last executing test programs: 21m54.305467626s ago: executing program 32 (id=1253): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000001100)="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"/1453, 0x5ad, 0x10000800, &(0x7f0000000080)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x498, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001440)={'\x00', 0x4212}) socket(0x10, 0x3, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x6, &(0x7f0000000440)=""/217, 0xd9, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) semget$private(0x0, 0x4000000009, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = userfaultfd(0x80801) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES16=r8, @ANYRES32=0x0, @ANYRES8=r8], 0x0, 0x42, 0x0, 0x5}, 0x28) 13m3.948280637s ago: executing program 33 (id=3011): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r5, 0x6, 0x9fd, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = io_uring_setup(0x28a6, &(0x7f0000000100)={0x0, 0xdc18, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1217, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102386, &(0x7f0000000040)=0x18ff2) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 12m54.53099959s ago: executing program 3 (id=3068): syz_open_dev$usbfs(0x0, 0x77, 0x11d101) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x7, 0x1200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000140)={0x7}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r3, 0x0, 0xd1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) add_key$fscrypt_provisioning(&(0x7f00000002c0), &(0x7f0000001400)={'syz', 0x0}, 0x0, 0x48, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fdatasync(0xffffffffffffffff) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x10, "155c224b2130b356833a93f7128480a6328d7dc6ddfac5b653319d6643fb7c53"}) 12m52.784417577s ago: executing program 3 (id=3070): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setpriority(0x2, 0x0, 0xb0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080)=0x2, 0x3e) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cc34", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0xfffc, 0x27b6a97, @private2, 0x9}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x2000, 0x400000000000005, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f14010000008000fedbdf250c00450072fd45006973736d"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x20040804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x19, &(0x7f0000000000)=0x600, 0x4) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES8=r6, @ANYRESHEX=0x0, @ANYRESDEC=r4, @ANYRES8, @ANYRES64=r3, @ANYBLOB="33f967995752bf36a917483143e63c4bca4af5a28c6d8af32e5e60fcf55796c58beafb1b6376542e545e88399b5e798946b2d5560a6718e3008e895df4f6e2ddb0a3015d3308c2c0d179ff77207788fc60bb18dd3090174ac4487efaa3874e034414e3aa30f52997a147", @ANYRESDEC=r3, @ANYRESHEX=0x0], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) 12m47.499742114s ago: executing program 3 (id=3081): r0 = syz_io_uring_setup(0x173a, &(0x7f0000000000)={0x0, 0xf1a5, 0x100, 0xfffffffd, 0x283}, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2, 0x8005}, 0x1c) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x8010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x10, 0x2, [@TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40010) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x501742, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000c80)={0x30, 0x0, 0x1, 0x0, 0x10000, 0xffffffffffff9dce, 0xe8, 0x0}) syz_clone(0x13801400, 0x0, 0x0, 0x0, 0x0, 0x0) 12m47.459342489s ago: executing program 6 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001480), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20008b}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x140}, 0x18, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r5, r6], 0x2}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100}, 0x0) lseek(0xffffffffffffffff, 0xe2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000070009000500000001000006040000000000000101000100005f00612e2e001a4af40699fe1affd5805caeacf55982"], 0x0, 0x33, 0x0, 0x1, 0x1, 0x10000, @value=r7}, 0x28) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r8, 0xc01064ab, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000440)={r9, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289728f0374c72a90200193b3e8772fd29f35239d2000000000000000000000100", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) 12m46.467709021s ago: executing program 6 (id=3083): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x18, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004890}, 0x240cc400) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xec, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa3e7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x40}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x800}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa27f}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf898}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000000}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone3(&(0x7f0000000080)={0x2d008400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) r5 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x5, 0x109680) mmap$snddsp_control(&(0x7f0000ffb000/0x3000)=nil, 0x1000, 0x1000009, 0x2010, r5, 0x83000000) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x1409, 0x4, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x880) fsconfig$FSCONFIG_SET_FLAG(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) setsockopt$packet_int(r7, 0x107, 0xb, &(0x7f0000000240)=0x66, 0x4) recvfrom$inet(r7, &(0x7f0000000140)=""/142, 0x8e, 0x1, &(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf2}}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000500)={0x2, 0x1, &(0x7f0000000300)=""/252, &(0x7f0000000400)=""/210, &(0x7f0000001240)=""/4096, 0x4000}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) 12m45.638218187s ago: executing program 3 (id=3085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xffffffffffffff4c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setgroups(0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0e00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000f000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m44.803900352s ago: executing program 6 (id=3087): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x50) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$dupfd(r0, 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 12m44.739523288s ago: executing program 6 (id=3089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="f00fc1360400663e6765262e660fc7760966f0fe40000f01cff30fbd4e000f9210f2260f18ca66b9750b00000f323e0fc7753f0fc76a75", 0x37}], 0x1, 0x10, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x274) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) io_setup(0x25dc, 0x0) (async) io_submit(0x0, 0x2, &(0x7f0000000280)=[0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000d, 0x0, 0x3}]) (async) mount(0x0, 0x0, 0x0, 0x201000c, 0x0) (async) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) (async) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) 12m44.659621384s ago: executing program 3 (id=3090): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6002, &(0x7f0000000040)=0x3, 0x4, 0x0) (async) read$FUSE(r4, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r6, &(0x7f0000001680)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @mcast1}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000040)="1c80150b93e02caeba8368339f93a8511cc777cc8e8e0722c1596aac8538d5b809686745c369fb78b6ddcb844ce37c44391255499d5ffeb0bd900d1936e0436320231a4764f1e61e4e2d840edc0d05c0aac4c2ee9fa63aa5b358f41d54c0d60eaf16f4a013729e983e1f0d48b4be72cf59e846f56dc49780b8601319b0802817ffcf3df417ddb72dac55fc33c81e667cb502eeb65a3f2132b9ebc4d5014a1dd14cfd3595c139660407fc3158e9d9e35fe5b791ab2c6c8776aec7466c7433b6f4e4a9ff723c", 0xc5}, {&(0x7f0000000700)="71b951f3f19b77e3e6e5fa29154036c68d56793d20d492a8e00f77d3b2f099f9cc48692902374d8bd559566da1128bddf07f88fa8a459b2242d2ca9b89755967d2cb9b6a3550ac87aa64f554ef58d57961a798e4f09a3eb49791590eb777a89227f1a4e3c6f50508b7843b69e463b3e1a587c8c33e54d3bf6eb596bb17fd39809076644ae9456bfd9fe465d18e2f90e627b7bec5e6142893cdfbc829403cc41cc00350cd777f6fcc2bc6f02147b8a3a663695b1da7926e5538d8b31e323e9e8ae75f6b2eb8e17d0e1c26f142b26be8d0f3a6b2d33213b7843c91125d0ead9ce31bbc2e7e97a749423aa6637ff419e970679703d4f8ae555fde02027b6be38280f7d399e3fe8ea98db265f6a1e9b7e3546b893dbea57133b326f2c72dd1dbffc109ca61af60185922bf8b8c642c6e4b5d5388572c2a54c85cf21b1c1703da2772957e09913598ab6f53305b9d07d1233d18c9032b773606cc0f73efb137fa716f81d78fdad744875f3a84a221d58d1685b68369f97a1c21f720a0cd15a9f5cd1d97fa117334e9bb257d67544ae762e1cef5516dd1871b0a877db5f0f9b1bbde4b6990ea5d588f65445a45c756b7475e85752bafd5054d377934930bb48a43305a842eeea80024d7a7688e22507e31ee5b1bf478a10efc459d31366d5533998937fd77b48ee137d46249ff80b2034952503c10d9833f6db5f8592f4677f192b1279075dfb7936a7eaf4725f76f4003643ae10aec4a6326a5a85cef5a0e7ea0e490a968bc06dc0bede8b514a9226cf30db8adce9f63f97de9a61ff5204e9e9272535985e141060eb3ad1384c749838b50d53adceb7dc5ec8c901953a2984d874495f669bdf5c6ef1aecb10a9d04f16dc1fec5fb14afae6aed686fb25754116f87e3ce20ad6c30c7a7f651760d6e2734d2be9c20f49cb8cf0cfdf74802ddc040c9b39991bca22134a3b5eb720ae05186353ff20274dbf89644fdd6b4547fce60da85771a0f76cb0b55effe70fdf0173e25d6e14df12cfcd3e3455cfe4a394db7b17fd27f3f62e779f9e5829707fc85c47fb1eebc3c9ba309cba25e1128c0eec86513538cde5102ae39e1be49508e2f95391591eb92864a01c0b788fa442aaede8d4c9a4c38a42ce135c1cf4d320d7a6671d7365b3bef1a9490297ac872b7d009d62975db4c360a43c0244c837414688703d9ea5c59d9f05c6d92af16ff332d060c47a9d3bfe90b6e793ef50ff48c5030dbb01e34286366faa241df78386fe0f02fcbc827ab75c7078cacf3fc1683c35dccda6c254cd7c0f8239a126e8d11484ea7683ca5b22934633e5f2d53e50aafe47ee27d9dbc33d92800b329db2342dac3f5b71781dc4c1f7ff67e8178d52a0de5e69109e1138993ec03758fcb85a6e5e55bbcd0f3c02516b8f960adb149319b2f86a7d03f50c77ef201769b7391b9b7630fe841d819942b084e26e72668df084c4eda3f0361e49e3a286e75cafedad260efbe437f9492aa21a82845aa4bc25b9d3aa84013ed47a1727e67f73ca365a6039d6e4febea1c26eff6d928fa7a76012359133a4f5e8ba4c03c195393fa65a71aae934eca14ec446e0bb5b7a68540369241ed52951e2310b116d62e501d722d35c08418db3b046e53e35855889ba462eea9dc99688aa5f3b1aeaca2144bb51635b0265f4d6653e573a5371edab7119c9924e14428227715c0f358b3d0ec3291f379744c3b938322f415b1bdc7df15af9bc1bbb22b318ab70ce86631d8cde79994c8b4b1b64d43513ae355", 0x4e8}], 0x2, &(0x7f0000002100)=ANY=[@ANYBLOB="1400000000000000290004003e00000001000000000000003fa1f63cbe0f1ac1b60767823b38c8cc386fa8bde0e10f1e44cbd0363c7a7dc3a38c3a8ebcaf95b8795facfcacafbeda1bb79e17017289fc01b3aea88252b73a35b6caa992f7a148db5eed9d415515dd1d494256cf88beb6aa07b198c25f0a9a408ae9dff44514c60bffbe6f00840db80e9bce131db88084c9db3e976e0b7aab80188e2cfa"], 0x18}, 0x5) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xfff3, 0x9}}}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864"], 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x4084) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f0000002540)='net/l2cap\x00') (async) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r8, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x3, "9a0400000066e134d198b1abaa7da80f00000000000009dcb674000000130028", 0x3, 0x10b, 0x100000, 0x3, 0x4, 0x20001, 0x20007, 0x0, [0x0, 0x400, 0x10, 0x2]}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') (async) sendmsg$nl_generic(r4, &(0x7f00000022c0)={&(0x7f00000021c0), 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB="440000003100000228bd7000fbdbdf250c000000be5157138f1bd42c83d6a8c66bc0de227427392d8105fca9b960214664d5107073d296bbe608000600", @ANYRES32=r5, @ANYBLOB='\x00\x00\r'], 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20040000) (async) clock_getres(0xfffffffffffffff1, 0x0) (async) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 12m44.235656683s ago: executing program 3 (id=3091): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 12m44.035490311s ago: executing program 6 (id=3093): openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 12m27.682124027s ago: executing program 34 (id=3091): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 12m27.603972018s ago: executing program 35 (id=3093): openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 8m41.467739132s ago: executing program 2 (id=3952): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0x2000000000d}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {0x0, 0x0, 0x0, 0xb8020000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 8m40.147693538s ago: executing program 2 (id=3957): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 8m39.127056597s ago: executing program 2 (id=3958): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x5e}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x80, 0x870, 0x1, 0x1, 0xd59f82, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x2800, 0x444, 0x511, 0x0, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0xff25, 0x10, 0x200, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000b, 0x1a408}, [@IFLA_LINKINFO={0x53, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x0, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x6040044) 8m38.652213072s ago: executing program 2 (id=3960): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x40000, &(0x7f00000000c0)="dd696b7538ef3e0184b251d9c07cdb0b1fa6ed000044858a1d2eafecfa5dd74b1905ff1c60fd3599f3340c38659fdec0296cd6e31d41adcdb142b0a79a9bbb890ba7f3e04169e36981e44f25e62049eba42e5794ad49b036fd9616212f17f8c3f2c532a0de160fd10ce9bca0a507379d2726e4e946d440a818f8ea7d1c5a859199a575e82cbce0a36d6192050d75330dd3b1c7272b2995b06fc0ece2907fa0491fcf0df0bc269c01c3", 0xa9, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000380)="7c754a25c68e3a6bbc0f4f753f7eb94b6eec157141799f6d74baae7ca6d5755b67493e44ac9d7417e9fbe2d62dd2ceb462538c0710d4f2a4e146968ea59e665e71cfa7a7dca9a39199a528041bac71bf8c8ae96816d94a7a2da275e36ee748bf41eec5ecc949d530327cf01a48b42722255c7e0f93da32b5f23c1404d7d971d8ddfdd03eb08a89a9ac60be0205ecff74ee8840b38c2d7adacd005c032f882bbecfd5f705e4ee30e423cd1eea0d3cd2a14bc0ad5c51e30b5c") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0x80000300, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) 8m37.415620485s ago: executing program 2 (id=3965): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x700}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="200000001a00010000000000000000000a00fc003a2a5e247b000000f9ff1a80065190f248f6e692b91f3dcfac79c604a5cef22856634f011902247843a1b8e4469ff1ddfa370700abba9a1a2412ff7cf4b58734b5e181a1a5598ea6c191498820baf4abc71d9cd6c25ca61905454ad39e8a6b000ed07e9dc00df5b19312607815cc0462117b771bd9aaaf2e"], 0x20}], 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRESOCT=r4], 0x2c}, 0x1, 0x0, 0x0, 0x14000047}, 0x0) 8m36.587947112s ago: executing program 2 (id=3970): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0xffffffffffffffc6, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x0, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r1, 0x1, 0xf, 0x0, &(0x7f0000002380)) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x7, 0xfffff801, '\x00', &(0x7f0000000000)=0x8}) 8m35.371646661s ago: executing program 36 (id=3970): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0xffffffffffffffc6, 0x5, 0x1}, @L2TP_ATTR_SESSION_ID={0x0, 0xb, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r1, 0x1, 0xf, 0x0, &(0x7f0000002380)) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000040)={0x0, 0x7, 0xfffff801, '\x00', &(0x7f0000000000)=0x8}) 8m13.595713807s ago: executing program 1 (id=4044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x8, 0x0) 8m12.61069245s ago: executing program 1 (id=4047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_getneigh={0x70, 0x1e, 0x200, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x80c}, [@IFLA_IFALIAS={0x14, 0x14, 'geneve0\x00'}, @IFLA_VFINFO_LIST={0x3c, 0x16, 0x0, 0x1, [{0x4}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x1, 0x80000000}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xe7, 0x5db2}}]}, {0x4}]}]}, 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x80, 0x10, 0x0, 0xfe, 0x4, 0xff, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) finit_module(r4, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000000)) recvmsg$can_bcm(r4, &(0x7f00000006c0)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/142, 0x8e}, {&(0x7f0000000480)=""/253, 0xfd}, {&(0x7f0000000580)=""/101, 0x65}, {&(0x7f0000000140)=""/31, 0x1f}], 0x4, &(0x7f0000000600)=""/185, 0xb9}, 0x67d56ea17e182be4) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x8, 0x4, 0x0, 0x3, 0x20, 0x0, 0x0, 0x3, 0x5e55b37311de6d89, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ssrr={0x89, 0x7, 0xd, [@broadcast]}, @timestamp_prespec={0x44, 0x4, 0xea, 0x3, 0x3}]}}}}}) 8m11.62791999s ago: executing program 1 (id=4048): r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000012000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4a73, &(0x7f0000000040)={0x0, 