last executing test programs: 9m26.693409762s ago: executing program 32 (id=2834): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) (fail_nth: 3) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000003, 0x0, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 6m17.57440473s ago: executing program 0 (id=3408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0x8, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m15.784743033s ago: executing program 0 (id=3414): syz_emit_ethernet(0x187, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x123200, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000fedbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="17810000000000001c00128009000100766c616e000000000c00028a40b55578d5243980060001"], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0xc000002) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) socket$inet6_udp(0xa, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002a80)={0x2020}, 0xfffffffe) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) write$tun(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="0018e5004a2100df00640000030690780a010101ac14141f89132ce0000002ffffffff6401fc01e0000002004e244e2207b48ab4a3d00bbd5709ad12436b7cdf576d9e64320769e3aa258fec5d0d419104000000796a831f9faf4dccb9f6a95061a2dea1a7b41f0c04264c2fcdf1e7dfdded15fe838c5e161bea707013dc8ebc2011cade6bd2e859c95aed6d9a94078854e6d975d112935637b942c53dcf40b29ca33d27229a36d88c5975bb0a0628e213eececba161b0f7", @ANYRES32, @ANYRES32, @ANYBLOB="4002000390780003220b5b75b6684c8e14933a040202040200050a800000000000000400051e00010000000000010000000300000007000000030000a631000003ff000008bf7e73e21ca60d520ec75945f3558ab39f5bc26985993b04087e4349999ef8fa356d81d32a7da475c673f65a01e5a49f4699edd5de4a739c3333cb11e5e74c788306749418ce812b968b27749b0af9ecb510e58f320b95975617af4b992369a781c657994845"], 0xe3) 6m13.065423714s ago: executing program 0 (id=3420): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 6m7.210965327s ago: executing program 4 (id=3429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)={@ifindex, r0, 0x2f, 0x0, 0x0, @void, @value=r1}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r4, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r0, r2, 0x2f, 0x2008, 0x4, @value=r5}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0xf, 0x0) 6m4.921345447s ago: executing program 4 (id=3435): bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080001007f000001080002007f000002100009"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (fail_nth: 3) 6m4.829893131s ago: executing program 0 (id=3436): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x0) write(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) unshare(0x62000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e21}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @empty}, 0xab852ebbeefbd5ef, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20000010, 0x0, 0xdffd}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000540)) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@private0}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x400, 0x6, 0x9, 0x2000000, 0xd985, 0xc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x2d55, 0x3, 0x80000001, 0x420, 0x8}}]}}}]}, 0x78}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7, 0x8000, 0x4, 0x8, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp={0x44, 0x8, 0xe8, 0x0, 0x1, [0x400]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x36d1, 0x6, {{0x9, 0x4, 0x0, 0x8, 0x24, 0x68, 0x0, 0x1, 0x4, 0x0, @local, @multicast2, {[@generic={0x82, 0x10, "8e13acf1081ea87d0da6e67e5ed6"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'gre0\x00', 0x0, 0x40, 0x700, 0x8, 0x7, {{0x17, 0x4, 0x3, 0x24, 0x5c, 0x65, 0x0, 0xb, 0x29, 0x0, @multicast1, @local, {[@generic={0x44, 0x9, "b5ee8bceddd1a1"}, @ssrr={0x89, 0xb, 0xba, [@private=0xa010101, @rand_addr=0x64010101]}, @generic={0x82, 0x11, "b0807ba7c412bf9693c7bed9edbc9d"}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x7, 0xb, "29998e7708bd8e30a7"}]}, @timestamp={0x44, 0xc, 0x65, 0x0, 0x5, [0xb0, 0xfffffff8]}, @noop, @noop, @end]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) 6m4.798126082s ago: executing program 2 (id=3437): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb88644570002800640057fea095686ee6a18927f4c1019078ac141439e00000010d009078fffd0f080000"], 0x0) 6m4.676437962s ago: executing program 3 (id=3438): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0xb7ea1df7be7b3c6a, 0x0, 0x2}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0xa00) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x88, 0x0, 0x1, 0x6abb}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000001060000000000000000000003000008"], 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt_trace/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0, &(0x7f0000001280)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x1, 0x0, 0x1, 0x0, 0x0) write(r7, &(0x7f0000002340)='hello\n', 0x6) 6m4.335076012s ago: executing program 3 (id=3440): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0x15, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000470)='0', 0x1) 6m4.23459687s ago: executing program 4 (id=3441): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x400082) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f00000002c0)={0xfffffffffffffffd, 0x9, 0x3, 0xf, 0x2}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, {0x2b5b, 0x5, 0xb, 0xc}}) r2 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68040000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 6m2.825640332s ago: executing program 4 (id=3442): r0 = socket(0x11, 0x80005, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000006800010025bd7000fdffffff0a000000000000001800088014000100010000000000000087000400104808000600070003420000080005"], 0x40}, 0x1, 0x0, 0x0, 0x4000050}, 0x40040d0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="01000600", @ANYRES32=0x0, @ANYBLOB="00030100ac1e01010000000000000000000000008edd000000000100", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="010104000a01010100000000000000000000000086dd000000000100", @ANYRES32=0x0, @ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="01020100ac14141bfaff310000000000000c000000000000"], 0x4c}}, 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6c00000002060500000000000000000005000003120003006269746d61703a69702c6d616300ffff05000400010000000900020073797a310000000020000780050003001f0000000c00018008000100ffffffff08000840000001dd05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0xc88c4) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x800, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x404c840}, 0x40014) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x67, 0x400, 0xfffffffffffffffd, 0xdd0b, 0x8a6], [0x100000001, 0xa, 0x8, 0x3, 0x1000, 0x2, 0xfffffffffffffe01, 0x8, 0x6, 0x31, 0x1ff, 0xc4d8, 0x0, 0x9, 0x8000000000000001, 0x1, 0xaad, 0x7, 0x8, 0x10, 0xffffffffffffffff, 0x2ca12bf6, 0x0, 0x1, 0x3, 0x2, 0x81, 0x6, 0xffffffffbffffff7, 0x3f, 0x1, 0x5, 0x0, 0xbe77, 0x8b78a986000, 0x1ff, 0xab, 0x7, 0x3, 0x9, 0x100, 0x2, 0x6, 0x1, 0xd, 0x400, 0xffff, 0x80000000, 0xffffffffffffffff, 0x7, 0x10001, 0x0, 0x5, 0xd, 0x7fffffff, 0x5a7b, 0x80000001, 0x100000000, 0x2c0e, 0x4, 0x52e4, 0x1, 0xffffffffffffeaf3, 0x8, 0x8, 0x80000001, 0x6, 0x37f6, 0x0, 0x5, 0xbc8c, 0x1ff, 0xfffffffffffffbe8, 0x4, 0x908f, 0x7, 0x8, 0x2, 0xb6d, 0x2, 0x4, 0x89, 0x2, 0x100000001, 0x4, 0x8000000000000000, 0x7, 0x7, 0x9, 0x7, 0xfffffffffffffffa, 0x9e34f69, 0xa2, 0x7, 0xfffffff8, 0xeab9, 0xfd, 0xe4, 0x8000, 0x7, 0x5, 0x19, 0x5bc, 0x7, 0x2779, 0x9, 0x0, 0x7, 0x0, 0x10000, 0xffffffffffffffff, 0x40, 0x6, 0xc, 0x10001, 0x4, 0xfff, 0x3, 0x1, 0x7ffb, 0x1]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000e00)={r8, 0xfd80, 0x2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414aa0305907812161802c900000000000000"], 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd4, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffff000}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x740}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7e2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa5b}]}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r10 = syz_open_pts(0xffffffffffffffff, 0xc0000) syz_open_pts(r10, 0x8000) sendmmsg(r5, 0x0, 0x0, 0x3f00) 6m2.656457563s ago: executing program 2 (id=3443): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000000c00060000000000000000000c00080000040000000000001c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x605, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f000008d000/0x2000)=nil, 0x2000, 0xe) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m2.160907465s ago: executing program 2 (id=3445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x5cfb42, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000090cfeffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000e5ff17001280080001007380060006e387da0100"], 0x38}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x8, [[0x9, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0x0, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xfffffdff, 0x7ff, 0xffff8e81, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0xe2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xc, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac42, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x403, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x3, 0xf4240, 0x0, 0x0, 0x1}]}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000180)={@ipv4={""/10, ""/2, @local}, 0x0}, &(0x7f00000001c0)=0x14) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108943, 0x148) r5 = open(&(0x7f0000000140)='./file0\x00', 0x42200, 0x8) fcntl$setlease(r5, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8, 0x1, 0x7, 0x80000001, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @private=0xa010101, {[@timestamp_addr={0x44, 0x1c, 0x18, 0x1, 0x6, [{@private=0xa010102, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x5}, {@multicast2, 0x3}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24040000}, 0x10004001) 6m1.602477019s ago: executing program 0 (id=3446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x1}], 0x1}, 0x20000885) 6m1.16360581s ago: executing program 2 (id=3447): ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$FIOCLEX(r1, 0x5451) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (fail_nth: 3) 6m0.952189423s ago: executing program 2 (id=3448): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x80000001, 0x523100) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0xcbc9dce05b8fa7b7, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb08, 0x7d}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x7) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000240)=0x7fff, 0x4) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000000)=0xf74) 6m0.809655524s ago: executing program 4 (id=3449): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c00450052646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bind$pptp(0xffffffffffffffff, 0xfffffffffffffffd, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000ae000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000000f000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x17, r5, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x20, 0x1, 0x3, 0x4, {{0x15, 0x4, 0x0, 0x8, 0x54, 0x68, 0x0, 0xb, 0x29, 0x0, @empty, @loopback, {[@end, @ssrr={0x89, 0x13, 0x85, [@multicast2, @loopback, @remote, @loopback]}, @cipso={0x86, 0xc, 0xffffffffffffffff, [{0x0, 0x6, "594dcfc4"}]}, @generic={0xc2, 0xf, "bd5a9dad90fcc2be631698860a"}, @rr={0x7, 0xf, 0xf8, [@local, @rand_addr=0x64010102, @broadcast]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000600)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0xc5, &(0x7f00000006c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x4, 0xb7, 0x9, 0x7, 0x0, @local, @loopback, 0x10, 0x80, 0xe80, 0xa9fe}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000009c0)=0x0, &(0x7f0000000a00)=0x4) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r13) getsockname$packet(r13, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r13, &(0x7f0000000440)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r14, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r14, 0x4400, 0x8002}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc264708c2a02e94b}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140002006c6f00000000000000000000000000006800018014000200626f6e64300000000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="14000200697036677265300000000000000000001400020073797a6b616c6c6572310000000000005400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="1400020064766d727030000000000000000000001400020076657468305f746f5f6873720000000008000100", @ANYRES32=r14, @ANYBLOB], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x811) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r15, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x2c, r16, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 6m0.807719008s ago: executing program 3 (id=3450): syz_open_dev$MSR(&(0x7f0000000240), 0x8, 0x0) ioperm(0x7, 0x4, 0x7) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000040)=0x2) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x34}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$FIOCLEX(r3, 0x5451) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x1, 0x0, 0x2000}) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x1, 0x40055}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x9, {0x4008}, 0x1}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_FSBULKSTAT(r9, 0xc0205865, &(0x7f0000000580)={&(0x7f00000003c0)=0x3, 0x2, &(0x7f0000000480)=[{}], &(0x7f0000000540)}) 6m0.512568159s ago: executing program 3 (id=3451): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0x8000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r2, 0x4038ae7a, &(0x7f0000000200)=' \x00\x00\x00\x00\x00\x00@\x00'/56) ioctl(r2, 0x4048aec9, &(0x7f0000000300)="0200000000000000aa00"/72) ioctl(r3, 0x4048aecb, &(0x7f0000000400)="0000000000000000001000"/72) ioctl(r2, 0x400caed0, &(0x7f0000000500)="01000000ffffffff00000000") ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6m0.079317159s ago: executing program 5 (id=3454): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0xb7ea1df7be7b3c6a, 0x0, 0x2}) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffffffffffff, 0xa00) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f00000001c0)={0x0, 0x0, {0x1, 0x0, 0x3012, 0x0, 0xd, 0x2, 0x2}}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x841fa2e66efa8cfe) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000001060000000000000000000003000008"], 0x14}, 0x1, 0x0, 0x0, 0x400c091}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000140)=0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt_trace/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0xf, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001200)=0x0, &(0x7f0000001240)=0x0, &(0x7f0000001280)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000012c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, &(0x7f0000001340)=""/4096, 0x1000, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x1, 0x0, 0x1, 0x0, 0x0) write(r7, &(0x7f0000002340)='hello\n', 0x6) 5m59.833033808s ago: executing program 5 (id=3455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="01002cbd700000000000010000000c00020002000000000000000c00060000000000000000000c00080000040000000000001c000780"], 0x8c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x605, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f000008d000/0x2000)=nil, 0x2000, 0xe) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0x8, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m59.517901239s ago: executing program 5 (id=3456): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x5, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_open_procfs(0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x8, 0x4000, 0x663, 0x7fffffff, 0x6608c64b}, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="588d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 5m58.550299135s ago: executing program 5 (id=3457): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000e0000001000009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000c2d000/0x1000)=nil, 0x1000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x304048, 0x4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000493000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 5m57.265242929s ago: executing program 3 (id=3458): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRESDEC], 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) syz_usb_disconnect(r0) 5m57.031366829s ago: executing program 5 (id=3459): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f688469"], 0x88}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000400)) ioctl(r0, 0x6f41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000004015"], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000017c0)='./file0/file1\x00', 0x0, 0x2008, r2}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000000000001000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000083000000bf09000000000000550901000000000095000000000000001868009829ec6f5300000000000000000004020000bf91000000000000b7020000020000008500000085000000b700000000000000950000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x4, 0xa, 0x3d, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001840)=[0xffffffffffffffff, r6, 0xffffffffffffffff], &(0x7f0000001880), 0x10, 0xffff42d3}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d30783030303030303030303030303130"]) lchown(&(0x7f0000000040)='./file0/file1\x00', 0xee01, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0) ioctl$COMEDI_DEVCONFIG(r10, 0x40946400, &(0x7f0000000000)={'adq12b\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0xf, 0x2000006, 0x77fd]}) ioctl$COMEDI_CANCEL(r10, 0x6407) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESHEX=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 5m56.923877036s ago: executing program 5 (id=3460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0x15, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000470)='0', 0x1) 5m55.625423866s ago: executing program 3 (id=3461): syz_usbip_server_init(0x5) syz_usbip_server_init(0x5) 5m55.172317588s ago: executing program 4 (id=3462): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 5m55.170704993s ago: executing program 2 (id=3463): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 5m55.140726805s ago: executing program 0 (id=3464): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb88644570002800640057fea095686ee6a18927f4c1019078ac141439e00000010d009078fffd0f080000"], 0x0) 4m58.668803528s ago: executing program 33 (id=3464): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000bbbbbbbbbbbb88644570002800640057fea095686ee6a18927f4c1019078ac141439e00000010d009078fffd0f080000"], 0x0) 4m56.209467539s ago: executing program 34 (id=3460): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x40, 0x15, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000470)='0', 0x1) 4m56.065262121s ago: executing program 35 (id=3463): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 4m55.927601325s ago: executing program 36 (id=3461): syz_usbip_server_init(0x5) syz_usbip_server_init(0x5) 4m55.795891897s ago: executing program 37 (id=3462): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 12.510097738s ago: executing program 6 (id=4307): r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r2 = socket$netlink(0x10, 0x3, 0xf) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a0000", 0x3) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f0000000140), 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r8, @ANYBLOB="12030000000000000a00cc8096f55a4432900000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x4c}}, 0x884) 12.019572484s ago: executing program 6 (id=4308): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @private=0xa010101}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000300000000002604fdffff02000014010000033800001d130000000000007a0af8ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r3, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRES8, @ANYRESHEX=r1], 0x33) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x44, r5, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x20000000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r7, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 11.66611949s ago: executing program 6 (id=4313): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000e0000001000009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x304048, 0x4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000493000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 10.760973996s ago: executing program 6 (id=4318): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x40106183, &(0x7f00000000c0)={@none, 0x1}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) ioctl$TCFLSH(r1, 0x540b, 0x2) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="670f01d10f20c035100000000f22c0ea89060000a00066ba6100ec660f38827b00640f221a66bad10466b8004866ef660f38352500e000003e0ff91ac4e1c173f1cb", 0xfffffea4}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0/../file0\x00', 0x210200, 0x0) r6 = open_tree(r5, &(0x7f0000000040)='./file0/../file0\x00', 0x81901) getsockopt$packet_buf(r5, 0x107, 0x16, &(0x7f00000001c0)=""/54, &(0x7f0000000280)=0x36) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10.657611798s ago: executing program 6 (id=4319): set_mempolicy(0x4005, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_proto_private(r0, 0x89a3, 0x0) syz_usb_connect$uac1(0x0, 0x7b, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406b1d010140000102030109026900030100000209cc8e833f4a54"], 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = fsopen(&(0x7f00000005c0)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='iocharset', &(0x7f0000000080)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000009600)='iocharset', &(0x7f00000001c0)='ntbs3\x002\xbf\x8f*\xc7\x03\xd8\x18\xe9\xb41\xdb*\xc4\xb2b/5\x81\x10\x8a\xdaZ\x86\xafq\xf6W\xfe\xed)>\x9f\x99ji\xc4\xf2q\v\tr\xc5\xd7\x96\x8e\x84&\xb2\n>\x8b\xd0\xee\x95\x1b\x88\xd1m\xef\x9eN\xe8R\xbf\x03dD\xfc\xe4 \x7f\xe0\x8bX\xd3^l\xe9\xd0s\xe6\xc9\xf2a\x1c\xc2\'\x8a|\xe5\x06Q\xce\xc3\x8e\xfdi\x0e\x81\xde\x1b\x85\xdfk\xa3\xce9\x9b\xc9\x18\x9a\xea\xc3\xeb\xfds\x04c\xb5y\xdb~\r\x97>Ut\xe0\xf6\v\xf8\xdcE\v\xa8z\x82\x84\xb1~\x82\xeb\x0fW{\x00\x14\xa89\x11d>ub\xeb\x85F\xd8\xd3\x83V\x82\xae\xf6\x0e\xfe\x1d\xaa\xf7\x8d\xde\xb6V$\x0f~\x05w\x1f3\x12\xfc$.