last executing test programs: 14.328721731s ago: executing program 3 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000005ec0)) getgroups(0x2, &(0x7f0000005f00)=[0x0, 0xee00]) stat(0x0, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006002000800a0000100004"], 0x34}}, 0x0) sendmmsg$unix(r6, &(0x7f0000006100)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000440)="3c44b0b3f02dee1d436f3b76fa88c33b7633ebdb2b3ca4e8a9b2c682455967f9f525473a65bea804d144bfdd080d8e215832cdd0d163d8da9785e1fef54b87fc9de8138e8be55a735ba50fc8e248d86a38ceba353d3714dfe5a4767e4a110f4d791299fe5f04191960e5b73a7b16ad2f66062ce015f30f2e64dc7d606b2e256a4690c91443a475d31fcb584dff7e918695e2fcf732573c31043a5202591e0ef47ffa4eed895072d8fb4ef7341907fccde28331d89fffd126325613f5996a7a6911a92277d0d180311bd0d80896b9e19cfb773d5caf3151e6454f6bdb", 0xdc}, {&(0x7f0000000940)="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", 0x1000}, {0x0}], 0x3, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a00), 0x0, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x810}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000001e00)="aeaa3f701c08089cb4c6e2f52b57d5597918c365cc078e643be27836078b25123f0d06cdef99eb967380d4c86a8300a39146f04d04870c3ca8ba01a597e277abed04a54791f16c5cb246c7c4f7df027bfa6c3cb55ef9f817519b4112c5f763d6c8fb9fa9c11e0e152bc1b119740b4793e3316b74e6271c5cdea1e1c823e3aa5cdfe46ff09f95d4a63b8ee768504750ca40527287ab642cb89cc4909f55438266852c6093af89020d61c35e0fce2e1d471244ddc92c0e40185f9310aa37691775a0cbd26820dfd390ac9860f00e27cb86ff1a1f58980a0d1e63733cafc798a77672e0dee36783bf358095fd6f2b0dbc049126819eed63afbcdb387a4b14441e73511fde6dc8ea568ee68d1419eb6fed6e1995ca1f3cde589820bd80b04a2cd44cbc741cbaadf86c7e4307e205ed2d531f802db3611365aca8c9ec6803cca655b55665ebc729aa43841e434a55fd58848460bc190c46c8947e56078024a3627b6107b85e48ab781b33d7f3eb749f87d90910d5d8b30294d86270f033ae90ac2388aaca36635a8c92c6c52475f38a4b24a6cff4ecddb06026d31e720a661fc396386daab74fed5735e9f97c181a1ea9522990121796fbb6be56f88666f42d91d1ccd1c742fed73367af005de66fb289b09e3ed6042ac4e033a2474ac359f3d337ae1dc51c1e1a22c041331de11245ba31c68a48ce2fbd7e442d5f1cdfd5bc63e40e5ea0ef9864a64194e20ec7397d0e895cb09c51aed4ff4ba757b8eeffd8020cbc0b2b4fe92d3a4446408f52fe3d1b545121fec2da95d3cf42ade2ce8a8f06e7d25fbdf5657e4afd573fc6fa3d4570b5e4c6eb892156aaaf49e317e943e59153322f9f2d36144e64484438fdac7b78bcf57acb1e2a4f3adc57165029f300c499191716a2c74ded2a4be345b99e329150b4ce9b173aea66c83b81c7ca0cd601f712ab753b7ece1cbdd919e6370146213f91a5aa601549e56e87853a8fdd11827f1b2530bbd9b40accea18a99fdbff7424b5fe3d3c2925f4904551e22609535ce68f83adc6a3bf98876e312eb313a0439d77018f4cc88246da5c05c4bd3755c821b7f3eadc7db8c08ba5f0bd2bae03daaaf6533c6a1ca7a5bea127f2b8fea3948429288204728ea790f83fb8a8fc26a4880bd72b83e7f33a58a7b97d3f1997e591c631ffe12a5e54094fd7aa51f9984b0b78f9e15ce3c82e06d990ba120e8263e40703a458510bac3896d6f731d4b3d2ff6cc8fabf69156ce68505c5e948d850c4786a9686cb22bcb91f5ef956162053e41a47ca78b52df996f4384c4885448747a719b96241e52eebe77fcb1cc8645a8557cec4818146629a13e09a0bda64c183474903f20b8d6519467a70af2e64ea8c90f1fde4be6d8d6d3cdb4c58308823fdcf8035a096b5b8ba556ac6d5b0557703b584708b7704e66ca6e13b95d2d6377c0b21b8df3a1fb730d3d91ddedce0a8f2b2ca0b80d7347616832c57b2583fd5a77cbe963b42500e54bffe0d626b875332c2ff2cadc952c14ad84202119bcf5e53a5d1f4499e09b47b8cc59b8f85d4c9ac1b0f002e9fa8a381686cb77f0e5d7c5a6919e979c1890ac2e9e757f38f1d0bbf94a355532c505753904fc5f60ad6bf8f0b9718e3eca459b2271458c426632da1e6762d711b9ff2fe66012d83e51d082644d73c30f7002a51d5bb328a8df6fa6b0e92a2dbb9eb9577cefe680f0159b78db4f7fbfb95cfababdf4cde46865220b7fd12672d42466abc2f97a363aff3fe04a3a793c431ac98d9508194ea8ac1d8d8cc6a98708bfc7ef43b1d35d2acb14c8aae2abfee5993c2bf858d183ddbf415c921b582ce291f8e3eb50e68faf05e60c317e286e435e200602f2ccb32b2cd648aa6b9fac06036e054a5a12417b5c86ee3b670c6d06c62d92f7b07f515b2de6dd554351ebccbe4e410805182d2e44df5809f06eb7ee65f34497226976682e90873ada68305206648abeadba0569723a134e717a8c7e1d4e04f9248f7c11dae5ecb67361b00d727fc016ca454715b0cf4f4d3e55857d070a842d61053261b3128811f25341ff9250703e190cd400cf1da026fb3eaf3e765242b4ec62f3dc3d4592356aeb6641101b630b0a435261fd617992294983350feff891b29edba8402d7184b6e1f49f22a428c119dc9192f120980f185cdd955b9e766730739fd370736a45873ab4134bc2dd5a02098f2a29d785d1225a88d5c8f39d5b926bd965fdbebf0b414c64552c24f3d3b7b85fbbad5ca340bdb5a917519f136bf6c77d46c2dcb236826fb3dd552ce8011b79cc8ecea5a79f70d1558dc8314b8ea9e305eb28c3fa74bab87c3b35d76b875c9d9f0a55890843144e1c5552fbb08aaf83d0bdeea56633414c5721aa21eb891955a93917b02049c5b80b9098ba289c60734d94624b81004d413f7ff73f111ae8e906284988b929a089ff6a903e8f0ea39835d5d18b16fa6c50617443eb9b47a13bd3913826465bb6e92a3096bb3dd4509695c894c78fd0f4f06b4d243fc658b48acd3d88d291cf0879e16491c7b1848432757102a7d1712946187c5ea31b664db173b57ee95eb9c536f4010df670d227e661e45c355766f7952ead3c64b696c5c896c895edf8e9748d9f7f1ea9ca0bed0650fbd93ad969ea34be58df40d2d53f43e2486b9b7794e271555d19711540d29f478bd02b37c2e79db3e786ac2cac6529920bd13505689d28fbca6b3bea5e540fb8bbd09e2363e2c0442fc368461a9ce10f3d34cce0dd4fae531d4f4d29abf87ab0c72ff51563aba184c9eee9c23db49da18263ba55816ef52fa5634bd643846f4134b8c0b39391d0ec05df1afd2cb8a8f1a80ff4c99874e8ce8ec248d4cfd72d5dae8724dcb9cd76e69ca066c2081997bc4687e414ce367a6d7247b86d376df6fc804010e484125a7973c50205da816833448ea2cedcafd8848ecea16807c9419da10b112eb9a53b88042c71018b257a486f55d5c770b08aca3e8d35067925a160e6f61762afdb691cb223377ad3e88ea9521c7139f1c6c7da19f755a81358df2762bbd5e0fedf9694a12ff6db274a51c9716355fc5a1d60737cdb1407bf083e8f8fba803056b5017e27ff6f1fa206a3cb661883ded1199bd7a5cee6c43cd21a37c209f6f3634d038ba84a374e3515c5098f7cd7849644f12f4d0b3a686c10ba88da565e3f1039db30558ccec322d1136996bdb113c7d1be264ef18f959ca09966d05d76281ad4cc1a78a0bdd1fe157066755ea77e9261c9178f56d8f3227b573c1e9218e4520f65fa64b168d35610641f3608f93a851e01b509b24400b962b73e14cfa5ad2b2d115cc87a69f91943acd2c5d7416ce5a2cf6c1ebf6a456221bb32ed36e5b6cc611bc7fe7e538dcb03e2dee9b987d67b19bcddae89e4bbff065e0fabf9fde26347ef3428cd12cbf5d4dc94a64c1a8fa635c3a7a2a7a0c8f30dbc4615a6babcf3ff4c1dbfe191aacd87af07256db379a4d444808cc1b96afca8579fa490e1fdc915d7f4b6f6a1bc0380c462936d819be5e4926095296f7810d46d50d9aaa49a7c3408e8a5f927e6dd85a2b65a0f5bc6dc4935a5ab91771d173299df3a34e125069815ddf9a7479a327dafc6abad4e4377c937e969b5da59da78d647866a741b2a43f692f6791906b7c02ce99fc8f79a43572f1b5da087ac67b56198c806bc9cdc55fa078414af60c962546f3e09993e1213fb901f114f39c036a14b69fab3fb3a5c996c0c7571626ef9de01cac14ba3ed46ce9e1fb6eb8afbb200731efa9e1be8c5833092b08fcf3d5749a28e5ec8ca923bcc7e02ca251a9537628d9fb77ad434d1cdc7d413a93bee6d561babfb7e2b6d8ec98a9ae4e81ad06ef8960d3cd053451df106b3c44c8d538b51b9bc15dae3c490efe1ec1c9eb514d2a8271e794e806b8c7933808bf486b2729deec42fa70eb7eca775c3c9f0e6ef1c153270ea3fb27bddb75d950aa11913bb0e0fe7ce13b23e926fbb9cd07b747c5cb571d092a0b1807b44e03390f41f7faf7255b46dff0a602b63339e30d175276248f73ffe0807d41e8784981c63aa8d7b2f0856891a846e8a8c390913ba3c1162c934cca431a412ee2e6440ccf33d4f30ad16aa1179466cf36418b2e578a3edc635eca3e3b59da35331234f789a31ab5fd1467c18352329fa7a9cf2e6b14921f4855e6233fbe3e7a38894e87cb33e6e321a2854e1245077043dec873e590b5da9a0334281a23a8c8956c7f8fe72a32ec34de24f85134b7d01fbaf8098803b93a18afda3aa083e2ba3d508af0ed89489e1674e732908f4c63f242bdb2154f7947ec8b3857eecaafdf3fa67676574ce7e9e134a902453e486c05e442f5e75adc17b5aa290d9bbecd8168726a23e8c7ef530bf58ef622e869612ebea09a30914f3ed005bf058f86b3e6914193cc617bf0ada2893069bc4d44109b433161f397add274a693d37ae211c845875e040bdfcb9c13974e21af7b96d4ad7881a1b26cda6157823811e2c939a53866a91cbec20740aafc5b59b7df8e4d26e8ed3c714f1f70cf8a94d38a511792401feb1a2478aab8663c367fb621e07d343a7b637a683750f8d742308ec5ead00604a620890b8052bbb7b049e258f715b17667ed4896e652f366ceceda10c0100428e501067bd92dd44195c6c74aa69f811e7d2d4296dcbec7f0705edfd3dc693f7083f845d4364ea8a64aef3aa4a29b77e954c4f80453d672420777077a8f287c712086bebc929132506c86bbd708db7f8733340f3a151ad67ddc23de29a031f566c760e29cb9781cbc48ba767b047e5ded7e32dacf6cb200c997d364e40b20867593dc7284d35eb27322750e9ecb38c3ff5466bc52a497f431a0782cc7834b23b0b291e3aa67d287b2c8170289cbefd97249b63411392bd01efc3bda352177c5706ab3761a27d16054f3267bd139c056d1b126bee68ed74cb3077a99f750c26378474a964f5b4122627859c5f49521129132feabc7e8e3b085f5eca2bd8e2a28e56df191634ce4665a2752200daf67b9d3565115989b2183bb64d58505c5df29d0a54861287afe", 0xdf8}, {&(0x7f0000002e00)="ac6258979eb56534d4114728e77160efca6e0cda9bd44efd43c1ddb0cbdb58ecd3355cedfdf07eefc96e4b3521041b6076241fbae33e15d4862219d389222e198b1ac08428874fab58581b8f67e408f298e3329977ed5a81c17783b0dbd4e65f355a61b6fd691bb45831485fc9c9a6b68887cb594cc1cb47cc93a250b841fccfd8a02d7222db64816cda2782e3a934fe218a516f543addd5593179933bd231aed3896282af5b075586542ee759a1ae851edb33edbd68722ae699eda445949ec80a947da8", 0xc4}, {&(0x7f0000002f00)="a3da483eb45aadfbfbd37396a72985b3f9d099308d561b7f1fe6102b544a20e07e7ba408c1d692d93996cfd928ab64c8f8db14bde503fa2899cf29371d5d41aa97f4d136e5fb06388a1c2905de4563cc8c5aa73b1fc09ef648aa1f42", 0x5c}, {&(0x7f0000002fc0)="0c1728a3315ca46e1b6a27c95030cdd5cafd54d43fa7cb3f0190cc71632a670e39af67885f03af46cf27e1b03763f12780b77df43b45f95ef9aeb7d71d183be68ce0efb6bca1f18b53576d15e8c64697317e9160b934eecefea05630ae160114d23a0b60f0735e7dab894681876eba266be3c7ffd2754b81ffdecbeddbcacbc54ef0d6528c04318717a201c0735ec64157d7264f75db934a3a804dbab3602195d07f98f643e080", 0xa7}, {&(0x7f00000031c0)="0680ec21dcba8c1d9bd7461279eae35952af6a859e770f7ef5efda421f62375509111ea3137dd90ca454465a294c69b3f9626388caf3f237e8420365409b5a2e4a8f1263a31db771aaedc26838f14351398233786356c721fbae8ae9ac55b4bde38193243b4d84e443c55a241d6cc5d3651a24007c8e0378a34f421747c6ea08568c371722aa2e8dc434490d9e6815656f6c18d265f2938daf33e9b7245db2e01b187a221122", 0xa6}, {&(0x7f00000032c0)="819fcb17046765e5a0c7898fa8c1b5b8eaaf8cfc4fb78de789ae4972348a1a2ddb2fca6c447a7846875ecbde6dda0cadd4ccbdf7560b9a6ce95d1cfbcba93280080d5e58137152952067d65894cd2d4a05ee222e037be2578ffad49cff76837c2c33bcad5b6047bd5e2038e71737274ae48f", 0x72}], 0x6, &(0x7f00000056c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x28, 0x1, 0x1, [r4, r3, r6, r2, r6, r6]}}], 0xa8, 0x4010}}, {{&(0x7f0000005780)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000005800)="33619ecb4d8fba9a2cc9", 0xa}, {&(0x7f0000005880)}], 0x2, &(0x7f0000006000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r3, r5, r6, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r9}}}, @rights={{0x24, 0x1, 0x1, [r10, r3, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0xe8, 0x4044004}}], 0x4, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d000701000000000000000004"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 12.373480424s ago: executing program 3 (id=599): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x0, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff59) r1 = syz_usb_connect$uac1(0x6, 0x0, 0x0, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xbb, 0x2, 0x7, 0xff, 0x7}, 0x20, &(0x7f00000001c0)=ANY=[@ANYBLOB]}) syz_usb_control_io(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/rpc\x00') lseek(r5, 0x401, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58000000100001040000", @ANYRES32=0x0, @ANYBLOB="0000040082000000380012800b00010067656e6576650000280002800500080000000000050009000000000014000700fc010000000000000000000000000001"], 0x58}}, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='btrfs\x00', 0x0, 0x0) mmap(&(0x7f0000717000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x4010, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 11.972026751s ago: executing program 2 (id=601): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r3, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, &(0x7f0000000540)=""/184, &(0x7f0000000280), &(0x7f0000001540), 0x4, r3}, 0x38) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000940)=@dellinkprop={0x28, 0x12, 0x201, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8, 0xa, 0xffffffffffffffff}]}, 0x28}}, 0x0) recvmmsg(r5, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) 10.52122142s ago: executing program 0 (id=604): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x50}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000003600)=[{{0x0, 0xc824, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x3d}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) 10.44230201s ago: executing program 4 (id=605): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1da0fd67a0ed16a439880000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000300"/20, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x2, 0x5001) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x97}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000340)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x7, 0xb400}, 0x90) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x1, 0x0, 0x3}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$msr(r4, &(0x7f00000001c0)=""/33, 0x21) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000700)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x200, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x1, 0x2cb}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x8, 0x0}}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x7}}}, 0x19) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r8, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r8, 0x1}, 0x20) 10.009122891s ago: executing program 4 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xd5383c303e5f4353}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x3c}, 0x0, @in=@remote, 0x1, 0x1, 0x3}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) listen(r5, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x80010, 0xffffffffffffffff, 0x100000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) 9.592992444s ago: executing program 0 (id=607): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x22) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140), 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc9896323860681482162133639a70419a59ff053a577147beab2b5318a2ab9bb40c8df5765c4c457031c51576a5ca09001ca155b77f84f606527ed1bec0f2a2360b64a994ff8093d117f2416c96feae49c6004a160eca8fde90ae6b3f84034e5b4ca407340854bb990e633d7da77e6ba03037018e170a95c12cd279045fc4fcca1db99298be8b7f4265cadc2175add2c98f1a21479d27d64b97ebf1c778303900a9169ee3ed3ad30eb6a8c904afc4e8f88e1af0234b9c216d869ffc392b5c8967c229833c65db7bf5b76eb6e810f0e0d8f73a781d", 0x111}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x101}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000880)=""/156, 0x9c}], 0x4}, 0x2040) 9.587027763s ago: executing program 1 (id=608): socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = syz_io_uring_setup(0x6fd7, &(0x7f00000004c0)={0x0, 0x932c, 0x80}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)={0x3c, r4, 0x1, 0x20000000, 0x800, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x3c}}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) (async) io_uring_enter(r0, 0x47f6, 0x880e, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x343440, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10) 8.575257864s ago: executing program 3 (id=609): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x22) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc", 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000940)=[{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc9896323860681482162133639a70419a59ff053a577147beab2b5318a2ab9bb40c8df5765c4c457031c51576a5ca09001ca155b77f84f606527ed1bec0f2a2360b64a994ff8093d117f2416c96feae49c6004a160eca8fde90ae6b3f84034e5b4ca407340854bb990e633d7da77e6ba03037018e170a95c12cd279045fc4fcca1db99298be8b7f4265cadc2175add2c98f1a21479d27d64b97ebf1c778303900a9169ee3ed3ad30eb6a8c904afc4e8f88e1af0234b9c216d869ffc392b5c8967c229833c65db7bf5b76eb6e810f0e0d8f73a781d", 0x111}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x101}], 0x18}], 0x1, 0x0) recvmsg$can_j1939(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000880)=""/156, 0x9c}], 0x4}, 0x2040) 8.43029233s ago: executing program 0 (id=610): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[]) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000005ec0)) getgroups(0x2, &(0x7f0000005f00)=[0x0, 0xee00]) stat(0x0, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006002000800a0000100004"], 0x34}}, 0x0) sendmmsg$unix(r6, &(0x7f0000006100)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000440)="3c44b0b3f02dee1d436f3b76fa88c33b7633ebdb2b3ca4e8a9b2c682455967f9f525473a65bea804d144bfdd080d8e215832cdd0d163d8da9785e1fef54b87fc9de8138e8be55a735ba50fc8e248d86a38ceba353d3714dfe5a4767e4a110f4d791299fe5f04191960e5b73a7b16ad2f66062ce015f30f2e64dc7d606b2e256a4690c91443a475d31fcb584dff7e918695e2fcf732573c31043a5202591e0ef47ffa4eed895072d8fb4ef7341907fccde28331d89fffd126325613f5996a7a6911a92277d0d180311bd0d80896b9e19cfb773d5caf3151e6454f6bdb", 0xdc}, {0x0}], 0x2, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001a00), 0x0, &(0x7f00000008c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18, 0x810}}, {{&(0x7f0000001d00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000001e00)="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", 0xdf8}, {&(0x7f0000002e00)="ac6258979eb56534d4114728e77160efca6e0cda9bd44efd43c1ddb0cbdb58ecd3355cedfdf07eefc96e4b3521041b6076241fbae33e15d4862219d389222e198b1ac08428874fab58581b8f67e408f298e3329977ed5a81c17783b0dbd4e65f355a61b6fd691bb45831485fc9c9a6b68887cb594cc1cb47cc93a250b841fccfd8a02d7222db64816cda2782e3a934fe218a516f543addd5593179933bd231aed3896282af5b075586542ee759a1ae851edb33edbd68722ae699eda445949ec80a947da8", 0xc4}, {&(0x7f0000002f00)="a3da483eb45aadfbfbd37396a72985b3f9d099308d561b7f1fe6102b544a20e07e7ba408c1d692d93996cfd928ab64c8f8db14bde503fa2899cf29371d5d41aa97f4d136e5fb06388a1c2905de4563cc8c5aa73b1fc09ef648aa1f42", 0x5c}, {&(0x7f0000002fc0)="0c1728a3315ca46e1b6a27c95030cdd5cafd54d43fa7cb3f0190cc71632a670e39af67885f03af46cf27e1b03763f12780b77df43b45f95ef9aeb7d71d183be68ce0efb6bca1f18b53576d15e8c64697317e9160b934eecefea05630ae160114d23a0b60f0735e7dab894681876eba266be3c7ffd2754b81ffdecbeddbcacbc54ef0d6528c04318717a201c0735ec64157d7264f75db934a3a804dbab3602195d07f98f643e080", 0xa7}, {&(0x7f00000031c0)="0680ec21dcba8c1d9bd7461279eae35952af6a859e770f7ef5efda421f62375509111ea3137dd90ca454465a294c69b3f9626388caf3f237e8420365409b5a2e4a8f1263a31db771aaedc26838f14351398233786356c721fbae8ae9ac55b4bde38193243b4d84e443c55a241d6cc5d3651a24007c8e0378a34f421747c6ea08568c371722aa2e8dc434490d9e6815656f6c18d265f2938daf33e9b7245db2e01b187a221122", 0xa6}, {&(0x7f00000032c0)="819fcb17046765e5a0c7898fa8c1b5b8eaaf8cfc4fb78de789ae4972348a1a2ddb2fca6c447a7846875ecbde6dda0cadd4ccbdf7560b9a6ce95d1cfbcba93280080d5e58137152952067d65894cd2d4a05ee222e037be2578ffad49cff76837c2c33bcad5b6047bd5e2038e71737274ae48f", 