last executing test programs: 3m5.925646253s ago: executing program 4 (id=140): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x60e) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4b, &(0x7f0000000000)={0x2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x8000, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00\a'], 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000001b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) sendmsg$rds(r4, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x800000000000000, 0x65a8}, {0x300, 0x1}}, 0x0) 3m1.780047741s ago: executing program 4 (id=150): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x49, 0x5, &(0x7f00000005c0)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000a00)=[0x5, 0x0, 0x80, 0x8000000, 0x3, 0xfffffbf8, 0x0, 0x84]) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x800c854}, 0x4800) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @local}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}, 0x80000000}], 0x1, 0x2002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) membarrier(0x2, 0x0) 2m59.625008709s ago: executing program 4 (id=154): gettid() r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x81, @time}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x40bc5311, &(0x7f00000002c0)={0x0, @time}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x55, 0x25, 0x0, 0x0, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@ip4=@rand_addr=0x64010101, 0x86dd}}}]}, 0x38}, 0x1, 0xf00}, 0x0) 2m57.191642981s ago: executing program 4 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) listen(r1, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x3, 0x100000001) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x1b0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xfffffffffffffffd}, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000cc0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x202}}, 0x50) write$FUSE_GETXATTR(r2, 0x0, 0x0) 2m56.370684157s ago: executing program 4 (id=167): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x20000) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000340)={0x2, 0x0, 0x98, &(0x7f0000000640)={0x6, 0x0, 0x7}}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) getpriority(0x0, r1) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000003c0)=0xfffffffb, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1}}, {{&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000100)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000c80)=""/63, 0x3f}], 0x4}, 0x9}, {{&(0x7f0000000ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000005c80)=""/4096, 0x1000}], 0x1, 0x0, 0xffffffffffffffdb}}], 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x3, 0xc887, 0x20000) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000180)=0x16, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2m55.228890129s ago: executing program 4 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fstat(r0, &(0x7f0000000240)) chdir(&(0x7f00000000c0)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000456422d8b704000000000000850000005800000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m39.045795662s ago: executing program 32 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffc}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) fstat(r0, &(0x7f0000000240)) chdir(&(0x7f00000000c0)='./bus\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000456422d8b704000000000000850000005800000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 15.430943915s ago: executing program 0 (id=552): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xa, &(0x7f0000000280)={0x4, 0x3}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000001600)={0x1, @win={{0x3, 0x0, 0x2, 0x21}, 0x7, 0x8, 0x0, 0x2, 0x0, 0x5}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x101, '\x00', @p_u16=&(0x7f00000000c0)}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000600000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000000a096a4a7b3d20b37ddd902377d00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) utimensat(r8, &(0x7f0000000140)='./cgroup.net/devices.allow\x00', &(0x7f0000000180)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x100) renameat(r8, &(0x7f00000004c0)='./cgroup.net/devices.allow\x00', r8, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00') ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc0045401, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.931900125s ago: executing program 0 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@op={0x18}], 0x18}, 0x0) sendmmsg$alg(r7, &(0x7f00000074c0)=[{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f00000059c0)="2e02ee756857692e470c69819e38fb0303020818c1a6469ae480fa4be1ac23d932ea8f2acdf7b64e484858f4bd24cd936d7b1e11a54fa2c4a200ef060c74", 0x3e}, {&(0x7f0000005a80)="18f29ec931d8e6e1e4061c80bfafdd2660f6df3519274e9465b120438d56214a553d07ddeaada351449830e69d7b96d80e04d9945ca2cfed65b9e272ff28b230047827bbcb4908ee58f548386e8a70dd6971128a934500520999354d945d3d2f41ea39e2d8423b8a80cc0599438dc9ab73f39d952e91a7a759750578a125a15c1e0070287e1b4d1cf0847b8dde1314894dc82a6de09584", 0x97}, {&(0x7f0000005b40)}], 0x3}], 0x1, 0x8000) recvmmsg(r7, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1}}], 0x1, 0x0, 0x0) r8 = syz_clone(0x1000000, &(0x7f00000002c0)="00846d1731b2b05405a19df835212de75868711d854e355864ec7175ca70ed257a7d75fde3b0dc8f4bd4e1dad083a8cfb77a4a745aefe89b37137489c3a07c33bb8fc0efc4badf344c1c29129efc6bf4496f794b8aa9f6ce372391239d327f3d4a6a606f8064c3b2e1a0a3f732226b974ffc3ad39064997087d039941c94704e0afe54ed5aaa1dd2e68124d82c3beb95bb1ac350ae3918bfbd24d99817e963973740d7f2a002e3e95d090afce42cd1e539f9132bbcc980a5153f3b96c6542793c03dbb2495bfcc1649aba705979a69d59f85cde348ccf7ea8636f6511c432f6f1f", 0xe1, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000001d80)="8b8100d33c7a89ad9ef404decfc57608cef8b085828c6e983430a57d775fc9604786b442711ab618e5a4ae217073f7b591a4e12624eed684c67f89055e87943db5160ef437811a6bab95a5585b69956ca7726dfae6154246717bb10c758679a84e167b8df5bab9507fe2d4bfc6f2eb920939e5e62f1c9cc2f650e76f07fe1435bb951d58f90d54e2e2ef9234cf7d900ca753c835bc295deb9f2f06f9b2517e7521085f944f1c36bfc4e89db19192b649683566d150bda8daedf4395bc1308441f927154360bfee7bd9fdbff92fb5936c9147bcf571480b9c5be601a56730e30f6f948f8ac04732b46ae64dbb9413567c916251975b90c69ed251bf213c698c2070744f1e619582398ffded74d28aebce70edbfd8940a216f2f8f504c0b58de03949e50ace063a16bc95099f96e82b81fe84313546ce1f4760992fe439b4b4383580a9cb29c6215701724a3ade6d905508d660f00ef320009c4d8f9620232acf77c9a5d2cf2ebccb197b500d01b98140efbf067d7c380fb593e9b42b6bf4b5f03c3bce939ecd1b994f7177dcfc86f6f32ba0aca76bde57fcaac53ddb7ae4df28ef0572f5881900b38bb22d8d5b12c9bf3cf11f1facc6391c0826465d06c2153a60e22159b1e6ce6bb78e95f2da531a9d0cca21ee47b835011180c7cfd44991603ecf60b6ed712eb02ce7d5298f4636bb79fd32dff129181c6d1ff569cc6936843d73c7f237eddb59ecb0e3d55dc572dddceaa8d0edc856f1a50796085ab1262dd6e72d0a9359e151d545c613686046c0ac05e1ff6c1209e37321e772dbaac3dddb4a810299e1888fa0ea3fbd4e3201926cc25018639d258678d5b5313cdfbbd90d18e3a4b7b78e09ffec9b6c828783a7af02d1fdfb8618401e23c32772fe4f85b95b032d9f27998e0feecbdb329b700f1a7a5e20d27c3557f13811cdc565cac2548c8fe02f7d7502a6052ab382144b99a005d52166ec3d77cb46d2f4d5b2ad5e9094b9fe7b585b310a357232bc258b35ddff30944b7ba2fdc0b5f59672cba666565e9fb17f1d0663301aa404c7ad5a6bd56b52bc79835fd8b32d57704ea73d98cc0ff687d1c485045af6eb0e82f7cdcd1793e0dd0e026b7a2930569fe8561992605e4eeedcdca0049181073903a3f7ff3252a6842f2403a70045501c8676a14dc9e4fe9df3df4d5091d80d90c411029cf3f053f6bba64b65b4ccdc5383d70418a9a1b43621cbc0be8647acf259db8c92d7d9166cf559ce8102e4f15c221067ccf1941d900425acd4d517c36a1f9e804e19fa8059ebae6efa272fc3058fe6c3b59fc43587f6f3d346da4b72e02b65cad3a8c57c9ee35f7e1150359b4ae6bce3c36345e8a44013a746f31b43d4ae57039d0d970236267b0dff1ace50de377225b7719c82df616714f27f3892f21d69bec216f305fb8fd709a1386de62ef996d639615860dac58a36db9ad0aaa28308666a99eb1f934e0ad09d3a9143f1d098222eaf38ed92c3cc7e2308cf3330e302f3265c923c869711ddc1955950db72a51426be930993f54dd4309ee56eef62bd222b4afcc4ffb71bfbba608731c9fa0a954010bbf29bd496f0382698923a1906a4d0f34272a20e88bd75c62c5007b38ff9637a04e3b9c6e6ab93c6c8f869cc78d113c2e39379b20e191ff6bc9a9f14e37c5b88aafd1a3b643e1fe456ed113791893077efdca9252c8a4c1c8f7cafcfe73ec7fc9c7a244671596e0dfb922dc27a6492c63533e43a6853b56ab642b6d2fdeccce810b4a15db0090ddde6999379a7714031cfcd654b96cf163a81065857d83c134e96e3356904e9bfa6532178433530764f3679c7b6f30202127dd570652056f6ff43d98aeba94bdac2acd400275bddf02defdd391e76ca3ed90e55a5fc89794984ec43bba39d751ddc496e2878dd00f982114f83174526876de655ad869045fe2b318496b44c1046a15b85c4b1c7d7acd3f198f0ae400119687d288a802299152f32214f8ebe9d5f06cd5563bbab7f3bc6108902ddda8dbbd916d58ed07db69af8c17187590f5ebaf7f45d6ea01780605bec91b8b076d9e2dcc0aa70e83baa22e23c260e64e5eb1093b971d68b4c8a16a102f96f8e14f25c52ff47c43e3a376636d3d53819d73d38dd2e106245533c06b7686aa04fccba203da0fc297a4d5d11047747b4691edd9951ad7131be12abe4d8cb35c684e72639e541ae183526f893cc27dac9db6e49f51d565273d778cd649e0189fff5f9986699238b0b725d134f8cb0bf3e90236939776bf0631fbb5b803c8ae7d382bd4ead7bc27867bf5f066241f2fc150d5e20c1680898d8a5ecfaefe93ad4d2a184d94ae7f55d565ce3f686e5b1945cbd1c7319d89bae1b8d7358f5a76bc8c8516c7032a857a8d808cfc23ddecfb48e50b20b1c9147f6483c02990197cdb1389344b9cf3239be57693567912c4e88764fb0bef08b6efac3779d1cad6554de3497226bb13ce3c1355684b0041b84ccb04639a8c9155b59143d1f4e0a49ca4d974622f723f567bd3555c1bec4a1a482a6147ddc9e871ab233baf37dd500e1106ce0e36afa18ce5d3118fcea987142ff8c47ee452425876f708299b9ced8f00c15223f23a4ab601d2571b435a58552a2d7b00ef7664d32b704a2f3ad551f4a160ad55f3993ca7dc4483b4bce9a172fb040d86c6ce500ad3abbacffd545a8bbbaa3080f60433f3d88fe090ce3fa23c2b5c07bed5f9bf7bbf574b23ad41466b2faa2c3875b4c183e31aa94f6ccdde1eb176c55d67a5c7c168011a519b9545f2e52cbc377496902e6e58cd88200b4432c546574b39b5b2ac7fe701f30e23b82b53f36c640da177da3f97af610a23bef96a46ce32471628e82477cd0d5b07624a4979a9ad3e581effada3981f3ba46cbcb51a696a4edef1842d66d5cd6320ab1335d331cee60b95f319b9a7f6516600136ff8552cc03fea39a94d88da3038bab7ab28d913a3a98237d4badbaba0fe092be3815ec5f77f0d2cbd26278bdcaed1de002f2a47a2f3517495c3141f014b1cc670e7f29b2f88b413baf726ad73097655ce64527fea65236beb56fd29593917d8385961141f48d9981b15066c671820badb2bbba0453f8cf82b777d1c57a60c525f18ac63cb0c2b808915155f076f958c9be9a299483e61ee47e4f70bb8bfb474b335029f438a1719bcf9b69d361e9ef17ff05ea5e0e7340782e4b5405b7d7fd1711fc43396aa2b32bcf76fe4f064997a85f05c9535729ca276a503ca3038f45d922e84c95f086c9d643164c1b0552047cf3f4eb50641018d69a3fa2b4775e5939b99ce3dbeeec1849f503378c128bb4ef6b86b7be7d30d264dffb5d4da71f10683b08b749f35fe37c9188bd08c459aad0557e48d3836d688ff1282427726c91908617707108a64fc97d1724cfc51592ecd3ef6284ad11599e7cc86f557fa1ea54e93e237d22dbe9962f38099c547c917998a7d534f6afedb6a733149c7bf6e4be8572bab17a913b76976a6b7f1a99badb20d6ea0fd07b408c50ccad148a9e29191a96f68689849349a01b3f460124b701fe4b6f8a3777ef0a89c8a85ddd95aca4e86af349fa062f45ecd076282a2e9ae7c9d573ae8572d0f4c6547dbb1cf834af14b4ec33bfd3404a490f79e60752ad98a4f66f860ef36dbf632b984ccf487e68e278a876ab8ee80746b97084fffa0398708fedbde35c9011c4eb13d9c7f212694c4eab3910fbc329e1a0c11db3cbb3a802c5dcacdbd35acdb6138c774f8014fc86ec1326c2abb03efd4e0e563233afeed3a305e12a67d7db63ec8c4b2fd64c826226ab667350bbfe76fa6b72d11b2c9cd27a686e1546592533e9f2097cf72ac99f85074d25c96bc0192fe0df8999e6e7a129ece9e691ea87a7e96a7020e6f0b95a4a89e29b11b6f00ecba3ddbbfffb0f6e4295ace8b04358b982b0c2d77eb83c980f8d6417d109a06af09f19dfe9436f60927f4742b988e6bdbea5f098ef448c72901234714d7b72461c54f4b475b1e3493e496029cec7ce89b9baf5e14eadd0f8ceea9837808f2d4accff0a36be606d6edcc6a6e9fbf70652aacf385ced111584c3c94860a6785f88c33a2a235faa717f05a20252db132d8a1e53d49d0994e6904f6bcd23a5b99dd3f23e81c9540d18e1623c8746eb725a7e9ff275a48b7d598bb77ee4cd42b1dcee9b789ed6e4b5a81929e528a755c58be9d4381291f18357a599c46bce08c2eabdf0e2c66327d77037d8688aba9e596ce83d57634c1b2a6d0f21aaf580365b57aedcb93f95b3c3d4a8ccdf26f3e4b023c87e11138fa644d43d81bfb878c2567290c31f153f68f850d46d348403f587b0d37f9d0b00b497c8e21b53f9e87e202041293dc09a43ca65535c9fe2bfb1c9cc3ee330df92dd9edc8a4fc4d2f4bd1867e9b90fbc2a98509c2c58591210268b08f5e32adcafe35348d85216c0ad1931e3e6d8d2e966e7c4eafb08624ecb419b4eb4067e4712580ecf266b3951d5a3256c3cf4045b374a9239dcffd56ab091552cb96c4f0dca47ccff8199e8e8062ef2c903ef14e27fb813edd9797562415d6486c802753090f95e01e6b45306246a8fa73caae1fbde45a9861d7246904f18c6890e3a68325688245e6c4b0f2b266acd46bae69389a6ec09fe100502d56d6811cf443b27e905d24635fb54234287afd3371e23e0f23eac33275ea5ffd50ec1f79a5c82dc9c0c6a3287d5ebba6a4d7fc590d0c45f1694f7ac48f2cf053a8bc305c809bb995ea79afd24bfed3f3b0466b1c897e2c0ecdf9decfd1f1fecbd933815c1ea9a8be73ae2d4e89ba9cc70e319c6e609850cfab5e352c3db57a9697a35ffffa28cd96bd8ab74477b1d3cd39c36b3e15b090b32bcd44b480d6fcb6310ad61af15f7f9f5a9d52b8b08b7981ceb3fceaff9b87685bc3aa53bcc5840d2e40d254563d32771df90dda8a1a2c1e608c9bced49f22c98804b6add0798c6a5e1379809c5807f8ef5633c39c5794f6a4608b69a8b3ccc3196539105c0a8d24606a8b53bd6bd5c4815143585b59ef9d0282f34f05abcd9fecdcb8a5f5fe07ccaa84d2bcd0b564672e3b203d8b11311bdddd1acb58b4f493fb3e3ea6a604e7664f896ecadde2837ab31cf64bb6a9dc48570e72ab4a4b2eb3f126b6fa5e18f04332fb48a7a36a906408314622a8eded8557fe9baa68509bfcb402333b955d02dc0667acaaa6596901dbf4dbc34df2f5181d7aa564118d04d73afa310d7a41afffc955602f2c48be89e104bb0d597d242c02039054b5815b4148dfa6147e361d9a8337648b483148516791f738d9de328fdec15f10c2e36bc8e69a47bd8b103e18d37a40860f3c8494ef09f1a813840ea9c4906a3d50dc9ebb6d987ad0929aae3f00b9b257006ca3a9679535322afa990d8650961c92afbafcbf038f21f0f3af14b3d8ca5fd02dfed7ae82bcd7113a2e6913527f45867fd4214c88d38115af7b350c6a45abafff3819fb7d83256b56f79acdfc5ed979461b1de873bbd74b07d7321ed82a66eefcc9bf10168a16afa14d19bd302fba8ae279b34fcc64bb0d07eb3e727778407296195cc3582bb1995003a7b403c1bab7ec4bd35055b96af03e469ed44dd72600cb22ef50eacc7d0b4e345f453572e9ae58578b82bfd48dfe5748fd608360affe5e3fcef0762e30cf1afd2ccc1fa5c5239900f4b09dbd35ee5374ca323ec15a39907a29539edebe6e5fde78dc3fb856369fefaf6234be717f103b40b39baa5b9ccf7bf958bf512a5b0b1b7df3fca4b1f288d5ff6c12e8f1f8ae08c74e59a5ed59c426d7f5cddd") migrate_pages(r8, 0x7, &(0x7f0000000180)=0x8, &(0x7f0000000240)=0x8000000000000001) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x401c2103, &(0x7f00000001c0)={0x0, 0x0, r0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001240)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRESHEX], 0x200}, {0x0, 0x16c}], 0x2}, 0x0) 11.398494027s ago: executing program 0 (id=560): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 11.256849256s ago: executing program 1 (id=562): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f01020322d9427f0001000000000904000000a058b700"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1e6986d7705b61f048c00b863082c92a5662a8292660b6d1bcc923a3617b389b423798297c001c841ca88ad8cdb36aa6b829b210bfe755850fc12a556c30527820e77d", @ANYRES16], 0x0}, 0x0) 9.270211195s ago: executing program 5 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f0000000040)={0x0, "8bd796608705789f682411b049f5b594c7ef3698429b60c4e1e751c6cc636be3", 0x1, 0x200, 0x4, 0x9, 0x2, 0x6, 0x5, 0x7f}) close_range(r2, 0xffffffffffffffff, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000bbab70b9b3dd609930ea1ca6f52ff0cc20aacfb4b85f5e2eaa2b4fa0a5f866057a000805c4a485d5e5f08757bee330dc60adf3aeb2627577980acc9f3fda75ebfc979960d6970169a98016e63c10899a720daf0bd2981bc4f0023c3f6255aa5f85b570bbf042f21bbb6109365c2dfbbf27c4d34ae1a0bab830d12c98e7c813cff76fd639ea", @ANYRES16=r10, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) 9.08104698s ago: executing program 2 (id=570): r0 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x400442c8, &(0x7f0000000080)={'macsec0\x00', @dev}) 8.999437361s ago: executing program 0 (id=572): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x80000000000b, 0x1, 0x0, 0x0, 0x1) fsetxattr$security_ima(r0, &(0x7f00000000c0), 0x0, 0x0, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x2, 0x112, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r1, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 8.822685079s ago: executing program 2 (id=573): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000480)={{0x3, @null}, [@default, @default, @bcast, @bcast, @remote, @rose, @null, @bcast]}, &(0x7f0000000500)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000380)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xdededede}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d"], 0x398}}, 0x0) sendmsg$netlink(r1, 0x0, 0x4010) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0}}, 0x0) 7.797522387s ago: executing program 5 (id=575): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) ftruncate(r0, 0x97a9) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) prlimit64(r2, 0xe, &(0x7f00000000c0)={0x71, 0x9}, &(0x7f00000001c0)) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="121f00c0002d5e00"], 0x10}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0x3a00ea60) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r6, &(0x7f0000001700)={0x2020}, 