\xab\xf2I{\xf3\xee\xe2\x1e\b3\xe5\xb7}j\x0f\xdd\xc5\x17\xf6\xb7i`%\xe3\x02\xa1|f\xdcL\xee\x9b\x88\xaa\xa9\x1b\x1f\xbcg\xa6]F\xf9w]BFr-\x0f\xd6\x10\xa7\x06\xd4\xa1\f\xac\xa3R\xe8\x02v', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0) 10.426206967s ago: executing program 1 (id=4321): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x620}, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5f}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8014}, 0x200040d4) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000380)={"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"}) close(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x140) fcntl$notify(r7, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 10.425632842s ago: executing program 6 (id=4322): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x1000}) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001080), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001240), 0x6, 0x20000) ioctl$TCSBRKP(r5, 0x5425, 0x0) (async) ioctl$TCSBRKP(r5, 0x5425, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000740), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000048"], 0x48, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000f41000030500000000000080000000009cdffd7458646d502e4b6ff893d0057e1cd0af8a0a6a389aa7f1acf17e6fd8b47992208fd4d6129b093faca19310557e6189e9627d05da61201dfbbedf95c1f485c3ee1f69a22574d61e953af1d6fbcff03ffdeb62d22f6751442f91374aee3eb0f0790938deac94b47726b531773609157dc7767b3e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000f41000030500000000000080000000009cdffd7458646d502e4b6ff893d0057e1cd0af8a0a6a389aa7f1acf17e6fd8b47992208fd4d6129b093faca19310557e6189e9627d05da61201dfbbedf95c1f485c3ee1f69a22574d61e953af1d6fbcff03ffdeb62d22f6751442f91374aee3eb0f0790938deac94b47726b531773609157dc7767b3e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000f0bd8c675b45823ed4efe19955048f9996ce3e70948370a75bb9675f5cc9000f5d9dd5e166caada17cb290901e6cb1486a0f1e3f12e1d1ed49a391ff2f2cd61cbc09073a9cc2c5de4e92c3ff60066049a6d015086d08f32c5203a9a08975dba5df38f92b020ec0", @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESHEX=r5, @ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB="f679253dac9fe5fd29011bcbb10c308636916de995d0cc48e49c224ad3d44f0e604a8da2a99a22d958e1698e56293e08d8f5e9e410fff7895b095f6b7b17bc364dcace2deac7ef48b9191011baac0286cd26525b932ca11501af102872bf0243bde412a18e467faf013ac25bcc3639b7ce768191b2517cbae74d64e02c04577482890b442796016239c8779bf44c70402c093115e2447437181dea1891068a1006f25f57cbbf57c60e811afd51ce925c8d598b936c0d5d9cb09bda8437b17e535294931de2ea03b91e76886be3eace83097e1ca63bbb2ec04e"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x8010) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000f0bd8c675b45823ed4efe19955048f9996ce3e70948370a75bb9675f5cc9000f5d9dd5e166caada17cb290901e6cb1486a0f1e3f12e1d1ed49a391ff2f2cd61cbc09073a9cc2c5de4e92c3ff60066049a6d015086d08f32c5203a9a08975dba5df38f92b020ec0", @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESHEX=r5, @ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB="f679253dac9fe5fd29011bcbb10c308636916de995d0cc48e49c224ad3d44f0e604a8da2a99a22d958e1698e56293e08d8f5e9e410fff7895b095f6b7b17bc364dcace2deac7ef48b9191011baac0286cd26525b932ca11501af102872bf0243bde412a18e467faf013ac25bcc3639b7ce768191b2517cbae74d64e02c04577482890b442796016239c8779bf44c70402c093115e2447437181dea1891068a1006f25f57cbbf57c60e811afd51ce925c8d598b936c0d5d9cb09bda8437b17e535294931de2ea03b91e76886be3eace83097e1ca63bbb2ec04e"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x8010) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="4c05950ddb19d1db3e079da63628c7b60f", 0x11}], 0x1}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r9, 0x400454ce, 0xee01) (async) ioctl$TUNSETGROUP(r9, 0x400454ce, 0xee01) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRES16=r3, @ANYRES8=r5, @ANYRESHEX=r7, @ANYRESDEC=r0, @ANYRESDEC=r8], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000f1ffffff00000000009500000000008000d9faff07003d7548a5df4d044728ecb6313ff41d589428705a332edaa0f5788215be0740fb1d6c71c482d8f2223d99f90e93fe9c7064431b1740818a414c0d1b4499cba2"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000f1ffffff00000000009500000000008000d9faff07003d7548a5df4d044728ecb6313ff41d589428705a332edaa0f5788215be0740fb1d6c71c482d8f2223d99f90e93fe9c7064431b1740818a414c0d1b4499cba2"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) socket$inet6(0xa, 0x805, 0x0) (async) r12 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4a20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r12, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 10.113253071s ago: executing program 38 (id=4322): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x1000}) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000001080), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x81, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x9, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001240), 0x6, 0x20000) ioctl$TCSBRKP(r5, 0x5425, 0x0) (async) ioctl$TCSBRKP(r5, 0x5425, 0x0) add_key$fscrypt_provisioning(&(0x7f0000000740), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000048"], 0x48, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000f41000030500000000000080000000009cdffd7458646d502e4b6ff893d0057e1cd0af8a0a6a389aa7f1acf17e6fd8b47992208fd4d6129b093faca19310557e6189e9627d05da61201dfbbedf95c1f485c3ee1f69a22574d61e953af1d6fbcff03ffdeb62d22f6751442f91374aee3eb0f0790938deac94b47726b531773609157dc7767b3e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=ANY=[@ANYBLOB="3c0000f41000030500000000000080000000009cdffd7458646d502e4b6ff893d0057e1cd0af8a0a6a389aa7f1acf17e6fd8b47992208fd4d6129b093faca19310557e6189e9627d05da61201dfbbedf95c1f485c3ee1f69a22574d61e953af1d6fbcff03ffdeb62d22f6751442f91374aee3eb0f0790938deac94b47726b531773609157dc7767b3e", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800090001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) ioctl$TIOCGPGRP(r5, 0x5437, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000f0bd8c675b45823ed4efe19955048f9996ce3e70948370a75bb9675f5cc9000f5d9dd5e166caada17cb290901e6cb1486a0f1e3f12e1d1ed49a391ff2f2cd61cbc09073a9cc2c5de4e92c3ff60066049a6d015086d08f32c5203a9a08975dba5df38f92b020ec0", @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESHEX=r5, @ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB="f679253dac9fe5fd29011bcbb10c308636916de995d0cc48e49c224ad3d44f0e604a8da2a99a22d958e1698e56293e08d8f5e9e410fff7895b095f6b7b17bc364dcace2deac7ef48b9191011baac0286cd26525b932ca11501af102872bf0243bde412a18e467faf013ac25bcc3639b7ce768191b2517cbae74d64e02c04577482890b442796016239c8779bf44c70402c093115e2447437181dea1891068a1006f25f57cbbf57c60e811afd51ce925c8d598b936c0d5d9cb09bda8437b17e535294931de2ea03b91e76886be3eace83097e1ca63bbb2ec04e"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x8010) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000f0bd8c675b45823ed4efe19955048f9996ce3e70948370a75bb9675f5cc9000f5d9dd5e166caada17cb290901e6cb1486a0f1e3f12e1d1ed49a391ff2f2cd61cbc09073a9cc2c5de4e92c3ff60066049a6d015086d08f32c5203a9a08975dba5df38f92b020ec0", @ANYRES16=r1, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRESHEX=r5, @ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB="f679253dac9fe5fd29011bcbb10c308636916de995d0cc48e49c224ad3d44f0e604a8da2a99a22d958e1698e56293e08d8f5e9e410fff7895b095f6b7b17bc364dcace2deac7ef48b9191011baac0286cd26525b932ca11501af102872bf0243bde412a18e467faf013ac25bcc3639b7ce768191b2517cbae74d64e02c04577482890b442796016239c8779bf44c70402c093115e2447437181dea1891068a1006f25f57cbbf57c60e811afd51ce925c8d598b936c0d5d9cb09bda8437b17e535294931de2ea03b91e76886be3eace83097e1ca63bbb2ec04e"], 0x14}, 0x1, 0x0, 0x0, 0x20008854}, 0x8010) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)="4c05950ddb19d1db3e079da63628c7b60f", 0x11}], 0x1}, 0x20000000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003101a08, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r9, 0x400454ce, 0xee01) (async) ioctl$TUNSETGROUP(r9, 0x400454ce, 0xee01) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x103900, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRES16=r3, @ANYRES8=r5, @ANYRESHEX=r7, @ANYRESDEC=r0, @ANYRESDEC=r8], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000f1ffffff00000000009500000000008000d9faff07003d7548a5df4d044728ecb6313ff41d589428705a332edaa0f5788215be0740fb1d6c71c482d8f2223d99f90e93fe9c7064431b1740818a414c0d1b4499cba2"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000000000f1ffffff00000000009500000000008000d9faff07003d7548a5df4d044728ecb6313ff41d589428705a332edaa0f5788215be0740fb1d6c71c482d8f2223d99f90e93fe9c7064431b1740818a414c0d1b4499cba2"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) socket$inet6(0xa, 0x805, 0x0) (async) r12 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000190c0)=[@in6={0xa, 0x4a20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(r12, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) 10.105655117s ago: executing program 9 (id=4325): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x20000000002, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xc688, 0x1002, 0x3, 0x8316, 0x3, "043900ffff0008050000f4ffff7fffffffff00", 0x8, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fstat(r2, 0x0) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$packet(r7, 0x0, &(0x7f00000001c0)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000228bd7000ffdbdf250a0000000c0099000127b0ff9af0304dfc3eb28dcdd691fbe22bbfa5875cdc00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x10880}, 0x80) read$FUSE(r8, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x7fff, 0x0, 0x0, 0x100, 0x100}}, 0x50) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r10, {{0x9, 0x4, 0x6, 0x3, 0x7, 0x5, 0x5, 0x5}}}, 0x60) 10.020770731s ago: executing program 9 (id=4326): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf250900020073797a3200000000080041007278650014003b006c6f00000000000000000000000000003239bea3d06b355a5fa19e23391457458b74c11539e68345d210eb16ab493c2d65dd7a1ca7980a03b86ac8c5e0ab690e86b31be1439f769a8083e296a57dfa4dc52f"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 9.917197213s ago: executing program 9 (id=4327): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x8, 0x400082) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f00000002c0)={0xfffffffffffffffd, 0x9, 0x3, 0xf, 0x2}) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, {0x2b5b, 0x5, 0xb, 0xc}}) r2 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x68040000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 8.559589283s ago: executing program 7 (id=4329): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure', 0x7) close(r0) 8.557979241s ago: executing program 1 (id=4330): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/150, 0x96}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000300)=""/29, 0x1d}], 0x4, 0x3ff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) syz_usb_disconnect(r0) 8.398401569s ago: executing program 7 (id=4331): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000300)='bond_slave_1\x00', &(0x7f0000000340)='./cgroup.cpu/test/memory.oom_control\x00', r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.893622681s ago: executing program 7 (id=4333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, 0x0, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@gettaction={0x14, 0x32, 0x605, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010003, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) madvise(&(0x7f000008d000/0x2000)=nil, 0x2000, 0xe) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000300)=@x86={0x38, 0x8, 0x81, 0x0, 0x2, 0x6, 0x67, 0x0, 0x2, 0x6, 0x0, 0x9, 0x0, 0x5, 0x4, 0x3, 0xf4, 0x7a, 0x3, '\x00', 0x5, 0x44c6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.551581795s ago: executing program 7 (id=4334): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a000000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.880368082s ago: executing program 8 (id=4337): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000e00000010000095000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000c2d000/0x1000)=nil, 0x1000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x304048, 0x4) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000493000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 4.864365651s ago: executing program 1 (id=4338): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x2c}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) 4.659266244s ago: executing program 8 (id=4339): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000e0000001000009500"/24], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r3}, 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f0000c2d000/0x1000)=nil, 0x1000) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x304048, 0x4) mbind(&(0x7f0000493000/0x12000)=nil, 0x12000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 3.514992315s ago: executing program 9 (id=4340): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503"], 0x88}, 0x1, 0x7}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000400)) ioctl(r0, 0x6f41, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000004015"], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000017c0)='./file0/file1\x00', 0x0, 0x2008, r2}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x6, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000000000000001000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200001400000083000000bf09000000000000550901000000000095000000000000001868009829ec6f5300000000000000000004020000bf91000000000000b7020000020000008500000085000000b700000000000000950000000000"], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000600)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600)={0x4, 0xa, 0x3d, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880), 0x10, 0xffff42d3}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d30783030303030303030303030303130"]) lchown(&(0x7f0000000040)='./file0/file1\x00', 0xee01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x1c1202, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000000)={'adq12b\x00', [0x300, 0x3, 0x7ffffffe, 0x8, 0x2f, 0x9, 0x0, 0x890, 0x280ffa, 0xfdfffffb, 0x2, 0xffffffff, 0x1031, 0x100000b, 0xf, 0x40000009, 0xfff7ffa6, 0xd4c, 0x1ff, 0x9ea, 0x3, 0x4000b, 0x8, 0x7, 0x1, 0x8, 0x5, 0x8, 0xf, 0x2000006, 0x77fd]}) ioctl$COMEDI_CANCEL(r9, 0x6407) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r1, @ANYRESHEX=0x0], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 3.326009123s ago: executing program 8 (id=4341): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='measure', 0x7) close(r0) 3.102332731s ago: executing program 8 (id=4342): sendto$inet(0xffffffffffffffff, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080), &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000003c0)={"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"}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000004000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\x00') ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 2.842584165s ago: executing program 8 (id=4343): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = socket(0xa, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000240)={0x620}, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5f}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8014}, 0x200040d4) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xa) fchdir(r5) r6 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000380)={"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"}) ftruncate(r6, 0x2007ffb) close(r6) r7 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x140) fcntl$notify(r7, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1000, 0x0) 2.592035587s ago: executing program 7 (id=4344): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xfe39, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7f, 0x4, 0x20000000, 0x4, 0x9}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2.055574489s ago: executing program 1 (id=4345): openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x2, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x7fff, 0xffffffffffffffff, 0x6c4ba42, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x4, 0x0, 0x0, 0x0, 0x5, 0x2000000000, 0xffffffffffffffff, 0x20000000002, 0xfffffffffffffffc, 0x3, 0x8000000000000000, 0x2, 0xff, 0x800, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x0, 0x4, 0x1, 0x0, 0x3, 0x4, 0x1, 0x6, 0x0, 0xfffffffffffffffc, 0x800, 0x1772cf4f, 0x0, 0x0, 0x7ffffffffc, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0xfffffffffffffffd, 0x4a, 0x0, 0x3000000000000, 0xfffffffffffffffd, 0x2, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x8, 0x0, 0x2, 0x2001, 0x0, 0x0, 0x400000, 0x40, 0x0, 0x40000000000, 0x801, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x8, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2000000000000002, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x6, 0x0, 0x1000000003, 0x10000000010, 0x4000100000001]}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000140)={0xc688, 0x1002, 0x3, 0x8316, 0x3, "043900ffff0008050000f4ffff7fffffffff00", 0x8, 0x1}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00') fstat(r2, 0x0) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f0000000040)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x4}}}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff}}}, 0x90) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) getsockname$packet(r7, 0x0, &(0x7f00000001c0)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000228bd7000ffdbdf250a0000000c0099000127b0ff9af0304dfc3eb28dcdd691fbe22bbfa5875cdc00"/54], 0x3c}, 0x1, 0x0, 0x0, 