0x72}], 0x6, &(0x7f00000056c0)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6, r4]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x28, 0x1, 0x1, [r4, r3, r6, r2, r6, r6]}}], 0xa8, 0x4010}}, {{&(0x7f0000005780)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f0000005980)=[{&(0x7f0000005800)="33619ecb4d8fba9a2cc9", 0xa}, {&(0x7f0000005880)}], 0x2, &(0x7f0000006000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r3, r5, r6, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r8}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, r9}}}, @rights={{0x24, 0x1, 0x1, [r10, r3, 0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0xe8, 0x4044004}}], 0x4, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81300003d000701000000000000000004"], 0x13d8}, 0x1, 0x0, 0x0, 0x40c0051}, 0xc000) 7.281439935s ago: executing program 2 (id=611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 7.230359677s ago: executing program 3 (id=612): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) mknodat(r2, &(0x7f0000000040)='./bus\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(r2, &(0x7f0000000380)='./bus\x00', r2, &(0x7f0000000400)='./file1\x00', 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) syz_open_dev$sndctrl(0x0, 0x400000000000, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x149) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a0000000000006111900000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 7.227285029s ago: executing program 4 (id=613): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r0, 0x6, 0xa, 0x0, 0x2000e881) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1) read$snddsp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r6, r5, 0x0, r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x3, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x7e040000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000680)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000500"/95], 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a01040000000000000000020000002c000480280001800b00010064796e7365740000180002800900010073797a30000000000800044000000000140000000000000000000000000000000000000a"], 0x68}}, 0x0) 6.530529752s ago: executing program 0 (id=614): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=""/245, 0xf5}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3e80}, 0x0) 6.485448019s ago: executing program 2 (id=615): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[0x0]) 6.02095684s ago: executing program 3 (id=616): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/145) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000005, &(0x7f0000000600)="01", 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='autofs\x00', 0x26c02, &(0x7f0000001540)='\r\x87\x17^\x981\xd5\x14\xe2\x81\xa6\xcd\t\xa5\xbasG\x88\x7f]\x03\xf3\xd5t\x97\x9f\xee\"\xebU\xccM\x02\x17\x0f[\x9c\x9e\xa6\xd2\xe4(\xea\x7f\xe4\x90K\xcb\xb5;f\x02}\x147\x04=\xe50\x8d;\x90!\x01,\xdb,\xb9\x8e\t\x13\x1eh\xbc^<\xd2\x809G\xe6H\xbb&^\\\x9c\xady\xd9\xb5\xa3\x16\xd0\xdf\x1a\xaa\xfcHz\x89\x19\xe1\xe6+\xf6\xc3\xad\x80\x98\xc2\x10\x91\xec\xf6\x93=\xbe\x10\xfc`\x86\xa7\xe6\xae\x00*R\x92\x05\xf6\x80u\xf9\xb7S{\xd6\x99\x9a\xf3\xcc\x04o\xdd\x91 \x92;\x87\xfb\x82c>\x82VR8\xe5\x0f\xeb\xcdJz\f\xf5.\xd7!\xa1\xfe\xc8\xf0\xb5\\\xc2\xc7\xc7\xaa\xd9:\xa3+\x12\x9f\xfc\xf6@},`=\xea\x91\fJ\xe4\rC\xa9\xe0\x8b%\x9f\'\xbdX\xbfS\x00\x8c\x84\x10\xcf\xf0\xd7\xe0\xf9\xf8E\xa3?\x17\\\x9e\n\xa1h!\x9e\xd8\xe8\xa5\xc5\xbf_\xa7\xc9\x91U\x86=\xa5\xf7g~\xaa\xc8N\"^\x8e%') socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0x4}, @CTA_SEQ_ADJ_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048400}, 0x0) keyctl$setperm(0x5, 0x0, 0x10200000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000001700)={0x0, 0x5e, &(0x7f0000001680)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) 5.942750743s ago: executing program 1 (id=617): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'ip6gre0\x00'}}, 0x1e) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="6103060704020662018102"], 0xb) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f00000045c0)={0x18, 0x4000000, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'veth0_to_team\x00'}}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xa}, @hci_ev_le_conn_update_complete={{}, {0x0, 0xc8, 0x5833, 0xffff, 0x9}}}}, 0xd) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0xa712, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c00018006000600894f"], 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000540)={0x3, &(0x7f0000000040)=[{0x50, 0x0, 0x3, 0x7f}, {0xb1, 0x7, 0x4d, 0xfffff038}, {0x6, 0x6, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[], 0xfdef) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x60, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6100f67b}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_0\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}]}], {0x14}}, 0xd8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x16) 5.732574421s ago: executing program 2 (id=618): syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0xa, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1001, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20000000) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000300)={{0x2, 0x4e20, @private=0xa010100}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x109b70819ce8d017, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'team_slave_1\x00'}) dup2(r4, r3) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14", @ANYRESDEC=r4], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 5.08417845s ago: executing program 0 (id=619): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001700)=[{&(0x7f0000000380)="be0fb9567e786c9e2788e6cf0aa96dfa88a8c8e449fd0468be5b4bf17c212b35ed080efe5138231f959f4b8b88914ad992927abeb66dcb5030794e41e540bc40592a80b63954ecddd89cb2a50b74acc0e9d8ae13a9b8595667203c10022068a7cb12e9733f4814e75e5c7f263a922b03b9959ed583834ad1103486ed8f100711f3206d14b1a2239e237cd095f4a1a787a370e2fb0a91482da5f2a9a18fb49eef5ff52e7955f04ace00f878330bcf02d3ccc401c905dd9685b0cc364c5c0c9f0f17269a1b07580a8c64ab38f04851fbcf1f03d923b131d291930c6d011bcd0f69cf20", 0xe2}, {&(0x7f0000000040)="a4d1c938857ff4398b837d9dc26ff78093ba87ce24beb56406", 0x19}, {&(0x7f0000000480)}, {&(0x7f0000000180)="6f04c14408f8abc1ea22b3a70f14c9dc6878901fd2468c9f252f7c", 0x1b}, {&(0x7f0000001600)="89dcb939cf0d1735e70f57648360a7e480268b5d57c04f1427b781537fa53619317ae19d864c6e1610d510cb2e6f3af67632c2d487914b9ebff5f76b69686ebda80a37e448cefca6d8b9ad8b55f918c060193ab888de9a77398b1028e1e57eb99a30d0c33c8cc12a4a9dfd1d243a16405f4163da981ecb7d6623d2782b0b7401a04064469db57476816ae66be7e1d022cb860bbf0ba31905777297badbe47101b97e7d1b7638a6356b2773c69a610bc0749b3af03a20d6bf149cf03bcc77bda01e75b6dc3d5115609ce3f8a9", 0xcc}], 0x5}, 0x0) socket$inet(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffffff, 0x0, 0x40, 0x180) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x408883, 0x0) execveat(r1, &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000580)='}:\x00']}, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5484}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r5, 0x40384708, 0x20000000) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 4.997924146s ago: executing program 3 (id=620): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f0000000180)='./file0/../file0\x00', 0x11, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0x4, 0xac, {0xac, 0x30, "1065d762449d84b39358502ceab385862ccb7ef01acdb393b3bc2575e0303ce455300404ace43648554090978915e809e4e2932dc1ea84b4433a19b9facd112a419028df2f1c74774330274c37aa14c775f44a700d65545bcde624f1d2cf809c2f31fa18440d169d4e260164d946c1fc3f466df5891f4c8685871f1e6120a5c82f4579dd4e6d3b8feff67704d8e1f6a38ecc98436dfac994bf7c1b9893d6ac78f0578b171e2f1b1e4d34"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000680)={0x0, 0xf, 0x83, "e7b90010120764627632f53e33bc924bc4c5543e64df77d726c358ffa81a5ad112fc392a76219cfb805177ea196bdd283ff1881a4d6c935b11a1c6c88d61a1b20cab53ba5778746cc61d926f4880f61eec361d50a53c5a3f9cea6b098181ace5d33f6001e6871fa3319fd3d788c53e9539642d4e0bf18e9c804468055a016ea6060319"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x84}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x15f, 0x5, 0xc3f, 0x3178, 0x7, 0x2, 0x3, 0x2, 0x9, 0x7d, 0xf63, 0x2400}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0xe5}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f0000000a00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x6, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0xc0, 0x3, 0x2, 0x6, 0x0, 0x80, {{0xb, 0x24, 0x6, 0x0, 0x0, "d827583d796f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x4, 0xa, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0x13, 0x24, 0x1b, 0xdd0, 0x4, 0x1, 0x6, 0x5, 0x5}, @acm={0x4, 0x24, 0x2, 0x13}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xbc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xad, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x2, 0x7, 0x3, 0x8, 0x5a}, 0x16f, &(0x7f0000000400)={0x5, 0xf, 0x16f, 0x5, [@generic={0xe0, 0x10, 0x8, "e4933adc9554c639efeb9ca05598f4319f72d59381d4d0d1887e772472019ccb7aed36910511e6c6678d4673331ffbfe587b4486b60ecd58e0931e280c4091e2a4fcb2138bc5c4e6986b5f900e60223631cba1292a8362661b2129b1ac84f487afc4509b8d10094e4d886b06f931117d9311bbd4341b681ce258d90dea3df627a7957a41841384157cd39df5e4328a8104a6ffc7662d277df7c1abd346b77773ace41fbe5f03f2fe082724d4bfab66e47905cfda06311e3d0f611fab07b1b99c6c1dab72085998aa70e1a6b1702996105d609bee370155558970bdaed9"}, @ptm_cap={0x3}, @generic={0x59, 0x10, 0x2, "f0ce005fec3c2760ee2a66c9aa9ad81066039cda7689c7e82cd0bbb20300fed4e5e6113f2d17b62694e5d07cd387b73b10c0e9b4718b5aefe3482f15958b92d6b523db8f35aab84e42cb40d14eab69272a7b606928dc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x2, 0x199}, @ssp_cap={0x24, 0x10, 0xa, 0xe1, 0x6, 0x10001, 0xf0f, 0x6, [0x7fbf00, 0x3f30, 0x0, 0x0, 0x7, 0xff0030]}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xd8f1}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x40, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.697085725s ago: executing program 1 (id=621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) setitimer(0x2, 0x0, 0x0) setitimer(0x0, &(0x7f0000000380)={{0x0, 0x2710}}, &(0x7f00000003c0)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000300)={0x1, 0xff, 0x0, &(0x7f00000002c0)={0x14, "5dab940f3499c199c5e2b8c490f8801e3bb0e7f9ed4571cd53c8bc3c08049ef5e4"}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010300000000000000001c0000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25GETUID(r8, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xee01}) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000040601040000345ca7c42bd248acd4c2b601b5000000000000010000020900020073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x20000800) 3.451278941s ago: executing program 0 (id=622): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100), &(0x7f0000000180)='./file0/../file0\x00', 0x11, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000300)='./file0/../file0\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000640)={0x14, &(0x7f0000000580)={0x40, 0x4, 0xac, {0xac, 0x30, "1065d762449d84b39358502ceab385862ccb7ef01acdb393b3bc2575e0303ce455300404ace43648554090978915e809e4e2932dc1ea84b4433a19b9facd112a419028df2f1c74774330274c37aa14c775f44a700d65545bcde624f1d2cf809c2f31fa18440d169d4e260164d946c1fc3f466df5891f4c8685871f1e6120a5c82f4579dd4e6d3b8feff67704d8e1f6a38ecc98436dfac994bf7c1b9893d6ac78f0578b171e2f1b1e4d34"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000680)={0x0, 0xf, 0x83, "e7b90010120764627632f53e33bc924bc4c5543e64df77d726c358ffa81a5ad112fc392a76219cfb805177ea196bdd283ff1881a4d6c935b11a1c6c88d61a1b20cab53ba5778746cc61d926f4880f61eec361d50a53c5a3f9cea6b098181ace5d33f6001e6871fa3319fd3d788c53e9539642d4e0bf18e9c804468055a016ea6060319"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x84}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x80, 0x1c, {0x15f, 0x5, 0xc3f, 0x3178, 0x7, 0x2, 0x3, 0x2, 0x9, 0x7d, 0xf63, 0x2400}}, &(0x7f0000000880)={0x20, 0x85, 0x4, 0xe5}, &(0x7f00000008c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0xfff7}, &(0x7f0000000a00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)={0x60, 0x10, 0x4, "e34207b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x1, 0x6, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0xc0, 0x3, 0x2, 0x6, 0x0, 0x80, {{0xb, 0x24, 0x6, 0x0, 0x0, "d827583d796f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x4, 0xa, 0x4}, [@obex={0x5, 0x24, 0x15, 0x4}, @mbim={0x13, 0x24, 0x1b, 0xdd0, 0x4, 0x1, 0x6, 0x5, 0x5}, @acm={0x4, 0x24, 0x2, 0x13}, @acm={0x4, 0x24, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xbc}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0xad, 0x3}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x0, 0x2, 0x7, 0x3, 0x8, 0x5a}, 0x16f, &(0x7f0000000400)={0x5, 0xf, 0x16f, 0x5, [@generic={0xe0, 0x10, 0x8, "e4933adc9554c639efeb9ca05598f4319f72d59381d4d0d1887e772472019ccb7aed36910511e6c6678d4673331ffbfe587b4486b60ecd58e0931e280c4091e2a4fcb2138bc5c4e6986b5f900e60223631cba1292a8362661b2129b1ac84f487afc4509b8d10094e4d886b06f931117d9311bbd4341b681ce258d90dea3df627a7957a41841384157cd39df5e4328a8104a6ffc7662d277df7c1abd346b77773ace41fbe5f03f2fe082724d4bfab66e47905cfda06311e3d0f611fab07b1b99c6c1dab72085998aa70e1a6b1702996105d609bee370155558970bdaed9"}, @ptm_cap={0x3}, @generic={0x59, 0x10, 0x2, "f0ce005fec3c2760ee2a66c9aa9ad81066039cda7689c7e82cd0bbb20300fed4e5e6113f2d17b62694e5d07cd387b73b10c0e9b4718b5aefe3482f15958b92d6b523db8f35aab84e42cb40d14eab69272a7b606928dc"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x3, 0x2, 0x199}, @ssp_cap={0x24, 0x10, 0xa, 0xe1, 0x6, 0x10001, 0xf0f, 0x6, [0x7fbf00, 0x3f30, 0x0, 0x0, 0x7, 0xff0030]}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xd8f1}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x40, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.727347124s ago: executing program 1 (id=623): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, 0x1c) 2.573783016s ago: executing program 1 (id=624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000540)={0x2, 0x100, 0x7, {0x9, 0x870, 0x870, 0x4}}) r3 = socket(0x1, 0x803, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12d25}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r6, 0x6, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000300)={0x30, 0x0, 0x301, 0x0, 0x0, {{0x5}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x6, 0xf076}}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x30}}, 0x0) timerfd_create(0x0, 0x0) 2.542512005s ago: executing program 2 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40) 2.052205321s ago: executing program 2 (id=626): mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x1000000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_access\x00') r2 = syz_io_uring_setup(0x2622, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0, 0x0, 0x3}, {0x0}, {0x0}]}, 0x4}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) open_tree(r1, 0x0, 0x89981) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_cmd={0x34, 0x2, 0x0, 0xebc, 0x7, 0x3, 0x9, 0x0, 0xa1, 0xa, 0x7ff, 0x6, 0xc229, 0x9, 0xb, 0x6, [0x6, 0x23c8]}}) 1.958868003s ago: executing program 1 (id=627): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x76, 0x59, 0x8, 0x1de1, 0xc102, 0x1fcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa4, 0xb, 0x5d}}]}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) (async) r4 = dup(r3) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x1, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r7 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/560]}, 0x2a8) socket$alg(0x26, 0x5, 0x0) (async) connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e20, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000240), &(0x7f0000000340)=r4}, 0x20) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) pipe(&(0x7f0000000500)) (async) quotactl$Q_GETQUOTA(0x3, 0x0, 0x0, 0x0) (async) utime(&(0x7f0000000200)='./file0\x00', 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc, 0xa3, 0x8f, 0x40, 0x13d8, 0x11, 0xd062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x56}}]}}]}}, 0x0) (async) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000100), 0x0, 0x2, 0x0) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) splice(r0, &(0x7f0000000040)=0xea, r8, &(0x7f00000000c0)=0x4, 0xfff, 0x4) 1.417234934s ago: executing program 4 (id=628): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x227) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r6, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8, 0x64, 0x0}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = fsopen(&(0x7f00000001c0)='pstore\x00', 0x0) r8 = landlock_create_ruleset(&(0x7f0000000000)={0xa99a}, 0x10, 0x0) landlock_restrict_self(r8, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 838.644679ms ago: executing program 4 (id=629): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="ae29ace5bffbc200dcef2baf5bbc28ac204007cc4c0784e23101dc35cce21e5a5715d965b5a69a59cb035e5c23e652aadca701e62946a0674a7656ae3a6b4405dc1bed87d00942fe0b2a51a2ccf301cc8535a94dd879801de36f7d241b90f38b5e1d807b220645", @ANYRESHEX=r1], 0x70}, 0x1, 0x0, 0x0, 0x20008010}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (fail_nth: 1) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000080000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf09000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) flock(0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) 0s ago: executing program 4 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x22) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="ae29ace5bffbc200dcef2baf5bbc28ac204007cc4c0784e23101dc35cce21e5a5715d965b5a69a59cb035e5c23e652aadca701e62946a0674a7656ae3a6b4405dc1bed87d00942fe0b2a51a2ccf301cc8535a94dd879801de36f7d241b90f38b5e1d807b220645", @ANYRESHEX=r1], 0x70}, 0x1, 0x0, 0x0, 0x20008010}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000080000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf09000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r5, 0x40186f40, 0x20000502) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) flock(0xffffffffffffffff, 0x2) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='befs\x00', 0x109, 0x0) kernel console output (not intermixed with