0x2020) 6.596240257s ago: executing program 1 (id=576): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000180)=""/45) setresuid(0x0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000440)={0x4, 0x800, 0x8, 0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x9909ce, 0x10000, '\x00', @string=&(0x7f00000003c0)=0x3}}) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0xffffc002, '\x00', @p_u8=&(0x7f0000000280)}}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r7, @ANYBLOB=',wfdnuZ', @ANYRESHEX=r5, @ANYBLOB=',']) 6.351888029s ago: executing program 2 (id=578): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000100)=0xef88) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x1a) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, 0x0) r5 = timerfd_create(0x1, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r2, 0x942e, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x200, 0x0, 'queue1\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0xff, 0x0, 0xfffff00e}, {0x20, 0xfc, 0x0, 0xfffff024}, {0x6, 0x2}]}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_rdma(0x10, 0x3, 0x14) 5.616111575s ago: executing program 0 (id=579): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) dup(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x60e) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) timerfd_create(0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000100)) timer_gettime(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r2, 0x4b4b, &(0x7f0000000000)={0x2}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x8000, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00\a'], 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000001b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) sendmsg$rds(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) setitimer(0x1, &(0x7f0000000140)={{0x800000000000000, 0x65a8}, {0x300, 0x1}}, 0x0) 5.614910169s ago: executing program 1 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x111) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x204) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000380)="ff", 0x1}], 0x1) close(r3) close(r1) 3.974649583s ago: executing program 2 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f0000000040)={0x0, "8bd796608705789f682411b049f5b594c7ef3698429b60c4e1e751c6cc636be3", 0x1, 0x200, 0x4, 0x9, 0x2, 0x6, 0x5, 0x7f}) close_range(r2, 0xffffffffffffffff, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000bbab70b9b3dd609930ea1ca6f52ff0cc20aacfb4b85f5e2eaa2b4fa0a5f866057a000805c4a485d5e5f08757bee330dc60adf3aeb2627577980acc9f3fda75ebfc979960d6970169a98016e63c10899a720daf0bd2981bc4f0023c3f6255aa5f85b570bbf042f21bbb6109365c2dfbbf27c4d34ae1a0bab830d12c98e7c813cff76fd639ea", @ANYRES16=r10, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) 3.96687071s ago: executing program 3 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b0000000800", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000080026006c090000050024"], 0x38}}, 0x0) 3.816200381s ago: executing program 3 (id=587): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="996386d83c53"}, 0x0, {0x2, 0x4e21, @private}, 'lo\x00'}) write$ppp(r2, 0x0, 0x19) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x208, 0xffffffff, 0x160, 0x0, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'vcan0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x0, 0xa1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2, @local, @gre_key=0x2, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@local, @gre_key=0x7feb, @port=0x4e24}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @broadcast, @icmp_id=0x67, @port=0x4e20}}}}, {{@ip={@broadcast, @remote, 0xff000000, 0x0, 'team_slave_0\x00', 'wg0\x00', {}, {}, 0x2e, 0x0, 0x14}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x402, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000600)=@gcm_128={{0x304}, "3f6a81597eb72e1a", "6d5cf5c721571adc433a0e33ea7ec618", "460d64bf", "b8570491058cd35b"}, 0x28) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xd, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0xffffff28) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c000600000000000000000004000780080001"], 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3.619683913s ago: executing program 3 (id=588): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f000024b000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00007d5000/0x3000)=nil) pipe(&(0x7f0000000000)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000002100), 0x1003) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 2.528129899s ago: executing program 3 (id=589): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000600)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x188, 0xa, 0x148, 0x188, 0x60, 0x270, 0x2a8, 0x2a8, 0x270, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x118, 0x188, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x14, 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x368) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a'], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='2\x00', 0x2) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 2.337745359s ago: executing program 1 (id=590): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2, 0xfffffffa, 0xca}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010003904000000f00000000000000000", @ANYRES32=r2, @ANYBLOB="00320000000000001400030062"], 0x3c}}, 0x0) 2.267098129s ago: executing program 2 (id=591): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_matches\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents(r0, &(0x7f0000000000)=""/24, 0x18) syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x101580) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) r6 = getpid() syz_pidfd_open(r6, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$tun(r1, &(0x7f0000001140)={@void, @void, @ipv6=@generic={0x8, 0x6, "8d1b91", 0x13b, 0x5c, 0x1, @local, @local, {[@srh={0x9e, 0x6, 0x4, 0x3, 0x3, 0x48, 0x9, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x40}]}, @srh={0x1, 0x8, 0x4, 0x4, 0x10, 0x10, 0x3, [@mcast1, @empty, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}]}, @srh={0x2b, 0x4, 0x4, 0x2, 0x6, 0x10, 0x7f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}, @srh={0x6, 0xe, 0x4, 0x7, 0x5, 0x40, 0x6, [@mcast2, @remote, @remote, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @remote]}], "a95d2528b9ad110b9922e1bc95c5aad9f2b8256716aeaa59105f01"}}}, 0x163) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 2.060463078s ago: executing program 0 (id=592): socket$netlink(0x10, 0x3, 0x0) io_setup(0x3, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000300000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='jbd2_shrink_scan_exit\x00', 0xffffffffffffffff, 0x0, 0x7c}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r10 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r10, 0x0, 0x0) 1.466938185s ago: executing program 3 (id=593): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028008000400000000"], 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1.31083632s ago: executing program 5 (id=594): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x400442c8, 0x0) 1.307853386s ago: executing program 3 (id=595): syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="04070500000c00"], 0x7) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x9, 0x3, {{0x7, 0x4, 0x2, 0x19, 0x1c, 0x3, 0x0, 0x8, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1, {[@ra={0x94, 0x4, 0x3}, @end]}}}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) socket$inet(0x2, 0x80000, 0x100006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$poke(0x5, 0x0, &(0x7f0000000100), 0xc7) mmap(&(0x7f0000355000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x12ca0000) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000580)) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r6}) 1.269297813s ago: executing program 5 (id=596): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x49, 0x5, &(0x7f00000005c0)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ioctl$X86_IOC_RDMSR_REGS(0xffffffffffffffff, 0xc02063a0, &(0x7f0000000a00)=[0x5, 0x0, 0x80, 0x8000000, 0x3, 0xfffffbf8, 0x0, 0x84]) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x800c854}, 0x4800) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @local}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001e00)=[{0x0}, {0x0}, {&(0x7f0000003480)=""/172, 0xac}], 0x3}, 0x80000000}], 0x1, 0x2002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/99, 0x63}}, {{0x0, 0x0, &(0x7f0000001e40)=[{0x0}, {0x0}], 0x2, &(0x7f0000001e80)=""/4096, 0x1000}}], 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.217752119s ago: executing program 1 (id=597): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x800, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000180)={r6}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) 156.638611ms ago: executing program 5 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8954, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @random="996386d83c53"}, 0x0, {0x2, 0x4e21, @private}, 'lo\x00'}) write$ppp(r2, 0x0, 0x19) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x348, 0x0, 0x208, 0xffffffff, 0x160, 0x0, 0x2b0, 0x2b0, 0xffffffff, 0x2b0, 0x2b0, 0x5, 0x0, {[{{@ip={@empty, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0x0, 'vcan0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x0, 0xa1}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2, @local, @gre_key=0x2, @icmp_id=0x68}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @ipv6=@local, @gre_key=0x7feb, @port=0x4e24}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @multicast2, @broadcast, @icmp_id=0x67, @port=0x4e20}}}}, {{@ip={@broadcast, @remote, 0xff000000, 0x0, 'team_slave_0\x00', 'wg0\x00', {}, {}, 0x2e, 0x0, 0x14}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x402, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000600)=@gcm_128={{0x304}, "3f6a81597eb72e1a", "6d5cf5c721571adc433a0e33ea7ec618", "460d64bf", "b8570491058cd35b"}, 0x28) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xd, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x70}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00'}, 0xffffff28) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c000600000000000000000004000780080001"], 0x38}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 78.668131ms ago: executing program 2 (id=599): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fanotify_init(0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1863060000000000000000000000ebd6"], &(0x7f0000000280)='GPL\x00', 0x20000006, 0x24, &(0x7f00000002c0)=""/36, 0x41000, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x26655, 0xffffffffffffffff, 0x2, 0xfffffffffffffffc, &(0x7f0000000080)=[{0x1, 0x1, 0x9, 0x2}, {0x4, 0x2, 0x8, 0x9}], 0x10, 0x1, @void, @value}, 0x94) open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f00000000c0), 0x12) bind$x25(r2, &(0x7f0000000100), 0x12) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(0xffffffffffffffff, 0x8942, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000300)={0x7, 0x7, 0x80, 0xff, 0x2, 0x7, 0x4, "2f0d42f24aa3e5f41f000e2de37fbb97cf7b6725", "9ef9b4c723effc420000000000000000cf0b00"}) syz_usbip_server_init(0x5) syz_open_dev$usbfs(&(0x7f0000000000), 0x8001, 0x6f0000) dup3(r2, r0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="16010200925f5510ac05261289b2010203010902"], 0x0) r4 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) fsetxattr$security_capability(r4, &(0x7f00000000c0), &(0x7f0000000140)=@v1={0x1000000, [{0x9f62, 0x21b}]}, 0xc, 0x50647f21226305a6) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='stack\x00') 693.675µs ago: executing program 1 (id=600): socket$alg(0x26, 0x5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 0s ago: executing program 5 (id=601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r9, 0x4054561e, &(0x7f0000000040)={0x0, "8bd796608705789f682411b049f5b594c7ef3698429b60c4e1e751c6cc636be3", 0x1, 0x200, 0x4, 0x9, 0x2, 0x6, 0x5, 0x7f}) close_range(r2, 0xffffffffffffffff, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000bbab70b9b3dd609930ea1ca6f52ff0cc20aacfb4b85f5e2eaa2b4fa0a5f866057a000805c4a485d5e5f08757bee330dc60adf3aeb2627577980acc9f3fda75ebfc979960d6970169a98016e63c10899a720daf0bd2981bc4f0023c3f6255aa5f85b570bbf042f21bbb6109365c2dfbbf27c4d34ae1a0bab830d12c98e7c813cff76fd639ea", @ANYRES16=r10, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): t1: unable to enumerate USB device [ 121.402830][ T29] audit: type=1400 audit(1730818673.937:631): avc: denied { ioctl } for pid=6548 comm="syz.0.146" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.528509][ T5915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.538592][ T8] usb 40-1: device descriptor read/8, error -110 [ 122.063832][ T8] usb usb40-port1: attempt power cycle [ 122.091433][ T5915] usb 1-1: device descriptor read/64, error -71 [ 122.640348][ T6569] tmpfs: Bad value for 'mpol' [ 123.042914][ T5915] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.704281][ T8] usb usb40-port1: unable to enumerate USB device [ 124.077155][ T5915] usb 1-1: device descriptor read/64, error -71 [ 124.330515][ T5915] usb usb1-port1: attempt power cycle [ 125.104283][ T6584] [U] [ 125.107208][ T6584] [U] [ 125.109919][ T6584] [U] [ 125.112625][ T6584] [U] [ 125.115661][ T6584] [U] [ 125.118385][ T6584] [U] [ 125.121096][ T6584] [U] [ 125.123807][ T6584] [U] [ 125.127269][ T6584] [U] [ 125.130064][ T6584] [U] [ 125.132779][ T6584] [U] [ 125.150655][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.166281][ T29] audit: type=1400 audit(1730818678.057:632): avc: denied { append } for pid=6583 comm="syz.1.155" name="ppp" dev="devtmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 125.321645][ T29] audit: type=1400 audit(1730818678.287:633): avc: denied { remount } for pid=6596 comm="syz.0.158" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.371940][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 125.378660][ T8] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 125.387877][ T8] usb 4-1: config 0 has no interface number 0 [ 125.397812][ T8] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 125.413379][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.421437][ T8] usb 4-1: Product: syz [ 125.431609][ T8] usb 4-1: Manufacturer: syz [ 125.436871][ T8] usb 4-1: SerialNumber: syz [ 125.450188][ T6605] netlink: 'syz.2.161': attribute type 21 has an invalid length. [ 125.458439][ T6605] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'. [ 125.469489][ T8] usb 4-1: config 0 descriptor?? [ 125.475401][ T6605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.161'. [ 125.477412][ T8] smsc95xx v2.0.0 [ 125.542137][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.843654][ T9] usb 2-1: device descriptor read/64, error -71 [ 126.172866][ T29] audit: type=1326 audit(1730818678.927:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 126.196448][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.386136][ T29] audit: type=1326 audit(1730818678.927:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 126.411316][ T29] audit: type=1326 audit(1730818678.927:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm="syz.2.