797101][ C1] Workqueue: events pcpu_balance_workfn [ 1953.797129][ C1] RIP: 0010:rb_erase+0x268/0x1360 [ 1953.797148][ C1] Code: 3c 01 00 0f 85 50 10 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 2a 48 89 da 48 c1 ea 03 80 3c 02 00 0f 85 47 10 00 00 4c 89 23 <48> 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 b8 00 [ 1953.797164][ C1] RSP: 0018:ffffc90000a18d80 EFLAGS: 00000046 [ 1953.797177][ C1] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffff8880b872cb50 [ 1953.797190][ C1] RDX: 1ffff110170e596a RSI: ffff8880b872cb50 RDI: ffff88805b4de350 [ 1953.797201][ C1] RBP: ffff8880b872cb50 R08: 0000000000000006 R09: 0000000000000001 [ 1953.797213][ C1] R10: ffff88805b4de340 R11: 0000000000000004 R12: ffff8880b872cb58 [ 1953.797224][ C1] R13: ffff88805b4de340 R14: 0000000000000000 R15: 0000000000000000 [ 1953.797236][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1953.797254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1953.797266][ C1] CR2: 00007fd82aec7f98 CR3: 000000005b648000 CR4: 00000000003526f0 [ 1953.797277][ C1] Call Trace: [ 1953.797285][ C1] [ 1953.797294][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1953.797319][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1953.797344][ C1] ? nmi_handle+0x1a9/0x5c0 [ 1953.797364][ C1] ? rb_erase+0x268/0x1360 [ 1953.797379][ C1] ? default_do_nmi+0x6a/0x160 [ 1953.797401][ C1] ? exc_nmi+0x170/0x1e0 [ 1953.797422][ C1] ? end_repeat_nmi+0xf/0x53 [ 1953.797445][ C1] ? rb_erase+0x268/0x1360 [ 1953.797460][ C1] ? rb_erase+0x268/0x1360 [ 1953.797476][ C1] ? rb_erase+0x268/0x1360 [ 1953.797492][ C1] [ 1953.797497][ C1] [ 1953.797505][ C1] timerqueue_del+0x83/0x150 [ 1953.797527][ C1] __remove_hrtimer+0x99/0x290 [ 1953.797549][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1953.797573][ C1] __hrtimer_run_queues+0x50b/0xae0 [ 1953.797598][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1953.797618][ C1] ? read_tsc+0x9/0x20 [ 1953.797643][ C1] hrtimer_interrupt+0x392/0x8e0 [ 1953.797670][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1953.797690][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1953.797715][ C1] [ 1953.797720][ C1] [ 1953.797727][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1953.797745][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1953.797771][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 06 3a 44 f6 48 89 df e8 7e b9 44 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 15 b0 35 f6 65 8b 05 e6 28 dd 74 85 c0 74 16 5b [ 1953.797792][ C1] RSP: 0018:ffffc9000d0979b8 EFLAGS: 00000246 [ 1953.797806][ C1] RAX: 0000000000000006 RBX: ffffffff9aa554a0 RCX: 1ffffffff2dc8442 [ 1953.797817][ C1] RDX: 0000000000000000 RSI: ffffffff8b6cdaa0 RDI: ffffffff8bd0dc80 [ 1953.797829][ C1] RBP: 0000000000000286 R08: 0000000000000001 R09: fffffbfff2dc7f98 [ 1953.797840][ C1] R10: ffffffff96e3fcc7 R11: 0000000000000003 R12: ffffe8ffff400000 [ 1953.797851][ C1] R13: 00000000000001bb R14: 0000000000000004 R15: ffffe8ffff400000 [ 1953.797870][ C1] debug_check_no_obj_freed+0x327/0x600 [ 1953.797896][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1953.797915][ C1] ? lock_acquire+0x2f/0xb0 [ 1953.797933][ C1] ? find_unlink_vmap_area+0x6e/0x3d0 [ 1953.797956][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1953.797979][ C1] ? find_unlink_vmap_area+0x303/0x3d0 [ 1953.798002][ C1] remove_vm_area+0x1ae/0x3f0 [ 1953.798025][ C1] ? mark_held_locks+0x9f/0xe0 [ 1953.798044][ C1] pcpu_free_vm_areas+0x91/0xd0 [ 1953.798062][ C1] pcpu_balance_free+0x5d9/0xb20 [ 1953.798085][ C1] ? __pfx_pcpu_balance_free+0x10/0x10 [ 1953.798106][ C1] ? __pcpu_chunk_move+0x142/0x440 [ 1953.798130][ C1] pcpu_balance_workfn+0x9d4/0xd00 [ 1953.798156][ C1] process_one_work+0x9c5/0x1ba0 [ 1953.798178][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 1953.798197][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1953.798219][ C1] ? assign_work+0x1a0/0x250 [ 1953.798236][ C1] worker_thread+0x6c8/0xf00 [ 1953.798259][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1953.798276][ C1] kthread+0x2c1/0x3a0 [ 1953.798296][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1953.798319][ C1] ? __pfx_kthread+0x10/0x10 [ 1953.798340][ C1] ret_from_fork+0x45/0x80 [ 1953.798356][ C1] ? __pfx_kthread+0x10/0x10 [ 1953.798376][ C1] ret_from_fork_asm+0x1a/0x30 [ 1953.798406][ C1] [ 1953.799052][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g110305 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1954.254915][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1954.264881][ C0] rcu: RCU grace-period kthread stack dump: [ 1954.270763][ C0] task:rcu_preempt state:R running task stack:27616 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1954.282519][ C0] Call Trace: [ 1954.285796][ C0] [ 1954.288732][ C0] __schedule+0xe5a/0x5ae0 [ 1954.293165][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1954.298385][ C0] ? __pfx___schedule+0x10/0x10 [ 1954.303272][ C0] ? schedule+0x298/0x350 [ 1954.307611][ C0] ? __pfx_lock_release+0x10/0x10 [ 1954.312637][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1954.317846][ C0] ? lock_acquire+0x2f/0xb0 [ 1954.322350][ C0] ? schedule+0x1fd/0x350 [ 1954.326693][ C0] schedule+0xe7/0x350 [ 1954.330771][ C0] schedule_timeout+0x124/0x280 [ 1954.335631][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1954.341013][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1954.346311][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1954.352126][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 