test programs): sadm_t tclass=pppox_socket permissive=1 [ 138.984550][ T29] audit: type=1400 audit(1738121965.315:362): avc: denied { block_suspend } for pid=6707 comm="syz.2.195" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 139.199709][ T29] audit: type=1400 audit(1738121965.525:363): avc: denied { mount } for pid=6689 comm="syz.3.189" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 139.224418][ T29] audit: type=1400 audit(1738121965.525:364): avc: denied { search } for pid=6689 comm="syz.3.189" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.224839][ T6714] overlayfs: invalid redirect (./file0/../file0) [ 139.260122][ T29] audit: type=1400 audit(1738121965.525:365): avc: denied { mounton } for pid=6689 comm="syz.3.189" path="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 139.282230][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.605101][ T6720] netlink: 56 bytes leftover after parsing attributes in process `syz.4.196'. [ 140.110149][ T29] audit: type=1400 audit(1738121966.435:366): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 140.423409][ T6730] overlayfs: overlapping lowerdir path [ 140.901821][ T9] usb 4-1: USB disconnect, device number 4 [ 141.033744][ T6732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 141.371297][ T6741] input: syz0 as /devices/virtual/input/input8 [ 141.959651][ T6744] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 142.132374][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 142.183785][ T6745] netlink: 36 bytes leftover after parsing attributes in process `syz.3.203'. [ 143.420103][ T6755] sp0: Synchronizing with TNC [ 143.433571][ T6756] sp0: Found TNC [ 143.702018][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.921735][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 143.968983][ T5863] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 144.079961][ T5863] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 144.089196][ T5863] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 144.098487][ T5863] usb 4-1: config 1 has no interface number 0 [ 144.107845][ T5863] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.119032][ T5863] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 144.155675][ T5863] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 144.201652][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.248542][ T6769] bridge0: entered allmulticast mode [ 144.674941][ T5863] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 144.751658][ T5865] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.861698][ T6777] 9pnet_fd: Insufficient options for proto=fd [ 144.900356][ T6777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 144.915922][ T5865] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 144.925143][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.933509][ T5865] usb 5-1: Product: syz [ 144.938140][ T5865] usb 5-1: Manufacturer: syz [ 144.943337][ T5865] usb 5-1: SerialNumber: syz [ 144.958742][ T5865] usb 5-1: config 0 descriptor?? [ 144.969107][ T5865] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.980572][ T5865] hub 5-1:0.0: probe with driver hub failed with error -5 [ 144.988802][ T5865] f81232 5-1:0.0: f81534a converter detected [ 145.021599][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 145.197565][ T5863] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 145.211582][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 145.221162][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.241144][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 145.260623][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 145.280517][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.298005][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.314937][ T9] usb 3-1: config 0 descriptor?? [ 145.326852][ T6773] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 145.342102][ T9] hub 3-1:0.0: USB hub found [ 145.444656][ T5863] usb 4-1: USB disconnect, device number 5 [ 145.457127][ T5863] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 145.552675][ T9] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 145.630469][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 145.630485][ T29] audit: type=1400 audit(1738121971.955:375): avc: denied { open } for pid=6783 comm="syz.0.214" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 145.689768][ T29] audit: type=1400 audit(1738121972.015:376): avc: denied { ioctl } for pid=6783 comm="syz.0.214" path="socket:[11203]" dev="sockfs" ino=11203 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 145.723511][ T6784] netdevsim netdevsim0: Direct firmware load for . [ 145.723511][ T6784] failed with error -2 [ 145.735178][ T6784] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 145.735178][ T6784] [ 145.747762][ T29] audit: type=1400 audit(1738121972.085:377): avc: denied { search } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 145.973171][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 145.979262][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.019197][ T9] usb 3-1: USB disconnect, device number 3 [ 146.156395][ T6789] trusted_key: encrypted_key: insufficient parameters specified [ 146.164973][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.215'. [ 146.750549][ T29] audit: type=1400 audit(1738121973.075:378): avc: denied { read } for pid=6792 comm="syz.0.217" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.774313][ T29] audit: type=1400 audit(1738121973.075:379): avc: denied { open } for pid=6792 comm="syz.0.217" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.797740][ T29] audit: type=1400 audit(1738121973.075:380): avc: denied { ioctl } for pid=6792 comm="syz.0.217" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.809220][ T5865] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 146.834565][ T29] audit: type=1400 audit(1738121973.165:381): avc: denied { ioctl } for pid=6792 comm="syz.0.217" path="socket:[11228]" dev="sockfs" ino=11228 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.869611][ T6795] mkiss: ax0: crc mode is auto. [ 146.903901][ T5865] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 146.963528][ T5865] usb 5-1: USB disconnect, device number 5 [ 146.974935][ T5865] f81232 5-1:0.0: device disconnected [ 148.431637][ T29] audit: type=1400 audit(1738121974.325:382): avc: denied { name_bind } for pid=6804 comm="syz.4.221" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 148.845116][ T29] audit: type=1400 audit(1738121974.325:383): avc: denied { node_bind } for pid=6804 comm="syz.4.221" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 149.402203][ T6823] sz1: rxe_newlink: already configured on lo [ 150.065321][ T29] audit: type=1400 audit(1738121975.945:384): avc: denied { getopt } for pid=6814 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 150.142941][ T6827] syz.0.228(6827): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 150.402529][ T6832] overlayfs: overlapping lowerdir path [ 150.848975][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 150.848989][ T29] audit: type=1400 audit(1738121977.175:387): avc: denied { read write } for pid=6826 comm="syz.0.228" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 150.969061][ T29] audit: type=1400 audit(1738121977.205:388): avc: denied { open } for pid=6826 comm="syz.0.228" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 151.365033][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 151.409480][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 151.420386][ T6838] netlink: 'syz.4.230': attribute type 10 has an invalid length. [ 151.542026][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 151.560933][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 151.572661][ T6838] netlink: 40 bytes leftover after parsing attributes in process `syz.4.230'. [ 151.574831][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 151.691075][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 151.700220][ T6843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 151.711300][ T29] audit: type=1400 audit(1738121977.975:389): avc: denied { append } for pid=6839 comm="syz.3.231" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 152.098417][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.106277][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.114102][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.121889][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.129590][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.137690][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.145595][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.162383][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.170118][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.180414][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.188615][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.199389][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.207627][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.238236][ T6838] team0: Port device geneve0 added [ 152.243713][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.255860][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: unknown main item tag 0x0 [ 152.324733][ T5906] hid-generic 0000:0000:FFFFFFFD.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 152.606129][ T6853] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 152.745334][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 152.754535][ T6857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.233'. [ 154.714261][ T6869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 154.825491][ T6880] bridge0: entered allmulticast mode [ 155.261684][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.440854][ T6883] netlink: 72 bytes leftover after parsing attributes in process `syz.2.242'. [ 155.447740][ T5862] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 155.459198][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.469307][ T5862] usb 4-1: Product: syz [ 155.475601][ T5862] usb 4-1: Manufacturer: syz [ 155.480359][ T5862] usb 4-1: SerialNumber: syz [ 155.496468][ T5862] usb 4-1: config 0 descriptor?? [ 155.521772][ T5862] hub 4-1:0.0: bad descriptor, ignoring hub [ 155.538832][ T5862] hub 4-1:0.0: probe with driver hub failed with error -5 [ 155.548182][ T5862] f81232 4-1:0.0: f81534a converter detected [ 155.613931][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.759752][ T6887] syz.2.242: attempt to access beyond end of device [ 155.759752][ T6887] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 155.772924][ T6887] SQUASHFS error: Failed to read block 0x0: -5 [ 155.779203][ T6887] unable to read squashfs_super_block [ 155.803038][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 155.818336][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 155.853280][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.890214][ T9] usb 1-1: Product: syz [ 155.922842][ T9] usb 1-1: Manufacturer: syz [ 155.935417][ T9] usb 1-1: SerialNumber: syz [ 155.997586][ T6890] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 156.119628][ T9] usb 1-1: config 0 descriptor?? [ 156.482572][ T29] audit: type=1400 audit(1738121982.805:390): avc: denied { map } for pid=6891 comm="syz.4.244" path="socket:[12578]" dev="sockfs" ino=12578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.509617][ T29] audit: type=1400 audit(1738121982.805:391): avc: denied { read accept } for pid=6891 comm="syz.4.244" path="socket:[12578]" dev="sockfs" ino=12578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.568620][ T29] audit: type=1400 audit(1738121982.895:392): avc: denied { ioctl } for pid=6891 comm="syz.4.244" path="socket:[12592]" dev="sockfs" ino=12592 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 156.617998][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 156.624528][ T11] usb 1-1: Failed to submit usb control message: -71 [ 156.632166][ T9] usb 1-1: USB disconnect, device number 6 [ 156.654517][ T11] usb 1-1: unable to send the bmi data to the device: -71 [ 156.675965][ T6904] netlink: 256 bytes leftover after parsing attributes in process `syz.4.244'. [ 156.683089][ T11] usb 1-1: unable to get target info from device [ 156.696606][ T11] usb 1-1: could not get target info (-71) [ 156.703775][ T11] usb 1-1: could not probe fw (-71) [ 157.691048][ T5862] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 157.700186][ T29] audit: type=1400 audit(1738121984.035:393): avc: denied { create } for pid=6912 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.729775][ T5862] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 157.835118][ T29] audit: type=1400 audit(1738121984.045:394): avc: denied { write } for pid=6912 comm="syz.0.249" path="socket:[11843]" dev="sockfs" ino=11843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 157.879324][ T5862] usb 4-1: USB disconnect, device number 6 [ 158.275295][ T5862] f81232 4-1:0.0: device disconnected [ 159.408355][ T6934] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 160.154549][ T29] audit: type=1326 audit(1738121986.475:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 160.262628][ T6938] input: syz1 as /devices/virtual/input/input11 [ 160.295996][ T29] audit: type=1326 audit(1738121986.475:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 160.363124][ T29] audit: type=1326 audit(1738121986.475:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 160.556280][ T29] audit: type=1326 audit(1738121986.475:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 160.579616][ T29] audit: type=1326 audit(1738121986.475:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6937 comm="syz.0.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 160.691631][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 161.096590][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 161.149388][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 161.160079][ T6921] syz.3.250 (6921): drop_caches: 1 [ 161.190413][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 161.208174][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.331235][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 161.704838][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.741715][ T9] usb 3-1: Product: syz [ 161.753273][ T9] usb 3-1: Manufacturer: syz [ 161.764610][ T9] usb 3-1: SerialNumber: syz [ 161.779955][ T9] usb 3-1: config 0 descriptor?? [ 161.819798][ T6941] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 161.911629][ T9] rc_core: IR keymap rc-imon-rsc not found [ 161.917500][ T9] Registered IR keymap rc-empty [ 161.931788][ T9] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 161.982154][ T9] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 162.774546][ T9] usb 3-1: USB disconnect, device number 4 [ 163.712962][ T6985] trusted_key: encrypted_key: insufficient parameters specified [ 163.723991][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.264'. [ 163.780888][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 163.780905][ T29] audit: type=1400 audit(1738121990.105:439): avc: denied { read write } for pid=6986 comm="syz.1.266" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 163.873524][ T29] audit: type=1400 audit(1738121990.105:440): avc: denied { open } for pid=6986 comm="syz.1.266" path="/dev/sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.144883][ T29] audit: type=1400 audit(1738121990.425:441): avc: denied { write } for pid=6995 comm="syz.0.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.326279][ T7007] 9pnet_fd: Insufficient options for proto=fd [ 165.522096][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 165.533736][ T7011] 9pnet_fd: Insufficient options for proto=fd [ 165.696743][ T29] audit: type=1400 audit(1738121992.025:442): avc: denied { write } for pid=7016 comm="syz.4.275" name="/" dev="9p" ino=1694025360095192279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.789210][ T29] audit: type=1400 audit(1738121992.055:443): avc: denied { add_name } for pid=7016 comm="syz.4.275" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.852708][ T29] audit: type=1400 audit(1738121992.055:444): avc: denied { create } for pid=7016 comm="syz.4.275" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.899607][ T29] audit: type=1400 audit(1738121992.055:445): avc: denied { associate } for pid=7016 comm="syz.4.275" name="memory.events" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 165.952091][ T29] audit: type=1326 audit(1738121992.215:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 166.001253][ T29] audit: type=1326 audit(1738121992.215:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 166.042760][ T29] audit: type=1326 audit(1738121992.265:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7023 comm="syz.0.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa7d138cda9 code=0x7ffc0000 [ 171.794292][ T7043] ======================================================= [ 171.794292][ T7043] WARNING: The mand mount option has been deprecated and [ 171.794292][ T7043] and is ignored by this kernel. Remove the mand [ 171.794292][ T7043] option from the mount to silence this warning. [ 171.794292][ T7043] ======================================================= [ 173.280675][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 173.280716][ T29] audit: type=1400 audit(1738121999.595:464): avc: denied { create } for pid=7052 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.552029][ T29] audit: type=1400 audit(1738121999.625:465): avc: denied { bind } for pid=7052 comm="syz.3.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 173.554154][ T7068] trusted_key: encrypted_key: insufficient parameters specified [ 173.625841][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 174.964401][ T29] audit: type=1326 audit(1738122001.285:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 175.001083][ T29] audit: type=1326 audit(1738122001.285:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 175.142436][ T29] audit: type=1326 audit(1738122001.285:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 175.166058][ T29] audit: type=1326 audit(1738122001.285:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 175.189783][ T29] audit: type=1326 audit(1738122001.285:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 175.213350][ T29] audit: type=1326 audit(1738122001.285:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57cc18b710 code=0x7ffc0000 [ 175.854081][ T7082] sit1: entered promiscuous mode [ 175.871684][ T7082] sit1: entered allmulticast mode [ 175.877035][ T29] audit: type=1326 audit(1738122001.285:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f57cc18e5d7 code=0x7ffc0000 [ 175.902078][ T29] audit: type=1326 audit(1738122001.285:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7074 comm="syz.1.