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 126.662939][ T29] audit: type=1326 audit(1730818678.927:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 126.700093][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 126.844997][ T29] audit: type=1326 audit(1730818678.927:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 126.983870][ T29] audit: type=1326 audit(1730818678.927:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 127.002150][ T9] usb 2-1: device descriptor read/64, error -71 [ 127.009313][ T29] audit: type=1326 audit(1730818678.927:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 127.042655][ T29] audit: type=1326 audit(1730818678.927:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 127.067532][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.122272][ T9] usb usb2-port1: attempt power cycle [ 127.166063][ T29] audit: type=1326 audit(1730818678.927:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 127.191698][ T29] audit: type=1326 audit(1730818678.937:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6609 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 127.218526][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.565274][ T6615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.611946][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.628717][ T6615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.637939][ T9] usb 2-1: device descriptor read/8, error -71 [ 127.698924][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 127.710535][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 127.728470][ T8] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 127.754369][ T8] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 127.790002][ T8] usb 4-1: USB disconnect, device number 3 [ 127.881943][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.953642][ T9] usb 2-1: device descriptor read/8, error -71 [ 128.590919][ T9] usb usb2-port1: unable to enumerate USB device [ 128.614191][ T6635] mmap: syz.4.167 (6635) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.708715][ T6584] [U] [ 129.016892][ T6645] x_tables: ip_tables: osf match: only valid for protocol 6 [ 129.135778][ T6647] tipc: Started in network mode [ 129.140841][ T6647] tipc: Node identity 2ae0db3252ab, cluster identity 4711 [ 129.148728][ T6647] tipc: Enabled bearer , priority 10 [ 130.262037][ T5879] tipc: Node number set to 2018237234 [ 131.260125][ T5830] Bluetooth: hci3: command tx timeout [ 131.265914][ T5830] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 131.274724][ T5830] Bluetooth: hci3: Injecting HCI hardware error event [ 131.426599][ T5830] Bluetooth: hci3: hardware error 0x00 [ 132.401991][ T6677] syz.0.179 uses obsolete (PF_INET,SOCK_PACKET) [ 132.479890][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 132.479905][ T29] audit: type=1400 audit(1730818685.447:673): avc: denied { ioctl } for pid=6678 comm="syz.2.183" path="socket:[10029]" dev="sockfs" ino=10029 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.001161][ T29] audit: type=1400 audit(1730818685.897:674): avc: denied { create } for pid=6685 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.021864][ T29] audit: type=1400 audit(1730818685.897:675): avc: denied { write } for pid=6685 comm="syz.2.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.094552][ T6697] input: syz0 as /devices/virtual/input/input9 [ 133.117450][ T29] audit: type=1400 audit(1730818686.037:676): avc: denied { write } for pid=6689 comm="syz.1.184" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.141816][ T29] audit: type=1400 audit(1730818686.047:677): avc: denied { ioctl } for pid=6689 comm="syz.1.184" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 133.662827][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.669478][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.808565][ T29] audit: type=1400 audit(1730818686.777:678): avc: denied { append } for pid=6699 comm="syz.2.187" name="ocfs2_control" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 133.831865][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.841001][ T6700] nbd: couldn't find a device at index 2949120 [ 134.572082][ T5830] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 135.137637][ T6715] overlayfs: missing 'lowerdir' [ 135.912682][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.795272][ T29] audit: type=1326 audit(1730818689.197:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 136.818483][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.001497][ T6738] FAULT_INJECTION: forcing a failure. [ 137.001497][ T6738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.016001][ T29] audit: type=1326 audit(1730818689.197:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 137.469670][ T6737] x_tables: ip_tables: osf match: only valid for protocol 6 [ 137.487546][ T6738] CPU: 1 UID: 0 PID: 6738 Comm: syz.0.196 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 137.498170][ T6738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.500821][ T29] audit: type=1326 audit(1730818689.197:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 137.508209][ T6738] Call Trace: [ 137.508217][ T6738] [ 137.508225][ T6738] dump_stack_lvl+0x16c/0x1f0 [ 137.508250][ T6738] should_fail_ex+0x497/0x5b0 [ 137.508275][ T6738] _copy_from_iter+0x2a1/0x1560 [ 137.508302][ T6738] ? __pfx__copy_from_iter+0x10/0x10 [ 137.508326][ T6738] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 137.508353][ T6738] ? tun_build_skb.constprop.0+0x1b8/0x1120 [ 137.508381][ T6738] ? __pfx_lock_release+0x10/0x10 [ 137.508399][ T6738] ? trace_lock_acquire+0x14a/0x1d0 [ 137.508420][ T6738] ? __pfx_lock_release+0x10/0x10 [ 137.508439][ T6738] copy_page_from_iter+0xa5/0x120 [ 137.508463][ T6738] tun_build_skb.constprop.0+0x294/0x1120 [ 137.508503][ T6738] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 137.561949][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 137.563282][ T6738] ? __pfx___lock_acquire+0x10/0x10 [ 137.599925][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.601324][ T6738] ? __pfx_mark_lock+0x10/0x10 [ 137.620827][ T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 137.621649][ T6738] ? __lock_acquire+0xbdd/0x3ce0 [ 137.627107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.635387][ T6738] tun_get_user+0x872/0x3d80 [ 137.635429][ T6738] ? find_held_lock+0x2d/0x110 [ 137.635454][ T6738] ? __pfx_tun_get_user+0x10/0x10 [ 137.635477][ T6738] ? find_held_lock+0x2d/0x110 [ 137.635502][ T6738] ? __pfx_lock_release+0x10/0x10 [ 137.635531][ T6738] tun_chr_write_iter+0xdc/0x210 [ 137.635559][ T6738] vfs_write+0x5ae/0x1150 [ 137.635588][ T6738] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 137.654365][ T29] audit: type=1326 audit(1730818689.197:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 137.657800][ T6738] ? trace_lock_acquire+0x14a/0x1d0 [ 137.657831][ T6738] ? __pfx_vfs_write+0x10/0x10 [ 137.666923][ T9] usb 3-1: Product: syz [ 137.667565][ T6738] ? __fget_files+0x40/0x3f0 [ 137.674078][ T29] audit: type=1326 audit(1730818689.197:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 137.677480][ T6738] ksys_write+0x12f/0x260 [ 137.698627][ T9] usb 3-1: Manufacturer: syz [ 137.712144][ T6738] ? __pfx_ksys_write+0x10/0x10 [ 137.712192][ T6738] do_syscall_64+0xcd/0x250 [ 137.712213][ T6738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.712239][ T6738] RIP: 0033:0x7fae5b37d1ff [ 137.712268][ T6738] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 137.712284][ T6738] RSP: 002b:00007fae5c1de000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 137.712307][ T6738] RAX: ffffffffffffffda RBX: 00007fae5b535f80 RCX: 00007fae5b37d1ff [ 137.712320][ T6738] RDX: 000000000000007e RSI: 0000000020000000 RDI: 00000000000000c8 [ 137.712331][ T6738] RBP: 00007fae5c1de090 R08: 0000000000000000 R09: 0000000000000000 [ 137.712342][ T6738] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000001 [ 137.712354][ T6738] R13: 0000000000000000 R14: 00007fae5b535f80 R15: 00007ffceb01b088 [ 137.712380][ T6738] [ 137.712464][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.960994][ T29] audit: type=1326 audit(1730818689.197:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 138.035885][ T6750] tmpfs: Bad value for 'mpol' [ 138.040716][ T29] audit: type=1326 audit(1730818689.197:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 138.857848][ T9] usb 3-1: SerialNumber: syz [ 138.925830][ T29] audit: type=1326 audit(1730818689.197:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 139.161999][ T29] audit: type=1326 audit(1730818689.197:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6721 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 139.186866][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.305640][ T9] usb 3-1: config 0 descriptor?? [ 139.312344][ T9] usb 3-1: can't set config #0, error -71 [ 139.321638][ T9] usb 3-1: USB disconnect, device number 9 [ 142.076107][ T6786] x_tables: ip_tables: osf match: only valid for protocol 6 [ 142.611985][ T5915] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 142.686547][ T6796] FAULT_INJECTION: forcing a failure. [ 142.686547][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.700039][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.0.209 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 142.710641][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.720693][ T6796] Call Trace: [ 142.723967][ T6796] [ 142.726891][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 142.731565][ T6796] should_fail_ex+0x497/0x5b0 [ 142.736246][ T6796] strncpy_from_user+0x3b/0x2c0 [ 142.741090][ T6796] getname_flags.part.0+0x8f/0x550 [ 142.746200][ T6796] getname+0x8d/0xe0 [ 142.750092][ T6796] do_sys_openat2+0x104/0x1e0 [ 142.754770][ T6796] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.759980][ T6796] ? __seccomp_filter+0x6a2/0xf40 [ 142.765002][ T6796] ? __pfx___seccomp_filter+0x10/0x10 [ 142.770374][ T6796] __x64_sys_openat+0x175/0x210 [ 142.775221][ T6796] ? __pfx___x64_sys_openat+0x10/0x10 [ 142.780585][ T6796] ? ksys_write+0x1ad/0x260 [ 142.785088][ T6796] ? __secure_computing+0x273/0x3f0 [ 142.790294][ T6796] do_syscall_64+0xcd/0x250 [ 142.794799][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.800697][ T6796] RIP: 0033:0x7fae5b37e719 [ 142.805452][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.825053][ T6796] RSP: 002b:00007fae5c19c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.833458][ T6796] RAX: ffffffffffffffda RBX: 00007fae5b536130 RCX: 00007fae5b37e719 [ 142.841417][ T6796] RDX: 0000000000000000 RSI: 00000000200010c0 RDI: ffffffffffffff9c [ 142.849464][ T6796] RBP: 00007fae5c19c090 R08: 0000000000000000 R09: 0000000000000000 [ 142.857433][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.865394][ T6796] R13: 0000000000000000 R14: 00007fae5b536130 R15: 00007ffceb01b088 [ 142.873364][ T6796] [ 142.876460][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.262277][ T29] audit: type=1326 audit(1730818695.907:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 143.321992][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 143.339952][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.576935][ T5915] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 143.786441][ T29] audit: type=1326 audit(1730818695.907:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 144.576663][ T5915] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 144.591605][ T5915] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.600918][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.609137][ T5915] usb 2-1: SerialNumber: syz [ 144.617853][ T6789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 144.625451][ T29] audit: type=1326 audit(1730818695.917:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 144.626560][ T5915] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 144.648650][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.668125][ T6808] tmpfs: Bad value for 'mpol' [ 144.934840][ T29] audit: type=1326 audit(1730818695.917:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 145.085138][ T29] audit: type=1326 audit(1730818695.917:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 145.139174][ T5915] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 145.671385][ T5915] usb 2-1: USB disconnect, device number 10 [ 145.740575][ T29] audit: type=1326 audit(1730818695.917:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 145.866705][ T29] audit: type=1326 audit(1730818695.917:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 145.925826][ T29] audit: type=1326 audit(1730818695.917:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 146.234385][ T29] audit: type=1326 audit(1730818695.927:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 147.125213][ T29] audit: type=1400 audit(1730818698.107:697): avc: denied { write } for pid=6810 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.755421][ T6833] FAULT_INJECTION: forcing a failure. [ 147.755421][ T6833] name failslab, interval 1, probability 0, space 0, times 0 [ 148.251513][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 148.267252][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 148.272087][ T6833] CPU: 0 UID: 0 PID: 6833 Comm: syz.0.219 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 148.284802][ T6833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.294856][ T6833] Call Trace: [ 148.298124][ T6833] [ 148.301041][ T6833] dump_stack_lvl+0x16c/0x1f0 [ 148.305704][ T6833] should_fail_ex+0x497/0x5b0 [ 148.310366][ T6833] ? fs_reclaim_acquire+0xae/0x150 [ 148.315476][ T6833] should_failslab+0xc2/0x120 [ 148.320224][ T6833] kmem_cache_alloc_node_noprof+0x71/0x310 [ 148.326017][ T6833] ? __alloc_skb+0x2b1/0x380 [ 148.330622][ T6833] __alloc_skb+0x2b1/0x380 [ 148.335028][ T6833] ? __pfx___alloc_skb+0x10/0x10 [ 148.339965][ T6833] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 148.345930][ T6833] netlink_alloc_large_skb+0x69/0x130 [ 148.351287][ T6833] netlink_sendmsg+0x689/0xd70 [ 148.356035][ T6833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.361299][ T6833] ____sys_sendmsg+0xaaf/0xc90 [ 148.366048][ T6833] ? copy_msghdr_from_user+0x10b/0x160 [ 148.371494][ T6833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.376766][ T6833] ? __pfx___lock_acquire+0x10/0x10 [ 148.381944][ T6833] ___sys_sendmsg+0x135/0x1e0 [ 148.386603][ T6833] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.391796][ T6833] ? lock_acquire+0x2f/0xb0 [ 148.396284][ T6833] ? __fget_files+0x40/0x3f0 [ 148.400883][ T6833] ? fdget+0x176/0x210 [ 148.404955][ T6833] __sys_sendmsg+0x117/0x1f0 [ 148.409538][ T6833] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.414632][ T6833] ? __fget_files+0x244/0x3f0 [ 148.419303][ T6833] do_syscall_64+0xcd/0x250 [ 148.423789][ T6833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.429677][ T6833] RIP: 0033:0x7fae5b37e719 [ 148.434082][ T6833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.453685][ T6833] RSP: 002b:00007fae5c1de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.462084][ T6833] RAX: ffffffffffffffda RBX: 00007fae5b535f80 RCX: 00007fae5b37e719 [ 148.470057][ T6833] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 148.478042][ T6833] RBP: 00007fae5c1de090 R08: 0000000000000000 R09: 0000000000000000 [ 148.486006][ T6833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.493958][ T6833] R13: 0000000000000000 R14: 00007fae5b535f80 R15: 00007ffceb01b088 [ 148.501921][ T6833] [ 148.729363][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.250713][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.348763][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.383332][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.519740][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 149.519753][ T29] audit: type=1400 audit(1730818702.487:700): avc: denied { mounton } for pid=6834 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 149.750430][ T6848] x_tables: ip_tables: osf match: only valid for protocol 6 [ 150.846523][ T5879] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.973967][ T6858] 9pnet_fd: Insufficient options for proto=fd [ 151.547155][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 151.589144][ T6834] chnl_net:caif_netlink_parms(): no params data found [ 151.646508][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 151.658659][ T5879] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.673562][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.687762][ T5879] usb 3-1: Product: syz [ 151.697328][ T5879] usb 3-1: Manufacturer: syz [ 151.715818][ T5879] usb 3-1: SerialNumber: syz [ 151.728428][ T5879] usb 3-1: config 0 descriptor?? [ 151.742327][ T6852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.762563][ T29] audit: type=1400 audit(1730818704.737:701): avc: denied { read write } for pid=6860 comm="syz.0.228" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.826746][ T29] audit: type=1400 audit(1730818704.737:702): avc: denied { open } for pid=6860 comm="syz.0.228" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 151.902394][ T5835] Bluetooth: hci5: command tx timeout [ 151.919578][ T29] audit: type=1400 audit(1730818704.737:703): avc: denied { ioctl } for pid=6860 comm="syz.0.228" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x64b0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 152.552404][ T5879] usb 3-1: USB disconnect, device number 10 [ 152.582070][ T29] audit: type=1400 audit(1730818705.547:704): avc: denied { getopt } for pid=6860 comm="syz.0.