0x970, 0x1000, 0x0, 0x399}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/660], 0x298}}], 0x1, 0x810) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000300)={0xc000003, 0xf, &(0x7f0000000580)=[0x20, 0x8004, 0x3, 0x9, 0x9, 0x1ed, 0x2, 0x4, 0xbb, 0x7, 0x2070, 0xfffff407, 0xfffffff7, 0x1ac, 0xfffffff8], 0x0, 0x4}) sendmsg$inet(r0, &(0x7f0000003080)={0x0, 0x0, 0x0}, 0x200000c4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) 8m11.355759327s ago: executing program 1 (id=4050): socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004f4000/0x1000)=nil, 0x1000, 0x2) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000050c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000007100)={0x78, 0x0, r3, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x13f}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 8m10.233782492s ago: executing program 1 (id=4052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) (async) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x110) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) getpid() (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) (async) r0 = getpid() (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xf5, 0x1000, &(0x7f0000006680)) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000000380)=""/53, 0x35) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) 8m9.239416279s ago: executing program 1 (id=4056): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xbb, 0x8, 0x5, 0x7, 0x402, 0x46}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000740)={0x0}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r10, 0x3, r3, 0x5}) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@uname={'uname', 0x3d, 'fowner<'}}]}}) 7m52.682316975s ago: executing program 37 (id=4056): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0), 0x4) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040f003040040000102030109021b00010400000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xbb, 0x8, 0x5, 0x7, 0x402, 0x46}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000740)={0x0}) r7 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f00000000c0)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r10, 0x3, r3, 0x5}) pwritev(r2, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@uname={'uname', 0x3d, 'fowner<'}}]}}) 1m34.814047393s ago: executing program 9 (id=5483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x6000, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) 1m33.623592462s ago: executing program 9 (id=5486): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000024c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000540)="8099e0"}) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)={0x2, 0x0, @a}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r4, &(0x7f00000001c0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="401416"], 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, &(0x7f00000005c0)={0x20, 0x9, 0x24, {0x24, 0x21, "ebf26d9090ccdf0fb7f96b55f7c4275767809efb756de0a38ce5623b708b587a141c"}}, &(0x7f0000000600)={0x0, 0x3, 0x17, @string={0x17, 0x3, "680a29eaff51f1cc001592f3ef42b2a811f6802d0c"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x20, 0x18, 0x74, "33cd46d90f245eae163c72007580dffc3e55ddd102a20df6615f779ef07e0f9f566de88827cc94f2be422a57aa567f7b7988197cdbdcf2a4b5a7956ae54307809898a52816abbe0bfbaa84ac3a21eb7a12aa1fc8266298dd2eef71667facf151619218b0160d77dbfa8044160a5f70d65ddd5681"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000780)={0x20, 0x81, 0x2, "c903"}, &(0x7f00000007c0)={0x20, 0x82, 0x2, "71d6"}, &(0x7f0000000800)={0x20, 0x83, 0x3, "fd09cf"}, &(0x7f0000000840)={0x20, 0x84, 0x3, "15aeae"}, &(0x7f0000000880)={0x20, 0x85, 0x3, 'QbB'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x192, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/399], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x210, 0xd4, 0x9, 0x9, 0x8, 0x9}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x200, 0xf000, 0x400, [0x30]}]}, 0x5, [{0x4c, &(0x7f00000002c0)=@string={0x4c, 0x3, "e82b8a975f277f0f8d438afa9ae1160eb7ff931f3ff7947cf998d116352d4221154bcd7ebbf6061be95479f8171379cd59fb25b1b8670f496ded3ec74c1d0afa5ecf3279d25bb5681586"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0xf2, &(0x7f00000003c0)=@string={0xf2, 0x3, "9ba349d395740fbd559edbca644d0edbdca0a5a5ed669a57977e96f16b5dec07a6c537e33ecf896ce0f1f5bf2d3846dd2555f2cda91a5509d8ad1fecf47daf5e898c0824d02f5d3b74ad9419824bbf26fa782c33eb7dc7c139f94227f5f4f43186a7e65183d10af2a5d4f8c7ecdccb2d158eb161a253032f4d45962740d0b192787cad3fe86dc252fe891493ad7f590fff43495367e0d949f987561e88e64048b5bfd1e0a1cb5d7d2120cac6a1f7ed7a5c588731ab710fa098e9044c8ab5caac434abd91779b0debd81beaceb39563dccd5695ab928c26a0878177744bcb636bc2bca9081a26be813e7212df1bea9e87"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0a}}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0xffffffff, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x200, 0x129432e6, 0xc8, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x4, 0x7, 0x5, 0x2f, 0x6, 0x312, 0x76, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0xe3ae, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x2, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xa, 0x9, 0x48c93690, 0x2, 0xff], [0x1007, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x1, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x80, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) 1m30.819700721s ago: executing program 9 (id=5493): openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) syz_io_uring_setup(0x73d3, 0x0, &(0x7f0000000540), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}}, &(0x7f00000001c0)=0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60ae", 0x29) r6 = accept$alg(r5, 0x0, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001b80)=""/25, 0x19}], 0x1}, 0x8dff) 1m29.485514668s ago: executing program 9 (id=5500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad78", 0xe}], 0x1}}], 0x2, 0x20000010) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00', 0x272) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2601, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x7}]}) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f0000000000)) 1m28.875767904s ago: executing program 9 (id=5503): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='*'], 0x50) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='l%\x86\xce6\xdb\f\xcf\x19|\xc9O\x7f\xce\x8f\x7f\x1c\xeay\x06\x00\x00\x00\a0\r\x13\xaa\x84r\xd7^\xe82\x0f\x1a\xf1\x02\x00\x1e&{\xee2\x95I\xca\xbevl\x12\xb6 \xd4') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000024c0)={0x8, 0x0, &(0x7f0000000080)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000540)="8099e0"}) r4 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)={0x2, 0x0, @a}, 0x48, 0xffffffffffffffff) keyctl$get_security(0x11, r4, &(0x7f00000001c0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="401416"], 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, &(0x7f00000005c0)={0x20, 0x9, 0x24, {0x24, 0x21, "ebf26d9090ccdf0fb7f96b55f7c4275767809efb756de0a38ce5623b708b587a141c"}}, &(0x7f0000000600)={0x0, 0x3, 0x17, @string={0x17, 0x3, "680a29eaff51f1cc001592f3ef42b2a811f6802d0c"}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000680)={0x20, 0x18, 0x74, "33cd46d90f245eae163c72007580dffc3e55ddd102a20df6615f779ef07e0f9f566de88827cc94f2be422a57aa567f7b7988197cdbdcf2a4b5a7956ae54307809898a52816abbe0bfbaa84ac3a21eb7a12aa1fc8266298dd2eef71667facf151619218b0160d77dbfa8044160a5f70d65ddd5681"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000780)={0x20, 0x81, 0x2, "c903"}, &(0x7f00000007c0)={0x20, 0x82, 0x2, "71d6"}, &(0x7f0000000800)={0x20, 0x83, 0x3, "fd09cf"}, &(0x7f0000000840)={0x20, 0x84, 0x3, "15aeae"}, &(0x7f0000000880)={0x20, 0x85, 0x3, 'QbB'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x192, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/399], &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x210, 0xd4, 0x9, 0x9, 0x8, 0x9}, 0x15, &(0x7f0000000280)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0xa, 0x1, 0x200, 0xf000, 0x400, [0x30]}]}, 0x5, [{0x4c, &(0x7f00000002c0)=@string={0x4c, 0x3, "e82b8a975f277f0f8d438afa9ae1160eb7ff931f3ff7947cf998d116352d4221154bcd7ebbf6061be95479f8171379cd59fb25b1b8670f496ded3ec74c1d0afa5ecf3279d25bb5681586"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x1407}}, {0xf2, &(0x7f00000003c0)=@string={0xf2, 0x3, "9ba349d395740fbd559edbca644d0edbdca0a5a5ed669a57977e96f16b5dec07a6c537e33ecf896ce0f1f5bf2d3846dd2555f2cda91a5509d8ad1fecf47daf5e898c0824d02f5d3b74ad9419824bbf26fa782c33eb7dc7c139f94227f5f4f43186a7e65183d10af2a5d4f8c7ecdccb2d158eb161a253032f4d45962740d0b192787cad3fe86dc252fe891493ad7f590fff43495367e0d949f987561e88e64048b5bfd1e0a1cb5d7d2120cac6a1f7ed7a5c588731ab710fa098e9044c8ab5caac434abd91779b0debd81beaceb39563dccd5695ab928c26a0878177744bcb636bc2bca9081a26be813e7212df1bea9e87"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc0a}}]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x7, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x7, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0xffffffff, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x200, 0x129432e6, 0xc8, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x4, 0x7, 0x5, 0x2f, 0x6, 0x312, 0x76, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0xe3ae, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x2, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xa, 0x9, 0x48c93690, 0x2, 0xff], [0x1007, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x1, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x80, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x2, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) 1m27.773308584s ago: executing program 9 (id=5508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 1m27.400905782s ago: executing program 38 (id=5508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x37}, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 3.311795439s ago: executing program 0 (id=5935): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240)={0xc0, 0x1000, 0xb19e, 0xfff, 0x0, "1d4cbe09b8f7b9004b3e5185e783dd33e02656"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) 3.187673449s ago: executing program 8 (id=5937): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000005c0)='ns\x00') fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/45, 0x2d) getdents64(r1, &(0x7f0000000100)=""/203, 0xcb) 3.126394276s ago: executing program 8 (id=5938): mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8002, &(0x7f0000000240)=0x7, 0x4, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000041000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x101ff, 0x2, 0x0, 0x2000, &(0x7f000015e000/0x2000)=nil}) 3.086840322s ago: executing program 4 (id=5939): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 3.031946539s ago: executing program 4 (id=5940): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000006) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)='2', 0x1}], 0x1) sendmsg$nl_route(r3, 0x0, 0x8000) 2.982823727s ago: executing program 0 (id=5942): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/15, 0xf}], 0x1, 0x1, 0x7fff) 2.894004958s ago: executing program 0 (id=5943): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.226816744s ago: executing program 0 (id=5946): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0x7, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xc}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/87, 0x57}, 0x3}], 0x1, 0x2, 0x0) 2.171825641s ago: executing program 0 (id=5947): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) userfaultfd(0x80c01) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ipv6_route\x00') read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) 2.170188905s ago: executing program 5 (id=5948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb8, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{0xa4, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x50, 0x2, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x0, 0x6, 0xffffffff, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 1.379503221s ago: executing program 7 (id=5949): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f00000007c0)=""/72, 0xfffffffffffffe0f, 0x0, 0x2, 0x2}}, 0x48) 1.331352676s ago: executing program 4 (id=5950): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 1.330683856s ago: executing program 5 (id=5951): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a367490fc728000f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f32e3e0f01c966b8eb000f00d8e168c4e129d1d8a4", 0x60}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x4000) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xf000, 0x8, 0xff, 0xfb, 0x65, 0xc1, 0x14, 0x0, 0x2e, 0x48}, {0x41000, 0x4000, 0xf, 0x6, 0x40, 0x4, 0x7d, 0x7, 0x5, 0xff, 0x6, 0x3}, {0xeeef0000, 0x7000, 0xb, 0x5, 0x83, 0x7, 0x40, 0x5, 0x1, 0xa7, 0x8, 0x81}, {0x27bf4dc8de03325f, 0x4000, 0xf, 0xc, 0x7f, 0x43, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x11}, {0x4000, 0xffff1000, 0xb, 0x1, 0x15, 0x7, 0xab, 0x8, 0x7, 0x83, 0x5}, {0x8000000, 0x3000, 0x8, 0x1c, 0x4, 0x6, 0x7, 0x3, 0x80, 0x10, 0x1, 0x80}, {0x3000, 0x8000000, 0xa, 0x5, 0x81, 0x4, 0x6, 0x2, 0x5, 0x81, 0xff, 0x8}, {0x8080000, 0x1000, 0xf, 0xb, 0x10, 0x7, 0x4, 0x24, 0xda, 0x25, 0xd9, 0x9}, {0x10000, 0x30}, {0x1, 0xd}, 0x80000031, 0x0, 0x8080000, 0x2024, 0x1, 0x1003, 0xeeee8000, [0x6800000000000000, 0x2, 0x0, 0x10000000ff]}) 1.246954261s ago: executing program 8 (id=5952): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.swap.current\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002200)={0x2020}, 0x2020) 1.24579807s ago: executing program 0 (id=5953): mkdirat(0xffffffffffffffff, 0x0, 0x133) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 1.229828847s ago: executing program 7 (id=5954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x80a0000, 0x4000, 0x8, 0xb, 0x3, 0xd0, 0x40, 0x7, 0x0, 0xff, 0x19, 0x6}, {0xd5d50000, 0x2, 0x3, 0x8, 0x40, 0x7, 0x7f, 0x6, 0x5, 0x6, 0x3}, {0x4000, 0x4000, 0xe, 0x5, 0x1, 0x7, 0x0, 0x9, 0xb2, 0xa7, 0xf, 0x81}, {0x6000, 0x10000, 0xa, 0x6, 0x3, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xe, 0xf1}, {0x4000, 0x2000, 0x10, 0x3, 0x5, 0x2, 0xab, 0x7f, 0x1, 0x83, 0x65, 0x6}, {0x1000, 0x191bd000, 0xc, 0x3, 0xb5, 0x8, 0x1, 0xa0, 0x80, 0x13, 0x5, 0x5}, {0x1000, 0xdddd1000, 0x4, 0x5, 0xc, 0x2, 0x4, 0xfe, 0x3, 0x81, 0x2, 0x70}, {0x0, 0xeeef0000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x9}, {0xeeef0000, 0x30}, {0x3000, 0x3ff}, 0x80000031, 0x0, 0x6000, 0x2026, 0x6, 0x1001, 0x3000, [0x6800000000000000, 0x6, 0x67, 0x5]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.229328912s ago: executing program 4 (id=5955): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000001480)="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", 0x219, 0x20000080, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x18c, 0x805, 0x0, 0x0) 1.118578844s ago: executing program 4 (id=5956): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1000, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, r3, 0xffffffffffffffff, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 1.037795101s ago: executing program 8 (id=5957): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000002140)="6a311751dc174f4a", 0x8}], 0x1) 1.03684963s ago: executing program 5 (id=5958): setitimer(0x2, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)=0xb) 961.22063ms ago: executing program 5 (id=5959): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, 0x0, 0x25, 0x0, @void}, 0x10) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 959.830633ms ago: executing program 7 (id=5960): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000000)) 899.849391ms ago: executing program 4 (id=5961): r0 = socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="89e4192d92359cb3ee294530ae76ad6dc4ff20cc3ccc9d41018dd482ad1f395d4e38bd22b6fcae05c49fbdfdf66ae2994f191e9222effcb97205d0aaed4b29919f9e3bab7fdb276ca29501903c98de0b0cc8afca563f94fe69b6927ae594d1b53ad9f4a9f9f5c84a518d37939c84a5bd15048115ac421e9c56866ab6f91b0e8181d8999dd86c0177a971a39bf35b38eb0504bf70c02cc307c62d6f06c80b146153ca56a182831696c8cf46d2b065744e6dd4415ceff773e8d3a45aacc4fd8972cbe77878ce48d531066ec9e4790196e4a17b08ea09d4d3febf6721a44390383c7261e9e09f20c23f95e9c04d3c10220f3962d98b2bd98d5c3e50169a4c0c99f29c7a336489c26259957c4bdeae1c8cdf60d817db09336f680bbe954dc05669c9d48cb0a0488ed2385d935a7166b3187189e08d421903d546126289651db812f9c8754c0dc6f24a22ca988a2ac131cc52d724bb086a53a94e515e09fef354e9ca0daacaa347e96b3efd7c5c4063f6eb0cf55f08ff942780e6846d78410057ca2b845e69eeda4066de60a033e2f3c7e47b2f0c0c4c7da98b1d658c620f70dbe6eb8b5dd90216caa82c91db4c0f7ea02df5d5f8d6815d2d7868e6a6053f31a4fbe8732a1310ca7a79814177a981e5ab68dfeba4fe46ed4c51819be1308f73455e311f511ce4360cc7c24836c9b895ee5ce93cc42dd88f02d91b479c1748339024343700cce897087bbaae4fbd8e2ad5da016265ef097043acaf87504dde24216c805b40cf4d6edf2ae6564182acdf06580dde3fb66ab01625ffadc22f1ac7b97b9dec871edd96e86af127be1ef27548917a49476ce87f1719173369caf69d35d25637f0514e3e06069877968eb874a1c1adc92e760670e42b6cccd2fe0a5f9c543a44b382befc422d4486416b6fabe2f11944a3f08cded6fad9e3304a202d1c58841a6ab78b28a4162db2671d9ea74ee6f3b33a282f42abc911e3245531a34f5567cfcaa1cf762677c9f61d3aa2c4d76210edf440bf53e816d008ab2ea29cf42de9b88442d6b2eec4fbf23f7d23eaab316335dfc2dc10f9148df0b83d92c3a94fb0b49365af5ba599a1ea8e6fc7aea8df9208795cbbdf0af04f5f08fc828cb347a6e9daddbe514675b31e5134c7dfbb060dfc632ad82141ddea4e77e6c63c1843ca6fc820558b7355bae86e106c2be9c9b500c5134ab62444a8423d596bfe0e3b2df47dabf5abe271ae947f4878132915332e4fcc5b81ad6f12570de44f0fdd6a96397acebf95421c88ff274365be770edd1bd1f69bc2d2883fa70fa68828bddcb98f90b0b77e28f9c4726e5b0c52fa6f30a8d57321dfd2f2678bbc6511f39019f49d7dde6f19adeac78e4064b8288f5b4ac7d8ca35f7f70dfb376f5f3af98f02e76e57e21a00bac677703c8e2169816f5cf6c4d1bf803e0b2987544eeeffd197bcc10fe1d9a7b826a6693dc8bb32f19f25a88a15c3dcd30e7f48f0cda06ca99152bd1c892735598c32c6098ae12ef493334be720cb0ba3c710954fe0a80c3dec255f194761e5e904262118307bb49901808f9ca1af58648e9d57ffb744fd4f1d01b5ccaeaa5231def3f800cb8341d9109d93e3871c39", 0x475}], 0x1}}], 0x1, 0x40) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x80, &(0x7f0000d6f000/0x1000)=nil) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0xc0884) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 870.688165ms ago: executing program 8 (id=5962): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000080000006b1149000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) 831.758767ms ago: executing program 7 (id=5963): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000300), 0x4) 806.681382ms ago: executing program 5 (id=5964): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f00000007c0)=""/72, 0xfffffffffffffe0f, 0x0, 0x2, 0x2}}, 0x48) 145.730626ms ago: executing program 8 (id=5965): ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000001c0)={[0x28861e98, 0x7, 0xff, 0x0, 0x7, 0x0, 0x0, 0xbc, 0xc, 0x5, 0x10001, 0xfffff001, 0xd2b, 0x4ff, 0xe, 0x6, 0x4, 0x7, 0x1, 0x4, 0x1000, 0x1, 0x7, 0x0, 0x791e0556, 0x0, 0xffffffff, 0x5, 0x7, 0x3, 0x10, 0x7, 0x7f, 0x5, 0x3, 0x667d, 0x81, 0x7fffffff, 0x4, 0x8, 0x0, 0x5, 0x4, 0x6, 0x400, 0xff, 0x8, 0xfffffff8, 0xfffff226, 0xfffffffa, 0x80000000, 0x2, 0x4, 0x2bef0a6, 0x101, 0x4, 0x8, 0x6, 0x40f5, 0x7, 0xffff, 0xfffffffd, 0x0, 0xe, 0x4, 0xe, 0x2, 0x81, 0x2, 0x8, 0x8, 0x81, 0x7, 0x60ab, 0x400, 0x8, 0x2, 0xc, 0xd, 0x8, 0x972, 0x4, 0x7f, 0x5, 0xfb, 0x5, 0x4, 0x40, 0x4, 0x1, 0x7, 0x4, 0x2, 0xc, 0x1, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x9, 0x7, 0x0, 0xffff7d01, 0x8, 0xe3a, 0xd93, 0x8, 0x7, 0x10000, 0x1, 0x7, 0x9, 0x9, 0x4, 0x2, 0x7, 0x0, 0x4, 0x0, 0xff, 0x3, 0x8, 0xffff1b05, 0xb0, 0x8, 0xff, 0x2f, 0x7, 0x1, 0x7, 0x8, 0x6, 0x5, 0x0, 0x6, 0x9, 0x9, 0xfffffffd, 0x2, 0x40, 0x9, 0x8, 0x781258ac, 0x8, 0x7a8, 0x1, 0xffffffff, 0xabd, 0x9b6c, 0xb6dd, 0x9203, 0xa30, 0x172, 0xf8000001, 0x3ff, 0x3a8, 0x1, 0x2, 0x81, 0x6, 0x50, 0xc75d, 0x5, 0x800000, 0x8, 0x9, 0xa, 0x67a6, 0xfffffffb, 0x5, 0x1, 0xffffffff, 0x1, 0x3, 0x709d, 0xfffffff2, 0x1, 0x1, 0x10001, 0x3, 0x0, 0x2, 0x2, 0x7, 0x0, 0x9, 0x3, 0x4000003, 0x2, 0x8, 0xd5, 0x9, 0x7, 0x6, 0x1, 0x3, 0x10000, 0x1, 0x3714fc78, 0x4, 0xbc2, 0x7, 0x5, 0x2, 0x7ff, 0x3, 0xab, 0xff, 0x7, 0x0, 0x80000001, 0x3, 0x3, 0x7, 0x0, 0x4, 0xff, 0x4, 0x10000, 0x2, 0x7, 0x1, 0x20, 0x9, 0x8, 0x6, 0x8, 0x80000001, 0x8, 0x4002, 0x8, 0x4, 0x9de, 0x6, 0x4, 0x5, 0x10001, 0x2, 0x9, 0x5, 0x3, 0xf, 0xfffff7b0, 0xffff354c, 0x1000, 0xd, 0x1146, 0x0, 0x4, 0x8, 0x10001, 0x5, 0x72a, 0xcb8a, 0x6, 0x5ad, 0x6, 0xe253, 0x6, 0x4, 0x7, 0x9, 0x4, 0x7efb, 0x0, 0xe, 0x401, 0xfffffc00, 0x7fff, 0x80000000, 0x2, 0x3, 0x3, 0x81, 0x6, 0x6, 0x6, 0x4, 0x7ff, 0x2, 0x8, 0x4, 0x6d9, 0x4, 0x7, 0x7, 0x4, 0x7, 0x8, 0x6, 0x1, 0x21dc92b0, 0x10000, 0x3ff, 0x6, 0x1ff, 0x7ff, 0x0, 0x2, 0x1, 0x1, 0x8, 0x5, 0xfa33c9e0, 0xfffffffa, 0x8, 0x6, 0x8, 0xa, 0x6, 0x4, 0xfffffffd, 0x3, 0xfffffff9, 0x7fff, 0xd733, 0x10, 0x7f, 0x0, 0xffff7a56, 0x128, 0x9, 0x6, 0x6, 0x4, 0xf, 0x80, 0x8000, 0xffff, 0x9, 0x9, 0x4, 0x0, 0xb8b, 0x200, 0x9, 0x4, 0x9, 0x2, 0xfffffff6, 0x9, 0x1ff, 0x0, 0x2, 0x2, 0x7, 0x2007, 0x5, 0x5, 0xffff1b35, 0xff000000, 0x0, 0x8, 0x3, 0x1, 0x3, 0x7, 0xfffffff9, 0xa, 0x6, 0x6, 0x9, 0x8, 0x1, 0x7, 0x3, 0xcec, 0x4, 0x7e0690a1, 0xfffffffe, 0x7, 0x3, 0x2000, 0x0, 0xffff, 0x4, 0xfffffca9, 0x2, 0xbfa9, 0x8, 0x0, 0x6, 0x9, 0x2, 0xfffffffd, 0x1, 0x0, 0x7, 0x4, 0xfffffffd, 0x1, 0x510acf21, 0x4, 0x1c, 0x7, 0x2b1d, 0x4, 0x80000001, 0x6, 0x7, 0x1, 0x9, 0x7, 0x30e, 0x1, 0xffffffff, 0x2, 0x6, 0x9, 0x10001, 0xff, 0x7, 0x1, 0x100, 0xea, 0x5be, 0x8, 0xa2, 0x3, 0xc82, 0x40, 0x2, 0x1, 0x401, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x8, 0x0, 0x3, 0x7, 0x7f, 0x4, 0xab5, 0xb34, 0xffff, 0x8, 0x6, 0x4, 0x401, 0x9, 0x10000, 0xff, 0x6, 0x0, 0x5, 0x7, 0x1000, 0x5, 0x8, 0x3, 0x9, 0xff, 0x1, 0x1005, 0x80000001, 0x0, 0x40, 0x8, 0xfffffff1, 0x1, 0x8, 0x1, 0x8, 0x43c1, 0x3c2, 0xa, 0xffffffff, 0x10001, 0xffff0001, 0xb, 0x9476, 0xad4, 0x1, 0x7, 0x0, 0x3ff, 0x9, 0xfffffff9, 0x29b, 0x3, 0x5, 0x4, 0x9, 0x401, 0xff, 0x9, 0x80000001, 0xd, 0x31e8, 0x6410, 0xc42d, 0x9ac2, 0x7f, 0xfffffffd, 0x3, 0x9, 0x6, 0x2, 0xc, 0x8, 0x9, 0x2e82a536, 0x999f, 0x77b1000, 0x9, 0x5, 0x81, 0x9, 0x2, 0x1, 0x3, 0x4, 0x6, 0x7, 0x200, 0xceca, 0x9, 0x7fffffff, 0x8001, 0x7, 0xa, 0xffffffe3, 0x8, 0x1, 0x1, 0x0, 0x8, 0xa, 0x2, 0x58f4, 0x3, 0x7, 0x2, 0xea, 0x3, 0x8000, 0xc42c, 0x800, 0x0, 0x38000, 0x50, 0x4, 0x3, 0x4, 0xffc, 0x3, 0x1, 0x7, 0x3, 0x3, 0x8, 0x3, 0x90, 0x3, 0x9, 0x98a, 0x8, 0x5, 0x400, 0xe, 0x2, 0x1, 0xff, 0x2, 0x7, 0x293, 0x20000e, 0x10000, 0xbd7, 0x84a4e3c, 0x6, 0x81, 0x8, 0x0, 0x4, 0xffff, 0x401, 0x81, 0x9, 0x6, 0x3, 0x7ff, 0x2, 0x3, 0xb, 0xaa, 0x74, 0x0, 0x6, 0x5, 0x5, 0x1, 0x100, 0x3, 0x1ff, 0x41c2, 0x1, 0xb, 0x3f58, 0x0, 0xff, 0x9, 0x1abadea7, 0x6, 0x7, 0x7, 0x40, 0x0, 0xff, 0x7f, 0x7, 0x9, 0x80000000, 0xfffffe01, 0x5, 0x4, 0xd, 0xae41, 0x4d, 0x5, 0x8, 0x0, 0x7f, 0xad, 0x40, 0xfffffff1, 0xfffeffff, 0x1, 0x6, 0xf, 0x3, 0x4, 0x4fa, 0x2, 0xb7, 0x102, 0x7ff, 0x7fff, 0x7ff, 0x9, 0x100000e, 0xd82, 0x3, 0x0, 0x5, 0x3ff, 0x401, 0x7, 0x2, 0xab1, 0x9, 0xfffffffe, 0xa49, 0xc, 0x8, 0x81, 0xc6, 0x0, 0x7, 0x3, 0x2, 0x1, 0x3, 0x81, 0x6, 0x3, 0x9, 0x3d, 0x2, 0xa, 0x81, 0x2, 0x8, 0x5, 0xe, 0xb, 0x9, 0x5, 0x0, 0xa, 0x9, 0xf, 0x9, 0x1, 0xffffff13, 0x7, 0x8, 0x81, 0x200, 0x4, 0x7, 0x6, 0x8, 0x4, 0x9, 0x6, 0x9, 0x9, 0x5, 0xc3, 0x2b6ff775, 0x4, 0x7, 0x0, 0x2, 0x400, 0xe, 0x8, 0x9, 0x1, 0x5, 0x6, 0x9, 0x5, 0x401, 0x6, 0x9, 0x9, 0x279, 0x2, 0x7f, 0x9, 0x80000000, 0x5, 0x0, 0xc, 0xfffffff7, 0x5, 0x397, 0x1, 0x6, 0x0, 0x80000001, 0x4edc, 0xa6c, 0x0, 0xf7d6, 0x1, 0x8, 0xd33, 0x3ff, 0x81, 0x1, 0x240000, 0x5, 0xc, 0x2, 0x3, 0x49fc, 0x6, 0xc89, 0x8, 0x8, 0xf, 0x2, 0x3, 0x1, 0xaab, 0x6, 0x401, 0x20005, 0xfff, 0x4, 0x9, 0x1, 0x0, 0x8000, 0x1ff, 0x8000, 0x80, 0xe2d3, 0x0, 0x1002, 0x1, 0x7, 0xa, 0x8, 0x200, 0x7, 0x7, 0x8455, 0x5, 0x9, 0x1, 0x2abf, 0xffff, 0x7, 0x2000020, 0x7, 0x2, 0x6, 0x8, 0x0, 0xb8f, 0xa, 0xa, 0x2, 0xffffffff, 0x8, 0xc, 0x7, 0x3, 0x2, 0x0, 0x2, 0x1, 0x6, 0x7, 0x200, 0x4, 0x2, 0xf7a6, 0x1, 0x9, 0x3, 0x40, 0x3, 0x1, 0xf, 0x800, 0xb231, 0x7de, 0x40, 0x3, 0x0, 0x200, 0x7f, 0x7ff, 0x5, 0x2, 0x1, 0xa73, 0x9, 0xc321, 0x1, 0x48, 0x10001, 0x5, 0x0, 0x2, 0x7ac0, 0xfff, 0x3, 0x2, 0x2, 0x901, 0x6, 0xfffffffb, 0x3ff, 0x0, 0x5, 0x5, 0x3, 0xff, 0x6, 0xa, 0x2, 0x80000000, 0x9, 0xf, 0x1, 0x100, 0x80000001, 0xfffffffa, 0x8, 0x71, 0x1, 0x7, 0x7, 0x1163, 0x2, 0x9, 0x1, 0x65e7, 0x400, 0x2, 0xe384, 0x6, 0x0, 0xffffffff, 0xe, 0x894, 0x5, 0x8, 0xffffffff, 0x80, 0x77a2d67e, 0x2, 0x80000000, 0x1, 0x8c, 0x1, 0x7, 0x8, 0xfffffffc, 0x5, 0x9, 0x2, 0x3fbd40, 0x1, 0x10001, 0x1, 0x7f, 0xe, 0x6, 0x3, 0x5, 0x406, 0xff, 0x7, 0x101, 0x7, 0xf, 0x8, 0x7, 0x9, 0x8000, 0x8000, 0x3, 0x1, 0x3, 0x9, 0x2, 0x401, 0x2, 0x3, 0x2, 0xa1dc, 0x2, 0x6, 0xb25, 0x2, 0x6, 0x4, 0x6, 0x5, 0x3d91, 0xffffffff, 0x2dd, 0x7, 0x4, 0x0, 0x3ff, 0x1, 0x80, 0xff, 0x6, 0x3, 0x8000, 0x71, 0x6, 0x8, 0x5, 0x0, 0xa01250fd, 0x101, 0x3, 0x3, 0x8b16, 0x9, 0x543, 0x8, 0x2, 0x7, 0x2, 0x8, 0x1000, 0xfffffffc, 0x8, 0x40, 0x4, 0x5, 0xb93, 0x4, 0xb5e7, 0x0, 0xf547, 0xf, 0x2, 0xffffffc0, 0xab8, 0x2, 0x6, 0x6, 0x101, 0x49, 0x3, 0x7, 0x8, 0x9, 0x2, 0xfff, 0x1, 0x6, 0x3, 0xffffdff7, 0xf, 0x1, 0xffffff7c, 0x9, 0x7f, 0xe, 0x858, 0x7ff, 0x1, 0x3, 0x800000, 0x21f6, 0x4, 0x2, 0xb, 0x7, 0x6, 0xa, 0x6, 0x8e, 0xcd, 0x85, 0x6, 0x5732, 0x93e]}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) chmod(0x0, 0x3dc) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x8, 0x20, 0x0, {0x5, 0x40000000000000a, 0x0, 0x80000001, 0x8000000000000000, 0x1, 0x9ec, 0x35741061, 0x10000, 0xc000, 0x9e7, 0xffffffffffffffff, 0x0, 0x10, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f00000022c0)={{0x3, 0x0, 0x80, {0x0, 0x80af000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000200)="b9f20800000f3226660fc7330f07f30fc7b7000000000f01cfc4e27925b719d77a0a98b8080000000f23c80f21f8350c0070000f23f8660f2f8664f44e4f0f004d01", 0x42}], 0x1, 0x1e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 145.533432ms ago: executing program 7 (id=5966): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffdfffd8, 0x14000000, 0x4, 0x7, 0xff, "033a9280870e00", 0x8, 0x81}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xf9) 145.294204ms ago: executing program 5 (id=5967): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f00000005c0)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000c00000/0x400000)=nil, 0x400000}) 0s ago: executing program 7 (id=5968): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x20000001bbc, 0x8801) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4dda) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b) kernel console output (not intermixed with test programs): rom the interface descriptor's value: 100 [ 1639.525169][T19653] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1639.564598][T19653] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1639.582796][T19653] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1639.596164][T19653] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1639.608350][T19653] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1639.631980][T19653] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1639.645101][T19653] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1639.655077][T27242] netlink: 272 bytes leftover after parsing attributes in process `syz.8.5302'. [ 1639.657535][T19653] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1639.679313][T19653] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1639.689501][T19653] usb 10-1: string descriptor 0 read error: -22 [ 1639.696086][T19653] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1639.705243][T19653] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.745630][T19653] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1639.783954][T27243] /dev/nullb0: Can't open blockdev [ 1640.854453][ T30] audit: type=1400 audit(1764406772.194:2342): avc: denied { read } for pid=27248 comm="syz.0.5304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1641.664999][ T30] audit: type=1400 audit(1764406772.943:2343): avc: denied { setopt } for pid=27250 comm="syz.7.5305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1641.722247][ T5857] kl5kusb105 6-1:0.230: KL5KUSB105D / PalmConnect converter detected [ 1641.756263][ T5857] usb 6-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 1641.784752][ T5857] usb 6-1: USB disconnect, device number 126 [ 1641.802779][ T5857] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 1641.823888][ T5857] kl5kusb105 6-1:0.230: device disconnected [ 1642.091285][T27265] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5309'. [ 1642.101206][T27265] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=27265 comm=syz.8.5309 [ 1642.157937][T27266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1642.329180][ T5857] usb 10-1: USB disconnect, device number 34 [ 1644.344320][T27286] bond0: (slave bond_slave_1): Device is not our slave [ 1644.351209][T27286] bond0: option active_slave: invalid value (bond_slave_1) [ 1644.360411][T27286] bond0 (unregistering): Released all slaves [ 1644.414480][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5315'. [ 1644.425459][ T30] audit: type=1400 audit(1764406775.535:2344): avc: denied { getopt } for pid=27281 comm="syz.5.5315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1646.074743][ T30] audit: type=1400 audit(1764406777.070:2345): avc: denied { shutdown } for pid=27303 comm="syz.9.5322" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1647.193628][T27316] netlink: 288 bytes leftover after parsing attributes in process `syz.7.5325'. [ 1647.248549][T27317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=27317 comm=syz.7.5325 [ 1647.299577][T27318] /dev/nullb0: Can't open blockdev [ 1647.604327][T27322] overlayfs: missing 'lowerdir' [ 1647.816348][T27114] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1647.827312][ T30] audit: type=1400 audit(1764406778.717:2346): avc: denied { ioctl } for pid=27323 comm="syz.9.5328" path="socket:[113525]" dev="sockfs" ino=113525 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1648.339139][ T30] audit: type=1400 audit(1764406779.194:2347): avc: denied { getopt } for pid=27333 comm="syz.7.5330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1648.359874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1648.385011][T27334] i2c i2c-0: Invalid block write size 58 [ 1648.769109][T27114] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1648.776663][T27114] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1648.788333][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1648.801879][T27114] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.814076][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1648.825868][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1648.852781][T27114] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1648.884948][T27114] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1648.896686][T27114] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1648.910950][T27114] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1648.925099][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1648.958071][T27114] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1648.975153][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1648.996523][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.002074][ T30] audit: type=1400 audit(1764406779.812:2348): avc: denied { connect } for pid=27344 comm="syz.5.5335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1649.008194][T27114] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1649.043419][T27114] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1649.063376][T27114] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1649.071032][T27114] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1649.086714][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1649.106094][T27114] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1649.123227][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1649.134815][T27114] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1649.146306][T27114] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1649.160092][T27114] usb 1-1: config 168 interface 0 has no altsetting 0 [ 1649.544817][T27114] usb 1-1: string descriptor 0 read error: -22 [ 1649.551285][ T24] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1649.559043][T27114] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1649.571374][T27114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.635077][T27114] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1649.686282][ T42] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1649.707599][ T24] usb 8-1: device descriptor read/64, error -71 [ 1649.965954][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1649.984534][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1650.020815][ T42] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1650.030130][ T24] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1650.038079][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.049669][ T42] usb 6-1: Product: syz [ 1650.053961][ T42] usb 6-1: Manufacturer: syz [ 1650.058666][ T42] usb 6-1: SerialNumber: syz [ 1650.119001][ T42] usb 6-1: config 0 descriptor?? [ 1650.122852][T27357] siw: device registration error -23 [ 1650.190780][ T24] usb 8-1: device descriptor read/64, error -71 [ 1650.308623][ T24] usb usb8-port1: attempt power cycle [ 1650.559184][T27360] overlay: Unknown parameter '/' [ 1650.712336][ T24] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1650.735095][ T24] usb 8-1: device descriptor read/8, error -71 [ 1651.118173][ T24] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1651.184917][ T24] usb 8-1: device descriptor read/8, error -71 [ 1651.300168][ T24] usb usb8-port1: unable to enumerate USB device [ 1652.014602][T27370] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5341'. [ 1652.490730][ T42] usb 6-1: USB disconnect, device number 127 [ 