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 176.551628][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 176.776224][ T7098] overlayfs: overlapping lowerdir path [ 177.252912][ T9] usb 4-1: too many configurations: 82, using maximum allowed: 8 [ 177.265030][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 177.273248][ T9] usb 4-1: can't read configurations, error -61 [ 177.761812][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 178.569625][ T9] usb 4-1: too many configurations: 82, using maximum allowed: 8 [ 178.677591][ T7111] 9pnet_fd: Insufficient options for proto=fd [ 178.705363][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 178.716432][ T9] usb 4-1: can't read configurations, error -61 [ 178.731102][ T9] usb usb4-port1: attempt power cycle [ 179.049724][ T7115] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 179.056477][ T7115] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 179.067674][ T7115] vhci_hcd vhci_hcd.0: Device attached [ 179.251614][ T5899] vhci_hcd: vhci_device speed not set [ 179.311577][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 179.319328][ T5899] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 179.476865][ T7132] veth0_to_hsr: mtu less than device minimum [ 180.077227][ T9] usb 4-1: device not accepting address 9, error -71 [ 180.220587][ T7117] vhci_hcd: connection reset by peer [ 180.232886][ T11] vhci_hcd: stop threads [ 180.238060][ T11] vhci_hcd: release socket [ 180.287587][ T11] vhci_hcd: disconnect device [ 180.808633][ T7154] syz.4.310 (7154): drop_caches: 1 [ 180.959948][ T7157] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 180.970709][ T5140] Bluetooth: hci1: command 0x0406 tx timeout [ 180.970712][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 180.970752][ T5140] Bluetooth: hci3: command 0x0406 tx timeout [ 180.976884][ T5828] Bluetooth: hci2: command 0x0406 tx timeout [ 180.983131][ T5140] Bluetooth: hci4: command 0x0406 tx timeout [ 181.002406][ T7154] syz.4.310 (7154): drop_caches: 1 [ 182.112385][ T7157] batman_adv: batadv0: Adding interface: team0 [ 182.171523][ T7157] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.237348][ T7157] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 182.371413][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 182.371429][ T29] audit: type=1400 audit(1738122008.695:485): avc: denied { read } for pid=7165 comm="syz.3.314" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 182.400610][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.416679][ T29] audit: type=1400 audit(1738122008.745:486): avc: denied { open } for pid=7165 comm="syz.3.314" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 182.693364][ T29] audit: type=1400 audit(1738122008.825:487): avc: denied { setopt } for pid=7165 comm="syz.3.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 182.720556][ T29] audit: type=1400 audit(1738122008.825:488): avc: denied { ioctl } for pid=7165 comm="syz.3.314" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 182.871675][ T7167] netlink: 5056 bytes leftover after parsing attributes in process `syz.2.307'. [ 182.938246][ T7167] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 183.522987][ T5900] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.589689][ T7182] netlink: 56 bytes leftover after parsing attributes in process `syz.1.317'. [ 183.859521][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 183.981156][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.131108][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.156300][ T5900] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 184.178971][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 184.207648][ T5900] usb 4-1: Product: syz [ 184.218387][ T5900] usb 4-1: Manufacturer: syz [ 184.227814][ T5900] usb 4-1: SerialNumber: syz [ 184.238519][ T5900] usb 4-1: config 0 descriptor?? [ 184.246662][ T5900] usb 4-1: NFC: intf ffff88807e702000 id ffffffff8f11e9a0 [ 184.471632][ T5899] vhci_hcd: vhci_device speed not set [ 184.486373][ T29] audit: type=1400 audit(1738122010.815:489): avc: denied { getopt } for pid=7169 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 184.515289][ T29] audit: type=1400 audit(1738122010.815:490): avc: denied { write } for pid=7169 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 185.197191][ T29] audit: type=1400 audit(1738122010.815:491): avc: denied { write } for pid=7169 comm="syz.3.315" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 185.252174][ T8] usb 4-1: USB disconnect, device number 11 [ 185.536965][ T29] audit: type=1400 audit(1738122011.865:492): avc: denied { bind } for pid=7194 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.580511][ T29] audit: type=1400 audit(1738122011.865:493): avc: denied { create } for pid=7194 comm="syz.2.320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.593864][ T7202] 9pnet_fd: Insufficient options for proto=fd [ 186.887623][ T29] audit: type=1400 audit(1738122013.205:494): avc: denied { ioctl } for pid=7206 comm="syz.2.325" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=13106 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 186.888069][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 186.913542][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.011803][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 187.372941][ T7220] infiniband syz0: set down [ 187.401713][ T7220] infiniband syz0: added ipvlan1 [ 187.407607][ T7220] syz0: rxe_create_cq: returned err = -12 [ 187.417956][ T7220] infiniband syz0: Couldn't create ib_mad CQ [ 187.425451][ T7220] infiniband syz0: Couldn't open port 1 [ 187.562606][ T7220] RDS/IB: syz0: added [ 187.566661][ T7220] smc: adding ib device syz0 with port count 1 [ 187.594183][ T7220] smc: ib device syz0 port 1 has pnetid [ 189.575506][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 189.575523][ T29] audit: type=1400 audit(1738122015.905:496): avc: denied { write } for pid=7240 comm="syz.3.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 193.513335][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 193.522341][ T7281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 193.531615][ T7280] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 193.667814][ T7277] misc userio: The device must be registered before sending interrupts [ 194.422036][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.760599][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.958483][ T29] audit: type=1400 audit(1738122021.285:497): avc: denied { bind } for pid=7292 comm="syz.0.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 195.761890][ T29] audit: type=1400 audit(1738122022.095:498): avc: denied { ioctl } for pid=7300 comm="syz.2.346" path="socket:[13779]" dev="sockfs" ino=13779 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 195.878740][ T29] audit: type=1400 audit(1738122022.135:499): avc: denied { bind } for pid=7300 comm="syz.2.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 196.160268][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 196.315504][ T5906] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 196.811807][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 196.822719][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 196.926017][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.937067][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 197.932392][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 255, changing to 11 [ 197.988165][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 59391, setting to 1024 [ 198.292618][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 198.610831][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 198.656370][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.674017][ T5906] usb 3-1: config 0 descriptor?? [ 198.680874][ T5906] usb 3-1: can't set config #0, error -71 [ 198.765526][ T7328] FAULT_INJECTION: forcing a failure. [ 198.765526][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 198.820451][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.2.355 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 198.820476][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 198.820486][ T7328] Call Trace: [ 198.820492][ T7328] [ 198.820498][ T7328] dump_stack_lvl+0x16c/0x1f0 [ 198.820529][ T7328] should_fail_ex+0x50a/0x650 [ 198.820560][ T7328] _copy_from_user+0x2e/0xd0 [ 198.820585][ T7328] do_sock_getsockopt+0x5f6/0x800 [ 198.820606][ T7328] ? trace_lock_acquire+0x80/0x1f0 [ 198.820627][ T7328] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 198.820647][ T7328] ? lock_acquire+0x2f/0xb0 [ 198.820668][ T7328] ? __fget_files+0x40/0x3a0 [ 198.820686][ T7328] ? __fget_files+0x206/0x3a0 [ 198.820706][ T7328] __sys_getsockopt+0x12f/0x260 [ 198.820728][ T7328] __x64_sys_getsockopt+0xbd/0x160 [ 198.820743][ T7328] ? do_syscall_64+0x91/0x250 [ 198.820758][ T7328] ? lockdep_hardirqs_on+0x7c/0x110 [ 198.820781][ T7328] do_syscall_64+0xcd/0x250 [ 198.820797][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.820819][ T7328] RIP: 0033:0x7fe241f8cda9 [ 198.820833][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.820849][ T7328] RSP: 002b:00007fe242da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 198.820865][ T7328] RAX: ffffffffffffffda RBX: 00007fe2421a5fa0 RCX: 00007fe241f8cda9 [ 198.820876][ T7328] RDX: 0000000000000020 RSI: 0000000000000084 RDI: 0000000000000003 [ 198.820885][ T7328] RBP: 00007fe242da9090 R08: 0000000020000800 R09: 0000000000000000 [ 198.820896][ T7328] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000001 [ 198.820906][ T7328] R13: 0000000000000000 R14: 00007fe2421a5fa0 R15: 00007fff58209b18 [ 198.820927][ T7328] [ 199.007526][ T7332] syz.3.354: attempt to access beyond end of device [ 199.007526][ T7332] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 199.020561][ T7332] SQUASHFS error: Failed to read block 0x0: -5 [ 199.026764][ T7332] unable to read squashfs_super_block [ 199.091183][ T29] audit: type=1400 audit(1738122025.395:500): avc: denied { connect } for pid=7321 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.110635][ T29] audit: type=1400 audit(1738122025.395:501): avc: denied { setopt } for pid=7321 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 199.147477][ T5906] usb 3-1: USB disconnect, device number 5 [ 199.215270][ T25] usb 2-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 199.338988][ T25] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 199.356491][ T25] usb 2-1: USB disconnect, device number 7 [ 199.449552][ T29] audit: type=1400 audit(1738122025.775:502): avc: denied { watch } for pid=7338 comm="syz.1.358" path="/59" dev="tmpfs" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 199.555864][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 199.741352][ T29] audit: type=1400 audit(1738122026.065:503): avc: denied { ioctl } for pid=7340 comm="syz.3.359" path="socket:[14425]" dev="sockfs" ino=14425 ioctlcmd=0x8b04 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 199.767948][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 199.811610][ T5900] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.830015][ T5900] usb 5-1: config 0 has no interface number 0 [ 199.846301][ T5900] usb 5-1: config 0 interface 184 has no altsetting 0 [ 199.895211][ T5900] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.910079][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.919753][ T7344] misc userio: The device must be registered before sending interrupts [ 199.954056][ T5900] usb 5-1: Product: syz [ 199.979404][ T5900] usb 5-1: Manufacturer: syz [ 200.117019][ T5900] usb 5-1: SerialNumber: syz [ 200.125052][ T7339] syz.1.358: attempt to access beyond end of device [ 200.125052][ T7339] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 200.131642][ T29] audit: type=1400 audit(1738122026.455:504): avc: denied { mounton } for pid=7338 comm="syz.1.358" path="/59/bus" dev="tmpfs" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 200.156703][ T7339] syz.1.358: attempt to access beyond end of device [ 200.156703][ T7339] loop1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 200.773396][ T5900] usb 5-1: config 0 descriptor?? [ 200.791659][ T7339] Mount JFS Failure: -5 [ 200.792003][ T5900] smsc75xx v1.0.0 [ 200.819522][ T7339] jfs_mount failed w/return code = -5 [ 201.220232][ T29] audit: type=1400 audit(1738122027.545:505): avc: denied { search } for pid=7333 comm="syz.4.356" name="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.221563][ T5900] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 201.255009][ T7334] overlayfs: invalid redirect (./file0/../file0) [ 201.257429][ T7361] syz.2.365 (7361): drop_caches: 1 [ 201.295617][ T5900] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 201.314869][ T5900] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 201.321748][ T7361] syz.2.365 (7361): drop_caches: 1 [ 201.325669][ T5900] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 201.368594][ T29] audit: type=1400 audit(1738122027.545:506): avc: denied { mounton } for pid=7333 comm="syz.4.356" path="/" dev="configfs" ino=1175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 201.474872][ T7362] syz.0.366 (7362): drop_caches: 1 [ 202.278006][ T7362] syz.0.366 (7362): drop_caches: 1 [ 202.470753][ T7375] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.369'. [ 202.868758][ T29] audit: type=1400 audit(1738122029.195:507): avc: denied { ioctl } for pid=7376 comm="syz.3.370" path="/dev/sg0" dev="devtmpfs" ino=735 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 202.894063][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.521819][ T7388] overlayfs: missing 'lowerdir' [ 204.215112][ T29] audit: type=1400 audit(1738122030.525:508): avc: denied { create } for pid=7382 comm="syz.2.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.522140][ T5900] usb 5-1: USB disconnect, device number 6 [ 204.625459][ T7400] FAULT_INJECTION: forcing a failure. [ 204.625459][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 204.638163][ T7400] CPU: 1 UID: 0 PID: 7400 Comm: syz.0.374 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 204.638184][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 204.638193][ T7400] Call Trace: [ 204.638200][ T7400] [ 204.638207][ T7400] dump_stack_lvl+0x16c/0x1f0 [ 204.638237][ T7400] should_fail_ex+0x50a/0x650 [ 204.638260][ T7400] ? fs_reclaim_acquire+0xae/0x150 [ 204.638286][ T7400] should_failslab+0xc2/0x120 [ 204.638305][ T7400] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 204.638323][ T7400] ? __alloc_skb+0x2b1/0x380 [ 204.638344][ T7400] __alloc_skb+0x2b1/0x380 [ 204.638361][ T7400] ? __pfx___alloc_skb+0x10/0x10 [ 204.638380][ T7400] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 204.638405][ T7400] ? pid_vnr+0x133/0x220 [ 204.638427][ T7400] netlink_alloc_large_skb+0x69/0x130 [ 204.638446][ T7400] netlink_sendmsg+0x689/0xd70 [ 204.638466][ T7400] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.638492][ T7400] ____sys_sendmsg+0xaaf/0xc90 [ 204.638521][ T7400] ? copy_msghdr_from_user+0x10b/0x160 [ 204.638542][ T7400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.638577][ T7400] ___sys_sendmsg+0x135/0x1e0 [ 204.638597][ T7400] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.638624][ T7400] ? __pfx_lock_release+0x10/0x10 [ 204.638647][ T7400] ? trace_lock_acquire+0x14e/0x1f0 [ 204.638674][ T7400] ? __fget_files+0x206/0x3a0 [ 204.638696][ T7400] __sys_sendmsg+0x16e/0x220 [ 204.638715][ T7400] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.638749][ T7400] do_syscall_64+0xcd/0x250 [ 204.638767][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.638790][ T7400] RIP: 0033:0x7fa7d138cda9 [ 204.638804][ T7400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.638820][ T7400] RSP: 002b:00007fa7d2178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.638836][ T7400] RAX: ffffffffffffffda RBX: 00007fa7d15a6160 RCX: 00007fa7d138cda9 [ 204.638847][ T7400] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000007 [ 204.638857][ T7400] RBP: 00007fa7d2178090 R08: 0000000000000000 R09: 0000000000000000 [ 204.638867][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.638876][ T7400] R13: 0000000000000000 R14: 00007fa7d15a6160 R15: 00007fffe9ca4508 [ 204.638898][ T7400] [ 204.825484][ T29] audit: type=1400 audit(1738122030.895:509): avc: denied { create } for pid=7391 comm="syz.0.374" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 204.890451][ T7395] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 204.973027][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.981883][ T29] audit: type=1400 audit(1738122031.165:510): avc: denied { create } for pid=7391 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.035437][ T29] audit: type=1400 audit(1738122031.215:511): avc: denied { bind } for pid=7391 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.055091][ T29] audit: type=1400 audit(1738122031.225:512): avc: denied { write } for pid=7391 comm="syz.0.374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.626720][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 205.841650][ T29] audit: type=1400 audit(1738122032.145:513): avc: denied { associate } for pid=7410 comm="syz.0.379" name="#488" dev="tmpfs" ino=488 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="" [ 205.853662][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 205.865866][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.877454][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 206.038827][ T25] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 206.178053][ T25] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 206.189406][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 206.200644][ T25] usb 5-1: config 1 has no interface number 0 [ 206.208705][ T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.923235][ T8] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 206.931761][ T25] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 206.931823][ T25] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 206.953995][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.995137][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 