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 152.748160][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.008257][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.439564][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.814946][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.855021][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.879671][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.907131][ T6834] bridge_slave_0: entered allmulticast mode [ 153.939908][ T6834] bridge_slave_0: entered promiscuous mode [ 154.021961][ T5835] Bluetooth: hci5: command tx timeout [ 154.382900][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.390188][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.398079][ T6834] bridge_slave_1: entered allmulticast mode [ 154.405639][ T6834] bridge_slave_1: entered promiscuous mode [ 154.923561][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.2.232'. [ 154.971840][ T29] audit: type=1400 audit(1730818707.477:705): avc: denied { write } for pid=6885 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.044374][ T29] audit: type=1400 audit(1730818707.477:706): avc: denied { nlmsg_read } for pid=6885 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 155.086248][ T29] audit: type=1400 audit(1730818707.887:707): avc: denied { write } for pid=6885 comm="syz.2.232" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 155.211978][ T29] audit: type=1400 audit(1730818707.917:708): avc: denied { unlink } for pid=6885 comm="syz.2.232" name="#1" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 155.234116][ T29] audit: type=1400 audit(1730818707.917:709): avc: denied { mount } for pid=6885 comm="syz.2.232" name="/" dev="overlay" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 155.255920][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.262768][ T29] audit: type=1400 audit(1730818708.217:710): avc: denied { search } for pid=5184 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.288626][ T29] audit: type=1400 audit(1730818708.237:711): avc: denied { read } for pid=6888 comm="syz.0.233" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 155.304954][ T6889] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 155.326881][ T6889] audit: out of memory in audit_log_start [ 155.580925][ T29] audit: type=1400 audit(1730818708.237:712): avc: denied { open } for pid=6888 comm="syz.0.233" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 155.604951][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.640481][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.652583][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.680864][ T6894] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 155.807186][ T6834] team0: Port device team_slave_0 added [ 155.884298][ T6834] team0: Port device team_slave_1 added [ 156.462790][ T5835] Bluetooth: hci5: command tx timeout [ 156.524831][ T6900] ceph: No mds server is up or the cluster is laggy [ 156.535137][ T1854] libceph: connect (1)[c::]:6789 error -101 [ 156.541224][ T1854] libceph: mon0 (1)[c::]:6789 connect error [ 156.794254][ T6909] 9pnet_fd: Insufficient options for proto=fd [ 157.534231][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.541204][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.634024][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.688977][ T6916] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 157.698741][ T6918] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 157.705386][ T6918] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 157.738903][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.797286][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.842142][ T6918] vhci_hcd vhci_hcd.0: Device attached [ 158.041935][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.099555][ T11] bridge_slave_1: left allmulticast mode [ 158.109207][ T11] bridge_slave_1: left promiscuous mode [ 158.130187][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.167780][ T11] bridge_slave_0: left allmulticast mode [ 158.186259][ T11] bridge_slave_0: left promiscuous mode [ 158.200975][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.266573][ T11] tipc: Resetting bearer [ 158.412157][ T5879] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.501363][ T5956] usb 34-1: SetAddress Request (2) to port 0 [ 158.524418][ T5956] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 158.565418][ T5835] Bluetooth: hci5: command tx timeout [ 158.791869][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 158.798569][ T5879] usb 1-1: config 0 has no interfaces? [ 158.807170][ T5879] usb 1-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 158.816355][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.826347][ T5879] usb 1-1: Product: syz [ 158.831892][ T5879] usb 1-1: Manufacturer: syz [ 158.839288][ T11] tipc: Disabling bearer [ 158.841363][ T5879] usb 1-1: SerialNumber: syz [ 158.870873][ T5879] apple-mfi-fastcharge 1-1: config 0 descriptor?? [ 159.465831][ T8] apple-mfi-fastcharge 1-1: USB disconnect, device number 7 [ 159.476899][ T6919] vhci_hcd: connection reset by peer [ 159.498381][ T2990] vhci_hcd: stop threads [ 159.513923][ T2990] vhci_hcd: release socket [ 159.549304][ T2990] vhci_hcd: disconnect device [ 161.132051][ T8] libceph: connect (1)[c::]:6789 error -101 [ 161.193056][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 161.238572][ T6960] ceph: No mds server is up or the cluster is laggy [ 161.538649][ T6967] trusted_key: encrypted_key: master key parameter 'def' is invalid [ 161.598157][ T6967] Cannot find add_set index 0 as target [ 162.515495][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.676478][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.697603][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.744344][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.760527][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.813405][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.828800][ T8] usb 1-1: config 0 descriptor?? [ 162.847090][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.873653][ T11] bond0 (unregistering): Released all slaves [ 163.065321][ T6974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.163922][ T6980] 9pnet_fd: Insufficient options for proto=fd [ 163.602026][ T5956] usb 34-1: device descriptor read/8, error -110 [ 163.657973][ T6834] hsr_slave_0: entered promiscuous mode [ 163.674919][ T6834] hsr_slave_1: entered promiscuous mode [ 163.833686][ T6834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.848655][ T6834] Cannot create hsr debugfs directory [ 163.853259][ T6984] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.857359][ T11] tipc: Left network mode [ 164.052572][ T5956] usb usb34-port1: attempt power cycle [ 164.636237][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 164.643275][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 164.653704][ T8] usb 1-1: USB disconnect, device number 8 [ 164.814357][ T5956] usb usb34-port1: unable to enumerate USB device [ 164.909361][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 164.909379][ T29] audit: type=1400 audit(1730818717.877:715): avc: denied { sqpoll } for pid=7005 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 164.973908][ T29] audit: type=1400 audit(1730818717.917:716): avc: denied { open } for pid=7005 comm="syz.2.257" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 165.036935][ T29] audit: type=1400 audit(1730818717.927:717): avc: denied { ioctl } for pid=7005 comm="syz.2.257" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 165.061859][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.069699][ T29] audit: type=1400 audit(1730818717.927:718): avc: denied { setopt } for pid=7005 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 165.207005][ T7016] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.590711][ T5835] Bluetooth: hci1: link tx timeout [ 165.693830][ T5835] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.721999][ T29] audit: type=1400 audit(1730818718.327:719): avc: denied { read write } for pid=7002 comm="syz.1.256" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 165.745300][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.763683][ T29] audit: type=1400 audit(1730818718.337:720): avc: denied { open } for pid=7002 comm="syz.1.256" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 166.802375][ T29] audit: type=1400 audit(1730818719.737:721): avc: denied { sys_module } for pid=7020 comm="syz.0.259" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 167.950261][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 169.328302][ T11] hsr_slave_0: left promiscuous mode [ 169.422289][ T11] hsr_slave_1: left promiscuous mode [ 169.430126][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.438687][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.447672][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.460364][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.968509][ T11] veth1_macvtap: left promiscuous mode [ 169.974606][ T11] veth0_macvtap: left promiscuous mode [ 169.981905][ T11] veth1_vlan: left promiscuous mode [ 169.987537][ T11] veth0_vlan: left promiscuous mode [ 170.992274][ T29] audit: type=1400 audit(1730818723.947:722): avc: denied { create } for pid=7053 comm="syz.0.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 171.212013][ T29] audit: type=1400 audit(1730818724.157:723): avc: denied { listen } for pid=7057 comm="syz.2.268" lport=33950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.267755][ T29] audit: type=1400 audit(1730818724.207:724): avc: denied { accept } for pid=7057 comm="syz.2.268" lport=33950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.653232][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.823425][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 171.835412][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 171.846890][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.847918][ T11] team0 (unregistering): Port device team_slave_1 removed [ 171.866054][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.884036][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.905533][ T8] usb 3-1: config 0 descriptor?? [ 171.911506][ T7073] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 171.923440][ T11] team0 (unregistering): Port device team_slave_0 removed [ 172.398686][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 172.409672][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 172.425410][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.472951][ T7063] tipc: Started in network mode [ 172.477884][ T7063] tipc: Node identity a236086ef615, cluster identity 4711 [ 172.485300][ T7063] tipc: Enabled bearer , priority 10 [ 172.624672][ T6834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.695930][ T6834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 172.707877][ T7082] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 172.799131][ T7082] : entered promiscuous mode [ 172.890668][ T6834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 172.965417][ T6834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.040662][ T7096] netlink: 'syz.3.273': attribute type 1 has an invalid length. [ 173.048576][ T7096] netlink: 224 bytes leftover after parsing attributes in process `syz.3.273'. [ 173.545814][ T5906] usb 3-1: USB disconnect, device number 11 [ 173.606104][ T8] tipc: Node number set to 1411582062 [ 173.773226][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.888202][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.907459][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.914553][ T5958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.472108][ T29] audit: type=1326 audit(1730818726.947:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 174.804059][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.811204][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.841961][ T29] audit: type=1326 audit(1730818726.947:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 175.198289][ T29] audit: type=1326 audit(1730818726.957:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 175.546028][ T29] audit: type=1326 audit(1730818726.957:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 175.757688][ T29] audit: type=1326 audit(1730818726.957:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 175.798964][ T29] audit: type=1326 audit(1730818726.957:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 175.957468][ T29] audit: type=1326 audit(1730818726.957:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 176.096936][ T29] audit: type=1326 audit(1730818726.957:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 176.232206][ T5906] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 176.508554][ T29] audit: type=1326 audit(1730818726.967:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 176.592062][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 176.606791][ T5906] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 176.623851][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.913956][ T29] audit: type=1326 audit(1730818726.967:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 177.016380][ T5906] usb 1-1: Product: syz [ 177.020599][ T5906] usb 1-1: Manufacturer: syz [ 177.025370][ T5906] usb 1-1: SerialNumber: syz [ 177.034432][ T5906] usb 1-1: config 0 descriptor?? [ 177.075158][ T29] audit: type=1326 audit(1730818726.967:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 177.940320][ T29] audit: type=1326 audit(1730818726.967:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 178.316621][ T29] audit: type=1326 audit(1730818726.967:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 178.352150][ T5906] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 178.399319][ T29] audit: type=1326 audit(1730818726.967:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 178.591957][ T29] audit: type=1326 audit(1730818726.977:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 179.076527][ T5906] gspca_sunplus: reg_w_riv err -110 [ 179.076838][ T5906] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 179.427772][ T29] audit: type=1326 audit(1730818726.977:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 179.427820][ T29] audit: type=1326 audit(1730818726.977:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7101 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 179.489508][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.122707][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.122926][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.180301][ T7180] block device autoloading is deprecated and will be removed. [ 180.305493][ T7195] input: syz0 as /devices/virtual/input/input11 [ 181.127881][ T6834] veth0_vlan: entered promiscuous mode [ 181.155688][ T5878] usb 1-1: USB disconnect, device number 9 [ 181.186537][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 181.216619][ T6834] veth1_vlan: entered promiscuous mode [ 181.358144][ T6834] veth0_macvtap: entered promiscuous mode [ 181.401095][ T6834] veth1_macvtap: entered promiscuous mode [ 181.417551][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.436998][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.449327][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.797885][ T7207] netlink: 4732 bytes leftover after parsing attributes in process `syz.0.293'. [ 182.065844][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.348654][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 182.366050][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 182.399689][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.420307][ T7218] ceph: No mds server is up or the cluster is laggy [ 182.435241][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.445197][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.456025][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.467117][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.476817][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.487420][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.497302][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.507762][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.517676][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.528132][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.538487][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.549602][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.560674][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.571340][ T6834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.580300][ T6834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.590245][ T6834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.599384][ T6834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.694873][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 182.701011][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 185.905767][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.914237][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.106085][ T7256] : renamed from ipvlan1 [ 186.209365][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.292074][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.309603][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 186.309621][ T29] audit: type=1400 audit(1730818739.277:767): avc: denied { mounton } for pid=6834 comm="syz-executor" path="/root/syzkaller.JsqMAm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 188.737287][ T7281] loop7: detected capacity change from 0 to 16384 [ 189.222505][ T7283] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 189.344338][ T7281] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.368134][ T7281] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.378624][ T7281] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.388172][ T7281] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.409380][ T7281] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.423156][ T7281] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.432628][ T7281] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.436147][ T29] audit: type=1400 audit(1730818742.377:768): avc: denied { setrlimit } for pid=7291 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 189.441833][ T7281] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.454902][ T7290] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.479604][ T7281] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.551958][ T7281] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.566513][ T7281] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.598040][ T7281] Buffer I/O error on dev loop7, logical block 0, async page read [ 189.614609][ T29] audit: type=1400 audit(1730818742.497:769): avc: denied { getopt } for pid=7293 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 189.663522][ T7302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.687262][ T7281] loop7: unable to read partition table [ 189.693675][ T7281] loop_reread_partitions: partition scan of loop7 (K‹>¤i)ßí /480• #Ð …$qÝZ”©þ•I‘ŠçýÎ[†u±@3bÏàôüÏûj!5MMñ]z) failed (rc=-5) [ 189.731633][ T7290] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 190.490705][ T7290] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 191.669971][ T7290] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 191.863876][ T7320] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 191.909781][ T7290] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 191.943345][ T7290] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 192.427093][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 192.551241][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 192.701485][ T5880] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 192.747499][ T7333] ceph: No mds server is up or the cluster is laggy [ 193.070680][ T7344] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 193.965461][ T7353] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 194.151987][ T29] audit: type=1400 audit(1730818747.107:770): avc: denied { watch watch_reads } for pid=7358 comm="syz.3.319" path="/proc/300" dev="proc" ino=13646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 194.445562][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 194.465047][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474394][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612028][ T5880] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 194.670163][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.677643][ T8] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 194.761074][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.777606][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.883417][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.045993][ T8] usb 4-1: config 0 descriptor?? [ 195.081702][ T5880] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 195.091374][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.122963][ T5880] usb 6-1: config 0 descriptor?? [ 195.502553][ T8] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 195.540932][ T5880] dragonrise 0003:0079:0006.0004: unknown main item tag 0x0 [ 195.559803][ T5880] dragonrise 0003:0079:0006.0004: unknown main item tag 0x0 [ 195.601258][ T5880] dragonrise 0003:0079:0006.0004: unknown main item tag 0x0 [ 195.616997][ T5880] dragonrise 0003:0079:0006.0004: unknown main item tag 0x0 [ 195.641996][ T5880] dragonrise 0003:0079:0006.0004: unknown main item tag 0x0 [ 195.675668][ T5880] dragonrise 0003:0079:0006.0004: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.5-1/input0 [ 195.718693][ T5880] dragonrise 0003:0079:0006.0004: no inputs found [ 195.749892][ T7364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.762669][ T7364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.769316][ T5880] dragonrise 0003:0079:0006.0004: force feedback init failed [ 195.856281][ T5880] usb 6-1: USB disconnect, device number 3 [ 195.913942][ T8] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPIPE) [ 195.928978][ T8] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -32 [ 196.119278][ T8] usb 4-1: USB disconnect, device number 4 [ 197.250161][ T29] audit: type=1326 audit(1730818750.217:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.541673][ T29] audit: type=1400 audit(1730818750.217:772): avc: denied { write } for pid=7393 comm="syz.2.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.577743][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.324'. [ 197.593068][ T29] audit: type=1326 audit(1730818750.217:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.617382][ T29] audit: type=1326 audit(1730818750.217:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.640726][ T29] audit: type=1326 audit(1730818750.217:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.665453][ T29] audit: type=1326 audit(1730818750.217:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.689273][ T29] audit: type=1326 audit(1730818750.267:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.713069][ T29] audit: type=1326 audit(1730818750.267:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 197.736525][ T29] audit: type=1326 audit(1730818750.267:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7400 comm="syz.3.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 198.682226][ T5906] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 200.583377][ T5906] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.594602][ T5906] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.607356][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 200.620243][ T5906] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 201.608912][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.619959][ T5906] usb 1-1: config 0 descriptor?? [ 202.140347][ T5906] usb 1-1: can't set config #0, error -71 [ 202.147508][ T5906] usb 1-1: USB disconnect, device number 10 [ 203.177775][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 203.177794][ T29] audit: type=1326 audit(1730818756.147:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.225632][ T7480] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 203.271867][ T29] audit: type=1326 audit(1730818756.187:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.298313][ T7480] audit: out of memory in audit_log_start [ 203.361055][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 203.362026][ T29] audit: type=1326 audit(1730818756.187:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.421669][ T29] audit: type=1326 audit(1730818756.187:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.489779][ T29] audit: type=1326 audit(1730818756.267:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.588020][ T29] audit: type=1326 audit(1730818756.267:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.612027][ T29] audit: type=1326 audit(1730818756.267:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.638605][ T29] audit: type=1326 audit(1730818756.287:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7481 comm="syz.2.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f276657e719 code=0x7ffc0000 [ 203.906123][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 203.923532][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 204.236601][ T7500] ceph: No mds server is up or the cluster is laggy [ 204.282994][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 204.289085][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 205.109524][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 205.115679][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 205.415729][ T965] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 205.504697][ T7525] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.544683][ T7525] netlink: 36 bytes leftover after parsing attributes in process `syz.2.345'. [ 205.647987][ T7520] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 206.153643][ T965] usb 1-1: config 0 has an invalid interface number: 62 but max is 0 [ 207.036237][ T965] usb 1-1: config 0 has no interface number 0 [ 207.081902][ T965] usb 1-1: config 0 interface 62 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 207.098646][ T965] usb 1-1: New USB device found, idVendor=951f, idProduct=a083, bcdDevice=31.b8 [ 207.108947][ T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.117203][ T965] usb 1-1: Product: syz [ 207.121374][ T965] usb 1-1: Manufacturer: syz [ 207.183766][ T965] usb 1-1: SerialNumber: syz [ 207.220304][ T965] usb 1-1: config 0 descriptor?? [ 207.304141][ T965] usb 1-1: USB disconnect, device number 11 [ 207.350006][ T7537] FAULT_INJECTION: forcing a failure. [ 207.350006][ T7537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.422607][ T7537] CPU: 0 UID: 0 PID: 7537 Comm: syz.2.348 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 207.433250][ T7537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 207.443323][ T7537] Call Trace: [ 207.446956][ T7537] [ 207.449903][ T7537] dump_stack_lvl+0x16c/0x1f0 [ 207.454621][ T7537] should_fail_ex+0x497/0x5b0 [ 207.459329][ T7537] _copy_from_iter+0x2a1/0x1560 [ 207.464255][ T7537] ? __pfx__copy_from_iter+0x10/0x10 [ 207.469576][ T7537] ? __virt_addr_valid+0x1a4/0x590 [ 207.474713][ T7537] ? __virt_addr_valid+0x5e/0x590 [ 207.479763][ T7537] ? __phys_addr_symbol+0x30/0x80 [ 207.484810][ T7537] ? __check_object_size+0x488/0x710 [ 207.490118][ T7537] netlink_sendmsg+0x813/0xd70 [ 207.494899][ T7537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.500205][ T7537] ____sys_sendmsg+0xaaf/0xc90 [ 207.504991][ T7537] ? copy_msghdr_from_user+0x10b/0x160 [ 207.510463][ T7537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.515773][ T7537] ? __pfx___lock_acquire+0x10/0x10 [ 207.520999][ T7537] ___sys_sendmsg+0x135/0x1e0 [ 207.525699][ T7537] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.530921][ T7537] ? lock_acquire+0x2f/0xb0 [ 207.535439][ T7537] ? __fget_files+0x40/0x3f0 [ 207.540058][ T7537] ? fdget+0x176/0x210 [ 207.544147][ T7537] __sys_sendmsg+0x117/0x1f0 [ 207.548751][ T7537] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.553873][ T7537] ? __fget_files+0x244/0x3f0 [ 207.558566][ T7537] do_syscall_64+0xcd/0x250 [ 207.563054][ T7537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.569017][ T7537] RIP: 0033:0x7f276657e719 [ 207.573429][ T7537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.593022][ T7537] RSP: 002b:00007f27672aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.601418][ T7537] RAX: ffffffffffffffda RBX: 00007f2766735f80 RCX: 00007f276657e719 [ 207.609398][ T7537] RDX: 0000000000000800 RSI: 0000000020000080 RDI: 0000000000000004 [ 207.617382][ T7537] RBP: 00007f27672aa090 R08: 0000000000000000 R09: 0000000000000000 [ 207.625352][ T7537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.633326][ T7537] R13: 0000000000000000 R14: 00007f2766735f80 R15: 00007fff7c84f198 [ 207.641289][ T7537] [ 208.567091][ T7547] FAULT_INJECTION: forcing a failure. [ 208.567091][ T7547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.580465][ T7547] CPU: 0 UID: 0 PID: 7547 Comm: syz.2.351 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 208.591085][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.601170][ T7547] Call Trace: [ 208.604462][ T7547] [ 208.607404][ T7547] dump_stack_lvl+0x16c/0x1f0 [ 208.612097][ T7547] should_fail_ex+0x497/0x5b0 [ 208.616794][ T7547] _copy_to_user+0x32/0xd0 [ 208.621226][ T7547] video_usercopy+0xf37/0x1600 [ 208.626012][ T7547] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 208.631757][ T7547] ? __pfx_video_usercopy+0x10/0x10 [ 208.636978][ T7547] v4l2_ioctl+0x1ba/0x250 [ 208.641306][ T7547] ? __pfx_v4l2_ioctl+0x10/0x10 [ 208.646154][ T7547] __x64_sys_ioctl+0x18f/0x220 [ 208.650913][ T7547] do_syscall_64+0xcd/0x250 [ 208.655415][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.661307][ T7547] RIP: 0033:0x7f276657e719 [ 208.665712][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.685313][ T7547] RSP: 002b:00007f27672aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.693717][ T7547] RAX: ffffffffffffffda RBX: 00007f2766735f80 RCX: 00007f276657e719 [ 208.701676][ T7547] RDX: 0000000020000140 RSI: 00000000c0445624 RDI: 0000000000000003 [ 208.709637][ T7547] RBP: 00007f27672aa090 R08: 0000000000000000 R09: 0000000000000000 [ 208.717599][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.725557][ T7547] R13: 0000000000000000 R14: 00007f2766735f80 R15: 00007fff7c84f198 [ 208.733530][ T7547] [ 209.056249][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 209.505517][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 209.505534][ T29] audit: type=1326 audit(1730818762.477:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 209.752718][ T29] audit: type=1400 audit(1730818762.487:860): avc: denied { getopt } for pid=7569 comm="syz.1.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.894998][ T1854] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 209.998157][ T29] audit: type=1326 audit(1730818762.867:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 210.351505][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.355'. [ 210.381624][ T29] audit: type=1326 audit(1730818762.877:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 210.477698][ T29] audit: type=1326 audit(1730818762.877:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 210.502403][ T1854] usb 1-1: Using ep0 maxpacket: 32 [ 210.525068][ T1854] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 210.535337][ T29] audit: type=1326 audit(1730818762.877:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 210.558559][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.576069][ T1854] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.631975][ T1854] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.791927][ T29] audit: type=1326 audit(1730818762.887:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 211.607974][ T1854] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 211.621282][ T1854] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 211.630797][ T1854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.652019][ T29] audit: type=1326 audit(1730818762.897:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 211.731908][ T29] audit: type=1326 audit(1730818762.897:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 211.856083][ T29] audit: type=1326 audit(1730818762.897:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ff977e719 code=0x7ffc0000 [ 212.007400][ T1854] usb 1-1: can't set config #7, error -71 [ 212.195757][ T1854] usb 1-1: USB disconnect, device number 12 [ 213.138786][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.362'. [ 215.620467][ T7634] netlink: 132 bytes leftover after parsing attributes in process `syz.5.365'. [ 215.798620][ T7638] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 215.805191][ T7638] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.814076][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 215.814092][ T29] audit: type=1400 audit(1730818768.767:904): avc: denied { map } for pid=7630 comm="syz.0.368" path="socket:[13254]" dev="sockfs" ino=13254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 215.969884][ T7615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 215.982097][ T7638] vhci_hcd vhci_hcd.0: Device attached [ 216.201883][ T1854] vhci_hcd: vhci_device speed not set [ 216.388163][ T7636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.400006][ T7636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.443542][ T1854] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 216.444155][ T7636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.481212][ T7651] vcan1: entered allmulticast mode [ 216.522478][ T7638] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.692403][ T7636] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 217.880907][ T7638] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 219.013859][ T7643] vhci_hcd: connection reset by peer [ 219.606174][ T2988] vhci_hcd: stop threads [ 219.619944][ T2988] vhci_hcd: release socket [ 219.627615][ T2988] vhci_hcd: disconnect device [ 219.967665][ T7691] program syz.0.