1954.357591][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1954.362364][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1954.367656][ C0] ? rcu_gp_init+0xc82/0x1630 [ 1954.372340][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1954.377553][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1954.383372][ C0] rcu_gp_kthread+0x271/0x380 [ 1954.388057][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1954.393267][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 1954.398469][ C0] ? __kthread_parkme+0x148/0x220 [ 1954.403501][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1954.408704][ C0] kthread+0x2c1/0x3a0 [ 1954.412777][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1954.417985][ C0] ? __pfx_kthread+0x10/0x10 [ 1954.422585][ C0] ret_from_fork+0x45/0x80 [ 1954.427276][ C0] ? __pfx_kthread+0x10/0x10 [ 1954.431881][ C0] ret_from_fork_asm+0x1a/0x30 [ 1954.436669][ C0] [ 1954.439685][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1954.446005][ C0] CPU: 0 UID: 0 PID: 6555 Comm: kworker/u8:10 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 1954.456590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1954.466656][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1954.473166][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x41/0x70 [ 1954.479331][ C0] Code: 00 48 8b 34 24 74 1d f6 c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c 16 00 00 85 c0 74 2b 8b 82 f8 15 00 00 <83> f8 02 75 20 48 8b 8a 00 16 00 00 8b 92 fc 15 00 00 48 8b 01 48 [ 1954.498944][ C0] RSP: 0018:ffffc9000c51f990 EFLAGS: 00000246 [ 1954.505103][ C0] RAX: 0000000000000000 RBX: ffff8880b8744bc0 RCX: ffffffff8182221c [ 1954.513077][ C0] RDX: ffff888027e9a440 RSI: ffffffff818221f6 RDI: 0000000000000005 [ 1954.521048][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 1954.529020][ C0] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170e8979 [ 1954.537008][ C0] R13: 0000000000000001 R14: ffff8880b8744bc8 R15: ffff8880b863ffc0 [ 1954.544994][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1954.553937][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1954.560534][ C0] CR2: 0000001b3041eff8 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 1954.568513][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1954.576487][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1954.584460][ C0] Call Trace: [ 1954.587736][ C0] [ 1954.590584][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 1954.596925][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 1954.602140][ C0] ? rcu_sched_clock_irq+0x247a/0x3310 [ 1954.607618][ C0] ? timekeeping_advance+0x70a/0xa60 [ 1954.612915][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1954.618562][ C0] ? __asan_memcpy+0x3c/0x60 [ 1954.623173][ C0] ? rcu_is_watching+0x12/0xc0 [ 1954.627951][ C0] ? update_process_times+0x178/0x2d0 [ 1954.633334][ C0] ? __pfx_update_process_times+0x10/0x10 [ 1954.639073][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1954.644557][ C0] ? update_wall_time+0x1c/0x40 [ 1954.649426][ C0] ? tick_nohz_handler+0x376/0x530 [ 1954.654562][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1954.660032][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 1954.665423][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1954.671194][ C0] ? read_tsc+0x9/0x20 [ 1954.675300][ C0] ? hrtimer_interrupt+0x392/0x8e0 [ 1954.680444][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1954.686612][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1954.692435][ C0] [ 1954.695372][ C0] [ 1954.698304][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1954.704476][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 1954.710556][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 1954.716633][ C0] ? __sanitizer_cov_trace_pc+0x41/0x70 [ 1954.722184][ C0] smp_call_function_many_cond+0x456/0x1300 [ 1954.728104][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1954.733151][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1954.738183][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 1954.743320][ C0] text_poke_bp_batch+0x22b/0x760 [ 1954.748365][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1954.753916][ C0] ? __jump_label_patch+0x1db/0x400 [ 1954.759129][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1954.765388][ C0] text_poke_finish+0x30/0x40 [ 1954.770073][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1954.776066][ C0] jump_label_update+0x1d7/0x400 [ 1954.781018][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 1954.786933][ C0] static_key_enable+0x1a/0x20 [ 1954.791722][ C0] toggle_allocation_gate+0xfc/0x260 [ 1954.797024][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1954.802931][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 1954.808158][ C0] ? process_one_work+0x921/0x1ba0 [ 1954.813280][ C0] ? lock_acquire+0x2f/0xb0 [ 1954.817788][ C0] ? process_one_work+0x921/0x1ba0 [ 1954.822922][ C0] process_one_work+0x9c5/0x1ba0 [ 1954.827888][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1954.834067][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1954.839462][ C0] ? assign_work+0x1a0/0x250 [ 1954.844066][ C0] worker_thread+0x6c8/0xf00 [ 1954.848676][ C0] ? __kthread_parkme+0x148/0x220 [ 1954.853724][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1954.858842][ C0] kthread+0x2c1/0x3a0 [ 1954.862919][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1954.868132][ C0] ? __pfx_kthread+0x10/0x10 [ 1954.872734][ C0] ret_from_fork+0x45/0x80 [ 1954.877155][ C0] ? __pfx_kthread+0x10/0x10 [ 1954.881751][ C0] ret_from_fork_asm+0x1a/0x30 [ 1954.886540][ C0]