207.026171][ T8] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 207.137930][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 207.161516][ T8] usb 3-1: config 1 has no interface number 0 [ 207.167703][ T8] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.179510][ T8] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 207.650847][ T8] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 207.660953][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.683668][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 207.711613][ T8] usb 3-1: can't set config #1, error -71 [ 207.727378][ T8] usb 3-1: USB disconnect, device number 6 [ 208.101741][ T29] audit: type=1400 audit(1738122034.435:514): avc: denied { accept } for pid=7427 comm="syz.1.384" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 208.178375][ T7433] netlink: 56 bytes leftover after parsing attributes in process `syz.0.383'. [ 208.778548][ T25] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 208.793999][ T7432] FAULT_INJECTION: forcing a failure. [ 208.793999][ T7432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.811630][ T7432] CPU: 1 UID: 0 PID: 7432 Comm: syz.3.385 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 208.811658][ T7432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 208.811667][ T7432] Call Trace: [ 208.811672][ T7432] [ 208.811678][ T7432] dump_stack_lvl+0x16c/0x1f0 [ 208.811707][ T7432] should_fail_ex+0x50a/0x650 [ 208.811732][ T7432] _copy_from_iter+0x2a1/0x1560 [ 208.811761][ T7432] ? trace_lock_acquire+0x14e/0x1f0 [ 208.811782][ T7432] ? __pfx__copy_from_iter+0x10/0x10 [ 208.811805][ T7432] ? __virt_addr_valid+0x1a4/0x590 [ 208.811826][ T7432] ? __virt_addr_valid+0x5e/0x590 [ 208.811842][ T7432] ? __phys_addr_symbol+0x30/0x80 [ 208.811857][ T7432] ? __check_object_size+0x488/0x710 [ 208.811881][ T7432] file_tty_write.constprop.0+0x48d/0x9a0 [ 208.811905][ T7432] vfs_write+0x5ae/0x1150 [ 208.811931][ T7432] ? __pfx_tty_write+0x10/0x10 [ 208.811949][ T7432] ? __pfx_vfs_write+0x10/0x10 [ 208.811975][ T7432] ? __fget_files+0x40/0x3a0 [ 208.812003][ T7432] ksys_write+0x12b/0x250 [ 208.812026][ T7432] ? __pfx_ksys_write+0x10/0x10 [ 208.812058][ T7432] do_syscall_64+0xcd/0x250 [ 208.812075][ T7432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.812098][ T7432] RIP: 0033:0x7fcf7df8cda9 [ 208.812111][ T7432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.812127][ T7432] RSP: 002b:00007fcf7ee92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.812143][ T7432] RAX: ffffffffffffffda RBX: 00007fcf7e1a5fa0 RCX: 00007fcf7df8cda9 [ 208.812154][ T7432] RDX: 00000000fffffdef RSI: 0000000020001040 RDI: 0000000000000004 [ 208.812164][ T7432] RBP: 00007fcf7ee92090 R08: 0000000000000000 R09: 0000000000000000 [ 208.812186][ T7432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.812196][ T7432] R13: 0000000000000000 R14: 00007fcf7e1a5fa0 R15: 00007ffd03edadf8 [ 208.812218][ T7432] [ 208.834359][ T29] audit: type=1400 audit(1738122035.105:515): avc: denied { ioctl } for pid=7427 comm="syz.1.384" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 208.944993][ T25] usb 5-1: USB disconnect, device number 7 [ 208.962275][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.074994][ T25] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 210.097257][ T7446] overlayfs: missing 'workdir' [ 211.771556][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.145911][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 212.159276][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 212.182248][ T8] usb 5-1: can't read configurations, error -61 [ 212.214985][ T29] audit: type=1400 audit(1738122038.545:516): avc: denied { write } for pid=7461 comm="syz.3.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 212.353499][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 212.381617][ T5864] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 212.530537][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 212.550967][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 212.567965][ T8] usb 5-1: can't read configurations, error -61 [ 212.574638][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 212.581195][ T8] usb usb5-port1: attempt power cycle [ 212.588859][ T5864] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 212.609834][ T5864] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 212.634928][ T5864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 212.681627][ T5864] usb 1-1: config 1 has no interface number 0 [ 212.697933][ T5864] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.712360][ T5864] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 212.726074][ T5864] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 212.735552][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.753289][ T5864] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 212.953319][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 213.032378][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 213.040084][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 213.682661][ T5864] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 213.711568][ T8] usb 5-1: can't read configurations, error -61 [ 213.731890][ T5900] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.913826][ T25] usb 1-1: USB disconnect, device number 7 [ 213.922877][ T25] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 213.951582][ T5900] usb 2-1: Using ep0 maxpacket: 8 [ 213.972934][ T5900] usb 2-1: config index 0 descriptor too short (expected 164, got 36) [ 213.991538][ T5900] usb 2-1: config 2 has an invalid descriptor of length 255, skipping remainder of the config [ 214.029489][ T5900] usb 2-1: config 2 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.057569][ T5900] usb 2-1: config 2 interface 0 has no altsetting 0 [ 214.066377][ T5900] usb 2-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 214.076328][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.091615][ T5900] usb 2-1: Product: syz [ 214.095905][ T5900] usb 2-1: Manufacturer: syz [ 214.106343][ T5900] usb 2-1: SerialNumber: syz [ 214.817316][ T29] audit: type=1400 audit(1738122041.145:517): avc: denied { getopt } for pid=7472 comm="syz.1.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 215.182290][ T5900] usb 2-1: USB disconnect, device number 8 [ 215.290070][ T7499] netlink: 56 bytes leftover after parsing attributes in process `syz.0.402'. [ 215.852688][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 215.889571][ T29] audit: type=1400 audit(1738122042.215:518): avc: denied { map } for pid=7501 comm="syz.2.404" path="socket:[14636]" dev="sockfs" ino=14636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 215.893028][ T7503] bond0: option resend_igmp: invalid value (7540) [ 215.934832][ T7503] bond0: option resend_igmp: allowed values 0 - 255 [ 215.990988][ T29] audit: type=1400 audit(1738122042.215:519): avc: denied { accept } for pid=7501 comm="syz.2.404" path="socket:[14636]" dev="sockfs" ino=14636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 216.827091][ T7518] 9pnet_fd: Insufficient options for proto=fd [ 218.441050][ T5900] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 218.771504][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 218.943790][ T5900] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 218.964748][ T5900] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 218.976312][ T5900] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 218.985791][ T5900] usb 3-1: config 1 has no interface number 0 [ 219.001520][ T5900] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.015429][ T5900] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 219.042392][ T5900] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 219.052923][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.157135][ T5900] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 219.438018][ T7549] overlay: Unknown parameter '/' [ 220.120070][ T5900] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 220.587047][ T5899] usb 3-1: USB disconnect, device number 7 [ 220.641701][ T5899] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 220.659075][ T29] audit: type=1400 audit(1738122046.985:520): avc: denied { connect } for pid=7560 comm="syz.0.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.742109][ T29] audit: type=1400 audit(1738122047.075:521): avc: denied { connect } for pid=7568 comm="syz.4.424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.854598][ T7572] bridge0: left allmulticast mode [ 220.871222][ T7569] veth0_to_batadv: entered promiscuous mode [ 220.882225][ T7569] veth0_to_batadv: entered allmulticast mode [ 221.078822][ T7579] 9pnet_fd: Insufficient options for proto=fd [ 221.156219][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.428'. [ 221.639568][ T7591] netlink: 5056 bytes leftover after parsing attributes in process `syz.2.430'. [ 221.648771][ T7591] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 222.109152][ T7592] bridge0: port 3(syz_tun) entered blocking state [ 222.115736][ T7592] bridge0: port 3(syz_tun) entered disabled state [ 222.122323][ T7592] syz_tun: entered allmulticast mode [ 222.128399][ T7592] syz_tun: entered promiscuous mode [ 222.134021][ T7592] bridge0: port 3(syz_tun) entered blocking state [ 222.140514][ T7592] bridge0: port 3(syz_tun) entered forwarding state [ 222.865706][ T7601] binder: BINDER_SET_CONTEXT_MGR already set [ 222.872016][ T7601] binder: 7599:7601 ioctl 4018620d 20000040 returned -16 [ 222.874049][ T29] audit: type=1400 audit(1738122049.195:522): avc: denied { ioctl } for pid=7599 comm="syz.1.432" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 222.905890][ T7601] FAULT_INJECTION: forcing a failure. [ 222.905890][ T7601] name failslab, interval 1, probability 0, space 0, times 0 [ 222.919091][ T7601] CPU: 0 UID: 0 PID: 7601 Comm: syz.1.432 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 222.919111][ T7601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 222.919119][ T7601] Call Trace: [ 222.919123][ T7601] [ 222.919128][ T7601] dump_stack_lvl+0x16c/0x1f0 [ 222.919154][ T7601] should_fail_ex+0x50a/0x650 [ 222.919173][ T7601] ? fs_reclaim_acquire+0xae/0x150 [ 222.919193][ T7601] ? get_callchain_buffers+0x123/0x450 [ 222.919209][ T7601] should_failslab+0xc2/0x120 [ 222.919224][ T7601] __kmalloc_noprof+0xcb/0x510 [ 222.919237][ T7601] ? __kmalloc_node_noprof+0x23d/0x510 [ 222.919254][ T7601] get_callchain_buffers+0x123/0x450 [ 222.919269][ T7601] ? __bpf_map_area_alloc+0xf6/0x190 [ 222.919286][ T7601] stack_map_alloc+0x313/0x650 [ 222.919307][ T7601] map_create+0x5c5/0x1d20 [ 222.919322][ T7601] ? __pfx_avc_has_perm+0x10/0x10 [ 222.919340][ T7601] ? trace_lock_acquire+0x14e/0x1f0 [ 222.919356][ T7601] ? __pfx_map_create+0x10/0x10 [ 222.919368][ T7601] ? lock_acquire+0x2f/0xb0 [ 222.919385][ T7601] ? __might_fault+0xe3/0x190 [ 222.919404][ T7601] ? selinux_bpf+0xde/0x130 [ 222.919425][ T7601] __sys_bpf+0x4391/0x49c0 [ 222.919438][ T7601] ? __pfx_lock_release+0x10/0x10 [ 222.919456][ T7601] ? __pfx___sys_bpf+0x10/0x10 [ 222.919468][ T7601] ? vfs_write+0x306/0x1150 [ 222.919492][ T7601] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 222.919524][ T7601] ? fput+0x67/0x440 [ 222.919538][ T7601] ? ksys_write+0x1ba/0x250 [ 222.919557][ T7601] ? __pfx_ksys_write+0x10/0x10 [ 222.919580][ T7601] __x64_sys_bpf+0x78/0xc0 [ 222.919594][ T7601] ? lockdep_hardirqs_on+0x7c/0x110 [ 222.919613][ T7601] do_syscall_64+0xcd/0x250 [ 222.919631][ T7601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.919650][ T7601] RIP: 0033:0x7f57cc18cda9 [ 222.919662][ T7601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.919675][ T7601] RSP: 002b:00007f57ccf9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.919688][ T7601] RAX: ffffffffffffffda RBX: 00007f57cc3a5fa0 RCX: 00007f57cc18cda9 [ 222.919697][ T7601] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 0000000000000000 [ 222.919705][ T7601] RBP: 00007f57ccf9f090 R08: 0000000000000000 R09: 0000000000000000 [ 222.919712][ T7601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.919720][ T7601] R13: 0000000000000000 R14: 00007f57cc3a5fa0 R15: 00007ffeba6e97a8 [ 222.919737][ T7601] [ 223.180194][ T29] audit: type=1400 audit(1738122049.195:523): avc: denied { set_context_mgr } for pid=7599 comm="syz.1.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 223.231888][ T29] audit: type=1400 audit(1738122049.195:524): avc: denied { map } for pid=7599 comm="syz.1.432" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.301541][ T5899] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 223.713019][ T5899] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.723082][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.749448][ T5899] usb 1-1: config 0 descriptor?? [ 223.756945][ T5899] cp210x 1-1:0.0: cp210x converter detected [ 224.023549][ T29] audit: type=1400 audit(1738122050.345:525): avc: denied { write } for pid=7613 comm="syz.3.437" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 224.310575][ T5899] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 224.318289][ T5899] cp210x 1-1:0.0: querying part number failed [ 224.331857][ T5899] usb 1-1: cp210x converter now attached to ttyUSB0 [ 224.353873][ T29] audit: type=1400 audit(1738122050.345:526): avc: denied { open } for pid=7613 comm="syz.3.437" path="/89/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 224.710811][ T7625] lo speed is unknown, defaulting to 1000 [ 225.222674][ T7625] lo speed is unknown, defaulting to 1000 [ 226.228253][ T5862] usb 1-1: USB disconnect, device number 8 [ 226.254467][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 226.291808][ T5862] cp210x 1-1:0.0: device disconnected [ 226.477638][ T29] audit: type=1400 audit(1738122052.805:527): avc: denied { write } for pid=7634 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 227.241582][ T7620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.450073][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 227.463646][ T29] audit: type=1400 audit(1738122053.775:528): avc: denied { getopt } for pid=7646 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.661687][ T29] audit: type=1400 audit(1738122053.775:529): avc: denied { accept } for pid=7646 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.848251][ T29] audit: type=1400 audit(1738122053.775:530): avc: denied { read } for pid=7646 comm="syz.1.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 228.145927][ T29] audit: type=1400 audit(1738122054.475:531): avc: denied { bind } for pid=7653 comm="syz.1.448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.199179][ T29] audit: type=1400 audit(1738122054.475:532): avc: denied { name_bind } for pid=7653 comm="syz.1.448" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 228.411006][ T7661] overlay: Unknown parameter '/' [ 228.891223][ T29] audit: type=1400 audit(1738122054.475:533): avc: denied { node_bind } for pid=7653 comm="syz.1.448" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 228.912066][ T29] audit: type=1400 audit(1738122054.485:534): avc: denied { read } for pid=7653 comm="syz.1.448" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.131540][ T29] audit: type=1400 audit(1738122054.485:535): avc: denied { mount } for pid=7634 comm="syz.0.444" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.316312][ T29] audit: type=1400 audit(1738122055.635:536): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.537889][ T7676] 9pnet_fd: Insufficient options for proto=fd [ 229.540560][ T7659] kvm: kvm [7658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x91e7 [ 229.557101][ T7659] kvm_intel: kvm [7658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x91df [ 229.570121][ T7659] kvm_intel: kvm [7658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x91df [ 229.582996][ T7659] kvm_intel: kvm [7658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x91df [ 229.595758][ T7659] kvm_intel: kvm [7658]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x91df [ 229.639513][ T7680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.451'. [ 229.714932][ T7664] Illegal XDP return value 4294967282 on prog (id 66) dev N/A, expect packet loss! [ 229.730717][ T6098] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 229.753963][ T7684] loop6: detected capacity change from 0 to 83 [ 229.797579][ T7686] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 229.912370][ C0] blk_print_req_error: 7 callbacks suppressed [ 229.912389][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 5 prio class 0 [ 229.933752][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.942987][ C0] buffer_io_error: 7 callbacks suppressed [ 229.943001][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 229.968647][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 229.977899][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.018090][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.027291][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.113370][ T7691] bridge0: port 3(syz_tun) entered blocking state [ 230.120663][ T7691] bridge0: port 3(syz_tun) entered disabled state [ 230.128913][ T7691] syz_tun: entered allmulticast mode [ 230.143789][ T7691] syz_tun: entered promiscuous mode [ 230.151193][ T7691] bridge0: port 3(syz_tun) entered blocking state [ 230.158702][ T7691] bridge0: port 3(syz_tun) entered forwarding state [ 230.311025][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.320224][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.350885][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.360090][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.377477][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.386677][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.398205][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.407385][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.437054][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.446247][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.456898][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 230.466096][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.490782][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 231.480355][ T54] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 233.277093][ T7711] FAULT_INJECTION: forcing a failure. [ 233.277093][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 233.290151][ T7711] CPU: 1 UID: 0 PID: 7711 Comm: syz.1.461 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 