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.023035][ T29] audit: type=1400 audit(1730818772.987:905): avc: denied { write } for pid=7687 comm="syz.0.379" name="fdinfo" dev="proc" ino=14233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 220.422329][ T29] audit: type=1400 audit(1730818773.287:906): avc: denied { add_name } for pid=7687 comm="syz.0.379" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 220.443510][ T29] audit: type=1400 audit(1730818773.287:907): avc: denied { create } for pid=7687 comm="syz.0.379" name="cpuacct.usage_sys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 220.464732][ T29] audit: type=1400 audit(1730818773.287:908): avc: denied { associate } for pid=7687 comm="syz.0.379" name="cpuacct.usage_sys" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 220.520246][ T7691] Cannot find add_set index 0 as target [ 220.576232][ T7696] netlink: 'syz.2.378': attribute type 39 has an invalid length. [ 220.584206][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 220.654953][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.664542][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.040639][ T1854] vhci_hcd: vhci_device speed not set [ 222.452047][ T965] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 223.085206][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.383'. [ 223.654004][ T965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 223.666390][ T965] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 223.677685][ T965] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.690724][ T965] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.702173][ T965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.367848][ T965] usb 6-1: config 0 descriptor?? [ 224.462385][ T7713] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 224.930124][ T29] audit: type=1400 audit(1730818777.897:909): avc: denied { connect } for pid=7739 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.022011][ T29] audit: type=1400 audit(1730818777.987:910): avc: denied { read } for pid=7746 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.081893][ T29] audit: type=1400 audit(1730818778.027:911): avc: denied { shutdown } for pid=7739 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.215182][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 225.415999][ T5881] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.459850][ T965] usbhid 6-1:0.0: can't add hid device: -71 [ 225.466854][ T965] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 225.503563][ T965] usb 6-1: USB disconnect, device number 4 [ 225.541542][ T7764] netlink: 'syz.0.392': attribute type 1 has an invalid length. [ 225.549390][ T7764] netlink: 224 bytes leftover after parsing attributes in process `syz.0.392'. [ 226.003766][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 226.015648][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 226.039298][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.053738][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.067568][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.075790][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 226.082437][ T5881] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 226.138611][ T5881] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 226.149029][ T5881] usb 3-1: config 135 has no interface number 0 [ 226.155795][ T5881] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.171659][ T5881] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 226.181702][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.208321][ T5881] usb 3-1: Product: syz [ 226.212956][ T5906] usb 4-1: config 0 descriptor?? [ 226.218092][ T5881] usb 3-1: Manufacturer: syz [ 226.223442][ T7742] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 226.243743][ T5881] usb 3-1: SerialNumber: syz [ 226.245234][ T29] audit: type=1400 audit(1730818779.217:912): avc: denied { setopt } for pid=7767 comm="syz.0.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 226.280691][ T7768] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.359540][ T7771] xt_policy: neither incoming nor outgoing policy selected [ 226.366038][ T5881] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 226.405259][ T5881] usb 3-1: No valid video chain found. [ 226.825411][ T965] usb 3-1: USB disconnect, device number 12 [ 228.041956][ T29] audit: type=1400 audit(1730818780.957:913): avc: denied { read } for pid=7785 comm="syz.0.398" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.208597][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 228.390354][ T29] audit: type=1400 audit(1730818780.957:914): avc: denied { open } for pid=7785 comm="syz.0.398" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.445429][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 228.501427][ T29] audit: type=1400 audit(1730818780.957:915): avc: denied { ioctl } for pid=7785 comm="syz.0.398" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.628020][ T5906] usb 4-1: USB disconnect, device number 5 [ 230.566071][ T7817] netlink: 'syz.3.404': attribute type 39 has an invalid length. [ 230.574066][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 231.472007][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 231.544061][ T7819] sg_write: process 79 (syz.5.406) changed security contexts after opening file descriptor, this is not allowed. [ 231.560618][ T29] audit: type=1400 audit(1730818783.157:916): avc: denied { read append } for pid=7811 comm="syz.2.405" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 231.585836][ T29] audit: type=1400 audit(1730818783.157:917): avc: denied { open } for pid=7811 comm="syz.2.405" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 231.609753][ T29] audit: type=1400 audit(1730818783.197:918): avc: denied { connect } for pid=7811 comm="syz.2.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 231.620638][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.629995][ T29] audit: type=1400 audit(1730818783.807:919): avc: denied { append } for pid=7814 comm="syz.5.406" name="sg0" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 231.637016][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.663258][ T7819] program syz.5.406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.876844][ T7842] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 232.884576][ T7842] netlink: 224 bytes leftover after parsing attributes in process `syz.1.408'. [ 233.821910][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 234.100941][ T7851] netlink: 'syz.5.413': attribute type 39 has an invalid length. [ 234.109107][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.413'. [ 234.901962][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 234.911412][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.920031][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.958417][ T5906] usb 4-1: device descriptor read/all, error -71 [ 238.382912][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.720729][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.419'. [ 238.819315][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.842060][ T5878] usb 2-1: New USB device found, idVendor=0408, idProduct=4030, bcdDevice=fa.f1 [ 238.877131][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.219382][ T5878] usb 2-1: Product: syz [ 239.223990][ T5878] usb 2-1: Manufacturer: syz [ 239.228687][ T5878] usb 2-1: SerialNumber: syz [ 239.243562][ T5878] usb 2-1: config 0 descriptor?? [ 239.873074][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.925492][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.990807][ T9] usb 2-1: USB disconnect, device number 11 [ 240.485909][ T7905] tipc: Enabling of bearer rejected, already enabled [ 240.502997][ T7905] netlink: 'syz.3.421': attribute type 39 has an invalid length. [ 240.510831][ T7905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 241.958670][ T7911] netlink: 'syz.0.424': attribute type 10 has an invalid length. [ 241.966771][ T7911] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.980933][ T7911] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 241.991586][ T7911] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 242.108383][ T7920] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.598373][ T7944] 9pnet_fd: Insufficient options for proto=fd [ 246.888731][ T29] audit: type=1800 audit(1730818799.857:920): pid=7973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.439" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 247.182085][ T5879] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 247.272986][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.440'. [ 247.477004][ T5879] usb 6-1: Using ep0 maxpacket: 32 [ 247.495487][ T5879] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 248.051920][ T5879] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 248.244608][ T5879] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 248.253309][ T5879] usb 6-1: Product: syz [ 248.257626][ T5879] usb 6-1: Manufacturer: syz [ 248.266618][ T5879] usb 6-1: SerialNumber: syz [ 248.488101][ T5879] usb 6-1: config 0 descriptor?? [ 248.882376][ T7982] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 249.115588][ T8009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.447'. [ 249.269538][ T8013] netlink: 'syz.3.446': attribute type 1 has an invalid length. [ 249.277343][ T8013] netlink: 224 bytes leftover after parsing attributes in process `syz.3.446'. [ 250.235115][ T5878] usb 6-1: USB disconnect, device number 5 [ 250.435733][ T29] audit: type=1400 audit(1730818803.287:921): avc: denied { create } for pid=8016 comm="syz.3.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 250.466206][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 250.467343][ T8025] FAULT_INJECTION: forcing a failure. [ 250.467343][ T8025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.472656][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 250.496332][ T8025] CPU: 0 UID: 0 PID: 8025 Comm: syz.2.451 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 250.506921][ T8025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.516965][ T8025] Call Trace: [ 250.520226][ T8025] [ 250.523140][ T8025] dump_stack_lvl+0x16c/0x1f0 [ 250.527813][ T8025] should_fail_ex+0x497/0x5b0 [ 250.532476][ T8025] _copy_to_user+0x32/0xd0 [ 250.536883][ T8025] simple_read_from_buffer+0xd0/0x160 [ 250.542261][ T8025] proc_fail_nth_read+0x198/0x270 [ 250.547311][ T8025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.552841][ T8025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 250.558381][ T8025] vfs_read+0x1df/0xbe0 [ 250.562523][ T8025] ? __fget_files+0x23a/0x3f0 [ 250.567184][ T8025] ? fdget_pos+0x24c/0x360 [ 250.571571][ T8025] ? __pfx_lock_release+0x10/0x10 [ 250.576575][ T8025] ? trace_lock_acquire+0x14a/0x1d0 [ 250.581751][ T8025] ? __pfx_vfs_read+0x10/0x10 [ 250.586430][ T8025] ? __pfx___mutex_lock+0x10/0x10 [ 250.591448][ T8025] ? __fget_files+0x244/0x3f0 [ 250.596134][ T8025] ksys_read+0x12f/0x260 [ 250.600365][ T8025] ? __pfx_ksys_read+0x10/0x10 [ 250.605116][ T8025] do_syscall_64+0xcd/0x250 [ 250.609624][ T8025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.615501][ T8025] RIP: 0033:0x7f276657d15c [ 250.619898][ T8025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 250.639504][ T8025] RSP: 002b:00007f27649f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 250.647924][ T8025] RAX: ffffffffffffffda RBX: 00007f2766736058 RCX: 00007f276657d15c [ 250.655884][ T8025] RDX: 000000000000000f RSI: 00007f27649f60a0 RDI: 0000000000000004 [ 250.663838][ T8025] RBP: 00007f27649f6090 R08: 0000000000000000 R09: 0000000000000000 [ 250.671799][ T8025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.679764][ T8025] R13: 0000000000000000 R14: 00007f2766736058 R15: 00007fff7c84f198 [ 250.687723][ T8025] [ 250.690829][ C0] vkms_vblank_simulate: vblank timer overrun [ 251.463042][ T8024] ceph: No mds server is up or the cluster is laggy [ 251.471502][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 251.480455][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 251.863320][ T29] audit: type=1400 audit(1730818804.837:922): avc: denied { execute } for pid=8020 comm="syz.1.450" path="/98/cpu.stat" dev="tmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 252.975227][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 253.083159][ T8050] FAULT_INJECTION: forcing a failure. [ 253.083159][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 253.096416][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.5.455 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 253.107025][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.117090][ T8050] Call Trace: [ 253.120371][ T8050] [ 253.123303][ T8050] dump_stack_lvl+0x16c/0x1f0 [ 253.127992][ T8050] should_fail_ex+0x497/0x5b0 [ 253.132675][ T8050] ? fs_reclaim_acquire+0xae/0x150 [ 253.137808][ T8050] should_failslab+0xc2/0x120 [ 253.142499][ T8050] __kmalloc_cache_noprof+0x6b/0x300 [ 253.147795][ T8050] ? input_allocate_device+0xc5/0x350 [ 253.153174][ T8050] ? kasan_save_track+0x14/0x30 [ 253.158032][ T8050] ? __pfx_uinput_write+0x10/0x10 [ 253.163068][ T8050] input_allocate_device+0xc5/0x350 [ 253.168273][ T8050] uinput_write+0x992/0x12b0 [ 253.172886][ T8050] ? __pfx_uinput_write+0x10/0x10 [ 253.177932][ T8050] ? bpf_lsm_file_permission+0x9/0x10 [ 253.183311][ T8050] ? security_file_permission+0x71/0x210 [ 253.188962][ T8050] ? __pfx_uinput_write+0x10/0x10 [ 253.194003][ T8050] vfs_write+0x24c/0x1150 [ 253.198349][ T8050] ? __fget_files+0x23a/0x3f0 [ 253.203041][ T8050] ? __pfx_lock_release+0x10/0x10 [ 253.208073][ T8050] ? trace_lock_acquire+0x14a/0x1d0 [ 253.213285][ T8050] ? __pfx_vfs_write+0x10/0x10 [ 253.218062][ T8050] ? lock_acquire+0x2f/0xb0 [ 253.222566][ T8050] ? __fget_files+0x40/0x3f0 [ 253.227173][ T8050] ? __fget_files+0x244/0x3f0 [ 253.231866][ T8050] ksys_write+0x1fa/0x260 [ 253.236223][ T8050] ? __pfx_ksys_write+0x10/0x10 [ 253.241096][ T8050] do_syscall_64+0xcd/0x250 [ 253.245612][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.251612][ T8050] RIP: 0033:0x7fe116d7e719 [ 253.256027][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.275649][ T8050] RSP: 002b:00007fe117b7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 253.284073][ T8050] RAX: ffffffffffffffda RBX: 00007fe116f36130 RCX: 00007fe116d7e719 [ 253.292059][ T8050] RDX: 000000000000045c RSI: 0000000020000100 RDI: 0000000000000007 [ 253.300036][ T8050] RBP: 00007fe117b7d090 R08: 0000000000000000 R09: 0000000000000000 [ 253.308012][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.315988][ T8050] R13: 0000000000000000 R14: 00007fe116f36130 R15: 00007fff4f3f00c8 [ 253.323994][ T8050] [ 254.609105][ T8066] binder: BINDER_SET_CONTEXT_MGR already set [ 254.616278][ T29] audit: type=1400 audit(1730818807.577:923): avc: denied { setopt } for pid=8056 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 254.636764][ T8066] binder: 8056:8066 ioctl 4018620d 20000040 returned -16 [ 255.231951][ T29] audit: type=1400 audit(1730818807.577:924): avc: denied { connect } for pid=8056 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 255.366088][ T8074] netlink: 36 bytes leftover after parsing attributes in process `syz.5.460'. [ 255.380719][ T29] audit: type=1400 audit(1730818807.577:925): avc: denied { name_connect } for pid=8056 comm="syz.3.457" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 255.745179][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.758850][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.649787][ T5878] libceph: connect (1)[c::]:6789 error -101 [ 256.670457][ T5878] libceph: mon0 (1)[c::]:6789 connect error [ 256.852040][ T5881] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 256.882172][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 256.951984][ T1854] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 256.954899][ T45] libceph: connect (1)[c::]:6789 error -101 [ 256.970546][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 257.011994][ T5881] usb 6-1: Using ep0 maxpacket: 32 [ 257.021203][ T5881] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 257.031963][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 257.034691][ T5881] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 257.048121][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 257.051305][ T5881] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 257.060656][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 257.071391][ T5881] usb 6-1: Product: syz [ 257.076242][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 257.090701][ T9] usb 1-1: Product: syz [ 257.091456][ T5881] usb 6-1: Manufacturer: syz [ 257.095342][ T9] usb 1-1: Manufacturer: syz [ 257.104873][ T9] usb 1-1: SerialNumber: syz [ 257.105313][ T5881] usb 6-1: SerialNumber: syz [ 257.114180][ T1854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.114214][ T1854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.114248][ T1854] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 257.114274][ T1854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.155253][ T9] usb 1-1: config 0 descriptor?? [ 257.162629][ T8096] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.167706][ T5881] usb 6-1: config 0 descriptor?? [ 257.172394][ T1854] usb 4-1: config 0 descriptor?? [ 257.176861][ T8088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.201388][ T5881] chaoskey 6-1:0.0: Unable to register with hwrng [ 257.445481][ T8092] ceph: No mds server is up or the cluster is laggy [ 257.522214][ T29] audit: type=1400 audit(1730818810.487:926): avc: denied { accept } for pid=8108 comm="syz.2.