1652.536548][T27376] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1652.584578][T21001] udevd[21001]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1653.844023][T27399] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5348'. [ 1654.302211][ T42] usb 8-1: new low-speed USB device number 76 using dummy_hcd [ 1654.448030][T27404] FAULT_INJECTION: forcing a failure. [ 1654.448030][T27404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1654.461453][T27404] CPU: 0 UID: 0 PID: 27404 Comm: syz.5.5350 Not tainted syzkaller #0 PREEMPT(full) [ 1654.461478][T27404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1654.461489][T27404] Call Trace: [ 1654.461495][T27404] [ 1654.461502][T27404] dump_stack_lvl+0x16c/0x1f0 [ 1654.461523][T27404] should_fail_ex+0x512/0x640 [ 1654.461547][T27404] _copy_from_user+0x2e/0xd0 [ 1654.461567][T27404] sync_file_ioctl+0x1ad/0xfc0 [ 1654.461583][T27404] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1654.461607][T27404] ? do_vfs_ioctl+0x128/0x14f0 [ 1654.461631][T27404] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1654.461648][T27404] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1654.461683][T27404] ? selinux_file_ioctl+0x180/0x270 [ 1654.461700][T27404] ? selinux_file_ioctl+0xb4/0x270 [ 1654.461720][T27404] ? __pfx_sync_file_ioctl+0x10/0x10 [ 1654.461737][T27404] __x64_sys_ioctl+0x18e/0x210 [ 1654.461760][T27404] do_syscall_64+0xcd/0xfa0 [ 1654.461777][T27404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.461794][T27404] RIP: 0033:0x7fd6d6d8f749 [ 1654.461808][T27404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1654.461824][T27404] RSP: 002b:00007fd6d7c33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1654.461841][T27404] RAX: ffffffffffffffda RBX: 00007fd6d6fe6090 RCX: 00007fd6d6d8f749 [ 1654.461851][T27404] RDX: 0000200000000080 RSI: 00000000c0303e03 RDI: 0000000000000009 [ 1654.461861][T27404] RBP: 00007fd6d7c33090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.461871][T27404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1654.461880][T27404] R13: 00007fd6d6fe6128 R14: 00007fd6d6fe6090 R15: 00007ffd37b10258 [ 1654.461904][T27404] [ 1654.485327][ T42] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1654.487883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1654.494437][ T42] usb 8-1: config 0 has no interface number 0 [ 1654.721317][ T42] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1654.732827][ T42] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1654.747114][ T42] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1654.765879][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.794290][ T42] usb 8-1: config 0 descriptor?? [ 1654.806817][T27396] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1654.996218][ T42] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 1655.432268][ T30] audit: type=1326 audit(1764406785.830:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27395 comm="syz.7.5349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38b8d8f749 code=0x0 [ 1655.455518][ T5857] usb 1-1: USB disconnect, device number 78 [ 1655.466716][T27396] adutux: adu_open - error, can't find device for minor 0 [ 1655.486083][T27396] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5349'. [ 1655.504225][ T30] audit: type=1400 audit(1764406785.905:2350): avc: denied { map } for pid=27395 comm="syz.7.5349" path="pipe:[67790]" dev="pipefs" ino=67790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1655.522291][T19653] usb 8-1: USB disconnect, device number 76 [ 1655.528062][ T30] audit: type=1400 audit(1764406785.905:2351): avc: denied { execute } for pid=27395 comm="syz.7.5349" path="pipe:[67790]" dev="pipefs" ino=67790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1655.563020][ T9] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1655.735403][ T9] usb 10-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1655.757750][ T9] usb 10-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1655.768842][ T30] audit: type=1400 audit(1764406786.101:2352): avc: denied { watch } for pid=27423 comm="syz.8.5357" path=2F6D656D66643A2D42D54E34A64579DBD1A7B153F13A29202864656C6574656429 dev="tmpfs" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1655.787223][ T9] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1655.807833][ T9] usb 10-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1655.819086][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1655.829876][ T9] usb 10-1: config 0 descriptor?? [ 1656.655355][ T9] a4tech 0003:09DA:000A.003C: unknown main item tag 0x2 [ 1656.819655][ T9] a4tech 0003:09DA:000A.003C: hidraw0: USB HID v0.06 Device [HID 09da:000a] on usb-dummy_hcd.9-1/input0 [ 1656.862286][ T9] usb 10-1: USB disconnect, device number 35 [ 1656.957543][ T30] audit: type=1400 audit(1764406787.262:2353): avc: denied { mount } for pid=27438 comm="syz.5.5362" name="/" dev="rpc_pipefs" ino=115075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1657.143873][T27443] fido_id[27443]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1657.293880][ T5857] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1657.487698][ T5857] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1657.497083][ T5857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.506802][ T5857] usb 6-1: config 0 descriptor?? [ 1657.604305][ T42] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1657.828589][ T42] usb 1-1: Using ep0 maxpacket: 32 [ 1657.866364][ T42] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1657.879233][ T42] usb 1-1: config 1 has an invalid interface number: 124 but max is 2 [ 1657.898426][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1657.927109][ T42] usb 1-1: config 1 has no interface number 0 [ 1657.933237][ T42] usb 1-1: config 1 interface 124 has no altsetting 0 [ 1657.958840][ T42] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f4.6a [ 1657.961704][ T5857] usb 6-1: Cannot read MAC address [ 1657.980207][ T5857] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 1657.980647][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.026766][ T42] usb 1-1: Product: syz [ 1658.031801][ T42] usb 1-1: Manufacturer: syz [ 1658.053157][ T42] usb 1-1: SerialNumber: syz [ 1658.271532][ T5857] usb 6-1: USB disconnect, device number 2 [ 1658.413952][T27467] bridge0: entered allmulticast mode [ 1658.424273][T27467] pim6reg: entered allmulticast mode [ 1658.431436][T27467] pim6reg: left allmulticast mode [ 1658.436608][T27467] bridge0: left allmulticast mode [ 1658.573448][T27469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1658.686844][T15432] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1658.698406][ T30] audit: type=1400 audit(1764406788.731:2354): avc: denied { write } for pid=27448 comm="syz.0.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1658.718759][T22198] usb 9-1: new low-speed USB device number 67 using dummy_hcd [ 1658.971721][T15432] usb 8-1: Using ep0 maxpacket: 16 [ 1658.978596][T15432] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1658.987440][T22198] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1658.995358][T15432] usb 8-1: config 0 has no interface number 0 [ 1659.001514][T22198] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1659.013273][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1659.025552][T22198] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.038179][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1659.050409][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1659.062549][T22198] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1659.076400][T22198] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1659.084285][T15432] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1659.097907][T22198] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1659.109951][T15432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.128016][T22198] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1659.150597][T15432] usb 8-1: Product: syz [ 1659.155449][T15432] usb 8-1: Manufacturer: syz [ 1659.160079][T15432] usb 8-1: SerialNumber: syz [ 1659.165834][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1659.182017][T15432] usb 8-1: config 0 descriptor?? [ 1659.192578][T22198] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1659.353059][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1659.372767][T15432] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1659.946288][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1659.958084][T22198] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1659.971999][T22198] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1659.984128][T22198] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1659.992288][T22198] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1660.004144][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1660.015741][T22198] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1660.028773][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1660.041091][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1660.131630][T22198] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1660.148261][T22198] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1660.171439][T22198] usb 9-1: string descriptor 0 read error: -22 [ 1660.181430][T22198] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1660.327942][T22198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.910069][T22198] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1660.953868][ T42] peak_usb 1-1:1.124 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1660.991609][ T42] peak_usb 1-1:1.124: unable to read PCAN-USB serial number (err -22) [ 1661.216756][ T42] peak_usb 1-1:1.124: probe with driver peak_usb failed with error -22 [ 1661.250478][ T42] usb 1-1: USB disconnect, device number 79 [ 1661.476305][T27495] netlink: 'syz.9.5376': attribute type 27 has an invalid length. [ 1661.559235][T27495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1661.568335][T27495] 8021q: adding VLAN 0 to HW filter on device team0 [ 1661.597352][T27495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1661.888516][ T5857] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1662.017168][T11312] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1662.123903][ T5857] usb 10-1: Using ep0 maxpacket: 16 [ 1662.162575][ T5857] usb 10-1: config 0 has an invalid interface number: 216 but max is 0 [ 1662.171789][ T5857] usb 10-1: config 0 has no interface number 0 [ 1662.180285][ T5857] usb 10-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 1662.191526][ T5857] usb 10-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 1662.204105][ T5857] usb 10-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1662.217595][ T5857] usb 10-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 1662.227130][ T5857] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.236446][ T5857] usb 10-1: Product: syz [ 1662.240767][ T5857] usb 10-1: Manufacturer: syz [ 1662.246749][ T5857] usb 10-1: SerialNumber: syz [ 1662.254166][ T5857] usb 10-1: config 0 descriptor?? [ 1662.264188][T27496] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1662.271440][T27496] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1662.279833][ T5857] usb-storage 10-1:0.216: USB Mass Storage device detected [ 1662.296867][ T5857] scsi host1: usb-storage 10-1:0.216 [ 1662.338805][T11312] usb 6-1: Using ep0 maxpacket: 16 [ 1662.346058][T11312] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1662.355045][T11312] usb 6-1: config 6 has an invalid interface number: 3 but max is 0 [ 1662.362455][T15432] gspca_spca1528: reg_r err -71 [ 1662.364194][T11312] usb 6-1: config 6 has no interface number 0 [ 1662.373106][T15432] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1662.374997][T11312] usb 6-1: config 6 interface 3 has no altsetting 0 [ 1662.388658][T15432] usb 8-1: USB disconnect, device number 77 [ 1662.393712][T11312] usb 6-1: language id specifier not provided by device, defaulting to English [ 1662.411782][T11312] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=44.bd [ 1662.421006][T11312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.429486][T11312] usb 6-1: SerialNumber: ࠔ [ 1662.615396][ T42] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1662.754840][ T42] usb 1-1: device descriptor read/64, error -71 [ 1662.839478][T11312] uvcvideo 6-1:6.3: Found UVC 0.00 device (046d:08c1) [ 1662.847290][T11312] uvcvideo 6-1:6.3: No valid video chain found. [ 1662.857789][T11312] usb 6-1: USB disconnect, device number 3 [ 1663.010830][ T42] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1663.149724][ T42] usb 1-1: device descriptor read/64, error -71 [ 1663.288148][ T9] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1663.329254][ T42] usb usb1-port1: attempt power cycle [ 1663.393376][ T30] audit: type=1400 audit(1764406793.280:2355): avc: denied { read write } for pid=27511 comm="syz.5.5382" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1663.418865][ T30] audit: type=1400 audit(1764406793.280:2356): avc: denied { open } for pid=27511 comm="syz.5.5382" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1663.459073][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1663.465633][ T9] usb 8-1: config 0 has an invalid interface number: 172 but max is 0 [ 1663.474155][ T9] usb 8-1: config 0 has no interface number 0 [ 1663.480358][ T9] usb 8-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1663.492981][ T9] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1663.502247][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.510292][ T9] usb 8-1: Product: syz [ 1663.514545][ T9] usb 8-1: Manufacturer: syz [ 1663.519180][ T9] usb 8-1: SerialNumber: syz [ 1663.525873][ T9] usb 8-1: config 0 descriptor?? [ 1663.532972][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1663.694629][ T42] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1663.716332][ T42] usb 1-1: device descriptor read/8, error -71 [ 1663.972500][ T42] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1663.994178][ T42] usb 1-1: device descriptor read/8, error -71 [ 1664.111471][ T42] usb usb1-port1: unable to enumerate USB device [ 1664.399925][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.7/usb8/8-1/input/input81 [ 1664.628633][ T9] usb 8-1: USB disconnect, device number 78 [ 1664.777171][T11312] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1664.794912][T11312] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1665.255193][T11312] usb 9-1: USB disconnect, device number 67 [ 1665.261516][ T42] usb 10-1: USB disconnect, device number 36 [ 1665.551920][T27524] IPv4: Oversized IP packet from 127.202.26.0 [ 1665.563663][T27524] MPI: mpi too large (130824 bits) [ 1665.745877][T27538] siw: device registration error -23 [ 1666.708780][ T30] audit: type=1400 audit(1764406795.891:2357): avc: denied { append } for pid=27534 comm="syz.9.5390" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1666.731642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1666.889665][T27549] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1666.896215][T27549] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1666.904886][T27549] vhci_hcd vhci_hcd.0: Device attached [ 1666.912938][T27550] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 1666.922034][T14289] vhci_hcd: stop threads [ 1666.926912][T14289] vhci_hcd: release socket [ 1666.931346][T14289] vhci_hcd: disconnect device [ 1667.201892][ T9] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1667.701195][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1667.713328][ T9] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1667.727194][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.735884][ T9] usb 8-1: Product: syz [ 1667.740136][ T9] usb 8-1: Manufacturer: syz [ 1667.744906][ T9] usb 8-1: SerialNumber: syz [ 1667.755704][ T9] usb 8-1: config 0 descriptor?? [ 1667.977171][T27570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.988222][T27570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1668.002451][ T9] usb 8-1: USB disconnect, device number 79 [ 1668.005672][ T42] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1668.179569][T27572] ip6t_rpfilter: unknown options [ 1668.210279][T22198] usb 9-1: new low-speed USB device number 68 using dummy_hcd [ 1668.221369][ T42] usb 6-1: device descriptor read/64, error -71 [ 1668.399692][T22198] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1668.432284][T22198] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1668.446323][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1668.458023][T22198] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1668.471052][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1668.483544][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1668.495871][T22198] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1668.509858][T22198] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1668.517724][T22198] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1668.525232][T22198] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1668.537006][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1668.548561][T22198] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1668.561134][ T42] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1668.569587][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1668.581583][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1668.593443][T22198] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1668.607739][T22198] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1668.615780][T22198] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1668.623782][T22198] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1668.635587][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1668.647167][T22198] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1668.660690][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1668.674902][T22198] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1668.686787][T22198] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1668.700762][T22198] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1668.857100][ T42] usb 6-1: device descriptor read/64, error -71 [ 1668.875168][T22198] usb 9-1: string descriptor 0 read error: -22 [ 1668.882104][T22198] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1668.892166][T22198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1669.361550][ T42] usb usb6-port1: attempt power cycle [ 1669.451334][ T5857] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1669.478111][T22198] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1669.483309][T27586] siw: device registration error -23 [ 1669.635254][ T5857] usb 8-1: device descriptor read/64, error -71 [ 1669.823903][ T42] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1669.860801][ T42] usb 6-1: device descriptor read/8, error -71 [ 1669.913292][ T5857] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1669.949325][T27593] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5405'. [ 1670.137800][ T42] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1670.160158][ T5857] usb 8-1: device descriptor read/64, error -71 [ 1670.160808][ T42] usb 6-1: device descriptor read/8, error -71 [ 1670.310684][ T42] usb usb6-port1: unable to enumerate USB device [ 1670.310776][ T5857] usb usb8-port1: attempt power cycle [ 1671.117551][ T5857] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1671.152155][ T5857] usb 8-1: device descriptor read/8, error -71 [ 1671.440661][ T5857] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1671.462884][ T5857] usb 8-1: device descriptor read/8, error -71 [ 1671.579842][ T5857] usb usb8-port1: unable to enumerate USB device [ 1671.824414][T27626] ip6t_rpfilter: unknown options [ 1672.210340][T27627] /dev/nullb0: Can't open blockdev [ 1672.446364][T27630] Cannot find del_set index 1 as target [ 1672.992062][T27640] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5416'. [ 1673.084813][T27649] /dev/nullb0: Can't open blockdev [ 1673.589600][ T42] usb 9-1: USB disconnect, device number 68 [ 1674.526712][T27674] ip6t_rpfilter: unknown options [ 1674.934436][T11312] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1675.017716][T27677] Cannot find del_set index 1 as target [ 1675.208367][T11312] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1675.223609][T11312] usb 10-1: config 0 has no interface number 0 [ 1675.232095][T11312] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1675.246647][T11312] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1675.256835][T11312] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.270699][T11312] usb 10-1: Product: syz [ 1675.274993][T11312] usb 10-1: Manufacturer: syz [ 1675.280384][T11312] usb 10-1: SerialNumber: syz [ 1675.296664][T11312] usb 10-1: config 0 descriptor?? [ 1675.793809][T27666] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1676.125499][T27692] /dev/nullb0: Can't open blockdev [ 1676.560130][ T5857] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1676.740566][ T5857] usb 8-1: Using ep0 maxpacket: 32 [ 1676.776353][ T5857] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1676.815922][ T5857] usb 8-1: config 56 has an invalid descriptor of length 227, skipping remainder of the config [ 1676.836798][ T5857] usb 8-1: config 56 has 0 interfaces, different from the descriptor's value: 1 [ 1676.879412][ T5857] usb 8-1: New USB device found, idVendor=2020, idProduct=2031, bcdDevice=3b.23 [ 1676.889158][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1676.900896][ T5857] usb 8-1: Product: syz [ 1676.905191][ T5857] usb 8-1: Manufacturer: syz [ 1676.911565][ T5857] usb 8-1: SerialNumber: syz [ 1677.074016][T27666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1677.085900][T27666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1677.098337][T11312] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1677.109505][T11312] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1677.120033][T11312] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1677.691576][ T5857] usb 8-1: USB disconnect, device number 84 [ 1677.709599][T11312] usb 10-1: USB disconnect, device number 37 [ 1678.359227][T27719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5436'. [ 1678.639182][T27723] Cannot find del_set index 1 as target [ 1678.645779][ T30] audit: type=1326 audit(1764406807.552:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.5.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6d8f749 code=0x7ffc0000 [ 1678.677701][T27718] qnx6: unable to set blocksize [ 1678.683531][ T30] audit: type=1326 audit(1764406807.552:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.5.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6d8f749 code=0x7ffc0000 [ 1678.707044][ C1] vkms_vblank_simulate: vblank timer overrun [ 1678.715158][ T30] audit: type=1326 audit(1764406807.552:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.5.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd6d6d8f749 code=0x7ffc0000 [ 1678.816646][ T30] audit: type=1326 audit(1764406807.552:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.5.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6d8f749 code=0x7ffc0000 [ 1678.854021][ T30] audit: type=1326 audit(1764406807.552:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27711 comm="syz.5.5438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6d8f749 code=0x7ffc0000 [ 1678.949288][T27726] FAULT_INJECTION: forcing a failure. [ 1678.949288][T27726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1678.962755][T27726] CPU: 0 UID: 0 PID: 27726 Comm: syz.8.5439 Not tainted syzkaller #0 PREEMPT(full) [ 1678.962781][T27726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1678.962792][T27726] Call Trace: [ 1678.962798][T27726] [ 1678.962805][T27726] dump_stack_lvl+0x16c/0x1f0 [ 1678.962827][T27726] should_fail_ex+0x512/0x640 [ 1678.962870][T27726] _copy_to_user+0x32/0xd0 [ 1678.962894][T27726] simple_read_from_buffer+0xcb/0x170 [ 1678.962923][T27726] proc_fail_nth_read+0x197/0x240 [ 1678.962946][T27726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1678.962968][T27726] ? rw_verify_area+0xcf/0x6c0 [ 1678.962999][T27726] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1678.963020][T27726] vfs_read+0x1e4/0xcf0 [ 1678.963039][T27726] ? __pfx___mutex_lock+0x10/0x10 [ 1678.963058][T27726] ? __pfx_vfs_read+0x10/0x10 [ 1678.963081][T27726] ? __fget_files+0x20e/0x3c0 [ 1678.963106][T27726] ksys_read+0x12a/0x250 [ 1678.963122][T27726] ? __pfx_ksys_read+0x10/0x10 [ 1678.963138][T27726] ? fput+0x9b/0xd0 [ 1678.963164][T27726] do_syscall_64+0xcd/0xfa0 [ 1678.963182][T27726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.963199][T27726] RIP: 0033:0x7f997bf8e15c [ 1678.963214][T27726] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1678.963229][T27726] RSP: 002b:00007f997cd4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1678.963246][T27726] RAX: ffffffffffffffda RBX: 00007f997c1e6090 RCX: 00007f997bf8e15c [ 1678.963257][T27726] RDX: 000000000000000f RSI: 00007f997cd4c0a0 RDI: 000000000000000a [ 1678.963268][T27726] RBP: 00007f997cd4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1678.963278][T27726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1678.963288][T27726] R13: 00007f997c1e6128 R14: 00007f997c1e6090 R15: 00007fff26799928 [ 1678.963314][T27726] [ 1679.423552][ T30] audit: type=1400 audit(1764406808.292:2363): avc: denied { setopt } for pid=27731 comm="syz.0.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1679.910625][T27743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5447'. [ 1680.443368][T15432] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1680.609021][T15432] usb 10-1: Using ep0 maxpacket: 32 [ 1681.029527][T27756] Cannot find del_set index 1 as target [ 1681.216856][T15432] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1681.231358][T15432] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.266139][T15432] usb 10-1: config 0 descriptor?? [ 1681.519719][T15432] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1681.529755][T15432] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1681.541728][T15432] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1681.549634][T15432] usb 10-1: media controller created [ 1681.564933][T15432] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1681.679716][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5455'. [ 1681.703399][T27770] SELinux: Context x is not valid (left unmapped). [ 1681.730657][ T42] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1681.738357][T22198] usb 8-1: new full-speed USB device number 85 using dummy_hcd [ 1681.903870][T22198] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 1681.916594][T22198] usb 8-1: config 0 has no interface number 0 [ 1681.931352][T22198] usb 8-1: config 0 interface 41 has no altsetting 0 [ 1681.951696][T22198] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1681.970362][T22198] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.979407][T22198] usb 8-1: Product: syz [ 1681.983666][T22198] usb 8-1: Manufacturer: syz [ 1681.990860][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1682.000614][T22198] usb 8-1: SerialNumber: syz [ 1682.011828][T22198] usb 8-1: config 0 descriptor?? [ 1682.457038][T27114] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1682.467208][T27767] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1682.617647][T27114] usb 1-1: Using ep0 maxpacket: 16 [ 1682.644333][T27114] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1682.655074][T27114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.664251][T27114] usb 1-1: Product: syz [ 1682.669017][T27114] usb 1-1: Manufacturer: syz [ 1682.694742][T27114] usb 1-1: SerialNumber: syz [ 1682.710542][T27114] usb 1-1: config 0 descriptor?? [ 1682.772612][T27114] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1682.806204][T27114] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1682.840589][T20725] udevd[20725]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1683.020867][T27751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.031066][T27751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.045391][T27114] usb 1-1: USB disconnect, device number 84 [ 1683.641228][T27767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1683.668060][T27767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1683.725585][T15432] az6027: usb out operation failed. (-71) [ 1683.733684][T15432] stb0899_attach: Driver disabled by Kconfig [ 1683.740427][T15432] az6027: no front-end attached [ 1683.740427][T15432] [ 1683.748499][T15432] az6027: usb out operation failed. (-71) [ 1683.759210][T22198] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1683.868108][T22198] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1683.878847][T15432] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1683.889780][T15432] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input83 [ 1683.910630][T22198] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 1683.929949][T15432] dvb-usb: schedule remote query interval to 400 msecs. [ 1683.940662][T22198] usb 8-1: USB disconnect, device number 85 [ 1683.947141][T15432] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1683.960345][T15432] usb 10-1: USB disconnect, device number 38 [ 1684.277049][T27796] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5460'. [ 1684.287327][T11312] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 1685.048222][T11312] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1685.067897][T11312] usb 6-1: config 0 has no interface number 0 [ 1685.074048][T11312] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1685.075469][T15432] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1685.108248][T11312] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1685.117930][T11312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.248195][T11312] usb 6-1: Product: syz [ 1685.253610][T11312] usb 6-1: Manufacturer: syz [ 1685.264115][T11312] usb 6-1: SerialNumber: syz [ 1685.270662][T11312] usb 6-1: config 0 descriptor?? [ 1685.403023][T27805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5463'. [ 1685.845975][T27810] SET target dimension over the limit! [ 1686.003985][T27793] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1686.075210][T27817] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5462'. [ 1687.301967][T27828] wg1 speed is unknown, defaulting to 1000 [ 1687.447370][T15432] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1687.551129][ T42] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1687.643751][T15432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1687.669698][T15432] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1687.841638][T27793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1687.988598][T15432] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1688.011156][T27793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1688.025774][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1688.055516][T15432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.065394][ T42] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1688.109924][T15432] usb 8-1: Product: syz [ 1688.128707][T15432] usb 8-1: Manufacturer: syz [ 1688.175641][T15432] usb 8-1: SerialNumber: syz [ 1688.429299][T11312] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1688.450990][T11312] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1688.475933][T11312] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1688.484616][T15432] usb 8-1: config 0 descriptor?? [ 1688.491218][T11312] usb 6-1: USB disconnect, device number 8 [ 1688.513251][ T30] audit: type=1400 audit(1764406816.790:2364): avc: denied { getopt } for pid=27842 comm="syz.9.