233.290173][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.290183][ T7711] Call Trace: [ 233.290188][ T7711] [ 233.290194][ T7711] dump_stack_lvl+0x16c/0x1f0 [ 233.290225][ T7711] should_fail_ex+0x50a/0x650 [ 233.290249][ T7711] ? fs_reclaim_acquire+0xae/0x150 [ 233.290281][ T7711] should_failslab+0xc2/0x120 [ 233.290300][ T7711] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 233.290320][ T7711] ? __pfx_down_read+0x10/0x10 [ 233.290337][ T7711] ? dh_data_from_key+0x164/0x2d0 [ 233.290360][ T7711] ? __might_fault+0xe3/0x190 [ 233.290382][ T7711] kmemdup_noprof+0x29/0x60 [ 233.290406][ T7711] dh_data_from_key+0x164/0x2d0 [ 233.290431][ T7711] __keyctl_dh_compute+0xc1a/0xf50 [ 233.290456][ T7711] ? find_held_lock+0x2d/0x110 [ 233.290476][ T7711] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 233.290499][ T7711] ? ksys_write+0x12b/0x250 [ 233.290531][ T7711] ? __pfx_lock_release+0x10/0x10 [ 233.290557][ T7711] ? vfs_write+0x306/0x1150 [ 233.290592][ T7711] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 233.290622][ T7711] keyctl_dh_compute+0xd3/0x140 [ 233.290645][ T7711] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 233.290673][ T7711] ? ksys_write+0x1ba/0x250 [ 233.290697][ T7711] ? __pfx_ksys_write+0x10/0x10 [ 233.290726][ T7711] __do_sys_keyctl+0x4df/0x590 [ 233.290746][ T7711] do_syscall_64+0xcd/0x250 [ 233.290763][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.290786][ T7711] RIP: 0033:0x7f57cc18cda9 [ 233.290800][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.290815][ T7711] RSP: 002b:00007f57ccf5d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 233.290831][ T7711] RAX: ffffffffffffffda RBX: 00007f57cc3a6160 RCX: 00007f57cc18cda9 [ 233.290842][ T7711] RDX: 00000000200000c0 RSI: 0000000020000140 RDI: 0000000000000017 [ 233.290852][ T7711] RBP: 00007f57ccf5d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.290862][ T7711] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001 [ 233.290871][ T7711] R13: 0000000000000000 R14: 00007f57cc3a6160 R15: 00007ffeba6e97a8 [ 233.290894][ T7711] [ 234.054222][ T7727] netlink: 'syz.0.463': attribute type 10 has an invalid length. [ 234.062127][ T7727] netlink: 40 bytes leftover after parsing attributes in process `syz.0.463'. [ 234.072392][ T7727] ipvlan1: entered promiscuous mode [ 234.077719][ T7727] ipvlan1: entered allmulticast mode [ 234.083189][ T7727] veth0_vlan: entered allmulticast mode [ 234.095888][ T7727] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 234.656251][ T7721] macvlan0: entered allmulticast mode [ 234.662194][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 234.662208][ T29] audit: type=1326 audit(1738122060.995:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7df8cda9 code=0x7ffc0000 [ 234.747636][ T7721] veth1_vlan: entered allmulticast mode [ 234.784138][ T29] audit: type=1326 audit(1738122060.995:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf7df8cda9 code=0x7ffc0000 [ 234.807507][ T7729] tipc: Enabling of bearer rejected, already enabled [ 234.841172][ T29] audit: type=1326 audit(1738122060.995:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7df8cda9 code=0x7ffc0000 [ 234.901513][ T29] audit: type=1326 audit(1738122060.995:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf7df8ecc7 code=0x7ffc0000 [ 234.985961][ T29] audit: type=1326 audit(1738122060.995:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcf7df8ec3c code=0x7ffc0000 [ 235.161580][ T29] audit: type=1326 audit(1738122060.995:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcf7df8eb74 code=0x7ffc0000 [ 235.255100][ T29] audit: type=1326 audit(1738122060.995:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcf7df8eb74 code=0x7ffc0000 [ 236.381654][ T29] audit: type=1326 audit(1738122060.995:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcf7df8ba0a code=0x7ffc0000 [ 236.522721][ T29] audit: type=1326 audit(1738122060.995:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7df8cda9 code=0x7ffc0000 [ 236.551547][ T29] audit: type=1326 audit(1738122060.995:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7713 comm="syz.3.462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf7df8cda9 code=0x7ffc0000 [ 237.219977][ T7745] overlayfs: overlapping lowerdir path [ 237.852973][ T7748] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 238.122639][ T7761] loop6: detected capacity change from 0 to 83 [ 238.160090][ T11] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 238.795177][ C1] blk_print_req_error: 97 callbacks suppressed [ 238.795197][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 11 prio class 0 [ 238.812492][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.821673][ C0] buffer_io_error: 96 callbacks suppressed [ 238.821715][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.835534][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 238.843515][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.852705][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.861468][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.870604][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.880477][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.889649][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.898706][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.907873][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.917004][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.926206][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.942558][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.951750][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.960106][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.969265][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 238.977332][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 238.986531][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.001470][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.042052][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 239.048655][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.062872][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 239.109585][ T8] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 239.130908][ T8] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 239.149551][ T8] usb 3-1: Product: syz [ 239.164093][ T8] usb 3-1: Manufacturer: syz [ 239.188379][ T8] usb 3-1: SerialNumber: syz [ 239.233843][ T8] usb 3-1: config 0 descriptor?? [ 239.271054][ T8] usb 3-1: NFC: intf ffff888033cf8000 id ffffffff8f11e9a0 [ 239.568699][ T5862] usb 3-1: USB disconnect, device number 8 [ 240.536880][ T7784] lo speed is unknown, defaulting to 1000 [ 240.960893][ T7792] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.480'. [ 241.191379][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 241.191396][ T29] audit: type=1400 audit(1738122067.515:552): avc: denied { read } for pid=7796 comm="syz.2.482" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 241.324109][ T29] audit: type=1400 audit(1738122067.515:553): avc: denied { open } for pid=7796 comm="syz.2.482" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 241.909363][ T7784] lo speed is unknown, defaulting to 1000 [ 242.141578][ T5900] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 243.041692][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 243.078953][ T5900] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 243.101726][ T5900] usb 3-1: config 0 has no interface number 0 [ 243.107857][ T5900] usb 3-1: config 0 interface 184 has no altsetting 0 [ 243.378478][ T5900] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 243.468065][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.499563][ T5900] usb 3-1: Product: syz [ 243.536887][ T5900] usb 3-1: Manufacturer: syz [ 243.560146][ T5900] usb 3-1: SerialNumber: syz [ 243.578105][ T5900] usb 3-1: config 0 descriptor?? [ 243.597405][ T5900] smsc75xx v1.0.0 [ 243.895797][ T7825] trusted_key: syz.0.492 sent an empty control message without MSG_MORE. [ 243.910466][ T7824] veth0_vlan: entered allmulticast mode [ 243.961601][ T5864] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 243.991573][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 244.161779][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 244.171128][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.197225][ T5864] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 244.211489][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.221812][ T5864] usb 4-1: config 0 has no interface number 0 [ 244.227956][ T5864] usb 4-1: config 0 interface 12 has no altsetting 0 [ 244.240011][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.265759][ T8] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 244.280277][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.289232][ T5864] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 244.298517][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.312392][ T8] usb 5-1: config 0 descriptor?? [ 244.374037][ T7834] overlayfs: overlapping lowerdir path [ 244.704694][ T29] audit: type=1400 audit(1738122071.035:554): avc: denied { ioctl } for pid=7796 comm="syz.2.482" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 244.808850][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 244.826602][ T5864] usb 4-1: Product: syz [ 244.832269][ T5864] usb 4-1: Manufacturer: syz [ 244.840726][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 244.850250][ T5864] usb 4-1: SerialNumber: syz [ 244.860966][ T5864] usb 4-1: config 0 descriptor?? [ 244.869238][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 244.891025][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 244.913097][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 244.930512][ T5900] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 244.940481][ T5900] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 244.973321][ T5900] usb 3-1: USB disconnect, device number 9 [ 244.987555][ T29] audit: type=1400 audit(1738122071.315:555): avc: denied { mounton } for pid=7829 comm="syz.1.495" path="/proc/324/task" dev="proc" ino=16491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 245.033050][ T29] audit: type=1400 audit(1738122071.355:556): avc: denied { name_bind } for pid=7838 comm="syz.0.496" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 245.214975][ T7843] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 245.289190][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 245.298808][ T7845] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 245.320794][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.480144][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.526171][ T8] acrux 0003:1A34:0802.0004: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 245.537694][ T29] audit: type=1400 audit(1738122071.855:557): avc: denied { bind } for pid=7816 comm="syz.3.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.557695][ T8] acrux 0003:1A34:0802.0004: no inputs found [ 245.557717][ T8] acrux 0003:1A34:0802.0004: Failed to enable force feedback support, error: -19 [ 245.559965][ T29] audit: type=1400 audit(1738122071.855:558): avc: denied { name_bind } for pid=7816 comm="syz.3.489" src=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 245.560003][ T29] audit: type=1400 audit(1738122071.855:559): avc: denied { node_bind } for pid=7816 comm="syz.3.489" src=97 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 245.560035][ T29] audit: type=1400 audit(1738122071.855:560): avc: denied { read write } for pid=7816 comm="syz.3.489" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 245.560087][ T29] audit: type=1400 audit(1738122071.855:561): avc: denied { open } for pid=7816 comm="syz.3.489" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 245.770507][ T5864] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 245.778984][ T5864] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 245.787705][ T5864] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 245.811310][ T5864] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 246.156130][ T5864] usb 4-1: USB disconnect, device number 12 [ 246.354172][ T7863] loop6: detected capacity change from 0 to 83 [ 246.354217][ T5898] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 246.382074][ T7863] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 246.394140][ C0] blk_print_req_error: 95 callbacks suppressed [ 246.394157][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 11 prio class 0 [ 246.411970][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.421193][ C1] buffer_io_error: 94 callbacks suppressed [ 246.421206][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.439008][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.448289][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.457706][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.466923][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.486249][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.495448][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.505855][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.515051][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.525738][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.534940][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.544996][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.554189][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.569491][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.578701][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.587130][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.596308][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.604407][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.751642][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.926949][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.937409][ T25] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 246.950893][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.962126][ T25] usb 4-1: config 0 descriptor?? [ 247.171138][ T29] audit: type=1400 audit(1738122073.485:562): avc: denied { create } for pid=7875 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.192554][ T29] audit: type=1400 audit(1738122073.495:563): avc: denied { write } for pid=7875 comm="syz.2.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 247.451072][ T5864] usb 5-1: USB disconnect, device number 12 [ 247.562923][ T25] hid-steam 0003:28DE:1205.0005: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 247.671789][ T25] hid-steam 0003:28DE:1205.0005: Steam Controller 'XXXXXXXXXX' connected [ 247.913674][ T25] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0005/input/input20 [ 248.667147][ T25] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0005/input/input21 [ 248.699837][ T25] hid-steam 0003:28DE:1205.0006: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 248.915529][ T7894] netlink: 232 bytes leftover after parsing attributes in process `syz.3.504'. [ 248.924818][ T5906] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 248.949027][ T7895] loop6: detected capacity change from 0 to 83 [ 248.956576][ T6100] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 248.992954][ T7895] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 252.601716][ T29] audit: type=1400 audit(1738122078.905:564): avc: denied { setopt } for pid=7922 comm="syz.4.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 252.669618][ T7928] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.519'. [ 252.916538][ T29] audit: type=1400 audit(1738122079.245:565): avc: denied { getopt } for pid=7926 comm="syz.1.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.175329][ T25] usb 4-1: USB disconnect, device number 13 [ 254.432346][ T25] hid-steam 0003:28DE:1205.0005: Steam Controller 'XXXXXXXXXX' disconnected [ 254.451769][ T5899] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.459143][ T29] audit: type=1400 audit(1738122080.785:566): avc: denied { setopt } for pid=7952 comm="syz.4.530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 254.491575][ T5864] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 254.901674][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 255.104005][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.187751][ T25] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 255.245478][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.255721][ T25] usb 4-1: config 0 descriptor?? [ 255.262738][ T5864] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 255.273839][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.292243][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.304332][ T5864] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 255.317439][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 255.324463][ T5899] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 255.342861][ T5899] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 255.361779][ T5864] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 255.377278][ T5899] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 255.396862][ T5864] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 255.414192][ T5899] usb 1-1: config 1 has no interface number 0 [ 255.428250][ T5864] usb 2-1: Manufacturer: syz [ 255.435870][ T5899] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.449421][ T5899] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 255.464000][ T5864] usb 2-1: config 0 descriptor?? [ 255.468007][ T29] audit: type=1400 audit(1738122081.785:567): avc: denied { link } for pid=7959 comm="syz.4.532" name="#31" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.491188][ T5899] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 255.491216][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.515046][ T5899] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 255.520313][ T29] audit: type=1400 audit(1738122081.785:568): avc: denied { rename } for pid=7959 comm="syz.4.532" name="#32" dev="tmpfs" ino=601 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.564311][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.570920][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.583309][ T29] audit: type=1400 audit(1738122081.905:569): avc: denied { read } for pid=7959 comm="syz.4.532" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.646411][ T29] audit: type=1400 audit(1738122081.905:570): avc: denied { open } for pid=7959 comm="syz.4.532" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 255.697066][ T25] hid-steam 0003:28DE:1205.0007: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 255.707969][ T29] audit: type=1400 audit(1738122082.015:571): avc: denied { bind } for pid=7965 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.708004][ T29] audit: type=1400 audit(1738122082.015:572): avc: denied { listen } for pid=7965 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.708084][ T29] audit: type=1400 audit(1738122082.015:573): avc: denied { connect } for pid=7965 comm="syz.2.