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 257.547521][ T9] usb 6-1: USB disconnect, device number 6 [ 257.604288][ T1854] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 257.624923][ T7527] usb 1-1: USB disconnect, device number 13 [ 257.638659][ T1854] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 257.817319][ T9] usb 4-1: USB disconnect, device number 8 [ 257.839812][ T8117] tipc: Started in network mode [ 257.845308][ T8117] tipc: Node identity da5ae734c86, cluster identity 4711 [ 257.852527][ T8117] tipc: Enabled bearer , priority 10 [ 257.860904][ T8117] netlink: 'syz.1.467': attribute type 39 has an invalid length. [ 257.868813][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.467'. [ 257.878430][ T8117] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.885876][ T8117] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.181943][ T5881] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.312016][ T5881] usb 3-1: device descriptor read/64, error -71 [ 258.454581][ T8121] syz.3.470: attempt to access beyond end of device [ 258.454581][ T8121] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 258.503409][ T8121] XFS (loop3): SB validate failed with error -5. [ 258.566284][ T5881] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 258.621746][ T8132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.472'. [ 258.741931][ T5881] usb 3-1: device descriptor read/64, error -71 [ 258.759988][ T8135] capability: warning: `syz.3.474' uses deprecated v2 capabilities in a way that may be insecure [ 258.771243][ T29] audit: type=1400 audit(1730818811.737:927): avc: denied { getopt } for pid=8134 comm="syz.3.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 258.924045][ T5881] usb usb3-port1: attempt power cycle [ 258.974540][ T9] tipc: Node number set to 305850164 [ 259.292064][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 259.455944][ T5881] usb 3-1: device descriptor read/8, error -71 [ 260.197078][ T5878] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 260.205070][ T5881] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 260.242365][ T5881] usb 3-1: device descriptor read/8, error -71 [ 261.215225][ T5881] usb usb3-port1: unable to enumerate USB device [ 261.925634][ T29] audit: type=1400 audit(1730818814.767:928): avc: denied { mount } for pid=8160 comm="syz.5.480" name="/" dev="autofs" ino=15959 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 262.552654][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 262.558738][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 262.617849][ T8165] ceph: No mds server is up or the cluster is laggy [ 262.809125][ T5878] usb 2-1: device descriptor read/all, error -71 [ 262.946896][ T29] audit: type=1400 audit(1730818815.877:929): avc: denied { listen } for pid=8174 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.012859][ T29] audit: type=1400 audit(1730818815.967:930): avc: denied { write } for pid=8174 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 263.053213][ T29] audit: type=1400 audit(1730818815.967:931): avc: denied { setopt } for pid=8174 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.099753][ T29] audit: type=1400 audit(1730818815.967:932): avc: denied { accept } for pid=8174 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 263.119648][ T29] audit: type=1400 audit(1730818816.027:933): avc: denied { read } for pid=8174 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 263.199232][ T29] audit: type=1400 audit(1730818816.137:934): avc: denied { listen } for pid=8174 comm="syz.0.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 263.417102][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 265.981085][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 266.187082][ T9] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 266.214013][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.567340][ T9] usb 4-1: config 0 descriptor?? [ 266.909687][ T9] kaweth 4-1:0.0: Firmware present in device. [ 267.267998][ T8248] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 267.275761][ T8248] netlink: 224 bytes leftover after parsing attributes in process `syz.0.495'. [ 267.849258][ T29] audit: type=1400 audit(1730818820.707:935): avc: denied { bind } for pid=8245 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 268.010228][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.022708][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.169573][ T9] kaweth 4-1:0.0: Statistics collection: 0 [ 268.177197][ T9] kaweth 4-1:0.0: Multicast filter limit: 0 [ 268.183530][ T9] kaweth 4-1:0.0: MTU: 0 [ 268.187827][ T9] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 269.229924][ T9] kaweth 4-1:0.0: Error setting SOFS wait [ 269.241965][ T9] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 269.300070][ T9] usb 4-1: USB disconnect, device number 9 [ 269.326107][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 269.428030][ T8257] batman_adv: batadv0: Interface deactivated: dummy0 [ 269.464775][ T8261] FAULT_INJECTION: forcing a failure. [ 269.464775][ T8261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.518616][ T8263] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 269.539771][ T8263] netlink: 224 bytes leftover after parsing attributes in process `syz.0.497'. [ 270.040553][ T8257] batman_adv: batadv0: Removing interface: dummy0 [ 270.068219][ T8262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.499'. [ 270.077401][ T8261] CPU: 1 UID: 0 PID: 8261 Comm: syz.2.498 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 270.088013][ T8261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.098057][ T8261] Call Trace: [ 270.101322][ T8261] [ 270.104234][ T8261] dump_stack_lvl+0x16c/0x1f0 [ 270.108911][ T8261] should_fail_ex+0x497/0x5b0 [ 270.113595][ T8261] _copy_from_iter+0x2a1/0x1560 [ 270.118432][ T8261] ? __pfx__copy_from_iter+0x10/0x10 [ 270.123697][ T8261] ? __virt_addr_valid+0x1a4/0x590 [ 270.128795][ T8261] ? __virt_addr_valid+0x5e/0x590 [ 270.133800][ T8261] ? __phys_addr_symbol+0x30/0x80 [ 270.138806][ T8261] ? __check_object_size+0x488/0x710 [ 270.144084][ T8261] netlink_sendmsg+0x813/0xd70 [ 270.148830][ T8261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.154098][ T8261] ____sys_sendmsg+0xaaf/0xc90 [ 270.158855][ T8261] ? copy_msghdr_from_user+0x10b/0x160 [ 270.164299][ T8261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.169585][ T8261] ? __pfx___lock_acquire+0x10/0x10 [ 270.174765][ T8261] ___sys_sendmsg+0x135/0x1e0 [ 270.179424][ T8261] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.184622][ T8261] ? lock_acquire+0x2f/0xb0 [ 270.189125][ T8261] ? __fget_files+0x40/0x3f0 [ 270.193711][ T8261] ? fdget+0x176/0x210 [ 270.197763][ T8261] __sys_sendmsg+0x117/0x1f0 [ 270.202337][ T8261] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.207443][ T8261] ? __fget_files+0x244/0x3f0 [ 270.212118][ T8261] do_syscall_64+0xcd/0x250 [ 270.216604][ T8261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.222486][ T8261] RIP: 0033:0x7f276657e719 [ 270.226882][ T8261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.246471][ T8261] RSP: 002b:00007f27649f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.254868][ T8261] RAX: ffffffffffffffda RBX: 00007f2766736058 RCX: 00007f276657e719 [ 270.262820][ T8261] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 270.270772][ T8261] RBP: 00007f27649f6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.278749][ T8261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.286702][ T8261] R13: 0000000000000000 R14: 00007f2766736058 R15: 00007fff7c84f198 [ 270.294694][ T8261] [ 270.417015][ T8257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.424762][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.437100][ T8257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.447672][ T8257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.908981][ T8273] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 271.614932][ T5878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 272.482227][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 272.494488][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.579589][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 272.595224][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 272.649430][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.975608][ T8285] ceph: No mds server is up or the cluster is laggy [ 273.016262][ T5878] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 273.025427][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.063911][ T5878] usb 6-1: config 0 descriptor?? [ 273.639152][ T8299] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 273.651859][ T8299] lo: entered allmulticast mode [ 273.989193][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 274.074626][ T8303] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 274.151444][ T8303] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 274.158005][ T8303] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 274.176611][ T8303] vhci_hcd vhci_hcd.0: Device attached [ 274.212692][ T29] audit: type=1400 audit(1730818827.187:936): avc: denied { bind } for pid=8307 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 274.246271][ T29] audit: type=1400 audit(1730818827.217:937): avc: denied { create } for pid=8307 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 274.298698][ T29] audit: type=1400 audit(1730818827.267:938): avc: denied { getopt } for pid=8308 comm="syz.2.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 274.433965][ T5906] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 274.482291][ T5879] usb 40-1: SetAddress Request (6) to port 0 [ 274.491022][ T5879] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 274.602191][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 274.616266][ T5906] usb 4-1: config 0 has no interfaces? [ 274.631208][ T5906] usb 4-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 274.643889][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.707615][ T5906] usb 4-1: Product: syz [ 274.740507][ T5906] usb 4-1: Manufacturer: syz [ 274.782999][ T5906] usb 4-1: SerialNumber: syz [ 274.815011][ T5906] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 275.025384][ T8315] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 275.041872][ T5878] usbhid 6-1:0.0: can't add hid device: -71 [ 275.047979][ T5878] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 275.060253][ T8304] vhci_hcd: connection reset by peer [ 275.061195][ T5906] apple-mfi-fastcharge 4-1: USB disconnect, device number 10 [ 275.073506][ T53] vhci_hcd: stop threads [ 275.089309][ T53] vhci_hcd: release socket [ 275.108573][ T53] vhci_hcd: disconnect device [ 275.262354][ T8315] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 275.268889][ T8315] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.297261][ T8315] vhci_hcd vhci_hcd.0: Device attached [ 275.372046][ T1854] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 275.392801][ T5878] usb 6-1: USB disconnect, device number 7 [ 276.322165][ T1854] usb 3-1: Using ep0 maxpacket: 16 [ 276.371898][ T965] usb 38-1: SetAddress Request (6) to port 0 [ 276.377949][ T965] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 276.450093][ T1854] usb 3-1: config 0 has no interfaces? [ 276.461397][ T1854] usb 3-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 276.476158][ T1854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.485916][ T1854] usb 3-1: Product: syz [ 276.490109][ T1854] usb 3-1: Manufacturer: syz [ 276.499132][ T1854] usb 3-1: SerialNumber: syz [ 276.546479][ T1854] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 276.821577][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 276.827729][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 276.837844][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 276.844872][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 276.853789][ T8317] vhci_hcd: connection reset by peer [ 276.854719][ T1854] apple-mfi-fastcharge 3-1: USB disconnect, device number 17 [ 276.870767][ T6418] vhci_hcd: stop threads [ 276.881340][ T6418] vhci_hcd: release socket [ 276.891700][ T6418] vhci_hcd: disconnect device [ 277.122381][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 277.128601][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 277.182619][ T8354] FAULT_INJECTION: forcing a failure. [ 277.182619][ T8354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.196149][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.0.521 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 277.206763][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.216826][ T8354] Call Trace: [ 277.220107][ T8354] [ 277.223039][ T8354] dump_stack_lvl+0x16c/0x1f0 [ 277.227726][ T8354] should_fail_ex+0x497/0x5b0 [ 277.232589][ T8354] _copy_from_iter+0x2a1/0x1560 [ 277.237456][ T8354] ? __pfx__copy_from_iter+0x10/0x10 [ 277.242749][ T8354] ? __virt_addr_valid+0x1a4/0x590 [ 277.248047][ T8354] ? __virt_addr_valid+0x5e/0x590 [ 277.253083][ T8354] ? __phys_addr_symbol+0x30/0x80 [ 277.258123][ T8354] ? __check_object_size+0x488/0x710 [ 277.263438][ T8354] netlink_sendmsg+0x813/0xd70 [ 277.268212][ T8354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.273513][ T8354] ____sys_sendmsg+0xaaf/0xc90 [ 277.278318][ T8354] ? copy_msghdr_from_user+0x10b/0x160 [ 277.283786][ T8354] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.289093][ T8354] ? __pfx___lock_acquire+0x10/0x10 [ 277.294300][ T8354] ___sys_sendmsg+0x135/0x1e0 [ 277.299078][ T8354] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.304296][ T8354] ? lock_acquire+0x2f/0xb0 [ 277.308801][ T8354] ? __fget_files+0x40/0x3f0 [ 277.313414][ T8354] ? fdget+0x176/0x210 [ 277.317509][ T8354] __sys_sendmsg+0x117/0x1f0 [ 277.322115][ T8354] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.327231][ T8354] ? __fget_files+0x244/0x3f0 [ 277.331939][ T8354] do_syscall_64+0xcd/0x250 [ 277.336461][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.342370][ T8354] RIP: 0033:0x7fae5b37e719 [ 277.346794][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.366419][ T8354] RSP: 002b:00007fae5c1de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.374852][ T8354] RAX: ffffffffffffffda RBX: 00007fae5b535f80 RCX: 00007fae5b37e719 [ 277.382828][ T8354] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 277.390798][ T8354] RBP: 00007fae5c1de090 R08: 0000000000000000 R09: 0000000000000000 [ 277.398772][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.406748][ T8354] R13: 0000000000000000 R14: 00007fae5b535f80 R15: 00007ffceb01b088 [ 277.414739][ T8354] [ 277.593283][ T8342] ceph: No mds server is up or the cluster is laggy [ 277.756257][ T5906] libceph: connect (1)[c::]:6789 error -101 [ 277.763702][ T5906] libceph: mon0 (1)[c::]:6789 connect error [ 277.776125][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.602238][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 278.613595][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 278.634549][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.665029][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.688427][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.712951][ T9] usb 2-1: config 0 descriptor?? [ 278.721617][ T8358] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 278.761015][ T8375] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 278.775190][ T8375] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 278.781742][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 278.815496][ T8375] vhci_hcd vhci_hcd.0: Device attached [ 279.122081][ T5881] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 279.311111][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 279.341696][ T5881] usb 4-1: config 0 has no interfaces? [ 279.344121][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 279.355285][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 279.358606][ T5881] usb 4-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 279.362974][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 279.375956][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.379318][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 279.387604][ T5881] usb 4-1: Product: syz [ 279.395094][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 279.404249][ T5881] usb 4-1: Manufacturer: syz [ 279.407148][ T9] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 279.411421][ T5881] usb 4-1: SerialNumber: syz [ 279.419498][ T9] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 279.564651][ T5881] apple-mfi-fastcharge 4-1: config 0 descriptor?? [ 280.138624][ T9] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 