0x10880}, 0x80) read$FUSE(r8, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000180)={0x50, 0x0, r10, {0x7, 0x2b, 0x1, 0x3800402c, 0x3, 0xfffe, 0x2, 0x7fff, 0x0, 0x0, 0x100, 0x100}}, 0x50) write$FUSE_STATFS(r2, &(0x7f00000000c0)={0x60, 0x0, r10, {{0x9, 0x4, 0x6, 0x3, 0x7, 0x5, 0x5, 0x5}}}, 0x60) 1.94545222s ago: executing program 1 (id=4346): r0 = userfaultfd(0x80001) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x20010, r2, 0xac719000) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000200)={0x20000000, 0x3, 0x100000001}) read(r0, &(0x7f0000000180)=""/145, 0x91) close(0x3) 1.745912165s ago: executing program 7 (id=4347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$llc(r3, &(0x7f0000000040)={0x1a, 0xf, 0x9, 0xa, 0x6, 0xf, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="fb6bdfe97663f36c", 0x8, 0x24006015, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='stacktrace', 0xa) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001280)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x44c041) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 1.41034206s ago: executing program 9 (id=4348): openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8000000008001, 0x0) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) prlimit64(r4, 0xd, &(0x7f0000000280)={0x100000000, 0xf}, &(0x7f00000003c0)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$nullb(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r7 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r7, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x6, 0x0, 0x4850, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x100000000000a, 0x80000006, 0x400}, 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x8000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1.276286579s ago: executing program 8 (id=4349): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r0, &(0x7f0000000500)=""/166, 0xa6) r1 = syz_open_dev$dmmidi(&(0x7f0000001600), 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000380)=0x1cc2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0xc2565bca80e1bd45) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x40045702, &(0x7f0000000000)) syz_open_dev$dri(0x0, 0xa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f000001a640)=""/102400, 0x19000) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000001100)={0x20001, {{0xa, 0xffff, 0x80000, @empty, 0x42000000}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, 0x0, 0x310) r7 = shmget$private(0x0, 0x800000, 0x400, &(0x7f0000800000/0x800000)=nil) shmat(r7, &(0x7f0000f35000/0x1000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000001040)={0x0, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000011c0)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"a2e3ad2107c752f91b25380987f70e06d038e7ff7fc6e5539b3264078b089b3b083468060890e0878f0e1ac6e70a9b3365959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31350d095d0636cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7dafbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e19c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa75a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d86fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a00508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f375257fa0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f228c783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f5f71d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810930500ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab974c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff25e20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc660db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d154d8a5ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c79a9a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21e5ec68cb068ea88067d905ea917bb03eefdaebdeabf2c0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 108.434363ms ago: executing program 9 (id=4350): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000000314010027bd7010fedbdf250900020073797a3200000000080041007278650014003b006c6f00000000000000000000000000003239bea3d06b"], 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 0s ago: executing program 1 (id=4351): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) close(r0) kernel console output (not intermixed with test programs): =system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1302.964598][ T188] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1302.987996][T13407] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1303.077106][T17422] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.213019][T13407] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.227952][ T188] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1303.245717][T17422] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1303.417678][T13407] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1303.433420][ T188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.459162][T17422] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1303.472421][T13407] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1303.507234][T17422] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.526918][T13407] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.555825][T17422] usb 7-1: Product: syz [ 1303.569764][T13407] usb 9-1: config 0 descriptor?? [ 1303.586044][T17422] usb 7-1: Manufacturer: syz [ 1303.603288][T13407] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1303.613332][T17422] usb 7-1: SerialNumber: syz [ 1303.646858][T13407] dvb-usb: bulk message failed: -22 (3/0) [ 1303.689663][T13407] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1303.717341][ T188] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1303.764638][T13407] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1303.792595][ T188] usb 2-1: USB disconnect, device number 48 [ 1303.801118][T20232] dvb-usb: bulk message failed: -22 (2/0) [ 1303.827670][T13407] usb 9-1: media controller created [ 1303.880009][T13407] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1304.059967][T13407] dvb-usb: bulk message failed: -22 (6/0) [ 1304.246579][T13407] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1305.107733][T13407] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input38 [ 1305.126129][T12038] usb 10-1: USB disconnect, device number 9 [ 1305.183373][T20252] orangefs_mount: mount request failed with -4 [ 1305.286418][T13407] dvb-usb: schedule remote query interval to 150 msecs. [ 1305.379390][T13407] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1305.487556][T13407] usb 9-1: USB disconnect, device number 5 [ 1305.698816][T18617] usb 7-1: USB disconnect, device number 6 [ 1305.751420][T13407] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1305.785517][T20272] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1305.865962][T20270] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3709'. [ 1306.066585][ T29] audit: type=1400 audit(2000000346.658:919): avc: denied { write } for pid=20247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.223771][T13407] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1306.445222][T13407] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1306.485693][ T29] audit: type=1400 audit(2000000347.078:920): avc: denied { write } for pid=20288 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1306.537047][T13407] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.359282][T20258] Bluetooth: hci3: command 0x0406 tx timeout [ 1307.367135][T20258] Bluetooth: hci4: command 0x0406 tx timeout [ 1307.376034][T20258] Bluetooth: hci7: command 0x0406 tx timeout [ 1307.382096][T20258] Bluetooth: hci6: command 0x0406 tx timeout [ 1307.563290][T20292] orangefs_mount: mount request failed with -4 [ 1307.650341][T13407] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1308.117140][T13407] usb 9-1: USB disconnect, device number 6 [ 1308.340167][T10824] Bluetooth: hci8: link tx timeout [ 1308.345418][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.354151][T10824] Bluetooth: hci8: link tx timeout [ 1308.359278][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.376668][T10824] Bluetooth: hci8: link tx timeout [ 1308.383752][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.391748][T10824] Bluetooth: hci8: link tx timeout [ 1308.398019][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.407911][T10824] Bluetooth: hci8: link tx timeout [ 1308.414272][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.427834][T10824] Bluetooth: hci8: link tx timeout [ 1308.434391][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.445849][T10824] Bluetooth: hci8: link tx timeout [ 1308.450980][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.484164][T10824] Bluetooth: hci8: link tx timeout [ 1308.489361][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.516677][T10824] Bluetooth: hci8: link tx timeout [ 1308.522132][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.540408][T10824] Bluetooth: hci8: link tx timeout [ 1308.546165][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1308.564299][T10824] Bluetooth: hci8: link tx timeout [ 1308.569505][T10824] Bluetooth: hci8: killing stalled connection 10:aa:aa:aa:aa:aa [ 1310.162121][ T29] audit: type=1400 audit(2000000350.748:921): avc: denied { write } for pid=20301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.383909][T10824] Bluetooth: hci8: command 0x0406 tx timeout [ 1310.586277][ T29] audit: type=1400 audit(2000000351.178:922): avc: denied { write } for pid=20335 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1310.733005][T20340] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1310.781826][ T29] audit: type=1400 audit(2000000351.288:923): avc: denied { watch watch_reads } for pid=20333 comm="syz.1.3724" path="/proc/195" dev="proc" ino=79758 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1310.811840][T20344] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=20344 comm=syz.6.3715 [ 1310.829588][T14871] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 1310.903421][T20344] Cannot find set identified by id 0 to match [ 1311.082476][T13407] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1311.275488][T13407] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 1311.333015][T13407] usb 10-1: config 0 has no interface number 0 [ 1311.368699][T13407] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1311.448726][T13407] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1312.297508][T13407] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1312.353256][T13407] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1312.391729][ T10] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1312.414878][T13407] usb 10-1: Manufacturer: syz [ 1312.444083][T13407] usb 10-1: SerialNumber: syz [ 1312.465956][T13407] usb 10-1: config 0 descriptor?? [ 1312.502193][T20364] orangefs_mount: mount request failed with -4 [ 1312.625518][ T29] audit: type=1400 audit(2000000353.218:924): avc: denied { write } for pid=20348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1312.652376][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1312.714440][ T10] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1312.773388][T13407] usbtouchscreen 10-1:0.214: Failed to read FW rev: 0 [ 1312.797416][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1312.848199][T13407] usbtouchscreen 10-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1312.870868][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1312.957720][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1312.973032][ T29] audit: type=1400 audit(2000000353.568:925): avc: denied { write } for pid=20380 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1313.077771][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1313.155285][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1313.202011][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1313.264415][ T10] usb 2-1: Product: syz [ 1313.296257][ T10] usb 2-1: Manufacturer: syz [ 1313.354725][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1313.393384][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1313.425838][T20392] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3736'. [ 1313.446725][ T10] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1313.695927][ T10] usb 2-1: USB disconnect, device number 49 [ 1314.237775][ T29] audit: type=1400 audit(2000000354.828:926): avc: denied { write } for pid=20390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.544148][ T29] audit: type=1400 audit(2000000355.128:927): avc: denied { write } for pid=20424 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1314.628330][T20426] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3738'. [ 1314.895953][T11845] usb 10-1: USB disconnect, device number 10 [ 1315.915350][T20426] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1316.369876][ T29] audit: type=1400 audit(2000000356.958:928): avc: denied { mounton } for pid=20455 comm="syz.1.3744" path="/file0" dev="ramfs" ino=80358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1316.455027][T10824] Bluetooth: hci8: Invalid handle: 0x20c9 > 0x0eff [ 1317.078690][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b93c800: rx timeout, send abort [ 1317.087200][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b93c800: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 1318.650492][T20472] orangefs_mount: mount request failed with -4 [ 1320.164481][ T29] audit: type=1400 audit(2000000360.748:929): avc: denied { read } for pid=20499 comm="syz.8.3754" name="/" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1320.190417][T20502] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20502 comm=syz.8.3754 [ 1320.255025][T20498] orangefs_mount: mount request failed with -4 [ 1320.436944][ T29] audit: type=1400 audit(2000000360.748:930): avc: denied { read open } for pid=20499 comm="syz.8.3754" path="/" dev="configfs" ino=40 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1320.648984][ T29] audit: type=1400 audit(2000000361.228:931): avc: denied { write } for pid=20470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1321.028760][ T29] audit: type=1400 audit(2000000361.618:932): avc: denied { write } for pid=20515 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1321.232295][T17422] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1321.426136][T17422] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.511378][T17422] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1321.595850][T17422] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1321.656259][T17422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.719326][T17422] usb 9-1: Product: syz [ 1321.754674][T17422] usb 9-1: Manufacturer: syz [ 1321.794431][T17422] usb 9-1: SerialNumber: syz [ 1321.874492][T20540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1322.442427][ T29] audit: type=1400 audit(2000000363.038:933): avc: denied { write } for pid=20524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.542517][T17422] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1322.739359][T17422] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1322.765504][ T29] audit: type=1400 audit(2000000363.348:934): avc: denied { write } for pid=20557 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.856543][T17422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.994257][ T29] audit: type=1400 audit(2000000363.548:935): avc: denied { ioctl } for pid=20571 comm="syz.6.3766" path="socket:[80641]" dev="sockfs" ino=80641 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1323.143720][ T29] audit: type=1400 audit(2000000363.558:936): avc: denied { getopt } for pid=20571 comm="syz.6.3766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1323.187115][T17422] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1323.718695][T12038] usb 2-1: USB disconnect, device number 50 [ 1323.725354][ T29] audit: type=1400 audit(2000000364.248:937): avc: denied { map_create } for pid=20582 comm="syz.9.3768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1324.715554][ T10] usb 9-1: USB disconnect, device number 7 [ 1324.849208][T20593] orangefs_mount: mount request failed with -4 [ 1325.928434][ T29] audit: type=1400 audit(2000000366.508:938): avc: denied { prog_load } for pid=20607 comm="syz.8.3774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1326.105553][T20605] orangefs_mount: mount request failed with -4 [ 1326.196869][ T29] audit: type=1400 audit(2000000366.618:939): avc: denied { write } for pid=20577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.269490][T20618] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3776'. [ 1326.389876][T20622] macvtap0: entered allmulticast mode [ 1326.475711][T20622] veth0_macvtap: entered allmulticast mode [ 1326.501036][T20618] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1326.549526][ T29] audit: type=1400 audit(2000000367.138:940): avc: denied { write } for pid=20619 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.691457][T20620] macvtap0: left allmulticast mode [ 1326.739895][T20620] veth0_macvtap: left allmulticast mode [ 1327.012515][ T29] audit: type=1400 audit(2000000367.608:941): avc: denied { prog_run } for pid=20631 comm="syz.8.3780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1327.073385][T20636] mmap: syz.1.3781 (20636) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1327.146654][ T29] audit: type=1326 audit(2000000367.638:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.1.3781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb719e019 code=0x7ffc0000 [ 1327.189628][T17421] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1327.219647][T20639] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1327.357667][ T29] audit: type=1326 audit(2000000367.648:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.1.3781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb719e019 code=0x7ffc0000 [ 1327.416928][T17421] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1327.466490][T17421] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.289197][ T29] audit: type=1326 audit(2000000367.648:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.1.3781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bb719e019 code=0x7ffc0000 [ 1328.346461][T20644] orangefs_mount: mount request failed with -4 [ 1328.526882][T17421] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1328.593662][ T29] audit: type=1326 audit(2000000367.648:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.1.3781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb719e019 code=0x7ffc0000 [ 1328.709425][T12038] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1328.717127][T17421] usb 10-1: USB disconnect, device number 11 [ 1328.861427][ T29] audit: type=1326 audit(2000000367.648:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.1.3781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bb719e019 code=0x7ffc0000 [ 1328.903107][T17422] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1328.965809][T12038] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1329.005469][T12038] usb 7-1: config 0 has no interface number 0 [ 1329.045583][T12038] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1329.086912][ T29] audit: type=1326 audit(2000000367.658:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20635 comm="syz.1.3781" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bb719e019 code=0x7ffc0000 [ 1329.159110][T12038] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1329.173703][T17422] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1329.234047][T12038] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1329.249021][T17422] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1329.307638][T12038] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1329.355178][T17422] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1329.375599][T12038] usb 7-1: Manufacturer: syz [ 1329.421062][T12038] usb 7-1: SerialNumber: syz [ 1329.451529][T17422] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.489755][T12038] usb 7-1: config 0 descriptor?? [ 1329.543158][T17422] usb 2-1: Product: syz [ 1329.598540][T17422] usb 2-1: Manufacturer: syz [ 1329.684753][T17422] usb 2-1: SerialNumber: syz [ 1329.764494][T12038] usbtouchscreen 7-1:0.214: Failed to read FW rev: 0 [ 1329.829649][T12038] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1331.037885][T20690] fuse: Bad value for 'group_id' [ 1331.073109][T20682] orangefs_mount: mount request failed with -4 [ 1331.138696][T20690] fuse: Bad value for 'group_id' [ 1331.214725][T17421] hid_parser_main: 91 callbacks suppressed [ 1331.214745][T17421] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1331.251080][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 1331.251093][ T29] audit: type=1400 audit(2000000371.838:970): avc: denied { getattr } for pid=20689 comm="syz.9.3787" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=81082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1331.355229][T17421] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1331.440309][T17421] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1331.529430][ T29] audit: type=1400 audit(2000000372.088:971): avc: denied { write } for pid=20672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.718720][T17422] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1331.737463][T20703] fido_id[20703]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1331.817082][ T29] audit: type=1400 audit(2000000372.408:972): avc: denied { write } for pid=20704 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1331.863920][T17422] usb 2-1: USB disconnect, device number 51 [ 1331.944491][T17422] usblp0: removed [ 1332.023249][T20710] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3791'. [ 1332.109965][T20710] veth0_macvtap: left promiscuous mode [ 1332.266356][T13407] usb 7-1: USB disconnect, device number 7 [ 1332.515108][T17422] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1333.413205][ T29] audit: type=1400 audit(2000000373.998:973): avc: denied { read } for pid=20700 comm="syz.8.