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 255.881636][ T25] hid-steam 0003:28DE:1205.0007: Steam Controller 'XXXXXXXXXX' connected [ 255.891210][ T25] input: Steam Deck as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0007/input/input23 [ 256.009878][ T25] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28DE:1205.0007/input/input24 [ 256.082573][ T5899] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 256.098293][ T25] hid-steam 0003:28DE:1205.0008: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.3-1/input0 [ 256.100048][ T5864] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 256.135269][ T5864] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 256.567245][ T5813] usb 1-1: USB disconnect, device number 9 [ 256.619381][ T5813] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 256.633056][ T5864] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 256.716000][ T5864] usb 2-1: USB disconnect, device number 9 [ 256.842365][ T7971] netlink: 232 bytes leftover after parsing attributes in process `syz.3.531'. [ 257.061524][ T5862] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 257.231065][ T7978] overlayfs: failed to resolve './file1': -2 [ 257.321730][ T5863] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 257.523932][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 257.537028][ T5863] usb 3-1: config index 0 descriptor too short (expected 28771, got 18) [ 257.548621][ T5863] usb 3-1: config 99 has too many interfaces: 95, using maximum allowed: 32 [ 257.559582][ T5863] usb 3-1: config 99 has an invalid descriptor of length 101, skipping remainder of the config [ 257.570718][ T5863] usb 3-1: config 99 has 0 interfaces, different from the descriptor's value: 95 [ 257.582421][ T5863] usb 3-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 257.607895][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.635954][ T5863] usb 3-1: Product: syz [ 257.644374][ T5863] usb 3-1: Manufacturer: syz [ 257.656556][ T5863] usb 3-1: SerialNumber: syz [ 257.861681][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 257.897822][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 257.897838][ T29] audit: type=1400 audit(1738122084.225:580): avc: denied { bind } for pid=7972 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.989064][ T5863] apple-mfi-fastcharge 3-1: USB disconnect, device number 10 [ 258.113469][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.136223][ T5906] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 258.156425][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.172234][ T5906] usb 2-1: config 0 descriptor?? [ 258.286304][ T7986] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 258.383896][ T29] audit: type=1400 audit(1738122084.705:581): avc: denied { create } for pid=7988 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.448857][ T29] audit: type=1400 audit(1738122084.705:582): avc: denied { write } for pid=7988 comm="syz.3.538" path="socket:[16129]" dev="sockfs" ino=16129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 258.606993][ T5906] hid-steam 0003:28DE:1205.000A: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 258.712096][ T5906] hid-steam 0003:28DE:1205.000A: Steam Controller 'XXXXXXXXXX' connected [ 258.735711][ T5906] input: Steam Deck as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.000A/input/input25 [ 258.769409][ T5906] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.000A/input/input26 [ 258.995940][ T5906] hid-steam 0003:28DE:1205.000B: hidraw1: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 259.057932][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 259.060924][ T8007] overlayfs: overlapping lowerdir path [ 259.155827][ T25] usb 4-1: USB disconnect, device number 14 [ 259.663297][ T8010] netlink: 232 bytes leftover after parsing attributes in process `syz.1.536'. [ 259.711750][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 259.737058][ T5899] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.760794][ T5899] usb 5-1: config 0 has no interface number 0 [ 259.780587][ T5899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.780619][ T25] hid-steam 0003:28DE:1205.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 259.881558][ T5863] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 259.951474][ T5899] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.961852][ T5899] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 260.015272][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.123663][ T5899] usb 5-1: config 0 descriptor?? [ 260.501580][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 260.855587][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.867112][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 260.881767][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.886624][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.900509][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 260.921712][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.974119][ T8021] overlayfs: overlapping lowerdir path [ 261.104246][ T25] usb 3-1: config 0 descriptor?? [ 261.247553][ T25] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 261.669979][ T29] audit: type=1400 audit(1738122087.995:583): avc: denied { setopt } for pid=7992 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 261.808236][ T5899] uclogic 0003:28BD:0094.000C: pen parameters not found [ 261.815733][ T5899] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 261.830805][ T5899] usb 5-1: USB disconnect, device number 13 [ 262.408730][ T8025] syz.3.547 (8025): drop_caches: 1 [ 262.538878][ T8025] syz.3.547 (8025): drop_caches: 1 [ 262.793011][ T29] audit: type=1400 audit(1738122089.125:584): avc: denied { sqpoll } for pid=8036 comm="syz.4.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 263.164733][ T25] gspca_vc032x: reg_w err -71 [ 263.174128][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.190229][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.200927][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 263.218437][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.235676][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.250064][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 263.270561][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.279769][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.288979][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.298129][ T8043] kvm: kvm [8042]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 263.831075][ T5906] usb 2-1: USB disconnect, device number 10 [ 264.178493][ T8046] 9pnet_fd: Insufficient options for proto=fd [ 264.253016][ T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 264.273015][ T8052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 264.299718][ T25] usb 3-1: USB disconnect, device number 11 [ 264.313836][ T5906] hid-steam 0003:28DE:1205.000A: Steam Controller 'XXXXXXXXXX' disconnected [ 264.508519][ T29] audit: type=1326 audit(1738122090.835:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 264.572284][ T29] audit: type=1326 audit(1738122090.835:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 264.621505][ T29] audit: type=1326 audit(1738122090.875:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57cc18b710 code=0x7ffc0000 [ 264.681743][ T29] audit: type=1326 audit(1738122090.875:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f57cc18e5d7 code=0x7ffc0000 [ 264.704968][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.741526][ T29] audit: type=1326 audit(1738122090.875:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 264.807669][ T29] audit: type=1326 audit(1738122090.875:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f57cc18e5d7 code=0x7ffc0000 [ 264.886923][ T29] audit: type=1326 audit(1738122090.875:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f57cc18ba0a code=0x7ffc0000 [ 264.940547][ T29] audit: type=1326 audit(1738122090.875:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 265.110841][ T29] audit: type=1326 audit(1738122090.875:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 265.191722][ T29] audit: type=1326 audit(1738122090.875:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8057 comm="syz.1.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f57cc18cda9 code=0x7ffc0000 [ 265.740055][ T8078] netlink: 84 bytes leftover after parsing attributes in process `syz.2.561'. [ 266.041560][ T5864] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 266.201527][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 266.236861][ T5864] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 266.266675][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.285391][ T5864] usb 4-1: Product: syz [ 266.295153][ T5864] usb 4-1: Manufacturer: syz [ 266.299786][ T5864] usb 4-1: SerialNumber: syz [ 266.316451][ T5864] usb 4-1: config 0 descriptor?? [ 266.662533][ T8100] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 267.716103][ T8123] tipc: Started in network mode [ 267.721010][ T8123] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 267.731703][ T8123] tipc: Enabled bearer , priority 10 [ 267.906855][ T8135] 9pnet_fd: Insufficient options for proto=fd [ 267.951076][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 268.121592][ T5906] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 268.227903][ T25] usb 4-1: USB disconnect, device number 15 [ 268.281689][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 268.293614][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.304696][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 268.322660][ T5906] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 268.332190][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 268.340475][ T5906] usb 2-1: Product: syz [ 268.345178][ T5906] usb 2-1: Manufacturer: syz [ 268.350143][ T5906] usb 2-1: SerialNumber: syz [ 268.357520][ T5906] usb 2-1: config 0 descriptor?? [ 268.366536][ T5906] usb 2-1: NFC: intf ffff888055b74000 id ffffffff8f11e9a0 [ 268.439938][ T8147] FAULT_INJECTION: forcing a failure. [ 268.439938][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.461298][ T8147] CPU: 1 UID: 0 PID: 8147 Comm: syz.2.580 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 268.461323][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 268.461334][ T8147] Call Trace: [ 268.461339][ T8147] [ 268.461345][ T8147] dump_stack_lvl+0x16c/0x1f0 [ 268.461376][ T8147] should_fail_ex+0x50a/0x650 [ 268.461404][ T8147] _copy_from_user+0x2e/0xd0 [ 268.461432][ T8147] __sys_bpf+0x21c/0x49c0 [ 268.461448][ T8147] ? __pfx_lock_release+0x10/0x10 [ 268.461471][ T8147] ? __pfx___sys_bpf+0x10/0x10 [ 268.461486][ T8147] ? vfs_write+0x306/0x1150 [ 268.461511][ T8147] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 268.461550][ T8147] ? fput+0x67/0x440 [ 268.461568][ T8147] ? ksys_write+0x1ba/0x250 [ 268.461591][ T8147] ? __pfx_ksys_write+0x10/0x10 [ 268.461618][ T8147] __x64_sys_bpf+0x78/0xc0 [ 268.461635][ T8147] ? lockdep_hardirqs_on+0x7c/0x110 [ 268.461664][ T8147] do_syscall_64+0xcd/0x250 [ 268.461681][ T8147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.461704][ T8147] RIP: 0033:0x7fe241f8cda9 [ 268.461718][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.461734][ T8147] RSP: 002b:00007fe242da9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.461751][ T8147] RAX: ffffffffffffffda RBX: 00007fe2421a5fa0 RCX: 00007fe241f8cda9 [ 268.461761][ T8147] RDX: 0000000000000020 RSI: 0000000020000340 RDI: 0000000000000002 [ 268.461771][ T8147] RBP: 00007fe242da9090 R08: 0000000000000000 R09: 0000000000000000 [ 268.461781][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.461790][ T8147] R13: 0000000000000000 R14: 00007fe2421a5fa0 R15: 00007fff58209b18 [ 268.461812][ T8147] [ 268.644914][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 268.658081][ T8148] loop6: detected capacity change from 0 to 83 [ 268.666549][ T8148] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 268.680645][ C1] blk_print_req_error: 98 callbacks suppressed [ 268.680663][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 11 prio class 0 [ 268.697451][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.706654][ C0] buffer_io_error: 96 callbacks suppressed [ 268.706670][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.732556][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.741777][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.751102][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.760328][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.774474][ T25] tipc: Node number set to 4269801491 [ 268.779878][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.779910][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.797840][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.807056][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.821272][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.830505][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.850557][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.859810][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.881259][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.890497][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.906259][ T8156] blktrace: Concurrent blktraces are not allowed on loop5 [ 268.924359][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 268.933615][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 268.966145][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.078522][ T8164] netlink: 5056 bytes leftover after parsing attributes in process `syz.0.584'. [ 270.087833][ T8164] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 270.194325][ T25] usb 2-1: USB disconnect, device number 11 [ 270.611927][ T8158] kvm_pr_unimpl_wrmsr: 1261 callbacks suppressed [ 270.611947][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.635763][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.646984][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 270.666025][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.684446][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.699260][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 270.722674][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.733099][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.744634][ T8158] kvm: kvm [8157]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 270.912335][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 271.006735][ T8171] macvlan0: left allmulticast mode [ 271.031988][ T8171] veth1_vlan: left allmulticast mode [ 271.151500][ T5864] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 271.253046][ T8176] trusted_key: encrypted_key: insufficient parameters specified [ 271.261606][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.588'. [ 271.901507][ T5864] usb 4-1: device descriptor read/64, error -71 [ 272.141536][ T5864] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 273.415381][ T5864] usb 4-1: device descriptor read/64, error -71 [ 273.566349][ T8192] blktrace: Concurrent blktraces are not allowed on loop5 [ 273.566967][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.592'. [ 273.578065][ T5864] usb usb4-port1: attempt power cycle [ 273.892139][ T8195] input: syz0 as /devices/virtual/input/input29 [ 274.521549][ T5864] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 274.842845][ T8203] netlink: 5056 bytes leftover after parsing attributes in process `syz.3.596'. [ 274.851994][ T8203] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.172766][ T5864] usb 4-1: device not accepting address 18, error -71 [ 276.710860][ T8204] syz.0.597 (8204): drop_caches: 1 [ 277.000001][ T8218] netlink: 56 bytes leftover after parsing attributes in process `syz.3.599'. [ 277.724493][ T8204] syz.0.597 (8204): drop_caches: 1 [ 278.142432][ T5864] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.427487][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 278.442577][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.468937][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 278.468953][ T29] audit: type=1400 audit(1738122104.795:618): avc: denied { read } for pid=8229 comm="syz.0.604" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 278.497940][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 278.510803][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 278.522191][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 278.532407][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.548814][ T5864] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 278.567729][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 278.576763][ T5864] usb 3-1: Product: syz [ 278.699777][ T5864] usb 3-1: Manufacturer: syz [ 278.704646][ T5864] usb 3-1: SerialNumber: syz [ 278.796553][ T29] audit: type=1400 audit(1738122105.105:619): avc: denied { name_bind } for pid=8232 comm="syz.4.605" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 278.837623][ T5864] usb 3-1: config 0 descriptor?? [ 279.145824][ T5864] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 279.182693][ T5864] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 279.227195][ T29] audit: type=1400 audit(1738122105.555:620): avc: denied { setopt } for pid=8236 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 279.253858][ T5864] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 279.265627][ T29] audit: type=1400 audit(1738122105.555:621): avc: denied { listen } for pid=8236 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 279.286468][ T5864] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 279.332983][ T5864] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 280.303606][ T5864] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 280.330534][ T5864] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 280.474671][ T5864] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 280.694487][ T5864] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 281.608101][ T2148] usb 3-1: USB disconnect, device number 12 [ 281.868906][ T8260] netlink: 