280.278817][ T9] apple-mfi-fastcharge 4-1: USB disconnect, device number 11 [ 280.302033][ T8376] vhci_hcd: connection reset by peer [ 280.307865][ T53] vhci_hcd: stop threads [ 280.391645][ T53] vhci_hcd: release socket [ 280.418475][ T5879] usb 40-1: device descriptor read/8, error -110 [ 280.425470][ T53] vhci_hcd: disconnect device [ 280.517263][ T8398] tipc: Started in network mode [ 280.522361][ T8398] tipc: Node identity 0a50a510805d, cluster identity 4711 [ 280.532632][ T8398] tipc: Enabled bearer , priority 10 [ 280.561165][ T8398] netlink: 'syz.5.531': attribute type 39 has an invalid length. [ 280.569031][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.5.531'. [ 280.875031][ T5879] usb usb40-port1: attempt power cycle [ 281.058964][ T1854] usb 2-1: USB disconnect, device number 14 [ 282.062136][ T965] usb 38-1: device descriptor read/8, error -110 [ 282.098981][ T5881] tipc: Node number set to 2316150032 [ 282.155643][ T8399] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 282.200143][ T5835] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 282.445147][ T5879] usb usb40-port1: unable to enumerate USB device [ 283.409544][ T965] usb usb38-port1: attempt power cycle [ 284.819904][ T8428] ISOFS: Unable to identify CD-ROM format. [ 284.932143][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.5.540'. [ 285.725976][ T29] audit: type=1326 audit(1730818838.337:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.749208][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.762110][ T29] audit: type=1326 audit(1730818838.337:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.785335][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.791814][ T29] audit: type=1326 audit(1730818838.347:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.814917][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.821487][ T29] audit: type=1326 audit(1730818838.347:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.845223][ T29] audit: type=1326 audit(1730818838.347:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.868511][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.875903][ T29] audit: type=1326 audit(1730818838.347:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.899121][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.905653][ T29] audit: type=1326 audit(1730818838.347:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.929404][ T29] audit: type=1326 audit(1730818838.347:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.952781][ T29] audit: type=1326 audit(1730818838.347:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.976463][ T29] audit: type=1326 audit(1730818838.357:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8432 comm="syz.1.542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d3257e719 code=0x7ffc0000 [ 285.999651][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.172845][ T965] usb usb38-port1: unable to enumerate USB device [ 286.179782][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 288.557282][ T8461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.550'. [ 289.914387][ T8473] FAULT_INJECTION: forcing a failure. [ 289.914387][ T8473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.939279][ T8473] CPU: 1 UID: 0 PID: 8473 Comm: syz.5.553 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 289.949957][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 289.960031][ T8473] Call Trace: [ 289.963322][ T8473] [ 289.966265][ T8473] dump_stack_lvl+0x16c/0x1f0 [ 289.970971][ T8473] should_fail_ex+0x497/0x5b0 [ 289.975674][ T8473] _copy_from_user+0x2e/0xd0 [ 289.980290][ T8473] vmemdup_user+0x6c/0x100 [ 289.984712][ T8473] __sys_bpf+0x3b38/0x49a0 [ 289.989122][ T8473] ? ksys_write+0x21e/0x260 [ 289.993623][ T8473] ? __pfx___sys_bpf+0x10/0x10 [ 289.998374][ T8473] ? vfs_write+0x306/0x1150 [ 290.002876][ T8473] ? __mutex_unlock_slowpath+0x164/0x650 [ 290.008517][ T8473] ? fput+0x30/0x390 [ 290.012405][ T8473] ? ksys_write+0x1ad/0x260 [ 290.016901][ T8473] ? __pfx_ksys_write+0x10/0x10 [ 290.021749][ T8473] __x64_sys_bpf+0x78/0xc0 [ 290.026163][ T8473] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.031374][ T8473] do_syscall_64+0xcd/0x250 [ 290.035866][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.041753][ T8473] RIP: 0033:0x7fe116d7e719 [ 290.046161][ T8473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.065767][ T8473] RSP: 002b:00007fe117b9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.074174][ T8473] RAX: ffffffffffffffda RBX: 00007fe116f36058 RCX: 00007fe116d7e719 [ 290.082135][ T8473] RDX: 0000000000000020 RSI: 0000000020000580 RDI: 0000000000000015 [ 290.090092][ T8473] RBP: 00007fe117b9e090 R08: 0000000000000000 R09: 0000000000000000 [ 290.098048][ T8473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.106006][ T8473] R13: 0000000000000001 R14: 00007fe116f36058 R15: 00007fff4f3f00c8 [ 290.113977][ T8473] [ 290.117063][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.209108][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 290.220320][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 290.939174][ T8493] trusted_key: syz.0.554 sent an empty control message without MSG_MORE. [ 292.630985][ T45] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 292.816526][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 292.832040][ T45] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 292.854000][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 43482, setting to 64 [ 292.854203][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 292.854216][ T29] audit: type=1400 audit(1730818845.827:999): avc: denied { connect } for pid=8498 comm="syz.5.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 292.880628][ T45] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 292.940430][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.973428][ T45] usb 3-1: Product: syz [ 292.977639][ T45] usb 3-1: Manufacturer: syz [ 292.988435][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.563'. [ 293.002009][ T45] usb 3-1: SerialNumber: syz [ 293.021649][ T45] usb 3-1: config 0 descriptor?? [ 293.038056][ T8485] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.054665][ T45] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 293.081888][ T45] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 293.082266][ T965] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 293.101032][ T45] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 293.252442][ T29] audit: type=1400 audit(1730818846.117:1000): avc: denied { getopt } for pid=8504 comm="syz.5.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 293.271579][ T5906] usb 3-1: USB disconnect, device number 18 [ 293.358427][ T8507] autofs: Bad value for 'fd' [ 293.872860][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 293.880333][ T965] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 293.890210][ T965] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 293.898737][ T965] usb 2-1: can't read configurations, error -61 [ 294.054083][ T965] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.502947][ T8513] fuse: Bad value for 'rootmode' [ 294.852155][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 294.883876][ T965] usb 2-1: too many configurations: 34, using maximum allowed: 8 [ 294.892773][ T8522] netlink: 104 bytes leftover after parsing attributes in process `syz.3.568'. [ 294.897882][ T29] audit: type=1400 audit(1730818847.867:1001): avc: denied { nlmsg_read } for pid=8521 comm="syz.3.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 294.924010][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 294.929133][ T965] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 294.941642][ T965] usb 2-1: can't read configurations, error -61 [ 294.949037][ T965] usb usb2-port1: attempt power cycle [ 295.322139][ T965] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 296.070542][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 296.409539][ T29] audit: type=1400 audit(1730818849.217:1002): avc: denied { setattr } for pid=8529 comm="syz.0.572" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 296.571921][ T965] usb 2-1: device descriptor read/8, error -71 [ 297.990313][ T8550] 9pnet_fd: Insufficient options for proto=fd [ 298.577618][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 300.191934][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 300.400813][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.587'. [ 300.417405][ T8558] syz.1.580: attempt to access beyond end of device [ 300.417405][ T8558] loop1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 300.431071][ T8558] XFS (loop1): SB validate failed with error -5. [ 301.845075][ T8597] x_tables: ip_tables: osf match: only valid for protocol 6 [ 302.559223][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.590'. [ 302.648285][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 303.158801][ T8619] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 303.188897][ T965] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 304.000239][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.598'. [ 304.015092][ T8628] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.073154][ T8628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 304.079721][ T8628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 304.101273][ T965] usb 4-1: Using ep0 maxpacket: 8 [ 304.142627][ T965] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.143077][ T8628] vhci_hcd vhci_hcd.0: Device attached [ 304.157233][ T965] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 304.361450][ T8632] [ 304.363819][ T8632] ============================================ [ 304.369966][ T8632] WARNING: possible recursive locking detected [ 304.376114][ T8632] 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 Not tainted [ 304.383225][ T8632] -------------------------------------------- [ 304.389374][ T8632] syz.5.601/8632 is trying to acquire lock: [ 304.395267][ T8632] ffff8880600de200 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0xb0/0x820 [ 304.404179][ T8632] [ 304.404179][ T8632] but task is already holding lock: [ 304.411540][ T8632] ffff888030eb8200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 304.420458][ T8632] [ 304.420458][ T8632] other info that might help us debug this: [ 304.428532][ T8632] Possible unsafe locking scenario: [ 304.428532][ T8632] [ 304.435991][ T8632] CPU0 [ 304.439264][ T8632] ---- [ 304.442535][ T8632] lock(&trie->lock); [ 304.446615][ T8632] lock(&trie->lock); [ 304.450682][ T8632] [ 304.450682][ T8632] *** DEADLOCK *** [ 304.450682][ T8632] [ 304.458859][ T8632] May be due to missing lock nesting notation [ 304.458859][ T8632] [ 304.467181][ T8632] 3 locks held by syz.5.601/8632: [ 304.472205][ T8632] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x24b/0x6c0 [ 304.482155][ T8632] #1: ffff888030eb8200 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 304.491497][ T8632] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1c2/0x590 [ 304.500922][ T8632] [ 304.500922][ T8632] stack backtrace: [ 304.506802][ T8632] CPU: 1 UID: 0 PID: 8632 Comm: syz.5.601 Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0 [ 304.517390][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.527456][ T8632] Call Trace: [ 304.530774][ T8632] [ 304.533718][ T8632] dump_stack_lvl+0x116/0x1f0 [ 304.534051][ T965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 304.538394][ T8632] print_deadlock_bug+0x2e3/0x410 [ 304.538431][ T8632] __lock_acquire+0x2185/0x3ce0 [ 304.549657][ T965] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.554245][ T8632] ? __pfx___lock_acquire+0x10/0x10 [ 304.554272][ T8632] ? __lock_acquire+0xbdd/0x3ce0 [ 304.554291][ T8632] lock_acquire.part.0+0x11b/0x380 [ 304.554308][ T8632] ? trie_delete_elem+0xb0/0x820 [ 304.554335][ T8632] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 304.554355][ T8632] ? rcu_is_watching+0x12/0xc0 [ 304.554378][ T8632] ? trace_lock_acquire+0x14a/0x1d0 [ 304.554403][ T8632] ? trie_delete_elem+0xb0/0x820 [ 304.560911][ T965] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 304.572044][ T8632] ? lock_acquire+0x2f/0xb0 [ 304.572074][ T8632] ? trie_delete_elem+0xb0/0x820 [ 304.572099][ T8632] _raw_spin_lock_irqsave+0x3a/0x60 [ 304.572124][ T8632] ? trie_delete_elem+0xb0/0x820 [ 304.572147][ T8632] trie_delete_elem+0xb0/0x820 [ 304.572172][ T8632] ? bpf_trace_run2+0x1c2/0x590 [ 304.572200][ T8632] bpf_prog_f8fcb21cdc0e270a+0x4e/0x57 [ 304.572217][ T8632] bpf_trace_run2+0x231/0x590 [ 304.572242][ T8632] ? __pfx_bpf_trace_run2+0x10/0x10 [ 304.572264][ T8632] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 304.572279][ T8632] ? trie_update_elem+0x5fb/0xe00 [ 304.572303][ T8632] ? do_raw_spin_lock+0x12d/0x2c0 [ 304.608710][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.612888][ T8632] kfree+0x258/0x4b0 [ 304.612913][ T8632] ? trie_update_elem+0xc8/0xe00 [ 304.612941][ T8632] trie_update_elem+0x5fb/0xe00 [ 304.612966][ T8632] ? trace_lock_acquire+0x14a/0x1d0 [ 304.612991][ T8632] ? bpf_map_update_value+0x24b/0x6c0 [ 304.613020][ T8632] ? lock_acquire+0x2f/0xb0 [ 304.613038][ T8632] ? bpf_map_update_value+0x24b/0x6c0 [ 304.613065][ T8632] bpf_map_update_value+0x2c1/0x6c0 [ 304.623455][ T965] usb 4-1: Product: syz [ 304.626544][ T8632] generic_map_update_batch+0x454/0x5f0 [ 304.631499][ T965] usb 4-1: Manufacturer: syz [ 304.636628][ T8632] ? __pfx_generic_map_update_batch+0x10/0x10 [ 304.636651][ T8632] ? __pfx_generic_map_update_batch+0x10/0x10 [ 304.636670][ T8632] bpf_map_do_batch+0x5a8/0x670 [ 304.641624][ T965] usb 4-1: SerialNumber: syz [ 304.646319][ T8632] __sys_bpf+0x1ce4/0x49a0 [ 304.646341][ T8632] ? __pfx___sys_bpf+0x10/0x10 [ 304.646361][ T8632] ? __pfx___schedule+0x10/0x10 [ 304.646399][ T8632] __x64_sys_bpf+0x78/0xc0 [ 304.646421][ T8632] do_syscall_64+0xcd/0x250 [ 304.646442][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.646470][ T8632] RIP: 0033:0x7fe116d7e719 [ 304.646486][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.682056][ T965] usb 4-1: config 0 descriptor?? [ 304.682188][ T8632] RSP: 002b:00007fe117bbf038 EFLAGS: 00000246 [ 304.702919][ T965] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 304.703748][ T8632] ORIG_RAX: 0000000000000141 [ 304.703758][ T8632] RAX: ffffffffffffffda RBX: 00007fe116f35f80 RCX: 00007fe116d7e719 [ 304.703773][ T8632] RDX: 0000000000000038 RSI: 0000000020000240 RDI: 000000000000001a [ 304.703786][ T8632] RBP: 00007fe116df139e R08: 0000000000000000 R09: 0000000000000000 [ 304.703800][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.703812][ T8632] R13: 0000000000000000 R14: 00007fe116f35f80 R15: 00007fff4f3f00c8 [ 304.885017][ T8632] [ 304.889495][ T5881] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 304.962216][ T5906] usb 38-1: SetAddress Request (10) to port 0 [ 304.968557][ T5906] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 305.051886][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 305.186464][ T5881] usb 3-1: config 0 has no interfaces? [ 305.214407][ T29] audit: type=1400 audit(1730818858.187:1003): avc: denied { ioctl } for pid=8609 comm="syz.3.595" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 305.240050][ T5881] usb 3-1: New USB device found, idVendor=05ac, idProduct=1226, bcdDevice=b2.89 [ 305.251451][ T965] imon:send_packet: packet tx failed (-71) [ 305.253982][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.270315][ T5881] usb 3-1: Product: syz [ 305.272166][ T965] imon 4-1:0.0: panel buttons/knobs setup failed [ 305.281934][ T5881] usb 3-1: Manufacturer: syz [ 305.287731][ T5881] usb 3-1: SerialNumber: syz [ 305.305676][ T5881] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 305.332231][ T965] rc_core: IR keymap rc-imon-pad not found [ 305.338272][ T965] Registered IR keymap rc-empty [ 305.343350][ T965] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 305.354868][ T965] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 305.364688][ T965] imon:send_packet: packet tx failed (-71) [ 305.381904][ T965] imon 4-1:0.0: remote input dev register failed [ 305.388400][ T965] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 305.399134][ T965] imon 4-1:0.0: unable to initialize intf0, err 0 [ 305.406316][ T965] imon:imon_probe: failed to initialize context! [ 305.413567][ T965] imon 4-1:0.0: unable to register, err -19 [ 305.432543][ T965] usb 4-1: USB disconnect, device number 12 [ 305.528667][ T5881] apple-mfi-fastcharge 3-1: USB disconnect, device number 19 [ 305.530174][ T8629] vhci_hcd: connection reset by peer [ 305.543903][ T6988] vhci_hcd: stop threads [ 305.548160][ T6988] vhci_hcd: release socket [ 305.555372][ T6988] vhci_hcd: disconnect device [ 310.071985][ T5906] usb 38-1: device descriptor read/8, error -110 [ 310.472706][ T5906] usb usb38-port1: attempt power cycle [ 311.053130][ T5906] usb usb38-port1: unable to enumerate USB device