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1334.360072][ T29] audit: type=1400 audit(2000000374.878:974): avc: denied { map_read map_write } for pid=20723 comm="syz.9.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1334.427670][T17422] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1334.485828][T17422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.841669][T17422] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1334.969129][T17422] usb 2-1: USB disconnect, device number 52 [ 1334.991274][ T29] audit: type=1400 audit(2000000375.578:975): avc: denied { write } for pid=20744 comm="syz.6.3798" name="c.1" dev="configfs" ino=49642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1335.255298][ T29] audit: type=1400 audit(2000000375.618:976): avc: denied { write } for pid=20744 comm="syz.6.3798" name="c.1" dev="configfs" ino=49642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1335.534451][ T29] audit: type=1400 audit(2000000375.798:977): avc: denied { write } for pid=20714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1335.728437][ T29] audit: type=1400 audit(2000000376.228:978): avc: denied { write } for pid=20764 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1335.838837][T20773] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3804'. [ 1336.732302][T20778] xt_hashlimit: size too large, truncated to 1048576 [ 1337.006690][T20789] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1337.482095][T11845] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1337.524772][ T29] audit: type=1400 audit(2000000378.108:979): avc: denied { write } for pid=20776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1337.715655][T11845] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1337.753847][T11845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.835215][ T29] audit: type=1400 audit(2000000378.418:980): avc: denied { write } for pid=20825 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1338.151643][T12038] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1338.181678][T17422] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1339.131456][T11845] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1339.215836][T11845] usb 7-1: USB disconnect, device number 8 [ 1339.295094][T12038] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1339.307435][T17422] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.351170][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3816'. [ 1339.369954][ T29] audit: type=1400 audit(2000000379.938:981): avc: denied { wake_alarm } for pid=20832 comm="syz.7.3816" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1339.407929][T12038] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.431306][T17422] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1339.495028][T17422] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1339.554770][T17422] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.594063][T17422] usb 10-1: Product: syz [ 1339.619849][T17422] usb 10-1: Manufacturer: syz [ 1339.656170][T17422] usb 10-1: SerialNumber: syz [ 1339.682877][T12038] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1339.753364][T12038] usb 2-1: USB disconnect, device number 53 [ 1339.769165][T20848] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3819'. [ 1340.354801][ T29] audit: type=1400 audit(2000000380.948:982): avc: denied { write } for pid=20835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1340.421496][T20848] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1341.613927][T12038] usb 10-1: USB disconnect, device number 12 [ 1341.672058][ T29] audit: type=1400 audit(2000000382.258:983): avc: denied { write } for pid=20862 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1341.712833][T14871] Bluetooth: hci6: Invalid handle: 0x20c9 > 0x0eff [ 1341.746791][T20867] orangefs_mount: mount request failed with -4 [ 1342.025339][T20880] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3828'. [ 1342.394344][T20880] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1342.469628][T20888] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3830'. [ 1344.332648][T20908] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1348.416969][T20944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1349.588511][T20948] orangefs_mount: mount request failed with -4 [ 1349.938298][T20971] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3853'. [ 1350.031171][T20974] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3854'. [ 1350.336143][ T29] audit: type=1400 audit(2000000390.928:984): avc: denied { write } for pid=20932 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1350.666706][T20981] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3855'. [ 1350.715324][ T29] audit: type=1400 audit(2000000391.308:985): avc: denied { write } for pid=20982 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1351.010212][T20993] FAULT_INJECTION: forcing a failure. [ 1351.010212][T20993] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.076248][T20993] CPU: 0 UID: 0 PID: 20993 Comm: syz.9.3858 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.076272][T20993] Tainted: [L]=SOFTLOCKUP [ 1351.076276][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1351.076282][T20993] Call Trace: [ 1351.076287][T20993] [ 1351.076291][T20993] dump_stack_lvl+0x100/0x190 [ 1351.076309][T20993] should_fail_ex.cold+0x5/0xa [ 1351.076323][T20993] should_failslab+0xc2/0x120 [ 1351.076339][T20993] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1351.076353][T20993] ? __alloc_skb+0x5b7/0x710 [ 1351.076367][T20993] ? __alloc_skb+0x140/0x710 [ 1351.076381][T20993] __alloc_skb+0x140/0x710 [ 1351.076394][T20993] ? __alloc_skb+0x5b7/0x710 [ 1351.076406][T20993] ? __pfx___alloc_skb+0x10/0x10 [ 1351.076423][T20993] netlink_alloc_large_skb+0x69/0x150 [ 1351.076437][T20993] netlink_sendmsg+0x680/0xda0 [ 1351.076451][T20993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.076464][T20993] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1351.076483][T20993] ____sys_sendmsg+0xa4d/0xbe0 [ 1351.076500][T20993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1351.076512][T20993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1351.076535][T20993] ___sys_sendmsg+0x190/0x1e0 [ 1351.076547][T20993] ? __pfx____sys_sendmsg+0x10/0x10 [ 1351.076557][T20993] ? __lock_acquire+0x49f/0x1a40 [ 1351.076571][T20993] ? get_pid_task+0x106/0x250 [ 1351.076595][T20993] __sys_sendmsg+0x160/0x210 [ 1351.076610][T20993] ? __pfx___sys_sendmsg+0x10/0x10 [ 1351.076632][T20993] do_syscall_64+0x115/0x870 [ 1351.076646][T20993] ? clear_bhb_loop+0x40/0x90 [ 1351.076659][T20993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.076670][T20993] RIP: 0033:0x7fe80979e019 [ 1351.076680][T20993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.076691][T20993] RSP: 002b:00007fe8079f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1351.076702][T20993] RAX: ffffffffffffffda RBX: 00007fe809a25fa0 RCX: 00007fe80979e019 [ 1351.076709][T20993] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1351.076716][T20993] RBP: 00007fe8079f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.076722][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1351.076728][T20993] R13: 00007fe809a26038 R14: 00007fe809a25fa0 R15: 00007ffcbbf56688 [ 1351.076741][T20993] [ 1352.021639][T12038] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1352.042877][T21003] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3862'. [ 1352.188634][T12038] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1352.198483][T12038] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1352.243499][T12038] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1352.301277][T12038] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1353.096974][T12038] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1353.147503][T12038] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1353.170612][T12038] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1353.201192][T12038] usb 7-1: Product: syz [ 1353.219864][T12038] usb 7-1: Manufacturer: syz [ 1353.236475][T12038] cdc_wdm 7-1:1.0: skipping garbage [ 1353.259123][T12038] cdc_wdm 7-1:1.0: skipping garbage [ 1353.277981][T21008] orangefs_mount: mount request failed with -4 [ 1353.289947][T12038] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1353.315392][T12038] cdc_wdm 7-1:1.0: Unknown control protocol [ 1353.425210][T21010] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3863'. [ 1353.686278][ C0] wdm_int_callback: 47 callbacks suppressed [ 1353.686294][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.700359][ C0] wdm_int_callback: 47 callbacks suppressed [ 1353.700372][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.712804][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.719266][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.725863][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.732468][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.739048][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.745379][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.751962][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.758191][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.764755][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.771586][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.778160][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.784707][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.791281][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.797471][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.804043][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.810246][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.816808][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1353.823018][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1353.838076][T12038] usb 7-1: USB disconnect, device number 9 [ 1353.843992][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1355.911428][T21022] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3865'. [ 1356.145238][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.151705][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.202298][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1356.251753][T12038] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1357.185989][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.200988][T12038] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.234680][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1357.255813][T12038] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1357.314031][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1357.323395][T21035] orangefs_mount: mount request failed with -4 [ 1357.404760][T12038] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1357.459851][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.483626][T12038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.524792][ T9] usb 2-1: Product: syz [ 1357.551345][T12038] usb 7-1: Product: syz [ 1357.563711][ T9] usb 2-1: Manufacturer: syz [ 1357.581946][T12038] usb 7-1: Manufacturer: syz [ 1357.590098][ T29] audit: type=1400 audit(2000000398.178:986): avc: denied { write } for pid=21018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1357.619675][ T9] usb 2-1: SerialNumber: syz [ 1357.639607][T12038] usb 7-1: SerialNumber: syz [ 1357.792030][T18617] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1357.845879][ T29] audit: type=1400 audit(2000000398.438:987): avc: denied { write } for pid=21045 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1358.327445][T18617] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1358.516555][T18617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.785512][T18617] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1358.875556][T21055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1358.922089][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1358.968185][T21057] 9p: Bad value for 'rfdno' [ 1359.049723][T11845] usb 9-1: USB disconnect, device number 8 [ 1359.094003][ T9] usb 8-1: config 0 has an invalid interface number: 214 but max is 0 [ 1359.102456][ T9] usb 8-1: config 0 has no interface number 0 [ 1359.108625][ T9] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1359.120687][ T9] usb 8-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1359.132187][ T9] usb 8-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1359.141428][ T9] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1359.149681][ T9] usb 8-1: Manufacturer: syz [ 1359.159317][ T9] usb 8-1: SerialNumber: syz [ 1359.166365][ T9] usb 8-1: config 0 descriptor?? [ 1359.211587][T18617] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 1359.378421][T11845] usb 7-1: USB disconnect, device number 10 [ 1359.397850][ T9] usbtouchscreen 8-1:0.214: Failed to read FW rev: 0 [ 1359.406857][T18617] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.435759][ T9] usbtouchscreen 8-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 1359.454568][T18617] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1359.479889][T18617] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1359.567213][ T9] usb 2-1: USB disconnect, device number 54 [ 1359.587522][T18617] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.640551][T18617] usb 10-1: config 0 descriptor?? [ 1359.667332][T18617] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1359.818668][T18617] dvb-usb: bulk message failed: -22 (3/0) [ 1360.655485][T21057] dvb-usb: bulk message failed: -22 (2/0) [ 1360.663518][T18617] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1360.717366][T18617] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1360.787327][T18617] usb 10-1: media controller created [ 1360.811064][T18617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1360.858600][T18617] dvb-usb: bulk message failed: -22 (6/0) [ 1360.886570][T18617] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1360.915432][T18617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input43 [ 1360.979529][T18617] dvb-usb: schedule remote query interval to 150 msecs. [ 1361.009893][T21077] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3878'. [ 1361.021145][T18617] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1361.036062][T11845] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1361.060873][T18617] usb 10-1: USB disconnect, device number 13 [ 1361.159686][T18617] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1361.223891][T11845] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1361.247273][T11845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1361.409979][T21080] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1361.434044][ T29] audit: type=1400 audit(2000000402.038:988): avc: denied { read } for pid=21079 comm="syz.9.3879" name="cgroup.procs" dev="cgroup" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 1362.536787][T11845] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1362.567505][T18617] usb 8-1: USB disconnect, device number 5 [ 1363.445818][T21081] Process accounting resumed [ 1363.497394][T18617] usb 9-1: USB disconnect, device number 9 [ 1363.676433][T21086] orangefs_mount: mount request failed with -4 [ 1364.294306][T10824] Bluetooth: hci6: Invalid handle: 0x20c9 > 0x0eff [ 1364.393855][T21100] 9p: Bad value for 'rfdno' [ 1364.645691][T11845] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1364.690126][ T29] audit: type=1400 audit(2000000405.278:989): avc: denied { create } for pid=21101 comm="syz.9.3886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1364.833459][T11845] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.869523][T11845] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1364.903547][T11845] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1364.930710][T11845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.959665][T11845] usb 9-1: config 0 descriptor?? [ 1364.988652][T11845] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1365.011122][T11845] dvb-usb: bulk message failed: -22 (3/0) [ 1365.037581][T11845] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1365.088873][T11845] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1365.101289][T11845] usb 9-1: media controller created [ 1365.120341][T11845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1365.154311][T11845] dvb-usb: bulk message failed: -22 (6/0) [ 1365.169231][T11845] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1365.188865][T21100] dvb-usb: bulk message failed: -22 (2/0) [ 1365.197640][T11845] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input44 [ 1365.264935][T11845] dvb-usb: schedule remote query interval to 150 msecs. [ 1365.282636][T11845] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1365.331970][T11845] usb 9-1: USB disconnect, device number 10 [ 1365.395406][T11845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1365.957993][T21115] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1367.086571][T21121] orangefs_mount: mount request failed with -4 [ 1369.895605][T21129] orangefs_mount: mount request failed with -4 [ 1370.118783][T21137] orangefs_mount: mount request failed with -4 [ 1372.375706][T21146] FAULT_INJECTION: forcing a failure. [ 1372.375706][T21146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.390257][T21146] CPU: 0 UID: 0 PID: 21146 Comm: syz.7.