5056 bytes leftover after parsing attributes in process `syz.0.610'. [ 281.878419][ T8260] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 282.658168][ T8262] lo speed is unknown, defaulting to 1000 [ 282.900940][ T8262] lo speed is unknown, defaulting to 1000 [ 283.132987][ T8274] loop6: detected capacity change from 0 to 83 [ 283.226387][ T8277] bridge0: port 3(syz_tun) entered blocking state [ 283.233159][ T8277] bridge0: port 3(syz_tun) entered disabled state [ 283.240358][ T8277] syz_tun: entered allmulticast mode [ 283.397557][ T8274] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 283.675432][ T8277] syz_tun: entered promiscuous mode [ 283.682107][ T8277] bridge0: port 3(syz_tun) entered blocking state [ 283.688629][ T8277] bridge0: port 3(syz_tun) entered forwarding state [ 283.748130][ C0] blk_print_req_error: 95 callbacks suppressed [ 283.748143][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 283.788082][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.797412][ C0] buffer_io_error: 94 callbacks suppressed [ 283.797438][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.821658][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.830841][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.931103][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.940306][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 283.975501][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 283.984763][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.192829][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.202050][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.221466][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.230649][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.270321][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.279547][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.299463][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.308614][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.317311][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 284.326435][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.337090][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.189281][ T5906] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 285.431103][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 285.459899][ T5906] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 286.025226][ T5906] usb 4-1: config 0 has no interface number 0 [ 286.034003][ T5906] usb 4-1: config 0 interface 184 has no altsetting 0 [ 286.062178][ T5906] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 286.176939][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.220199][ T5906] usb 4-1: Product: syz [ 286.244829][ T29] audit: type=1400 audit(1738122112.575:622): avc: denied { create } for pid=8299 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 286.266069][ T5906] usb 4-1: Manufacturer: syz [ 286.311549][ T5906] usb 4-1: SerialNumber: syz [ 286.321169][ T29] audit: type=1400 audit(1738122112.625:623): avc: denied { connect } for pid=8299 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 286.371722][ T5813] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 286.691627][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 286.702881][ T5813] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 286.711048][ T5813] usb 1-1: config 0 has no interface number 0 [ 286.717770][ T5813] usb 1-1: config 0 interface 184 has no altsetting 0 [ 286.729938][ T5906] usb 4-1: config 0 descriptor?? [ 286.749416][ T5813] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 286.792626][ T5906] smsc75xx v1.0.0 [ 286.824418][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.838944][ T5813] usb 1-1: Product: syz [ 286.844368][ T5813] usb 1-1: Manufacturer: syz [ 286.849274][ T5813] usb 1-1: SerialNumber: syz [ 286.884555][ T5813] usb 1-1: config 0 descriptor?? [ 286.912837][ T5813] smsc75xx v1.0.0 [ 287.044800][ T29] audit: type=1400 audit(1738122113.365:624): avc: denied { setattr } for pid=8307 comm="syz.2.626" name="vcsa" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 287.376732][ T29] audit: type=1400 audit(1738122113.625:625): avc: denied { read } for pid=8307 comm="syz.2.626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 287.561602][ T5899] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 287.614247][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 287.626193][ T5906] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.001175][ T29] audit: type=1400 audit(1738122114.325:626): avc: denied { mount } for pid=8312 comm="syz.4.628" name="/" dev="pstore" ino=3577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 288.040507][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 288.048868][ T8298] overlayfs: overlapping lowerdir path [ 288.079064][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 288.090401][ T5899] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=1f.cb [ 288.092445][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 288.099963][ T5813] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.123596][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.133994][ T5899] usb 2-1: Product: syz [ 288.138175][ T5899] usb 2-1: Manufacturer: syz [ 288.145599][ T5899] usb 2-1: SerialNumber: syz [ 288.199644][ T8321] FAULT_INJECTION: forcing a failure. [ 288.199644][ T8321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.212973][ T8321] CPU: 0 UID: 0 PID: 8321 Comm: syz.4.629 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 288.212998][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 288.213008][ T8321] Call Trace: [ 288.213013][ T8321] [ 288.213019][ T8321] dump_stack_lvl+0x16c/0x1f0 [ 288.213046][ T8321] should_fail_ex+0x50a/0x650 [ 288.213072][ T8321] _copy_from_user+0x2e/0xd0 [ 288.213098][ T8321] copy_msghdr_from_user+0x99/0x160 [ 288.213117][ T8321] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 288.213146][ T8321] ___sys_sendmsg+0xff/0x1e0 [ 288.213163][ T8321] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.213190][ T8321] ? __pfx_lock_release+0x10/0x10 [ 288.213223][ T8321] ? __fget_files+0x206/0x3a0 [ 288.213245][ T8321] __sys_sendmsg+0x16e/0x220 [ 288.213263][ T8321] ? __pfx___sys_sendmsg+0x10/0x10 [ 288.213295][ T8321] do_syscall_64+0xcd/0x250 [ 288.213312][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.213336][ T8321] RIP: 0033:0x7f157ad8cda9 [ 288.213349][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.213365][ T8321] RSP: 002b:00007f157bc8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 288.213381][ T8321] RAX: ffffffffffffffda RBX: 00007f157afa6080 RCX: 00007f157ad8cda9 [ 288.213391][ T8321] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 288.213401][ T8321] RBP: 00007f157bc8a090 R08: 0000000000000000 R09: 0000000000000000 [ 288.213411][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.213420][ T8321] R13: 0000000000000000 R14: 00007f157afa6080 R15: 00007ffc04785388 [ 288.213440][ T8321] [ 288.220957][ T8321] ubi0: attaching mtd0 [ 288.413077][ T8321] ubi0: scanning is finished [ 288.416654][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 288.419183][ T8321] ubi0: empty MTD device detected [ 288.434269][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.436336][ T5899] usb 2-1: config 0 descriptor?? [ 288.449515][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.478802][ T5899] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 288.480856][ T25] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 288.489621][ T5899] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 288.506044][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.591759][ T5899] usb-storage 2-1:0.0: USB Mass Storage device detected [ 288.595009][ T25] usb 3-1: config 0 descriptor?? [ 288.603527][ T8321] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 288.695975][ T5899] usb-storage 2-1:0.0: device ignored [ 288.885683][ T8287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.914333][ T8287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.112654][ T8332] ubi0: attaching mtd0 [ 289.125079][ T8332] ubi0: scanning is finished [ 289.133329][ T8332] ================================================================== [ 289.141406][ T8332] BUG: KASAN: slab-use-after-free in notifier_chain_register+0x3ac/0x420 [ 289.149826][ T8332] Read of size 4 at addr ffff88802b6d18d8 by task syz.4.630/8332 [ 289.157532][ T8332] [ 289.159848][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.4.630 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 289.159870][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.159879][ T8332] Call Trace: [ 289.159885][ T8332] [ 289.159892][ T8332] dump_stack_lvl+0x116/0x1f0 [ 289.159918][ T8332] print_report+0xc3/0x620 [ 289.159935][ T8332] ? __virt_addr_valid+0x5e/0x590 [ 289.159950][ T8332] ? __phys_addr+0xc6/0x150 [ 289.159965][ T8332] kasan_report+0xd9/0x110 [ 289.159982][ T8332] ? notifier_chain_register+0x3ac/0x420 [ 289.160003][ T8332] ? notifier_chain_register+0x3ac/0x420 [ 289.160021][ T8332] notifier_chain_register+0x3ac/0x420 [ 289.160038][ T8332] blocking_notifier_chain_register+0x76/0xd0 [ 289.160056][ T8332] ubi_wl_init+0x1018/0x17b0 [ 289.160080][ T8332] ubi_attach+0x1b92/0x4c00 [ 289.160105][ T8332] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.160131][ T8332] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.160154][ T8332] ? __pfx_ubi_attach+0x10/0x10 [ 289.160176][ T8332] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 289.160200][ T8332] ubi_attach_mtd_dev+0x158f/0x3590 [ 289.160225][ T8332] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 289.160247][ T8332] ? __pfx_get_mtd_device+0x10/0x10 [ 289.160271][ T8332] ctrl_cdev_ioctl+0x339/0x3d0 [ 289.160285][ T8332] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 289.160299][ T8332] ? selinux_file_ioctl+0x180/0x270 [ 289.160320][ T8332] ? selinux_file_ioctl+0xb4/0x270 [ 289.160339][ T8332] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 289.160353][ T8332] __x64_sys_ioctl+0x190/0x200 [ 289.160373][ T8332] do_syscall_64+0xcd/0x250 [ 289.160388][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.160413][ T8332] RIP: 0033:0x7f157ad8cda9 [ 289.160427][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.160441][ T8332] RSP: 002b:00007f157bc8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.160456][ T8332] RAX: ffffffffffffffda RBX: 00007f157afa6080 RCX: 00007f157ad8cda9 [ 289.160465][ T8332] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000007 [ 289.160475][ T8332] RBP: 00007f157ae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 289.160484][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.160493][ T8332] R13: 0000000000000000 R14: 00007f157afa6080 R15: 00007ffc04785388 [ 289.160506][ T8332] [ 289.160511][ T8332] [ 289.396821][ T8332] Allocated by task 8321: [ 289.401130][ T8332] kasan_save_stack+0x33/0x60 [ 289.405791][ T8332] kasan_save_track+0x14/0x30 [ 289.410454][ T8332] __kasan_kmalloc+0xaa/0xb0 [ 289.415025][ T8332] ubi_attach_mtd_dev+0x3ce/0x3590 [ 289.420129][ T8332] ctrl_cdev_ioctl+0x339/0x3d0 [ 289.424871][ T8332] __x64_sys_ioctl+0x190/0x200 [ 289.429626][ T8332] do_syscall_64+0xcd/0x250 [ 289.434110][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.439989][ T8332] [ 289.442299][ T8332] Freed by task 8321: [ 289.446257][ T8332] kasan_save_stack+0x33/0x60 [ 289.450915][ T8332] kasan_save_track+0x14/0x30 [ 289.455573][ T8332] kasan_save_free_info+0x3b/0x60 [ 289.460590][ T8332] __kasan_slab_free+0x51/0x70 [ 289.465333][ T8332] kfree+0x2c4/0x4d0 [ 289.469215][ T8332] device_release+0xa1/0x240 [ 289.473790][ T8332] kobject_put+0x1e4/0x5a0 [ 289.478186][ T8332] put_device+0x1f/0x30 [ 289.482324][ T8332] ubi_attach_mtd_dev+0xe25/0x3590 [ 289.487423][ T8332] ctrl_cdev_ioctl+0x339/0x3d0 [ 289.492166][ T8332] __x64_sys_ioctl+0x190/0x200 [ 289.496915][ T8332] do_syscall_64+0xcd/0x250 [ 289.501398][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.507302][ T8332] [ 289.509609][ T8332] The buggy address belongs to the object at ffff88802b6d0000 [ 289.509609][ T8332] which belongs to the cache kmalloc-8k of size 8192 [ 289.523674][ T8332] The buggy address is located 6360 bytes inside of [ 289.523674][ T8332] freed 8192-byte region [ffff88802b6d0000, ffff88802b6d2000) [ 289.537653][ T8332] [ 289.539966][ T8332] The buggy address belongs to the physical page: [ 289.546357][ T8332] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b6d0 [ 289.555102][ T8332] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 289.563582][ T8332] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 289.571544][ T8332] page_type: f5(slab) [ 289.575507][ T8332] raw: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 289.584072][ T8332] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 289.592637][ T8332] head: 00fff00000000040 ffff88801b042280 0000000000000000 dead000000000001 [ 289.601291][ T8332] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 289.609942][ T8332] head: 00fff00000000003 ffffea0000adb401 ffffffffffffffff 0000000000000000 [ 289.618592][ T8332] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 289.627238][ T8332] page dumped because: kasan: bad access detected [ 289.633628][ T8332] page_owner tracks the page as allocated [ 289.639333][ T8332] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5492, tgid 5492 (dhcpcd-run-hook), ts 28118602409, free_ts 28060015582 [ 289.660169][ T8332] post_alloc_hook+0x181/0x1b0 [ 289.664929][ T8332] get_page_from_freelist+0xfce/0x2f80 [ 289.670393][ T8332] __alloc_frozen_pages_noprof+0x221/0x2470 [ 289.676275][ T8332] alloc_pages_mpol+0x1fc/0x540 [ 289.681110][ T8332] new_slab+0x23d/0x330 [ 289.685252][ T8332] ___slab_alloc+0xc5d/0x1720 [ 289.689917][ T8332] __slab_alloc.constprop.0+0x56/0xb0 [ 289.695281][ T8332] __kmalloc_cache_noprof+0xfa/0x410 [ 289.700555][ T8332] tomoyo_init_log+0xcb3/0x2170 [ 289.705411][ T8332] tomoyo_supervisor+0x313/0x12f0 [ 289.710419][ T8332] tomoyo_env_perm+0x193/0x210 [ 289.715184][ T8332] tomoyo_find_next_domain+0xed4/0x20c0 [ 289.720719][ T8332] tomoyo_bprm_check_security+0x12e/0x1d0 [ 289.726429][ T8332] security_bprm_check+0x1b9/0x1e0 [ 289.731527][ T8332] bprm_execve+0x832/0x16d0 [ 289.736023][ T8332] do_execveat_common.isra.0+0x4a2/0x610 [ 289.741648][ T8332] page last free pid 5489 tgid 5489 stack trace: [ 289.747954][ T8332] free_frozen_pages+0x6db/0xfb0 [ 289.752876][ T8332] __put_partials+0x14c/0x170 [ 289.757554][ T8332] qlist_free_all+0x4e/0x120 [ 289.762133][ T8332] kasan_quarantine_reduce+0x195/0x1e0 [ 289.767581][ T8332] __kasan_slab_alloc+0x69/0x90 [ 289.772413][ T8332] __kmalloc_noprof+0x1cd/0x510 [ 289.777249][ T8332] tomoyo_supervisor+0x461/0x12f0 [ 289.782272][ T8332] tomoyo_env_perm+0x193/0x210 [ 289.787043][ T8332] tomoyo_find_next_domain+0xed4/0x20c0 [ 289.792621][ T8332] tomoyo_bprm_check_security+0x12e/0x1d0 [ 289.798332][ T8332] security_bprm_check+0x1b9/0x1e0 [ 289.803426][ T8332] bprm_execve+0x832/0x16d0 [ 289.807920][ T8332] do_execveat_common.isra.0+0x4a2/0x610 [ 289.813539][ T8332] __x64_sys_execve+0x8c/0xb0 [ 289.818204][ T8332] do_syscall_64+0xcd/0x250 [ 289.822687][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.828572][ T8332] [ 289.830876][ T8332] Memory state around the buggy address: [ 289.836486][ T8332] ffff88802b6d1780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.844565][ T8332] ffff88802b6d1800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.852625][ T8332] >ffff88802b6d1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.860670][ T8332] ^ [ 289.867587][ T8332] ffff88802b6d1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.875650][ T8332] ffff88802b6d1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 289.883692][ T8332] ================================================================== [ 289.891822][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.900155][ T8332] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.907387][ T8332] CPU: 0 UID: 0 PID: 8332 Comm: syz.4.630 Not tainted 6.13.0-syzkaller-08265-g9c5968db9e62 #0 [ 289.917633][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 289.927677][ T8332] Call Trace: [ 289.930939][ T8332] [ 289.933855][ T8332] dump_stack_lvl+0x3d/0x1f0 [ 289.938446][ T8332] panic+0x71d/0x800 [ 289.942327][ T8332] ? __pfx_panic+0x10/0x10 [ 289.946725][ T8332] ? irqentry_exit+0x3b/0x90 [ 289.951312][ T8332] ? check_panic_on_warn+0x1f/0xb0 [ 289.956411][ T8332] check_panic_on_warn+0xab/0xb0 [ 289.961344][ T8332] end_report+0x117/0x180 [ 289.965662][ T8332] kasan_report+0xe9/0x110 [ 289.970064][ T8332] ? notifier_chain_register+0x3ac/0x420 [ 289.975686][ T8332] ? notifier_chain_register+0x3ac/0x420 [ 289.981303][ T8332] notifier_chain_register+0x3ac/0x420 [ 289.986751][ T8332] blocking_notifier_chain_register+0x76/0xd0 [ 289.992808][ T8332] ubi_wl_init+0x1018/0x17b0 [ 289.997394][ T8332] ubi_attach+0x1b92/0x4c00 [ 290.001893][ T8332] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 290.008226][ T8332] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.013417][ T8332] ? __pfx_ubi_attach+0x10/0x10 [ 290.018262][ T8332] ? ubi_attach_mtd_dev+0x1543/0x3590 [ 290.023634][ T8332] ubi_attach_mtd_dev+0x158f/0x3590 [ 290.028842][ T8332] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 290.034831][ T8332] ? __pfx_get_mtd_device+0x10/0x10 [ 290.040018][ T8332] ctrl_cdev_ioctl+0x339/0x3d0 [ 290.044765][ T8332] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 290.050033][ T8332] ? selinux_file_ioctl+0x180/0x270 [ 290.055226][ T8332] ? selinux_file_ioctl+0xb4/0x270 [ 290.060329][ T8332] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 290.065599][ T8332] __x64_sys_ioctl+0x190/0x200 [ 290.070358][ T8332] do_syscall_64+0xcd/0x250 [ 290.074848][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.080731][ T8332] RIP: 0033:0x7f157ad8cda9 [ 290.085134][ T8332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.104746][ T8332] RSP: 002b:00007f157bc8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.113142][ T8332] RAX: ffffffffffffffda RBX: 00007f157afa6080 RCX: 00007f157ad8cda9 [ 290.121097][ T8332] RDX: 0000000020000502 RSI: 0000000040186f40 RDI: 0000000000000007 [ 290.129051][ T8332] RBP: 00007f157ae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 290.137786][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.145748][ T8332] R13: 0000000000000000 R14: 00007f157afa6080 R15: 00007ffc04785388 [ 290.153709][ T8332] [ 290.156911][ T8332] Kernel Offset: disabled [ 290.161217][ T8332] Rebooting in 86400 seconds..