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1372.390276][T21146] Tainted: [L]=SOFTLOCKUP [ 1372.390280][T21146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1372.390287][T21146] Call Trace: [ 1372.390291][T21146] [ 1372.390295][T21146] dump_stack_lvl+0x100/0x190 [ 1372.390313][T21146] should_fail_ex.cold+0x5/0xa [ 1372.390328][T21146] _copy_to_iter+0x5a4/0x1720 [ 1372.390348][T21146] ? __pfx__copy_to_iter+0x10/0x10 [ 1372.390364][T21146] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1372.390382][T21146] seq_read_iter+0x691/0x1270 [ 1372.390398][T21146] seq_read+0x344/0x4d0 [ 1372.390409][T21146] ? __pfx_seq_read+0x10/0x10 [ 1372.390425][T21146] ? selinux_file_permission+0x8f/0x6d0 [ 1372.390445][T21146] ? __pfx_seq_read+0x10/0x10 [ 1372.390455][T21146] proc_reg_read+0x240/0x330 [ 1372.390467][T21146] ? __pfx_proc_reg_read+0x10/0x10 [ 1372.390480][T21146] vfs_read+0x1e4/0xb40 [ 1372.390499][T21146] ? __pfx_vfs_read+0x10/0x10 [ 1372.390514][T21146] ? find_held_lock+0x2b/0x80 [ 1372.390525][T21146] ? __fget_files+0x215/0x3d0 [ 1372.390536][T21146] ? __fget_files+0x215/0x3d0 [ 1372.390549][T21146] ? __fget_files+0x21f/0x3d0 [ 1372.390564][T21146] __x64_sys_pread64+0x1eb/0x250 [ 1372.390575][T21146] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1372.390590][T21146] do_syscall_64+0x115/0x870 [ 1372.390604][T21146] ? clear_bhb_loop+0x40/0x90 [ 1372.390617][T21146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.390628][T21146] RIP: 0033:0x7f7a3979e019 [ 1372.390639][T21146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1372.390649][T21146] RSP: 002b:00007f7a3a66d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1372.390660][T21146] RAX: ffffffffffffffda RBX: 00007f7a39a25fa0 RCX: 00007f7a3979e019 [ 1372.390672][T21146] RDX: 00000000000000c3 RSI: 0000200000003b00 RDI: 0000000000000007 [ 1372.390678][T21146] RBP: 00007f7a3a66d090 R08: 0000000000000000 R09: 0000000000000000 [ 1372.390684][T21146] R10: 000000000000591f R11: 0000000000000246 R12: 0000000000000001 [ 1372.390691][T21146] R13: 00007f7a39a26038 R14: 00007f7a39a25fa0 R15: 00007ffd87f5def8 [ 1372.390705][T21146] [ 1373.087389][T21162] FAULT_INJECTION: forcing a failure. [ 1373.087389][T21162] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1373.183393][T21162] CPU: 0 UID: 0 PID: 21162 Comm: syz.7.3903 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.183414][T21162] Tainted: [L]=SOFTLOCKUP [ 1373.183418][T21162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1373.183425][T21162] Call Trace: [ 1373.183429][T21162] [ 1373.183434][T21162] dump_stack_lvl+0x100/0x190 [ 1373.183455][T21162] should_fail_ex.cold+0x5/0xa [ 1373.183469][T21162] _copy_to_user+0x32/0xd0 [ 1373.183486][T21162] simple_read_from_buffer+0xcb/0x170 [ 1373.183499][T21162] proc_fail_nth_read+0x1af/0x230 [ 1373.183516][T21162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1373.183534][T21162] ? rw_verify_area+0xce/0x6d0 [ 1373.183549][T21162] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1373.183565][T21162] vfs_read+0x1e4/0xb40 [ 1373.183584][T21162] ? __pfx_vfs_read+0x10/0x10 [ 1373.183599][T21162] ? __fget_files+0x215/0x3d0 [ 1373.183614][T21162] ? __fget_files+0x21f/0x3d0 [ 1373.183629][T21162] ksys_read+0x12a/0x250 [ 1373.183645][T21162] ? __pfx_ksys_read+0x10/0x10 [ 1373.183665][T21162] do_syscall_64+0x115/0x870 [ 1373.183679][T21162] ? clear_bhb_loop+0x40/0x90 [ 1373.183692][T21162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.183704][T21162] RIP: 0033:0x7f7a3975e84e [ 1373.183714][T21162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1373.183724][T21162] RSP: 002b:00007f7a3a64bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1373.183736][T21162] RAX: ffffffffffffffda RBX: 00007f7a3a64c6c0 RCX: 00007f7a3975e84e [ 1373.183743][T21162] RDX: 000000000000000f RSI: 00007f7a3a64c0a0 RDI: 0000000000000005 [ 1373.183749][T21162] RBP: 00007f7a3a64c090 R08: 0000000000000000 R09: 0000000000000000 [ 1373.183756][T21162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1373.183762][T21162] R13: 00007f7a39a26128 R14: 00007f7a39a26090 R15: 00007ffd87f5def8 [ 1373.183776][T21162] [ 1374.602680][T21168] orangefs_mount: mount request failed with -4 [ 1374.943326][T21186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3908'. [ 1375.269492][T21193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1375.300908][T21186] SELinux: invalid class [ 1375.357292][T21196] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3908'. [ 1375.459230][T21186] SELinux: failed to load policy [ 1375.593508][ T29] audit: type=1400 audit(2000000416.196:990): avc: denied { kill } for pid=21194 comm="syz.9.3910" capability=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1375.630473][T21200] 9p: Bad value for 'rfdno' [ 1375.998879][T18617] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1376.328364][T18617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1376.369108][T18617] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1376.404770][T18617] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1376.417648][T21213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1376.425948][T18617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.902800][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1377.569746][T18617] usb 2-1: config 0 descriptor?? [ 1377.695445][ T29] audit: type=1400 audit(2000000418.296:991): avc: denied { checkpoint_restore } for pid=21215 comm="syz.7.3916" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1377.733278][T18617] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1377.882123][T13407] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1377.901229][T18617] dvb-usb: bulk message failed: -22 (3/0) [ 1377.914536][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1377.928525][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.938564][T21200] dvb-usb: bulk message failed: -22 (2/0) [ 1377.944795][T18617] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1377.980423][T18617] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1378.000326][T18617] usb 2-1: media controller created [ 1378.007584][T18617] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1378.031182][T21214] Process accounting resumed [ 1378.041950][T18617] dvb-usb: bulk message failed: -22 (6/0) [ 1378.064185][T18617] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1378.075223][T13407] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1378.100878][T13407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.114591][T18617] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 1378.157527][T18617] dvb-usb: schedule remote query interval to 150 msecs. [ 1378.176963][T18617] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1378.218004][T18617] usb 2-1: USB disconnect, device number 55 [ 1378.235757][ T9] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1378.283945][ T9] usb 7-1: USB disconnect, device number 11 [ 1378.321337][T18617] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1378.363702][T13407] cdc_acm 10-1:1.0: ttyACM1: USB ACM device [ 1378.392155][T17421] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1378.484201][T13407] usb 10-1: USB disconnect, device number 14 [ 1379.418384][T17421] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1379.458349][T17421] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1379.523243][T17421] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1379.573820][T17421] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1379.656890][T17421] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1379.767498][T17421] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1379.821519][T17421] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1379.887964][T17421] usb 9-1: Product: syz [ 1379.910771][T17421] usb 9-1: Manufacturer: syz [ 1379.950181][T17421] cdc_wdm 9-1:1.0: skipping garbage [ 1379.984306][T17421] cdc_wdm 9-1:1.0: skipping garbage [ 1380.813249][T17421] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1380.832473][T13407] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1380.842268][T17421] cdc_wdm 9-1:1.0: Unknown control protocol [ 1380.920501][T21240] orangefs_mount: mount request failed with -4 [ 1381.005304][ C0] wdm_int_callback: 58 callbacks suppressed [ 1381.005321][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 4 bytes [ 1381.028435][ C0] wdm_int_callback: 57 callbacks suppressed [ 1381.028450][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.040918][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.047320][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.053892][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.060391][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.066961][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.073511][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.080084][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.086338][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.092907][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.099268][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.105834][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.112629][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.119208][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.125798][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.132373][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.138569][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.145144][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 1381.151351][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 1381.158538][ T9] usb 9-1: USB disconnect, device number 11 [ 1381.164493][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1381.181672][T13407] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1381.226861][T13407] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.503286][T13407] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 1381.993196][T21248] xt_policy: output policy not valid in PREROUTING and INPUT [ 1382.026152][ T29] audit: type=1400 audit(2000000422.606:992): avc: denied { accept } for pid=21246 comm="syz.1.3920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1382.059105][T13407] usb 10-1: USB disconnect, device number 15 [ 1383.336334][T21255] orangefs_mount: mount request failed with -4 [ 1383.386329][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1384.403672][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.469902][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1384.549733][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1384.621254][T21268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1384.654679][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1384.704346][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.777706][ T9] cdc_acm 9-1:1.0: skipping garbage [ 1384.821281][T21271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1386.110811][T21276] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3934'. [ 1386.246377][T21272] Process accounting resumed [ 1386.288670][ T29] audit: type=1400 audit(2000000426.896:993): avc: denied { setopt } for pid=21277 comm="syz.9.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1386.423033][ T29] audit: type=1400 audit(2000000426.896:994): avc: denied { connect } for pid=21277 comm="syz.9.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1386.509579][ T29] audit: type=1400 audit(2000000426.926:995): avc: denied { ioctl } for pid=21277 comm="syz.9.3935" path="socket:[83807]" dev="sockfs" ino=83807 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1386.547112][ T77] nci: nci_ntf_packet: unknown ntf opcode 0x12e [ 1387.139812][T18617] usb 9-1: USB disconnect, device number 12 [ 1387.204055][T21281] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1387.770869][T14871] Bluetooth: hci6: Invalid handle: 0x20c9 > 0x0eff [ 1389.082839][T18617] libceph: connect (1)[c::]:6789 error -101 [ 1390.098084][T18617] libceph: mon0 (1)[c::]:6789 connect error [ 1390.145928][T21299] ceph: No mds server is up or the cluster is laggy [ 1390.158484][T18617] libceph: connect (1)[c::]:6789 error -101 [ 1390.206804][T18617] libceph: mon0 (1)[c::]:6789 connect error [ 1390.237037][T21320] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.245281][T21319] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3930'. [ 1390.676971][T21324] Process accounting resumed [ 1390.886209][T21333] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3950'. [ 1391.122156][T18617] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1391.184178][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3954'. [ 1391.254926][T21343] veth1_macvtap: left promiscuous mode [ 1391.294843][ T29] audit: type=1400 audit(2000000431.906:996): avc: denied { setattr } for pid=21342 comm="syz.6.3954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1392.079363][T18617] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1392.823094][T18617] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1393.143594][T18617] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1393.213411][T18617] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1393.307825][T13407] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1393.351459][T18617] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1393.423215][T18617] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1393.463973][T18617] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1393.512087][T18617] usb 9-1: Product: syz [ 1393.631616][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1394.464935][T18617] usb 9-1: Manufacturer: syz [ 1394.516062][T18617] usb 9-1: can't set config #1, error -71 [ 1394.560229][T18617] usb 9-1: USB disconnect, device number 13 [ 1394.587602][T13407] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1394.633976][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1394.650352][T13407] usb 8-1: can't read configurations, error -71 [ 1394.692400][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1394.994045][ T9] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1395.044514][T11845] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1395.074280][ T9] usb 7-1: USB disconnect, device number 12 [ 1395.086176][T21370] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3963'. [ 1395.288882][T11845] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1395.464582][T11845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.709399][T11845] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1395.800750][ T29] audit: type=1400 audit(2000000436.406:997): avc: denied { bind } for pid=21375 comm="syz.7.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1395.844925][T21380] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3958'. [ 1395.877321][ T29] audit: type=1400 audit(2000000436.436:998): avc: denied { setopt } for pid=21375 comm="syz.7.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1395.913696][T13407] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1396.019039][ T9] usb 9-1: USB disconnect, device number 14 [ 1396.103481][T13407] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.116496][T21387] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3966'. [ 1396.167390][T13407] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1396.197778][T13407] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1396.234562][T13407] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.246884][T13407] usb 2-1: Product: syz [ 1396.251331][T13407] usb 2-1: Manufacturer: syz [ 1396.258475][T13407] usb 2-1: SerialNumber: syz [ 1396.959412][T10824] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 1397.045268][T21399] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1397.314583][T21408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3974'. [ 1397.326693][T21408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1397.640530][ T29] audit: type=1400 audit(2000000438.246:999): avc: denied { mount } for pid=21415 comm="syz.9.3976" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1397.820083][T21420] tipc: Started in network mode [ 1397.848049][T21420] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 1397.887513][T21420] tipc: Enabling of bearer rejected, failed to enable media [ 1398.242065][T21427] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1398.668803][ T9] usb 2-1: USB disconnect, device number 56 [ 1399.494266][T14871] Bluetooth: hci8: Invalid handle: 0x20c9 > 0x0eff [ 1399.562304][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1399.753987][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1399.792724][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.011145][T21454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3989'. [ 1400.057614][ T9] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1400.347973][ T9] usb 9-1: USB disconnect, device number 15 [ 1400.365025][ T6242] nci: nci_ntf_packet: unknown ntf opcode 0x12e [ 1401.300737][T21457] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1401.345871][ T29] audit: type=1400 audit(2000000441.946:1000): avc: denied { listen } for pid=21465 comm="syz.9.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1401.499489][ T29] audit: type=1400 audit(2000000441.946:1001): avc: denied { accept } for pid=21465 comm="syz.9.3992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1401.842153][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1401.971879][T18617] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1402.012863][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.046506][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1402.105411][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1402.163960][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.196003][T18617] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1402.232750][ T9] usb 2-1: Product: syz [ 1402.255950][T18617] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1402.276168][ T9] usb 2-1: Manufacturer: syz [ 1402.308608][ T9] usb 2-1: SerialNumber: syz [ 1402.340596][T18617] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1402.406621][T18617] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1402.449372][T18617] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1402.533309][T17421] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1402.556195][T18617] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1402.688425][T18617] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1402.858698][T18617] usb 8-1: Product: syz [ 1402.867982][T18617] usb 8-1: Manufacturer: syz [ 1402.887634][T18617] cdc_wdm 8-1:1.0: skipping garbage [ 1402.899186][T18617] cdc_wdm 8-1:1.0: skipping garbage [ 1402.914261][T17421] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1402.923762][T18617] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1402.935826][T17421] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.946217][T18617] cdc_wdm 8-1:1.0: Unknown control protocol [ 1403.188554][T17421] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1404.049938][T17421] usb 7-1: USB disconnect, device number 13 [ 1404.297792][ C0] wdm_int_callback: 6 callbacks suppressed [ 1404.297810][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 4 bytes [ 1404.377441][ C0] wdm_int_callback: 5 callbacks suppressed [ 1404.377457][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1404.389846][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1404.396452][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1404.403031][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1404.409730][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1404.416320][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1404.422557][T18617] usb 8-1: USB disconnect, device number 8 [ 1404.428429][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 1404.428442][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 1404.428451][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1404.592643][T17421] usb 2-1: USB disconnect, device number 57 [ 1404.941702][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1405.064964][T17421] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1405.122933][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.172125][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.213262][ T9] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1405.252917][T17421] usb 2-1: Using ep0 maxpacket: 32 [ 1405.270369][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.288702][T17421] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1405.305855][T17421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.320123][ T9] usb 9-1: config 0 descriptor?? [ 1405.335399][T17421] usb 2-1: Product: syz [ 1405.350374][T17421] usb 2-1: Manufacturer: syz [ 1405.376316][T17421] usb 2-1: SerialNumber: syz [ 1405.395495][T17421] usb 2-1: config 0 descriptor?? [ 1405.719379][ T29] audit: type=1400 audit(2000000446.326:1002): avc: denied { getopt } for pid=21500 comm="syz.8.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1405.782139][T17421] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 1405.843012][T17421] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1405.906195][T21518] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4008'. [ 1405.934265][T17421] usb 2-1: USB disconnect, device number 58 [ 1405.963218][ T9] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0 [ 1406.030217][ T9] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 1406.126776][T21523] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1406.172742][ T9] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected [ 1406.196795][T21523] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1406.217874][ T9] hid-steam 0003:28DE:1142.0019: No HID_FEATURE_REPORT submitted - nothing to read [ 1406.328458][ T9] hid-steam 0003:28DE:1142.001A: unknown main item tag 0x0 [ 1406.508246][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4014'. [ 1406.531864][ T9] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 1406.591238][T21533] veth0_macvtap: left promiscuous mode [ 1406.674800][ T9] usb 9-1: USB disconnect, device number 16 [ 1406.733851][T21537] fido_id[21537]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28DE:1142.001A/report_descriptor': No such device [ 1406.806350][T21540] FAULT_INJECTION: forcing a failure. [ 1406.806350][T21540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.852298][T17421] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1406.890545][T21540] CPU: 0 UID: 0 PID: 21540 Comm: syz.8.4016 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.890566][T21540] Tainted: [L]=SOFTLOCKUP [ 1406.890570][T21540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1406.890577][T21540] Call Trace: [ 1406.890581][T21540] [ 1406.890585][T21540] dump_stack_lvl+0x100/0x190 [ 1406.890603][T21540] should_fail_ex.cold+0x5/0xa [ 1406.890618][T21540] _copy_from_user+0x2e/0xd0 [ 1406.890634][T21540] __sys_bpf+0x2f5/0x4e80 [ 1406.890649][T21540] ? __pfx___sys_bpf+0x10/0x10 [ 1406.890660][T21540] ? find_held_lock+0x2b/0x80 [ 1406.890670][T21540] ? get_pid_task+0xfc/0x250 [ 1406.890680][T21540] ? get_pid_task+0xfc/0x250 [ 1406.890694][T21540] ? find_held_lock+0x2b/0x80 [ 1406.890707][T21540] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1406.890718][T21540] ? find_held_lock+0x2b/0x80 [ 1406.890728][T21540] ? ksys_write+0x190/0x250 [ 1406.890737][T21540] ? ksys_write+0x190/0x250 [ 1406.890756][T21540] ? fput+0x79/0x100 [ 1406.890771][T21540] ? __x64_sys_bpf+0xce/0x140 [ 1406.890782][T21540] __x64_sys_bpf+0xce/0x140 [ 1406.890794][T21540] ? do_syscall_64+0x90/0x870 [ 1406.890808][T21540] do_syscall_64+0x115/0x870 [ 1406.890821][T21540] ? clear_bhb_loop+0x40/0x90 [ 1406.890834][T21540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.890845][T21540] RIP: 0033:0x7f15e199e019 [ 1406.890855][T21540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.890865][T21540] RSP: 002b:00007f15e28ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1406.890876][T21540] RAX: ffffffffffffffda RBX: 00007f15e1c25fa0 RCX: 00007f15e199e019 [ 1406.890883][T21540] RDX: 000000000000001c RSI: 0000200000001180 RDI: 0000000000000004 [ 1406.890889][T21540] RBP: 00007f15e28ab090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.890896][T21540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.890902][T21540] R13: 00007f15e1c26038 R14: 00007f15e1c25fa0 R15: 00007fff05c69268 [ 1406.890915][T21540] [ 1407.201084][ T9] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected [ 1407.220989][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4017'. [ 1407.229935][T21543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4017'. [ 1407.241922][T21543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1407.422927][T17421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.186163][T17421] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1408.440769][T17421] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1408.523498][T17421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.578497][T17421] usb 2-1: Product: syz [ 1408.599247][T21557] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4020'. [ 1408.618311][T17421] usb 2-1: Manufacturer: syz [ 1408.636969][T17421] usb 2-1: SerialNumber: syz [ 1408.703015][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1408.785562][T21544] Process accounting resumed [ 1408.998486][T21565] FAULT_INJECTION: forcing a failure. [ 1408.998486][T21565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.447388][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1409.496026][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.516276][T21565] CPU: 0 UID: 0 PID: 21565 Comm: syz.7.4022 Tainted: G L syzkaller #0 PREEMPT(full) [ 1409.516296][T21565] Tainted: [L]=SOFTLOCKUP [ 1409.516300][T21565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1409.516307][T21565] Call Trace: [ 1409.516312][T21565] [ 1409.516316][T21565] dump_stack_lvl+0x100/0x190 [ 1409.516334][T21565] should_fail_ex.cold+0x5/0xa [ 1409.516348][T21565] _copy_from_user+0x2e/0xd0 [ 1409.516367][T21565] copy_msghdr_from_user+0x9f/0x4c0 [ 1409.516379][T21565] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1409.516397][T21565] ___sys_sendmsg+0x106/0x1e0 [ 1409.516409][T21565] ? __pfx____sys_sendmsg+0x10/0x10 [ 1409.516419][T21565] ? __lock_acquire+0x49f/0x1a40 [ 1409.516434][T21565] ? get_pid_task+0x106/0x250 [ 1409.516459][T21565] __sys_sendmsg+0x160/0x210 [ 1409.516474][T21565] ? __pfx___sys_sendmsg+0x10/0x10 [ 1409.516495][T21565] do_syscall_64+0x115/0x870 [ 1409.516509][T21565] ? clear_bhb_loop+0x40/0x90 [ 1409.516523][T21565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.516534][T21565] RIP: 0033:0x7f7a3979e019 [ 1409.516544][T21565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.516555][T21565] RSP: 002b:00007f7a3a64c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.516566][T21565] RAX: ffffffffffffffda RBX: 00007f7a39a26090 RCX: 00007f7a3979e019 [ 1409.516573][T21565] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1409.516580][T21565] RBP: 00007f7a3a64c090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.516586][T21565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.516592][T21565] R13: 00007f7a39a26128 R14: 00007f7a39a26090 R15: 00007ffd87f5def8 [ 1409.516606][T21565] [ 1410.367921][ T9] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1410.624859][T13407] usb 2-1: USB disconnect, device number 59 [ 1410.636800][ T9] usb 9-1: USB disconnect, device number 17 [ 1410.809230][T21590] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4032'. [ 1411.164859][ T29] audit: type=1400 audit(2000000451.776:1003): avc: denied { ioctl } for pid=21585 comm="syz.8.4031" path="socket:[85649]" dev="sockfs" ino=85649 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1411.432174][T13407] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1411.583445][T13407] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1411.646080][T13407] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1411.679315][ T29] audit: type=1400 audit(2000000452.276:1004): avc: denied { accept } for pid=21596 comm="syz.9.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1411.740046][T13407] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1411.802799][T13407] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1411.892727][T21607] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4035'. [ 1411.913240][T13407] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1412.011504][T13407] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1412.049022][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4037'. [ 1412.063914][T13407] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1412.081937][T21611] bridge_slave_1: left allmulticast mode [ 1412.087665][T21611] bridge_slave_1: left promiscuous mode [ 1412.093398][T21611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.143704][T21611] bridge_slave_0: left allmulticast mode [ 1412.149390][T21611] bridge_slave_0: left promiscuous mode [ 1412.155118][T21611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.163260][T13407] usb 2-1: Product: syz [ 1412.209050][T13407] usb 2-1: Manufacturer: syz [ 1412.267184][T13407] cdc_wdm 2-1:1.0: skipping garbage [ 1412.396641][T13407] cdc_wdm 2-1:1.0: skipping garbage [ 1412.424777][T13407] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1412.434363][T10824] Bluetooth: hci4: Invalid handle: 0x20c9 > 0x0eff [ 1412.478947][T13407] cdc_wdm 2-1:1.0: Unknown control protocol [ 1412.726762][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 4 bytes [ 1412.737421][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1412.744041][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1412.750996][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1412.757568][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1412.764330][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1412.770912][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1412.777134][T17421] usb 2-1: USB disconnect, device number 60 [ 1412.783172][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1412.783186][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1412.783194][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1412.805319][T13407] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1413.844451][T13407] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.892391][T13407] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1413.951080][T13407] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1413.976957][T13407] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.030279][T13407] usb 9-1: Product: syz [ 1414.048246][T13407] usb 9-1: Manufacturer: syz [ 1414.063343][T13407] usb 9-1: SerialNumber: syz [ 1414.841641][T17421] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1415.724464][T12038] usb 9-1: USB disconnect, device number 18 [ 1415.875868][T17421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.942847][T17421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.996505][ T29] audit: type=1326 audit(2000000456.606:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21650 comm="syz.8.4049" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e199e019 code=0x7ffc0000 [ 1416.036294][T17421] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1416.088364][T17421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.131644][T17421] usb 2-1: config 0 descriptor?? [ 1416.183415][ T29] audit: type=1326 audit(2000000456.646:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21650 comm="syz.8.4049" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15e199e019 code=0x7ffc0000 [ 1417.143805][ T29] audit: type=1326 audit(2000000456.646:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21650 comm="syz.8.4049" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e199e019 code=0x7ffc0000 [ 1417.219670][T21661] : renamed from vlan0 (while UP) [ 1417.293797][T17421] cypress 0003:04B4:07B1.001B: unknown main item tag 0x0 [ 1417.336713][T17421] cypress 0003:04B4:07B1.001B: item fetching failed at offset 6/41 [ 1417.368280][ T29] audit: type=1326 audit(2000000456.666:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21650 comm="syz.8.4049" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e199e019 code=0x7ffc0000 [ 1417.415791][T17421] cypress 0003:04B4:07B1.001B: parse failed [ 1417.455325][T17421] cypress 0003:04B4:07B1.001B: probe with driver cypress failed with error -22 [ 1417.583434][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.591750][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1417.602718][ T29] audit: type=1326 audit(2000000456.676:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21650 comm="syz.8.4049" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f15e199e019 code=0x7ffc0000 [ 1417.844958][T14871] Bluetooth: hci7: Invalid handle: 0x20c9 > 0x0eff [ 1418.977374][T17421] usb 2-1: USB disconnect, device number 61 [ 1418.995489][ T29] audit: type=1400 audit(2000000459.606:1010): avc: denied { mount } for pid=21673 comm="syz.9.4055" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1419.762472][T21684] macvtap0: entered allmulticast mode [ 1419.792679][T21684] veth0_macvtap: entered allmulticast mode [ 1419.839473][T21683] macvtap0: left allmulticast mode [ 1419.865894][T21683] veth0_macvtap: left allmulticast mode [ 1420.072651][T17421] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1420.321840][T13407] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1420.343113][T17421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.660547][T17421] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1420.692621][T17421] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1420.842336][T17421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.857845][T13407] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.877068][T17421] usb 2-1: Product: syz [ 1421.149589][T13407] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1421.181147][T17421] usb 2-1: Manufacturer: syz [ 1421.199014][ T29] audit: type=1400 audit(2000000461.806:1011): avc: denied { read } for pid=21709 comm="syz.9.4067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1421.219444][T17421] usb 2-1: SerialNumber: syz [ 1421.234907][T13407] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1421.384649][T13407] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1421.399481][ T29] audit: type=1400 audit(2000000461.856:1012): avc: denied { block_suspend } for pid=21712 comm="syz.8.4068" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1421.438240][T13407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.767558][T13407] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 1421.857791][T21715] nvme nvme0: failed to connect socket: -111 [ 1422.851894][T12038] usb 2-1: USB disconnect, device number 62 [ 1423.497269][T21737] syzkaller0: entered promiscuous mode [ 1423.510286][T21737] syzkaller0: entered allmulticast mode [ 1423.684577][T21741] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1424.301607][T12038] usb 8-1: USB disconnect, device number 9 [ 1424.994427][T21752] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1425.049460][T21752] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1425.267605][T21762] overlayfs: failed to clone upperpath [ 1425.302364][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.588081][T21752] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4071'. [ 1425.635464][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.697879][T12038] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 1425.716487][T21764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.995233][T21764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.988365][T12038] usb 2-1: device descriptor read/all, error -71 [ 1427.882019][T17421] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1428.616066][T17421] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.680210][T17421] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1428.746760][T21800] netlink: 'syz.9.4094': attribute type 1 has an invalid length. [ 1428.827335][T17421] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1429.053499][T17421] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1429.097040][T17421] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.153844][T17421] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 1429.939551][T21815] fuse: fd is not a fuse device [ 1429.958823][T21815] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1430.736436][T11845] usb 8-1: USB disconnect, device number 10 [ 1432.992856][T21819] netlink: 'syz.7.4099': attribute type 12 has an invalid length. [ 1433.021008][T21819] netlink: 'syz.7.4099': attribute type 29 has an invalid length. [ 1433.067775][T21819] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4099'. [ 1433.128263][T21819] netlink: 'syz.7.4099': attribute type 1 has an invalid length. [ 1433.157818][T21819] netlink: 'syz.7.4099': attribute type 2 has an invalid length. [ 1433.196766][T21819] netlink: 7 bytes leftover after parsing attributes in process `syz.7.4099'. [ 1433.339542][T21839] 9p: Bad value for 'rfdno' [ 1433.633391][T17422] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1434.140476][T17422] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.184704][T17422] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1434.214577][T17422] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1434.252026][T17422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.281423][T17422] usb 9-1: config 0 descriptor?? [ 1434.296847][ T29] audit: type=1800 audit(2000000474.906:1013): pid=21835 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4103" name="bus" dev="ramfs" ino=86679 res=0 errno=0 [ 1434.337153][T17422] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1434.365643][T17422] dvb-usb: bulk message failed: -22 (3/0) [ 1434.432141][T17422] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1434.494485][T17422] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1434.527126][T17422] usb 9-1: media controller created [ 1434.539106][T21839] dvb-usb: bulk message failed: -22 (2/0) [ 1434.565657][T17422] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1434.624062][T21855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=241 sclass=netlink_route_socket pid=21855 comm=syz.9.4112 [ 1434.720071][T17422] dvb-usb: bulk message failed: -22 (6/0) [ 1434.793293][T17422] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1434.828936][T17422] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input46 [ 1434.874257][T21860] trusted_key: syz.1.4114 sent an empty control message without MSG_MORE. [ 1434.889956][ T29] audit: type=1400 audit(2000000475.486:1014): avc: denied { ioctl } for pid=21859 comm="syz.1.4114" path="socket:[86798]" dev="sockfs" ino=86798 ioctlcmd=0x943e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1434.935380][T17422] dvb-usb: schedule remote query interval to 150 msecs. [ 1434.981035][T17422] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1435.036067][T17422] usb 9-1: USB disconnect, device number 19 [ 1435.137074][T17422] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1435.481286][T21880] ip6gre1: entered promiscuous mode [ 1435.556736][T21880] ip6gre1: entered allmulticast mode [ 1435.950238][T21885] kAFS: unable to lookup cell '' [ 1436.047310][T21885] netlink: 'syz.7.4121': attribute type 10 has an invalid length. [ 1436.121628][T11845] usb 9-1: new full-speed USB device number 20 using dummy_hcd [ 1436.270360][T21885] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1436.303063][T11845] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1436.324014][T21885] team0: Port device netdevsim1 added [ 1436.348801][T11845] usb 9-1: config 0 has no interface number 0 [ 1436.379731][T11845] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1436.440188][T11845] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1436.483927][T11845] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1436.537317][T11845] usb 9-1: Manufacturer: syz [ 1436.558354][T21897] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4125'. [ 1436.578314][T11845] usb 9-1: SerialNumber: syz [ 1436.587802][T21899] netlink: 14 bytes leftover after parsing attributes in process `syz.7.4126'. [ 1436.603195][T11845] usb 9-1: config 0 descriptor?? [ 1436.928182][T21903] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1436.961929][T21901] ip6gre1: entered promiscuous mode [ 1436.987533][T21901] ip6gre1: entered allmulticast mode [ 1437.106880][T21907] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1437.441801][T17421] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1437.604387][T17421] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1437.619361][T17421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.857133][T17421] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 1437.908603][T17421] usb 2-1: USB disconnect, device number 65 [ 1438.058949][ T29] audit: type=1400 audit(2000000478.666:1015): avc: denied { watch_reads } for pid=21922 comm="syz.7.4135" path="/115" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1438.163284][ T29] audit: type=1400 audit(2000000478.696:1016): avc: denied { write } for pid=21922 comm="syz.7.4135" path="socket:[87156]" dev="sockfs" ino=87156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1438.263992][T21926] evm: overlay not supported [ 1438.286925][ T29] audit: type=1400 audit(2000000478.896:1017): avc: denied { rename } for pid=21922 comm="syz.7.4135" name="file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1439.069353][ T29] audit: type=1400 audit(2000000479.676:1018): avc: denied { write } for pid=21932 comm="syz.7.4139" path="socket:[87271]" dev="sockfs" ino=87271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1439.152679][T13407] usb 9-1: USB disconnect, device number 20 [ 1439.432396][T11845] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1439.564321][ T29] audit: type=1800 audit(2000000480.176:1019): pid=21939 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4141" name="bus" dev="ramfs" ino=87198 res=0 errno=0 [ 1439.622726][T11845] usb 8-1: Using ep0 maxpacket: 16 [ 1440.441041][T11845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1440.488754][T11845] usb 8-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 1440.547832][T11845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.607439][T11845] usb 8-1: Product: syz [ 1440.636083][T11845] usb 8-1: Manufacturer: syz [ 1440.662902][T11845] usb 8-1: SerialNumber: syz [ 1440.851820][T18617] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1440.928564][T11845] usb 8-1: cannot setup if 1: error -71 [ 1440.955863][T11845] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1440.987301][T11845] usb 8-1: cannot setup if 1: error -71 [ 1440.998096][T11845] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1441.027512][T11845] usb 8-1: cannot setup if 1: error -71 [ 1441.037269][T18617] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1441.053803][T18617] usb 9-1: config 0 has no interface number 0 [ 1441.074252][T18617] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1441.121478][T18617] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1441.151868][T11845] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1441.178911][T18617] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1441.195599][T18617] usb 9-1: Manufacturer: syz [ 1441.206169][T11845] usb 8-1: USB disconnect, device number 11 [ 1441.513748][T18617] usb 9-1: SerialNumber: syz [ 1441.559848][T15272] udevd[15272]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1441.578227][T18617] usb 9-1: config 0 descriptor?? [ 1441.617097][T21969] overlayfs: failed to clone upperpath [ 1442.022117][T11845] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 1442.098174][T21986] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1442.202751][T11845] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 1442.217997][T11845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.237168][T11845] usb 2-1: config 0 descriptor?? [ 1442.395114][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1442.411326][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1442.420777][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1442.429849][T21999] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4163'. [ 1442.562118][T22007] fuse: fd is not a fuse device [ 1442.611348][T11845] usb 2-1: string descriptor 0 read error: -71 [ 1442.632565][T11845] ldusb 2-1:0.0: Interrupt in endpoint not found [ 1442.656297][T11845] usb 2-1: USB disconnect, device number 66 [ 1443.290453][T22026] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1443.511453][ T29] audit: type=1800 audit(2000000484.116:1020): pid=22012 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4165" name="bus" dev="ramfs" ino=87562 res=0 errno=0 [ 1443.872707][T11845] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1443.950883][T18617] usb 9-1: USB disconnect, device number 21 [ 1443.986765][ T29] audit: type=1800 audit(2000000484.596:1021): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.4167" name="bus" dev="ramfs" ino=87570 res=0 errno=0 [ 1444.044772][T11845] usb 8-1: Using ep0 maxpacket: 16 [ 1444.100967][T11845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.181103][T11845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.246843][T11845] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1444.320286][T11845] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1444.470194][T11845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.713302][T11845] usb 8-1: config 0 descriptor?? [ 1444.752200][T17421] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1444.914811][T17421] usb 2-1: Using ep0 maxpacket: 32 [ 1444.934363][T17421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.969595][T17421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.005832][T17421] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1445.041816][T17421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.065231][T12038] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1445.079222][T17421] usb 2-1: config 0 descriptor?? [ 1445.251728][T12038] usb 9-1: device descriptor read/64, error -71 [ 1445.288447][T11845] usbhid 8-1:0.0: can't add hid device: -71 [ 1445.558950][T17421] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 1445.576221][T11845] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1445.596489][T17421] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 1445.620158][T11845] usb 8-1: USB disconnect, device number 12 [ 1445.681600][T12038] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1445.692438][T17421] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 1445.795632][T22055] orangefs_mount: mount request failed with -4 [ 1445.833195][T12038] usb 9-1: device descriptor read/64, error -71 [ 1445.892849][T17421] ft260 0003:0403:6030.001C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 1445.917383][T17421] ft260 0003:0403:6030.001C: failed to retrieve status: -32, no wakeup [ 1445.958030][T17421] ft260 0003:0403:6030.001C: failed to retrieve status: -32 [ 1445.972816][T12038] usb usb9-port1: attempt power cycle [ 1446.017492][T17421] ft260 0003:0403:6030.001C: failed to reset I2C controller: -71 [ 1446.261802][T17421] usb 2-1: USB disconnect, device number 67 [ 1446.342665][T12038] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1446.828437][T12038] usb 9-1: device descriptor read/8, error -71 [ 1447.410118][T22080] veth1_macvtap: left promiscuous mode [ 1447.458948][T22080] macsec0: entered promiscuous mode [ 1447.471824][T17421] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1447.493760][T22080] macsec0: entered allmulticast mode [ 1447.536904][T22073] veth1_macvtap: entered promiscuous mode [ 1447.594162][T22073] veth1_macvtap: entered allmulticast mode [ 1447.642586][T22073] macsec0: left promiscuous mode [ 1447.672793][T22073] macsec0: left allmulticast mode [ 1447.699070][T22073] veth1_macvtap: left allmulticast mode [ 1447.941467][T22095] ipt_ECN: cannot use operation on non-tcp rule [ 1448.095674][T22102] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4192'. [ 1448.367512][ T29] audit: type=1400 audit(2000000488.976:1022): avc: denied { setopt } for pid=22093 comm="syz.6.4192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1449.069967][T22109] FAULT_INJECTION: forcing a failure. [ 1449.069967][T22109] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.156249][T22109] CPU: 0 UID: 0 PID: 22109 Comm: syz.7.4197 Tainted: G L syzkaller #0 PREEMPT(full) [ 1449.156269][T22109] Tainted: [L]=SOFTLOCKUP [ 1449.156274][T22109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1449.156280][T22109] Call Trace: [ 1449.156284][T22109] [ 1449.156289][T22109] dump_stack_lvl+0x100/0x190 [ 1449.156308][T22109] should_fail_ex.cold+0x5/0xa [ 1449.156321][T22109] should_failslab+0xc2/0x120 [ 1449.156337][T22109] __kmalloc_noprof+0xfc/0x820 [ 1449.156352][T22109] ? rcu_is_watching+0x12/0xc0 [ 1449.156368][T22109] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1449.156383][T22109] tomoyo_realpath_from_path+0xb6/0x690 [ 1449.156398][T22109] tomoyo_path_number_perm+0x23c/0x580 [ 1449.156413][T22109] ? tomoyo_path_number_perm+0x22e/0x580 [ 1449.156430][T22109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1449.156459][T22109] ? find_held_lock+0x2b/0x80 [ 1449.156469][T22109] ? __fget_files+0x215/0x3d0 [ 1449.156480][T22109] ? hook_file_ioctl_common+0x140/0x440 [ 1449.156492][T22109] ? __fget_files+0x215/0x3d0 [ 1449.156506][T22109] ? __fget_files+0x21f/0x3d0 [ 1449.156519][T22109] security_file_ioctl+0xd3/0x230 [ 1449.156537][T22109] __x64_sys_ioctl+0xb7/0x210 [ 1449.156554][T22109] do_syscall_64+0x115/0x870 [ 1449.156568][T22109] ? clear_bhb_loop+0x40/0x90 [ 1449.156587][T22109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.156598][T22109] RIP: 0033:0x7f7a3979e019 [ 1449.156608][T22109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.156619][T22109] RSP: 002b:00007f7a3a66d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.156630][T22109] RAX: ffffffffffffffda RBX: 00007f7a39a25fa0 RCX: 00007f7a3979e019 [ 1449.156637][T22109] RDX: 0000200000000100 RSI: 00000000c008561c RDI: 0000000000000003 [ 1449.156644][T22109] RBP: 00007f7a3a66d090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.156651][T22109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.156657][T22109] R13: 00007f7a39a26038 R14: 00007f7a39a25fa0 R15: 00007ffd87f5def8 [ 1449.156671][T22109] [ 1449.156699][T22109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1449.444041][T22113] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1450.780696][ T29] audit: type=1800 audit(2000000491.386:1023): pid=22131 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4203" name="bus" dev="ramfs" ino=88170 res=0 errno=0 [ 1451.988346][ T29] audit: type=1400 audit(2000000492.596:1024): avc: denied { ioctl } for pid=22153 comm="syz.7.4213" path="socket:[88260]" dev="sockfs" ino=88260 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1452.187413][T22164] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1452.200647][ T29] audit: type=1400 audit(2000000492.786:1025): avc: denied { setopt } for pid=22161 comm="syz.7.4215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1453.491896][T17421] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1453.671623][T17421] usb 8-1: Using ep0 maxpacket: 32 [ 1453.701466][T17421] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1453.752092][T17421] usb 8-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1453.780324][T17421] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.825541][T17421] usb 8-1: Product: syz [ 1453.950625][T17421] usb 8-1: Manufacturer: 広᳉M籅稾떬둹잀꼸疣芈♡ⶣ妉Ẍࡾ獫㓩빗婹낶ኂ药埚릪ꅴ蚆ꦹ㫕堂䨞顿⥭좢ᙥꊇ䳎플믌᥌쉎蝷ᆴ쒛眖颼䃌퓳ɪ袻㝰Ћ號펏쯾崛㘂챬 [ 1454.290339][T17421] usb 8-1: SerialNumber: syz [ 1454.907109][ T29] audit: type=1400 audit(2000000495.506:1026): avc: denied { accept } for pid=22186 comm="syz.7.4224" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1454.989552][T22213] vlan4: entered promiscuous mode [ 1455.046137][T22213] bridge0: entered promiscuous mode [ 1455.169157][T17421] usb 8-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1455.269770][T17421] usb 8-1: USB disconnect, device number 13 [ 1456.746685][ T29] audit: type=1400 audit(2000000497.356:1027): avc: denied { mmap_zero } for pid=22243 comm="syz.1.4243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 1456.900249][ T29] audit: type=1400 audit(2000000497.396:1028): avc: denied { read } for pid=22249 comm="syz.7.4246" dev="nsfs" ino=4026532781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1457.077235][ T29] audit: type=1400 audit(2000000497.396:1029): avc: denied { open } for pid=22249 comm="syz.7.4246" path="net:[4026532781]" dev="nsfs" ino=4026532781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1457.204632][T22264] EXT4-fs (loop7): unable to read superblock [ 1457.285104][T22265] overlayfs: missing 'lowerdir' [ 1457.321354][ T29] audit: type=1400 audit(2000000497.926:1030): avc: denied { allowed } for pid=22266 comm="syz.9.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1458.322572][T18617] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1458.723424][T18617] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.765121][T18617] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1458.786397][T18617] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.814140][T18617] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1458.848909][T18617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.907128][T18617] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 1459.557201][ T29] audit: type=1400 audit(2000000500.166:1031): avc: denied { getopt } for pid=22304 comm="syz.6.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1460.041312][T22330] FAULT_INJECTION: forcing a failure. [ 1460.041312][T22330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.056299][T22330] CPU: 0 UID: 0 PID: 22330 Comm: syz.7.4273 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.056319][T22330] Tainted: [L]=SOFTLOCKUP [ 1460.056323][T22330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1460.056329][T22330] Call Trace: [ 1460.056333][T22330] [ 1460.056337][T22330] dump_stack_lvl+0x100/0x190 [ 1460.056356][T22330] should_fail_ex.cold+0x5/0xa [ 1460.056370][T22330] _copy_to_user+0x32/0xd0 [ 1460.056387][T22330] simple_read_from_buffer+0xcb/0x170 [ 1460.056400][T22330] proc_fail_nth_read+0x1af/0x230 [ 1460.056418][T22330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.056435][T22330] ? rw_verify_area+0xce/0x6d0 [ 1460.056450][T22330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1460.056467][T22330] vfs_read+0x1e4/0xb40 [ 1460.056485][T22330] ? __pfx_vfs_read+0x10/0x10 [ 1460.056501][T22330] ? __fget_files+0x215/0x3d0 [ 1460.056520][T22330] ? __fget_files+0x21f/0x3d0 [ 1460.056535][T22330] ksys_read+0x12a/0x250 [ 1460.056551][T22330] ? __pfx_ksys_read+0x10/0x10 [ 1460.056572][T22330] do_syscall_64+0x115/0x870 [ 1460.056585][T22330] ? clear_bhb_loop+0x40/0x90 [ 1460.056598][T22330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.056610][T22330] RIP: 0033:0x7f7a3975e84e [ 1460.056620][T22330] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1460.056631][T22330] RSP: 002b:00007f7a3a66cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1460.056642][T22330] RAX: ffffffffffffffda RBX: 00007f7a3a66d6c0 RCX: 00007f7a3975e84e [ 1460.056649][T22330] RDX: 000000000000000f RSI: 00007f7a3a66d0a0 RDI: 0000000000000004 [ 1460.056655][T22330] RBP: 00007f7a3a66d090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.056662][T22330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.056668][T22330] R13: 00007f7a39a26038 R14: 00007f7a39a25fa0 R15: 00007ffd87f5def8 [ 1460.056682][T22330] [ 1460.485631][ T29] audit: type=1400 audit(2000000501.096:1032): avc: denied { read write } for pid=22336 comm="syz.8.4276" name="radio4" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1461.460764][T13407] usb 2-1: USB disconnect, device number 69 [ 1461.510321][ T29] audit: type=1400 audit(2000000501.096:1033): avc: denied { open } for pid=22336 comm="syz.8.4276" path="/dev/radio4" dev="devtmpfs" ino=984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1461.774730][T22346] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4279'. [ 1461.978301][T22354] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4282'. [ 1462.072753][T22346] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1462.137440][T22356] netlink: 'syz.8.4283': attribute type 1 has an invalid length. [ 1463.137568][ T29] audit: type=1400 audit(2000000503.746:1034): avc: denied { write } for pid=22383 comm="syz.6.4293" path="socket:[89363]" dev="sockfs" ino=89363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1463.281900][T22384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4293'. [ 1463.299955][ T29] audit: type=1400 audit(2000000503.866:1035): avc: denied { getopt } for pid=22383 comm="syz.6.4293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1463.451156][T22387] overlayfs: failed to clone upperpath [ 1463.457403][T18617] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1463.530545][T22384] hsr_slave_1 (unregistering): left promiscuous mode [ 1463.723962][T18617] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1463.747728][T18617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.826151][T22395] TCP: TCP_TX_DELAY enabled [ 1463.889323][T22395] loop2: detected capacity change from 0 to 3 [ 1463.928712][T22395] ldm_validate_privheads(): Disk read failed. [ 1463.945457][T22395] loop2: [ 1463.952630][T22395] loop2: partition table partially beyond EOD, truncated [ 1464.010715][T18617] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1464.298656][T18617] usb 9-1: USB disconnect, device number 26 [ 1465.136410][ T29] audit: type=1400 audit(2000000505.746:1036): avc: denied { watch } for pid=22412 comm="syz.6.4302" path="/173/bus" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1465.180500][ T29] audit: type=1400 audit(2000000505.766:1037): avc: denied { watch_sb watch_reads } for pid=22412 comm="syz.6.4302" path="/173/bus" dev="tmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1465.431902][T17422] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1465.623078][T17422] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1465.639207][T17422] usb 9-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1465.662413][T22433] netlink: 'syz.6.4307': attribute type 1 has an invalid length. [ 1465.692557][T22433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1465.722600][T17422] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1465.744662][T22433] bond1: (slave veth0_to_bond): making interface the new active one [ 1465.755126][T22433] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1465.793559][T17422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.834169][T17422] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 1465.862478][T22433] bond1: entered promiscuous mode [ 1465.867629][T22433] veth0_to_bond: entered promiscuous mode [ 1465.873689][T22433] bond1: entered allmulticast mode [ 1465.878843][T22433] veth0_to_bond: entered allmulticast mode [ 1465.896103][T22435] macvlan2: entered promiscuous mode [ 1465.916861][T22435] macvlan2: entered allmulticast mode [ 1465.954459][T22435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1465.970373][T22435] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1466.621868][T17422] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1466.783180][T17422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.794419][T17422] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.804711][T17422] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1466.815487][T17422] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.825316][T17422] usb 8-1: config 0 descriptor?? [ 1467.320733][T17422] usbhid 8-1:0.0: can't add hid device: -71 [ 1467.346732][T17422] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1467.372726][ T29] audit: type=1400 audit(2000000507.976:1038): avc: denied { ioctl } for pid=22461 comm="syz.6.4318" path="socket:[89574]" dev="sockfs" ino=89574 ioctlcmd=0x6183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1467.406838][T17422] usb 8-1: USB disconnect, device number 14 [ 1467.595768][ T29] audit: type=1400 audit(2000000508.206:1039): avc: denied { mount } for pid=22463 comm="syz.1.4320" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1467.622654][T22464] overlayfs: failed to resolve './file0': -2 [ 1467.975655][T14364] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.168819][T18617] usb 9-1: USB disconnect, device number 27 [ 1468.376631][T14871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1468.391287][T14871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1468.407799][T14871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1468.415415][T14871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1468.423918][T14871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1468.460447][ T29] audit: type=1400 audit(2000000509.006:1040): avc: denied { ioctl } for pid=22471 comm="syz.7.4324" path="/dev/dvb/adapter0/dvr0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1469.438105][T14364] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.754407][T14364] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.827361][T22494] syz.7.4331 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1469.882762][T17422] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1469.908231][T22494] CPU: 0 UID: 0 PID: 22494 Comm: syz.7.4331 Tainted: G L syzkaller #0 PREEMPT(full) [ 1469.908254][T22494] Tainted: [L]=SOFTLOCKUP [ 1469.908259][T22494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1469.908268][T22494] Call Trace: [ 1469.908272][T22494] [ 1469.908281][T22494] dump_stack_lvl+0x100/0x190 [ 1469.908301][T22494] dump_header+0xfb/0x606 [ 1469.908315][T22494] oom_kill_process.cold+0xd/0x330 [ 1469.908330][T22494] out_of_memory+0x340/0x14f0 [ 1469.908353][T22494] ? __pfx_out_of_memory+0x10/0x10 [ 1469.908374][T22494] mem_cgroup_out_of_memory+0xc6/0x130 [ 1469.908387][T22494] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1469.908398][T22494] ? find_held_lock+0x2b/0x80 [ 1469.908412][T22494] ? do_raw_spin_unlock+0x145/0x1e0 [ 1469.908428][T22494] ? _raw_spin_unlock+0x28/0x50 [ 1469.908442][T22494] try_charge_memcg+0x6e5/0xdf0 [ 1469.908461][T22494] ? __pfx_try_charge_memcg+0x10/0x10 [ 1469.908476][T22494] ? find_held_lock+0x2b/0x80 [ 1469.908486][T22494] ? rcu_read_unlock+0x17/0x60 [ 1469.908501][T22494] ? rcu_read_unlock+0x17/0x60 [ 1469.908521][T22494] __memcg_slab_post_alloc_hook+0x469/0x1160 [ 1469.908542][T22494] ? kasan_save_track+0x14/0x30 [ 1469.908558][T22494] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 1469.908574][T22494] ? sock_alloc_inode+0x26/0x2c0 [ 1469.908593][T22494] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1469.908610][T22494] sock_alloc_inode+0x26/0x2c0 [ 1469.908626][T22494] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1469.908641][T22494] alloc_inode+0x68/0x250 [ 1469.908657][T22494] sock_alloc+0x44/0x280 [ 1469.908673][T22494] ? security_socket_create+0x7f/0x250 [ 1469.908690][T22494] __sock_create+0xc2/0x860 [ 1469.908704][T22494] __sys_socket+0x14d/0x260 [ 1469.908716][T22494] ? __pfx___sys_socket+0x10/0x10 [ 1469.908732][T22494] __x64_sys_socket+0x72/0xb0 [ 1469.908742][T22494] ? lockdep_hardirqs_on+0x78/0x100 [ 1469.908756][T22494] do_syscall_64+0x115/0x870 [ 1469.908771][T22494] ? clear_bhb_loop+0x40/0x90 [ 1469.908784][T22494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.908798][T22494] RIP: 0033:0x7f7a3979e019 [ 1469.908809][T22494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1469.908820][T22494] RSP: 002b:00007f7a3a66cfc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1469.908831][T22494] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f7a3979e019 [ 1469.908838][T22494] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 1469.908845][T22494] RBP: 00007f7a3983500c R08: 0000000000000000 R09: 0000000000000000 [ 1469.908851][T22494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1469.908857][T22494] R13: 00007f7a39a26038 R14: 00007f7a39a25fa0 R15: 00007ffd87f5def8 [ 1469.908872][T22494] [ 1470.469466][T22482] orangefs_mount: mount request failed with -4 [ 1470.481625][T22494] memory: usage 8kB, limit 8kB, failcnt 21 [ 1470.501613][T22494] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1470.516909][T22494] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 1470.531616][T22494] Memory cgroup stats for /syz7/test: [ 1470.531914][T22494] cache 0 [ 1470.550440][T22494] rss 0 [ 1470.555219][T22494] rss_huge 0 [ 1470.564288][T22494] shmem 0 [ 1470.573785][T22494] mapped_file 0 [ 1470.599332][T14871] Bluetooth: hci0: command tx timeout [ 1470.610613][T22494] dirty 0 [ 1470.621899][T22494] writeback 0 [ 1470.630078][T22494] workingset_refault_anon 0 [ 1470.641617][T22494] workingset_refault_file 0 [ 1470.651581][T22494] swap 0 [ 1470.657711][T22494] swapcached 0 [ 1470.666565][T22494] pgpgin 0 [ 1470.679913][T22494] pgpgout 0 [ 1470.684961][T22494] pgfault 0 [ 1470.700901][T22494] pgmajfault 0 [ 1470.709213][T22494] inactive_anon 0 [ 1470.719414][T22494] active_anon 0 [ 1470.734765][T22494] inactive_file 0 [ 1470.746421][T22494] active_file 0 [ 1470.753867][T22494] unevictable 0 [ 1470.761652][T22494] hierarchical_memory_limit 8192 [ 1470.771563][T22494] hierarchical_memsw_limit 9223372036854771712 [ 1470.787956][T22494] total_cache 0 [ 1470.791455][T22494] total_rss 0 [ 1470.799544][T22494] total_rss_huge 0 [ 1470.809653][T22494] total_shmem 0 [ 1470.814826][T22494] total_mapped_file 0 [ 1470.828977][T22494] total_dirty 0 [ 1470.835013][T22494] total_writeback 0 [ 1470.847048][T22494] total_workingset_refault_anon 0 [ 1470.857640][T22494] total_workingset_refault_file 0 [ 1470.865002][T17422] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1470.882002][T17422] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1470.892381][T22494] total_swap 0 [ 1470.896527][T22494] total_swapcached 0 [ 1470.900480][T22494] total_pgpgin 0 [ 1470.911936][T17422] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1470.931158][T22494] total_pgpgout 0 [ 1470.934968][T22494] total_pgfault 0 [ 1470.942769][T17422] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1470.955897][T22494] total_pgmajfault 0 [ 1470.966007][T22494] total_inactive_anon 0 [ 1470.979166][T22494] total_active_anon 0 [ 1470.983807][T17422] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1471.001845][T22494] total_inactive_file 0 [ 1471.008605][T22494] total_active_file 0 [ 1471.016159][T22494] total_unevictable 0 [ 1471.027288][T22494] anon_cost 0 [ 1471.036418][T22494] file_cost 0 [ 1471.039793][T22494] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz7/test,task_memcg=/syz7/test,task=syz.7.4331,pid=22493,uid=0 [ 1471.072174][T17422] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1471.094755][T22494] Memory cgroup out of memory: Killed process 22494 (syz.7.4331) total-vm:102252kB, anon-rss:1432kB, file-rss:22900kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 1471.116125][T17422] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1471.131636][T17422] usb 2-1: Product: syz [ 1471.142058][T17422] usb 2-1: Manufacturer: syz [ 1471.158986][T22494] socket: no more sockets [ 1471.174441][T17422] cdc_wdm 2-1:1.0: skipping garbage [ 1471.179851][T17422] cdc_wdm 2-1:1.0: skipping garbage [ 1471.208259][T17422] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1471.239424][T17422] cdc_wdm 2-1:1.0: Unknown control protocol [ 1471.462762][T14364] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.734828][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 1471.740454][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.747032][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.753789][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.760370][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.766736][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.773306][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.779888][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.786468][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.793200][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.799789][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.806143][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.812707][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.818903][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.825476][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.832188][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.838760][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.845339][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.851912][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.858178][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1471.864744][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1471.871065][T17421] usb 2-1: USB disconnect, device number 70 [ 1471.877072][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1472.011588][T13407] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1472.183302][T13407] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1472.222920][T13407] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1472.282298][T13407] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1472.622488][T14871] Bluetooth: hci0: command tx timeout [ 1473.259794][T13407] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1473.325681][T13407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.394529][T13407] cdc_acm 8-1:1.0: probe with driver cdc_acm failed with error -22 [ 1473.538001][T14364] bridge_slave_1: left allmulticast mode [ 1473.561668][T14364] bridge_slave_1: left promiscuous mode [ 1473.581668][T17421] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1474.485545][T14364] bridge0: port 2(bridge_slave_1) entered disabled state [ 1474.539862][T14364] bridge_slave_0: left allmulticast mode [ 1474.573254][T14364] bridge_slave_0: left promiscuous mode [ 1474.606081][T14364] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.654220][T17421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.699490][T17421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.711647][T14871] Bluetooth: hci0: command tx timeout [ 1474.769334][T17421] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1474.837174][T17421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.894975][T17421] usb 2-1: config 0 descriptor?? [ 1474.916626][ T29] audit: type=1400 audit(2000000515.516:1041): avc: denied { write } for pid=22522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1475.236225][ T29] audit: type=1400 audit(2000000515.836:1042): avc: denied { write } for pid=22546 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1475.272394][T17421] usbhid 2-1:0.0: can't add hid device: -71 [ 1475.323379][T17421] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1475.376537][T17421] usb 2-1: USB disconnect, device number 71 [ 1475.507476][T18617] usb 8-1: USB disconnect, device number 15 [ 1475.718045][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 1475.984518][T14364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1476.015081][T22553] netlink: 92 bytes leftover after parsing attributes in process `syz.7.4344'. [ 1476.046545][T14364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1476.083522][T14364] bond0 (unregistering): Released all slaves [ 1476.123443][T14364] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1476.156923][T14364] veth0_to_bond: left promiscuous mode [ 1476.177580][T14364] veth0_to_bond: left allmulticast mode [ 1476.217123][T14364] bond1 (unregistering): Released all slaves [ 1476.285712][ T5271] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1476.686694][T14364] hsr_slave_0: left promiscuous mode [ 1476.724335][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.782998][T14871] Bluetooth: hci0: command tx timeout [ 1476.790599][T14364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.851107][T14364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.900676][T14364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.958152][T22578] netlink: 14 bytes leftover after parsing attributes in process `syz.8.4349'. [ 1476.999276][T14364] veth1_vlan: left promiscuous mode [ 1477.421720][T14364] veth0_vlan: left promiscuous mode [ 1479.039883][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.121777][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.382190][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.389043][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1593.860116][T10824] Bluetooth: hci0: command 0x0406 tx timeout [ 1599.841463][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1599.848440][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4976/1:b..l [ 1599.856771][ C0] rcu: (detected by 0, t=10502 jiffies, g=240681, q=627 ncpus=1) [ 1599.864547][ C0] task:udevd state:R running task stack:23480 pid:4976 tgid:4976 ppid:1 task_flags:0x400140 flags:0x00080000 [ 1599.878673][ C0] Call Trace: [ 1599.881940][ C0] [ 1599.884850][ C0] __schedule+0x125c/0x6730 [ 1599.889329][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 1599.894500][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 1599.899245][ C0] ? __kernel_text_address+0xd/0x30 [ 1599.904424][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1599.910030][ C0] ? __pfx___schedule+0x10/0x10 [ 1599.914863][ C0] ? mark_held_locks+0x40/0x70 [ 1599.919598][ C0] preempt_schedule_irq+0x50/0x90 [ 1599.924597][ C0] irqentry_exit+0x205/0xa00 [ 1599.929160][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1599.935122][ C0] RIP: 0010:lock_acquire+0x5e/0x370 [ 1599.940290][ C0] Code: 05 bb 8b 7e 12 83 f8 07 0f 87 da 00 00 00 48 0f a3 05 46 92 3c 0f 0f 82 ac 02 00 00 8b 35 0e c6 3c 0f 85 f6 0f 85 c7 00 00 00 <48> 8b 44 24 30 65 48 2b 05 5d 8b 7e 12 0f 85 ec 02 00 00 48 83 c4 [ 1599.959878][ C0] RSP: 0018:ffffc900054c7748 EFLAGS: 00000206 [ 1599.965914][ C0] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000000 [ 1599.973871][ C0] RDX: 0000000000000000 RSI: ffffffff8e1822c3 RDI: ffffffff8c402680 [ 1599.981820][ C0] RBP: ffffffff8ebe8200 R08: 0000000039afb6cc R09: 0000000000000007 [ 1599.989759][ C0] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 1599.997716][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1600.005699][ C0] __page_table_check_zero+0x8b/0x410 [ 1600.011088][ C0] ? __page_table_check_zero+0x7a/0x410 [ 1600.016624][ C0] ? __reset_page_owner+0x144/0x190 [ 1600.021805][ C0] __free_frozen_pages+0x790/0x1090 [ 1600.026988][ C0] qlist_free_all+0x47/0xf0 [ 1600.031464][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1600.036894][ C0] __kasan_kmalloc+0x8a/0xb0 [ 1600.041457][ C0] __kmalloc_noprof+0x322/0x820 [ 1600.046292][ C0] ? tomoyo_encode2+0xfb/0x3c0 [ 1600.051027][ C0] tomoyo_encode2+0xfb/0x3c0 [ 1600.055588][ C0] tomoyo_encode+0x29/0x50 [ 1600.059984][ C0] tomoyo_realpath_from_path+0x18c/0x690 [ 1600.065588][ C0] tomoyo_path_perm+0x276/0x460 [ 1600.070410][ C0] ? tomoyo_path_perm+0x262/0x460 [ 1600.075407][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1600.080763][ C0] ? find_held_lock+0x2b/0x80 [ 1600.085407][ C0] ? __might_fault+0xc5/0x140 [ 1600.090053][ C0] ? __might_fault+0xc5/0x140 [ 1600.094710][ C0] security_inode_getattr+0x116/0x280 [ 1600.100066][ C0] vfs_statx+0x11f/0x3f0 [ 1600.104281][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 1600.109017][ C0] ? do_getname+0x191/0x390 [ 1600.113493][ C0] vfs_fstatat+0x77/0xe0 [ 1600.117706][ C0] __do_sys_newfstatat+0x9d/0x120 [ 1600.122714][ C0] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 1600.128327][ C0] do_syscall_64+0x115/0x870 [ 1600.132901][ C0] ? clear_bhb_loop+0x40/0x90 [ 1600.137549][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1600.143422][ C0] RIP: 0033:0x7f8935b11b0a [ 1600.147805][ C0] RSP: 002b:00007ffea8ce4608 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1600.156185][ C0] RAX: ffffffffffffffda RBX: 00005647b1504418 RCX: 00007f8935b11b0a [ 1600.164126][ C0] RDX: 00007ffea8ce4610 RSI: 00005647b14f2ef3 RDI: 00000000ffffff9c [ 1600.172066][ C0] RBP: 00005647c734b668 R08: 0006583017cc7a70 R09: 0000000000000001 [ 1600.180007][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1600.187957][ C0] R13: 00007ffea8ce4610 R14: 0000000000000000 R15: 0006583017cc7a70 [ 1600.195913][ C0] [ 1600.198903][ C0] rcu: rcu_preempt kthread starved for 808 jiffies! g240681 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1600.209973][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1600.219910][ C0] rcu: RCU grace-period kthread stack dump: [ 1600.225766][ C0] task:rcu_preempt state:R running task stack:27592 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1600.239215][ C0] Call Trace: [ 1600.242465][ C0] [ 1600.245369][ C0] __schedule+0x125c/0x6730 [ 1600.249865][ C0] ? __pfx___schedule+0x10/0x10 [ 1600.254698][ C0] ? find_held_lock+0x2b/0x80 [ 1600.259354][ C0] ? schedule+0x225/0x2c0 [ 1600.263654][ C0] schedule+0xdd/0x2c0 [ 1600.267694][ C0] schedule_timeout+0x127/0x280 [ 1600.272516][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1600.277860][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1600.283117][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1600.288892][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 1600.294322][ C0] rcu_gp_fqs_loop+0x1a9/0x900 [ 1600.299067][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1600.304322][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1600.309238][ C0] ? rcu_is_watching+0x12/0xc0 [ 1600.313973][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1600.319763][ C0] rcu_gp_kthread+0x179/0x230 [ 1600.324420][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1600.329587][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1600.335376][ C0] ? __kthread_parkme+0x18c/0x230 [ 1600.340376][ C0] ? kthread+0x13a/0x450 [ 1600.344586][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1600.349765][ C0] kthread+0x370/0x450 [ 1600.353803][ C0] ? __pfx_kthread+0x10/0x10 [ 1600.358361][ C0] ret_from_fork+0x72b/0xd50 [ 1600.362936][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1600.368020][ C0] ? __switch_to+0x800/0x10f0 [ 1600.372665][ C0] ? __pfx_kthread+0x10/0x10 [ 1600.377223][ C0] ret_from_fork_asm+0x1a/0x30 [ 1600.381978][ C0] [ 1600.384967][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1600.391261][ C0] CPU: 0 UID: 0 PID: 3224 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 1600.402508][ C0] Tainted: [L]=SOFTLOCKUP [ 1600.406810][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1600.416834][ C0] Workqueue: bat_events batadv_tt_purge [ 1600.422366][ C0] RIP: 0010:process_backlog+0x0/0x1580 [ 1600.427804][ C0] Code: 04 24 e8 63 0b ec f8 48 8b 04 24 e9 9b fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 41 57 41 56 41 55 49 89 fd 41 54 55 53 48 83 ec 40 89 [ 1600.447381][ C0] RSP: 0018:ffffc90000007d28 EFLAGS: 00000246 [ 1600.453414][ C0] RAX: ffffffff898ee4b0 RBX: ffff8880b843d2f8 RCX: ffffffff898f1667 [ 1600.461370][ C0] RDX: 1ffff11017087a63 RSI: 0000000000000040 RDI: ffff8880b843d2f8 [ 1600.469311][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1600.477251][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000040 [ 1600.485205][ C0] R13: 0000000000000001 R14: ffffc90000007df0 R15: dffffc0000000000 [ 1600.493146][ C0] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1600.502046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1600.508600][ C0] CR2: 00007f6bb71aec80 CR3: 00000000af8ef000 CR4: 00000000003526f0 [ 1600.516544][ C0] Call Trace: [ 1600.519818][ C0] [ 1600.522647][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1600.528000][ C0] net_rx_action+0xa40/0xf20 [ 1600.532575][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1600.537656][ C0] ? hrtimer_bases_first+0x140/0x210 [ 1600.542912][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1600.549044][ C0] ? mark_held_locks+0x40/0x70 [ 1600.553777][ C0] handle_softirqs+0x1ea/0x9b0 [ 1600.558513][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1600.563780][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1600.569045][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 1600.574656][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 1600.580116][ C0] do_softirq+0xac/0xe0 [ 1600.584259][ C0] [ 1600.587185][ C0] [ 1600.590112][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1600.595217][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 1600.600491][ C0] ? look_up_lock_class+0x55/0x120 [ 1600.605578][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 1600.611359][ C0] batadv_tt_purge+0x8b/0xbd0 [ 1600.616020][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1600.621798][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1600.627060][ C0] ? rcu_is_watching+0x12/0xc0 [ 1600.631817][ C0] process_one_work+0xa23/0x1940 [ 1600.636747][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1600.642101][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 1600.647366][ C0] rescuer_thread+0x905/0x14a0 [ 1600.652116][ C0] ? rescuer_thread+0x240/0x14a0 [ 1600.657025][ C0] ? rescuer_thread+0x118/0x14a0 [ 1600.661943][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1600.667113][ C0] ? __kthread_parkme+0x18c/0x230 [ 1600.672110][ C0] ? kthread+0x13a/0x450 [ 1600.676338][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1600.681505][ C0] kthread+0x370/0x450 [ 1600.685542][ C0] ? __pfx_kthread+0x10/0x10 [ 1600.690118][ C0] ret_from_fork+0x72b/0xd50 [ 1600.694693][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1600.699776][ C0] ? __switch_to+0x800/0x10f0 [ 1600.704420][ C0] ? __pfx_kthread+0x10/0x10 [ 1600.708990][ C0] ret_from_fork_asm+0x1a/0x30 [ 1600.713743][ C0]