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1688.572532][ T42] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1688.582059][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.613007][ T42] usb 9-1: Product: syz [ 1688.644186][ T42] usb 9-1: Manufacturer: syz [ 1688.712735][ T42] usb 9-1: SerialNumber: syz [ 1688.790454][ T30] audit: type=1400 audit(1764406817.052:2365): avc: denied { setopt } for pid=27842 comm="syz.9.5474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1689.173866][ T42] usb 9-1: config 0 descriptor?? [ 1689.280714][T15432] usb 8-1: USB disconnect, device number 86 [ 1689.390377][T27849] IPv6: sit1: Disabled Multicast RS [ 1690.232626][T27854] Cannot find del_set index 1 as target [ 1690.620174][T27859] siw: device registration error -23 [ 1690.971830][T19653] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1691.168904][T27871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5481'. [ 1691.645787][T19653] usb 6-1: Using ep0 maxpacket: 16 [ 1691.761992][T19653] usb 6-1: config 0 has an invalid interface number: 14 but max is 0 [ 1691.774180][T19653] usb 6-1: config 0 has no interface number 0 [ 1691.780295][T19653] usb 6-1: too many endpoints for config 0 interface 14 altsetting 116: 66, using maximum allowed: 30 [ 1691.859462][T19653] usb 6-1: config 0 interface 14 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 1691.935803][ T42] usb 9-1: USB disconnect, device number 70 [ 1691.935885][T19653] usb 6-1: config 0 interface 14 has no altsetting 0 [ 1692.087415][T19653] usb 6-1: New USB device found, idVendor=0582, idProduct=b307, bcdDevice=68.f1 [ 1692.752162][T19653] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.800322][T22205] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1692.856001][T19653] usb 6-1: config 0 descriptor?? [ 1693.085565][T22205] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.111493][T22205] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 1693.122762][T22205] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1693.137565][T22205] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1693.149580][T22205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.158277][T22205] usb 1-1: Product: syz [ 1693.162470][T22205] usb 1-1: Manufacturer: syz [ 1693.167821][T22205] usb 1-1: SerialNumber: syz [ 1693.389863][T19653] usb 6-1: USB disconnect, device number 9 [ 1693.409503][T27894] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5487'. [ 1693.442429][T15432] usb 10-1: new full-speed USB device number 39 using dummy_hcd [ 1693.685991][T27874] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1693.696350][T15432] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1693.705397][T15432] usb 10-1: config 0 has no interface number 0 [ 1693.714886][T27874] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1693.715332][T15432] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1693.733927][T15432] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1693.744234][T15432] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.753129][T15432] usb 10-1: Product: syz [ 1693.757450][T15432] usb 10-1: Manufacturer: syz [ 1693.762723][T15432] usb 10-1: SerialNumber: syz [ 1693.769631][T15432] usb 10-1: config 0 descriptor?? [ 1693.888037][ T30] audit: type=1400 audit(1764406821.825:2366): avc: denied { connect } for pid=27887 comm="syz.7.5485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1694.327903][T19653] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1694.447326][T22205] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 1694.469862][T22205] cdc_ncm 1-1:1.0: bind() failure [ 1694.502514][T22205] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1694.520703][T19653] usb 9-1: Using ep0 maxpacket: 8 [ 1694.522373][T22205] cdc_ncm 1-1:1.1: bind() failure [ 1694.539233][T19653] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1694.543556][T22205] usb 1-1: USB disconnect, device number 85 [ 1694.557969][T19653] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.575548][T19653] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=44.2b [ 1694.587200][T19653] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.596751][T19653] usb 9-1: Product: syz [ 1694.600931][T19653] usb 9-1: Manufacturer: syz [ 1694.606506][T19653] usb 9-1: SerialNumber: syz [ 1694.679715][T27909] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1694.765962][T11312] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1694.879986][T27899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1694.890938][T27899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1694.927096][T11312] usb 6-1: no configurations [ 1694.931792][T11312] usb 6-1: can't read configurations, error -22 [ 1694.962750][T19653] kvaser_usb 9-1:1.0: error -ENODEV: Cannot get usb endpoint(s) [ 1694.987905][T19653] usb 9-1: USB disconnect, device number 71 [ 1695.075792][T11312] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1695.209431][T27886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1695.242307][T27886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1695.259812][T11312] usb 6-1: no configurations [ 1695.277461][T11312] usb 6-1: can't read configurations, error -22 [ 1695.279267][T15432] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1695.297837][T11312] usb usb6-port1: attempt power cycle [ 1695.306224][T15432] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1695.455737][T15432] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1695.690942][T15432] usb 10-1: USB disconnect, device number 39 [ 1695.738179][T11312] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1695.760646][T11312] usb 6-1: no configurations [ 1695.765422][T11312] usb 6-1: can't read configurations, error -22 [ 1695.953233][T11312] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1696.017728][T11312] usb 6-1: no configurations [ 1696.022438][T11312] usb 6-1: can't read configurations, error -22 [ 1696.029013][ T30] audit: type=1400 audit(1764406823.818:2367): avc: denied { getopt } for pid=27921 comm="syz.7.5495" laddr=fe80::1494:daff:feef:7f5 lport=5332 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1696.053424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1696.069615][T11312] usb usb6-port1: unable to enumerate USB device [ 1697.563914][T27950] batman_adv: batadv0: Adding interface: ipvlan2 [ 1697.570961][T27950] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1697.596966][T27950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1697.608062][T27950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1697.617929][T27950] batman_adv: batadv0: Interface activated: ipvlan2 [ 1697.625178][T27950] batadv0: mtu less than device minimum [ 1697.632414][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.644205][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.655567][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.666914][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.678259][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.689605][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.700951][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.712292][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.723650][T27950] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1697.773635][T27951] sg_write: data in/out 7954760/8 bytes for SCSI command 0x0-- guessing data in; [ 1697.773635][T27951] program syz.5.5489 not setting count and/or reply_len properly [ 1698.084418][T27953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1698.132749][T27945] 9pnet_fd: p9_fd_create_tcp (27945): problem connecting socket to 127.0.0.1 [ 1698.418396][T27956] netlink: 666 bytes leftover after parsing attributes in process `syz.7.5504'. [ 1698.495975][T27958] Cannot find del_set index 1 as target [ 1700.616326][T27464] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1701.111389][T27464] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1701.120508][T27464] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1701.130888][T27464] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1701.138418][T27464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1701.167513][T11312] usb 8-1: new full-speed USB device number 87 using dummy_hcd [ 1701.200424][ T30] audit: type=1400 audit(1764406828.657:2368): avc: denied { mounton } for pid=27988 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1701.338658][T11312] usb 8-1: config index 0 descriptor too short (expected 8192, got 68) [ 1701.346949][T11312] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.358290][T11312] usb 8-1: config 0 has no interfaces? [ 1701.363844][T11312] usb 8-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1701.373265][T11312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.418816][T11312] usb 8-1: config 0 descriptor?? [ 1701.657172][T26851] bridge_slave_1: left allmulticast mode [ 1701.663588][T26851] bridge_slave_1: left promiscuous mode [ 1701.685012][T26851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.749273][T26851] bridge_slave_0: left allmulticast mode [ 1701.766746][T26851] bridge_slave_0: left promiscuous mode [ 1701.778148][T26851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.904846][T27998] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1702.042771][T22205] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1702.197952][T28000] Cannot find del_set index 1 as target [ 1702.270890][T22205] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 1702.279436][T22205] usb 1-1: config 0 has no interface number 0 [ 1702.285630][T22205] usb 1-1: config 0 interface 41 has no altsetting 0 [ 1702.297846][T22205] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1702.307624][T22205] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.316462][T22205] usb 1-1: Product: syz [ 1702.321324][T22205] usb 1-1: Manufacturer: syz [ 1702.326018][T22205] usb 1-1: SerialNumber: syz [ 1702.333054][T22205] usb 1-1: config 0 descriptor?? [ 1702.489963][ T30] audit: type=1400 audit(1764406829.883:2369): avc: denied { map } for pid=28001 comm="syz.8.5519" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1702.513633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1702.555655][ T30] audit: type=1400 audit(1764406829.920:2370): avc: denied { execute } for pid=28001 comm="syz.8.5519" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1702.700301][T26851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1702.721072][T26851] bond0 (unregistering): Released all slaves [ 1702.737193][T27976] wg1 speed is unknown, defaulting to 1000 [ 1702.875154][T11312] usb 8-1: USB disconnect, device number 87 [ 1703.055112][ T30] audit: type=1400 audit(1764406830.398:2371): avc: denied { mounton } for pid=28001 comm="syz.8.5519" path="/455/file0" dev="tmpfs" ino=2458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1703.066939][T27988] wg1 speed is unknown, defaulting to 1000 [ 1703.356600][T27464] Bluetooth: hci0: command tx timeout [ 1703.568714][T26851] hsr_slave_0: left promiscuous mode [ 1703.575038][T26851] hsr_slave_1: left promiscuous mode [ 1703.583175][T26851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1703.590842][T26851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.625179][T26851] team0 (unregistering): Port device batadv1 removed [ 1703.749441][T28012] binder: 27995:28012 ioctl c0306201 2000000024c0 returned -14 [ 1703.836222][T28016] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5521'. [ 1703.954638][T22205] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22 [ 1704.186239][T26851] team0 (unregistering): Port device team_slave_1 removed [ 1704.258044][T26851] team0 (unregistering): Port device team_slave_0 removed [ 1704.393674][T28021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5522'. [ 1705.380634][ T30] audit: type=1400 audit(1764406832.588:2372): avc: denied { setopt } for pid=28027 comm="syz.5.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1705.422751][T22205] usb 1-1: USB disconnect, device number 86 [ 1705.587768][T27464] Bluetooth: hci0: command tx timeout [ 1705.835690][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5526'. [ 1706.866297][T27988] chnl_net:caif_netlink_parms(): no params data found [ 1707.321587][T27988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1707.328787][T27988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.336426][T27988] bridge_slave_0: entered allmulticast mode [ 1707.343673][T27988] bridge_slave_0: entered promiscuous mode [ 1707.351083][T27988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.359345][T27988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.366950][T27988] bridge_slave_1: entered allmulticast mode [ 1707.373853][T27988] bridge_slave_1: entered promiscuous mode [ 1707.387962][T26851] IPVS: stop unused estimator thread 0... [ 1707.441246][T27988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1707.490681][T27988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1707.927071][T27464] Bluetooth: hci0: command tx timeout [ 1708.056667][T27988] team0: Port device team_slave_0 added [ 1708.081584][T27988] team0: Port device team_slave_1 added [ 1708.245856][T27988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1708.253026][T27988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.279981][T27988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1708.292640][T27988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1708.396392][T22205] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1708.588652][T22205] usb 6-1: Using ep0 maxpacket: 8 [ 1708.602521][T22205] usb 6-1: config index 0 descriptor too short (expected 228, got 92) [ 1708.612268][T22205] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 1708.625104][T27988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1708.653450][T22205] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 1708.664484][T27988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1708.678119][T11312] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1708.686878][T22205] usb 6-1: string descriptor 0 read error: -22 [ 1708.695082][T22205] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1708.720969][T22205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.874617][T11312] usb 1-1: Using ep0 maxpacket: 32 [ 1708.894941][T27988] hsr_slave_0: entered promiscuous mode [ 1708.914955][T27988] hsr_slave_1: entered promiscuous mode [ 1708.928599][T11312] usb 1-1: config 0 has no interfaces? [ 1708.928841][T27988] debugfs: 'hsr0' already exists in 'hsr' [ 1708.939190][T11312] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1708.941774][T27988] Cannot create hsr debugfs directory [ 1708.955434][T11312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.964080][T11312] usb 1-1: Product: syz [ 1708.974350][T11312] usb 1-1: Manufacturer: syz [ 1708.979634][T11312] usb 1-1: SerialNumber: syz [ 1708.999111][T11312] usb 1-1: config 0 descriptor?? [ 1709.027939][T22205] cdc_ncm 6-1:1.0: bind() failure [ 1709.053493][T22205] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1709.073434][T22205] cdc_ncm 6-1:1.1: bind() failure [ 1709.092582][T22205] usb 6-1: USB disconnect, device number 14 [ 1709.232678][T28075] siw: device registration error -23 [ 1709.864725][T27988] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1709.879378][T27988] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1710.110071][T11312] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1710.110151][T27464] Bluetooth: hci0: command tx timeout [ 1710.118784][T27988] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1710.213871][T27988] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1710.248877][ T30] audit: type=1400 audit(1764406837.145:2373): avc: denied { write } for pid=28080 comm="syz.8.5537" dev="sockfs" ino=118941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1710.250426][T28084] 9pnet_fd: Insufficient options for proto=fd [ 1710.529906][T11312] usb 6-1: Using ep0 maxpacket: 8 [ 1710.580315][T11312] usb 6-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.607255][T11312] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1710.622164][T11312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.677732][T11312] hub 6-1:32.0: bad descriptor, ignoring hub [ 1710.753452][T27988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1710.753687][T11312] hub 6-1:32.0: probe with driver hub failed with error -5 [ 1710.779836][T27988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1710.832789][T26851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1710.839955][T26851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1710.878269][T26851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1710.885448][T26851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1711.061044][ T42] usb 6-1: USB disconnect, device number 15 [ 1711.148444][T27988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1711.435323][ T42] usb 8-1: new high-speed USB device number 88 using dummy_hcd [ 1711.585076][T28120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'. [ 1711.594185][T28120] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5545'. [ 1712.023133][ T9] usb 1-1: USB disconnect, device number 87 [ 1712.044113][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 1712.055480][ T42] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1712.070545][ T42] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.080735][ T42] usb 8-1: Product: syz [ 1712.090575][ T42] usb 8-1: Manufacturer: syz [ 1712.100486][ T42] usb 8-1: SerialNumber: syz [ 1712.112612][ T42] usb 8-1: config 0 descriptor?? [ 1712.124438][ T42] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1712.536907][T27988] veth0_vlan: entered promiscuous mode [ 1712.635258][T27988] veth1_vlan: entered promiscuous mode [ 1712.658761][T27988] veth0_macvtap: entered promiscuous mode [ 1712.671082][T27988] veth1_macvtap: entered promiscuous mode [ 1712.709611][T27988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1712.728830][T27988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.764603][T14293] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.783999][T14293] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.794976][T14293] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.806305][T14293] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.034041][T26851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.042933][T26851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.057234][ T30] audit: type=1400 audit(1764406839.766:2374): avc: denied { associate } for pid=28141 comm="syz.5.5552" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1713.074895][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.516222][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.904665][ T30] audit: type=1400 audit(1764406840.552:2375): avc: denied { mounton } for pid=27988 comm="syz-executor" path="/root/syzkaller.gFFRIw/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1713.947508][ T30] audit: type=1400 audit(1764406840.552:2376): avc: denied { mounton } for pid=27988 comm="syz-executor" path="/root/syzkaller.gFFRIw/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1713.999284][ T30] audit: type=1400 audit(1764406840.552:2377): avc: denied { mounton } for pid=27988 comm="syz-executor" path="/root/syzkaller.gFFRIw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=118411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1714.054909][ T30] audit: type=1400 audit(1764406840.589:2378): avc: denied { mounton } for pid=27988 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1714.092036][ T30] audit: type=1400 audit(1764406840.589:2379): avc: denied { mount } for pid=27988 comm="syz-executor" name="/" dev="gadgetfs" ino=8214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1714.117494][ T30] audit: type=1400 audit(1764406840.589:2380): avc: denied { mounton } for pid=27988 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1714.366638][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1714.554449][ T42] gspca_sonixj: reg_r err -71 [ 1714.598980][ T42] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 1714.688065][ T42] usb 8-1: USB disconnect, device number 88 [ 1714.736283][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1714.760196][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1714.779533][ T24] usb 5-1: config 0 has an invalid descriptor of length 216, skipping remainder of the config [ 1714.801225][ T24] usb 5-1: config 0 has no interface number 0 [ 1714.807365][ T24] usb 5-1: config 0 interface 184 altsetting 7 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1714.831615][ T24] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x8A has invalid maxpacket 42026, setting to 1024 [ 1714.853859][ T24] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x8A has invalid maxpacket 1024 [ 1714.864636][ T24] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1714.878067][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1714.887086][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.fa [ 1714.896410][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.904408][ T24] usb 5-1: Product: syz [ 1714.909323][ T24] usb 5-1: Manufacturer: syz [ 1714.913932][ T24] usb 5-1: SerialNumber: syz [ 1714.989150][ T24] usb 5-1: config 0 descriptor?? [ 1714.995529][T28147] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1715.004910][T28164] 9pnet_virtio: no channels available for device syz [ 1715.271530][ T42] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1715.329190][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 1715.404910][T28169] netlink: 288 bytes leftover after parsing attributes in process `syz.5.5558'. [ 1715.465122][T28169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=28169 comm=syz.5.5558 [ 1715.479068][ T42] usb 9-1: device descriptor read/64, error -32 [ 1715.503141][ T24] smsc75xx v1.0.0 [ 1715.507843][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1715.522513][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1715.538160][ T24] usb 5-1: USB disconnect, device number 94 [ 1715.740905][ T42] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1715.943926][ T42] usb 9-1: Using ep0 maxpacket: 16 [ 1715.952365][ T42] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1715.962747][ T42] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.986633][ T42] usb 9-1: Product: syz [ 1715.990937][ T42] usb 9-1: Manufacturer: syz [ 1715.995533][ T42] usb 9-1: SerialNumber: syz [ 1716.008472][ T42] usb 9-1: config 0 descriptor?? [ 1716.948179][T19653] usb 8-1: new low-speed USB device number 89 using dummy_hcd [ 1718.284849][T19653] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1718.295203][T19653] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1718.307355][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1718.320957][T19653] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1718.321250][ T42] speedtch 9-1:0.0: speedtch_bind: data interface not found! [ 1718.333868][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1718.353327][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1718.370279][T19653] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1718.373851][ T42] speedtch 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1718.393478][T19653] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1718.404013][T28220] Cannot find del_set index 1 as target [ 1718.413032][T19653] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1718.416437][ T42] usb 9-1: USB disconnect, device number 73 [ 1718.421305][T19653] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1718.449607][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1718.461026][T19653] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1718.473100][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1718.485797][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1718.500070][T19653] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1718.515201][T19653] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1718.537390][T19653] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1718.545409][T19653] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1718.559124][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1718.572279][T19653] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1718.585261][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1718.598420][T19653] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1718.610117][T19653] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1718.624310][T19653] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1718.634106][T19653] usb 8-1: string descriptor 0 read error: -22 [ 1718.640863][T19653] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1718.650075][T19653] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.676463][T19653] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1718.774757][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1718.945928][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1718.952953][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1718.964103][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1718.974125][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1718.987316][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1718.996528][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.010400][ T9] usb 6-1: config 0 descriptor?? [ 1719.473453][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 1719.512147][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.003E/input/input84 [ 1719.571123][ T9] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1719.722821][T28222] netlink: 256 bytes leftover after parsing attributes in process `syz.5.5576'. [ 1719.747935][T28222] unsupported nlmsg_type 40 [ 1719.896386][T28227] syz_tun: entered allmulticast mode [ 1719.907562][T28222] dvmrp8: entered allmulticast mode [ 1719.948406][T28221] syz_tun: left allmulticast mode [ 1719.988284][T11312] usb 6-1: USB disconnect, device number 16 [ 1720.104986][ T30] audit: type=1326 audit(1764406846.364:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.168038][ T30] audit: type=1326 audit(1764406846.364:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.221487][ T30] audit: type=1326 audit(1764406846.364:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.273135][ T30] audit: type=1326 audit(1764406846.364:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.332509][ T30] audit: type=1326 audit(1764406846.364:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.404845][ T30] audit: type=1326 audit(1764406846.364:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.434893][ T30] audit: type=1326 audit(1764406846.364:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1720.465526][ T24] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1720.515524][T28238] fuse: Invalid rootmode [ 1721.352737][ T30] audit: type=1326 audit(1764406846.364:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1721.376912][ T30] audit: type=1326 audit(1764406846.392:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1721.400971][ T30] audit: type=1326 audit(1764406846.392:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28229 comm="syz.8.5577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f997bf8f749 code=0x7ffc0000 [ 1721.512564][ T24] usb 9-1: too many configurations: 143, using maximum allowed: 8 [ 1721.539973][ T24] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1721.549698][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.558338][ T24] usb 9-1: Product: syz [ 1721.562510][ T24] usb 9-1: Manufacturer: syz [ 1721.575556][ T24] usb 9-1: SerialNumber: syz [ 1722.199383][ T24] net_ratelimit: 10 callbacks suppressed [ 1722.199398][ T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1722.305730][ T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1722.317861][ T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1722.331349][ T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1722.341979][ T24] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1722.352688][ T24] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1722.366209][ T24] usb 9-1: USB disconnect, device number 74 [ 1722.481939][T28261] overlay: filesystem on ./bus not supported [ 1722.613356][T11312] usb 8-1: USB disconnect, device number 89 [ 1723.327037][ T24] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1723.508768][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 1723.515649][ T24] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1723.527382][ T24] usb 8-1: config 179 has no interface number 0 [ 1723.538616][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1723.552027][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1723.564541][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1723.630094][ T24] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1723.642701][ T24] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1723.667216][ T24] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1723.858407][T28279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5593'. [ 1723.891959][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.399407][T28270] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1724.744299][T28286] netlink: 288 bytes leftover after parsing attributes in process `syz.4.5594'. [ 1725.014863][T28288] netlink: 'syz.5.5595': attribute type 1 has an invalid length. [ 1725.030437][T27464] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 1725.081629][T28288] bond1: entered promiscuous mode [ 1725.089475][T28288] bond1: entered allmulticast mode [ 1725.094955][T28288] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1725.106115][T28270] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5592'. [ 1725.162109][T11312] usb 8-1: USB disconnect, device number 90 [ 1725.162220][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1725.177363][ C1] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 1725.206693][T28292] overlayfs: failed to resolve './bus': -2 [ 1725.495954][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 1725.495973][ T30] audit: type=1400 audit(1764406851.390:2487): avc: denied { bind } for pid=28300 comm="syz.0.5599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1725.666988][T22205] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1725.676023][ C1] raw-gadget.0 gadget.8: ignoring, device is not running [ 1725.701704][T28311] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5598'. [ 1725.816378][T14137] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1725.827365][T22205] usb 9-1: device descriptor read/64, error -32 [ 1726.009034][T14137] usb 1-1: Using ep0 maxpacket: 32 [ 1726.094622][T22205] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1726.353645][T14137] usb 1-1: config 0 has an invalid interface number: 151 but max is 0 [ 1726.364199][T14137] usb 1-1: config 0 has no interface number 0 [ 1726.370330][T14137] usb 1-1: config 0 interface 151 has no altsetting 0 [ 1726.383258][T14137] usb 1-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 1726.404400][T14137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1726.413030][T14137] usb 1-1: Product: syz [ 1726.418499][T14137] usb 1-1: Manufacturer: syz [ 1726.423643][T14137] usb 1-1: SerialNumber: syz [ 1726.430194][T14137] usb 1-1: config 0 descriptor?? [ 1726.609638][T14137] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 1726.951713][T22205] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1726.974479][T22205] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1727.114114][T28326] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5605'. [ 1727.237935][T14137] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 1727.573275][T22205] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1727.583024][T22205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.589360][T14137] sq905c 1-1:0.151: Get version command failed [ 1727.597931][T14137] sq905c 1-1:0.151: probe with driver sq905c failed with error -110 [ 1727.611675][T22205] usb 9-1: Product: syz [ 1727.615871][T22205] usb 9-1: Manufacturer: syz [ 1727.637256][T22205] usb 9-1: SerialNumber: syz [ 1727.646657][T22205] usb 9-1: config 0 descriptor?? [ 1728.481371][T28343] overlayfs: failed to resolve './bus': -2 [ 1728.974399][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1729.292392][ T42] usb 1-1: USB disconnect, device number 88 [ 1729.419399][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 1729.426906][ T24] usb 5-1: config 0 has an invalid interface number: 74 but max is 0 [ 1729.436652][ T24] usb 5-1: config 0 has no interface number 0 [ 1729.443542][ T24] usb 5-1: config 0 interface 74 has no altsetting 0 [ 1729.467648][ T24] usb 5-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 1729.480042][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.489217][ T24] usb 5-1: Product: syz [ 1729.496391][ T24] usb 5-1: Manufacturer: syz [ 1729.501594][ T24] usb 5-1: SerialNumber: syz [ 1729.512097][ T24] usb 5-1: config 0 descriptor?? [ 1729.757194][T28345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.771648][T28345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.812641][T28345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.845284][T14137] usb 8-1: new full-speed USB device number 91 using dummy_hcd [ 1729.941852][T28345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1729.942780][T28358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1729.970964][T28358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1730.048596][ T24] belkin_sa 5-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 1730.081405][T14137] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1730.086221][ T24] usb 5-1: bcdDevice: 6636, bfc: 0 [ 1730.122929][T14137] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.129878][ T24] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 1730.161205][T14137] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1730.167274][ T24] usb 5-1: USB disconnect, device number 95 [ 1730.176553][T14137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.212779][T14137] usb 8-1: config 0 descriptor?? [ 1730.514144][ T24] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 1730.586816][T22205] usb 9-1: USB disconnect, device number 76 [ 1730.593998][ T24] belkin_sa 5-1:0.74: device disconnected [ 1730.686390][T14137] bigben 0003:146B:0902.003F: unexpected rdesc, please submit for review [ 1730.696761][ T30] audit: type=1400 audit(1764406856.275:2488): avc: denied { getopt } for pid=28360 comm="syz.4.5613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1731.012872][T14137] bigben 0003:146B:0902.003F: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.7-1/input0 [ 1731.025794][T14137] bigben 0003:146B:0902.003F: missing HID_OUTPUT_REPORT 0 [ 1731.033342][T14137] bigben 0003:146B:0902.003F: no output report found [ 1731.108151][T21001] udevd[21001]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1732.681175][T14137] usb 8-1: USB disconnect, device number 91 [ 1733.359068][T28379] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5614'. [ 1733.418457][T28380] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=28380 comm=syz.8.5614 [ 1734.182426][T14137] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1734.354198][T28389] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1734.362049][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1734.377080][T28389] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1734.384453][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1734.848393][T28390] netlink: 288 bytes leftover after parsing attributes in process `syz.7.5622'. [ 1734.862164][T28390] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=28390 comm=syz.7.5622 [ 1735.007720][T14137] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1735.016833][T14137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.024823][T14137] usb 5-1: Product: syz [ 1735.030255][T14137] usb 5-1: Manufacturer: syz [ 1735.035338][T14137] usb 5-1: SerialNumber: syz [ 1735.044881][T14137] usb 5-1: config 0 descriptor?? [ 1735.067050][T27464] Bluetooth: hci1: urb ffff88806860e900 submission failed (2) [ 1735.090221][ T30] audit: type=1400 audit(1764406860.384:2489): avc: denied { connect } for pid=28393 comm="syz.8.5620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1735.540039][ T30] audit: type=1400 audit(1764406860.814:2490): avc: denied { execute_no_trans } for pid=28400 comm="syz.5.5624" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=120065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1735.886788][T28412] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5623'. [ 1736.254595][T28416] netlink: 'syz.0.5626': attribute type 1 has an invalid length. [ 1736.265183][T28416] netlink: 'syz.0.5626': attribute type 2 has an invalid length. [ 1736.572837][ T24] usb 5-1: USB disconnect, device number 96 [ 1736.672941][T27464] Bluetooth: hci7: unexpected event 0x2f length: 509 > 260 [ 1736.939521][T22205] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1737.186424][T22205] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1737.211864][T22205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1737.228916][T22205] usb 9-1: Product: syz [ 1737.233125][T22205] usb 9-1: Manufacturer: syz [ 1737.262673][T22205] usb 9-1: SerialNumber: syz [ 1737.290445][T22205] usb 9-1: config 0 descriptor?? [ 1737.307742][T22205] hub 9-1:0.0: bad descriptor, ignoring hub [ 1737.316992][T22205] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1737.344056][T28433] fuse: Unknown parameter 'user_i00000000000000000000' [ 1737.558975][T11312] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1737.611950][T28441] xt_hashlimit: size too large, truncated to 1048576 [ 1737.847348][T11312] usb 1-1: Using ep0 maxpacket: 8 [ 1738.694108][T11312] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1738.703213][T11312] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1738.715236][T11312] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=44.2b [ 1738.746398][T11312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.754392][T11312] usb 1-1: Product: syz [ 1738.769449][T11312] usb 1-1: Manufacturer: syz [ 1738.774040][T11312] usb 1-1: SerialNumber: syz [ 1738.801777][T22205] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1738.842299][T22205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1738.874097][T22205] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1738.888705][T22205] usb 9-1: media controller created [ 1738.924913][T22205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1739.252526][T28426] dib0700: tx buffer length is larger than 4. Not supported. [ 1739.311182][T14137] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1739.347624][T22205] DVB: Unable to find symbol dib7000p_attach() [ 1739.377062][T22205] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1739.388532][T28455] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1739.546040][T28426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1739.586079][T14137] usb 6-1: Using ep0 maxpacket: 8 [ 1739.688571][T28461] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5639'. [ 1739.969758][T28426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1739.978250][T22205] rc_core: IR keymap rc-dib0700-rc5 not found [ 1739.986878][T14137] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 1740.000931][T22205] Registered IR keymap rc-empty [ 1740.014421][T22205] dvb-usb: could not initialize remote control. [ 1740.021492][T22205] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1740.028495][T14137] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1740.079798][T14137] usb 6-1: language id specifier not provided by device, defaulting to English [ 1740.365427][T14137] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 1740.387022][T14137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.407633][T14137] usb 6-1: Product: syz [ 1740.451448][T14137] usb 6-1: Manufacturer: ⯴ৼ閣ရ泍㚌孇゜⟣࡝쓿Ԍⴶ嘍鳥㴷먑埧尔澵엁빕ᄲ㳰㽫浞줎鈇䏀很ଭ瓾偤憸ꄜ솦薮뛾 [ 1740.483379][T14137] usb 6-1: SerialNumber: syz [ 1740.811981][T28472] /dev/nullb0: Can't open blockdev [ 1741.050453][T14137] usbhid 6-1:1.0: can't add hid device: -71 [ 1741.631380][T14137] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 1741.746022][T14137] usb 6-1: USB disconnect, device number 17 [ 1741.854689][ T30] audit: type=1400 audit(1764406866.710:2491): avc: denied { ioctl } for pid=28474 comm="syz.7.5643" path="socket:[121221]" dev="sockfs" ino=121221 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1742.136277][ T50] Bluetooth: hci1: Frame reassembly failed (-84) [ 1742.197125][T11312] kvaser_usb 1-1:1.0: error -ENODEV: Cannot get usb endpoint(s) [ 1742.231190][T11312] usb 1-1: USB disconnect, device number 89 [ 1742.613556][T27114] usb 8-1: new full-speed USB device number 92 using dummy_hcd [ 1742.803133][T27114] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1742.866968][T27114] usb 8-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1742.898845][T27114] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.970652][T27114] usb 8-1: config 0 descriptor?? [ 1742.992488][T28495] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1743.098661][T22205] usb 9-1: USB disconnect, device number 77 [ 1743.198070][T22205] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1743.836681][ T42] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1743.847662][T27114] betop 0003:8380:1850.0040: unknown main item tag 0x0 [ 1743.859051][T27114] betop 0003:8380:1850.0040: unknown main item tag 0x0 [ 1743.867995][T27114] betop 0003:8380:1850.0040: unknown main item tag 0x0 [ 1743.875486][T27114] betop 0003:8380:1850.0040: unknown main item tag 0x0 [ 1743.882369][T27114] betop 0003:8380:1850.0040: unknown main item tag 0x0 [ 1743.891117][T27114] betop 0003:8380:1850.0040: hidraw0: USB HID v1.01 Device [HID 8380:1850] on usb-dummy_hcd.7-1/input0 [ 1743.903905][T27114] betop 0003:8380:1850.0040: no inputs found [ 1744.001424][T28513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1744.024667][ T42] usb 6-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.036061][ T42] usb 6-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1744.054469][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1744.062397][ T42] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 1744.122028][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.133125][ T42] usb 6-1: config 0 descriptor?? [ 1744.301763][T27464] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1744.308318][T18724] Bluetooth: hci1: command 0x1003 tx timeout [ 1744.341263][T28518] fuse: Unknown parameter 'use00000000000000000000' [ 1745.199353][ T42] a4tech 0003:09DA:000A.0041: unknown main item tag 0x2 [ 1745.210612][ T42] a4tech 0003:09DA:000A.0041: hidraw1: USB HID v0.06 Device [HID 09da:000a] on usb-dummy_hcd.5-1/input0 [ 1745.416212][T19653] usb 6-1: USB disconnect, device number 18 [ 1745.509306][T11312] usb 8-1: USB disconnect, device number 92 [ 1746.010793][T11312] usb 8-1: new high-speed USB device number 93 using dummy_hcd [ 1746.240985][T11312] usb 8-1: Using ep0 maxpacket: 8 [ 1746.249771][T11312] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1746.259765][T11312] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1746.273801][T11312] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=44.2b [ 1746.285843][T11312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.294679][T11312] usb 8-1: Product: syz [ 1746.299444][T11312] usb 8-1: Manufacturer: syz [ 1746.304345][T11312] usb 8-1: SerialNumber: syz [ 1746.700924][T11312] kvaser_usb 8-1:1.0: error -ENODEV: Cannot get usb endpoint(s) [ 1746.735238][T11312] usb 8-1: USB disconnect, device number 93 [ 1747.644316][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1748.449086][T28554] 9pnet_fd: Insufficient options for proto=fd [ 1748.611075][T14137] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1748.810053][T14137] usb 8-1: Using ep0 maxpacket: 16 [ 1748.810428][ T42] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1748.816726][T14137] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.840405][T14137] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.851700][T14137] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1748.883854][T14137] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1748.893135][T14137] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.917293][T14137] usb 8-1: config 0 descriptor?? [ 1749.003681][ T42] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1749.018502][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.038348][ T42] usb 5-1: Product: syz [ 1749.042517][ T42] usb 5-1: Manufacturer: syz [ 1749.055755][ T42] usb 5-1: SerialNumber: syz [ 1749.074949][ T42] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1749.107928][T27114] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1749.267381][T28573] fuse: Unknown parameter 'use00000000000000000000' [ 1749.487776][T28556] netlink: 'syz.7.5664': attribute type 1 has an invalid length. [ 1749.612745][T22205] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1750.074838][ T42] usb 5-1: USB disconnect, device number 97 [ 1750.135702][T22205] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1750.150487][T28556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.173484][T22205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.303194][T22205] usb 1-1: config 0 descriptor?? [ 1750.329945][T22205] cp210x 1-1:0.0: cp210x converter detected [ 1750.704839][T27114] usb 5-1: Service connection timeout for: 256 [ 1750.711513][T27114] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1750.723439][T27114] ath9k_htc: Failed to initialize the device [ 1750.730022][ T42] usb 5-1: ath9k_htc: USB layer deinitialized [ 1750.760654][T14137] usbhid 8-1:0.0: can't add hid device: -71 [ 1750.767177][T14137] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1750.784404][T14137] usb 8-1: USB disconnect, device number 94 [ 1750.802652][T19653] libceph: connect (1)[c::]:6789 error -101 [ 1750.809725][T19653] libceph: mon0 (1)[c::]:6789 connect error [ 1750.831011][T28585] ceph: No mds server is up or the cluster is laggy [ 1750.987435][T28590] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5672'. [ 1752.023619][T28615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1752.829313][T22205] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1752.837339][T22205] cp210x 1-1:0.0: querying part number failed [ 1752.845328][T22205] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1752.884094][T22205] usb 1-1: USB disconnect, device number 90 [ 1752.903764][T22205] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1752.933811][T22205] cp210x 1-1:0.0: device disconnected [ 1753.767171][T28636] Cannot find del_set index 1 as target [ 1754.441001][T19653] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1754.986247][T19653] usb 8-1: Using ep0 maxpacket: 16 [ 1755.014687][T19653] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.071335][T19653] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1755.140890][T19653] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1755.256101][T19653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.350546][T19653] usb 8-1: config 0 descriptor?? [ 1755.371546][T19653] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1755.699072][T28631] bridge3: entered allmulticast mode [ 1755.706314][T28631] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5684'. [ 1755.839080][T28624] fuse: Unknown parameter 'user_id00000000000000000000' [ 1756.685447][T22205] usb 8-1: USB disconnect, device number 95 [ 1756.774917][ T30] audit: type=1400 audit(1764406880.683:2492): avc: denied { getopt } for pid=28688 comm="syz.7.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1756.807852][T28689] Bluetooth: MGMT ver 1.23 [ 1756.844841][ T30] audit: type=1400 audit(1764406880.702:2493): avc: denied { read } for pid=28688 comm="syz.7.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1756.891961][ T30] audit: type=1400 audit(1764406880.711:2494): avc: denied { connect } for pid=28688 comm="syz.7.5699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1756.933894][ T30] audit: type=1400 audit(1764406880.711:2495): avc: denied { write } for pid=28688 comm="syz.7.5699" path="socket:[120665]" dev="sockfs" ino=120665 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1757.396015][T19653] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1757.496877][T14137] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1757.701084][T14137] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1757.722343][T27114] usb 8-1: new full-speed USB device number 96 using dummy_hcd [ 1757.722878][T14137] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1757.742536][T14137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.785081][T14137] usb 6-1: config 0 descriptor?? [ 1757.803474][T28701] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1757.912190][T27114] usb 8-1: config 0 has an invalid interface number: 11 but max is 0 [ 1757.912267][T19653] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1757.921259][T27114] usb 8-1: config 0 has no interface number 0 [ 1757.934898][T19653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1757.937171][T27114] usb 8-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1757.950273][T19653] usb 5-1: Product: syz [ 1757.955627][T27114] usb 8-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1757.959632][T19653] usb 5-1: Manufacturer: syz [ 1757.959651][T19653] usb 5-1: SerialNumber: syz [ 1757.984278][T27114] usb 8-1: config 0 interface 11 has no altsetting 0 [ 1757.985136][T19653] usb 5-1: config 0 descriptor?? [ 1757.991602][T27114] usb 8-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=d5.1b [ 1758.006923][T27114] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.064833][T27114] usb 8-1: config 0 descriptor?? [ 1758.073185][T28699] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1758.091397][T27114] keyspan 8-1:0.11: Keyspan 4 port adapter converter detected [ 1758.181492][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 81 [ 1758.189346][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 1 [ 1758.221166][T27114] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1758.261261][T19653] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1758.263762][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 82 [ 1758.289702][T14137] elan 0003:04F3:0755.0042: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1758.306781][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 2 [ 1758.321296][T27114] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1758.342026][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 83 [ 1758.349843][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 3 [ 1758.375273][T27114] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1758.385509][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 84 [ 1758.395121][T27114] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 4 [ 1758.404146][T27114] usb 8-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1758.420399][T27114] usb 8-1: USB disconnect, device number 96 [ 1758.428420][ T30] audit: type=1400 audit(1764406882.237:2496): avc: denied { create } for pid=28706 comm="syz.8.5705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1758.450128][T11312] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1758.464885][T27114] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1758.483271][T27114] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1758.522382][T28695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.531502][T28695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.545369][T27114] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1758.563989][T27114] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1758.575362][T27114] keyspan 8-1:0.11: device disconnected [ 1758.619423][T11312] usb 1-1: Using ep0 maxpacket: 32 [ 1758.673445][T11312] usb 1-1: config 0 has an invalid interface number: 172 but max is 0 [ 1758.679288][ T30] audit: type=1400 audit(1764406882.452:2497): avc: denied { map } for pid=28706 comm="syz.8.5705" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1758.681765][T11312] usb 1-1: config 0 has no interface number 0 [ 1758.713642][T11312] usb 1-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1758.807442][T11312] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1758.820210][T11312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.831557][T11312] usb 1-1: Product: syz [ 1758.837509][T11312] usb 1-1: Manufacturer: syz [ 1758.845869][T11312] usb 1-1: SerialNumber: syz [ 1758.980955][T11312] usb 1-1: config 0 descriptor?? [ 1758.990614][T11312] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1759.003377][T18724] Bluetooth: hci2: command 0x0406 tx timeout [ 1759.011366][T27464] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1759.527010][T14137] usb 6-1: reset full-speed USB device number 19 using dummy_hcd [ 1760.001758][T28724] fuse: Unknown parameter 'user_i00000000000000000000' [ 1760.265750][T11312] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input86 [ 1760.289810][T28730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28730 comm=syz.4.5703 [ 1760.429982][T28736] netlink: 288 bytes leftover after parsing attributes in process `syz.8.5709'. [ 1760.449640][T28736] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=28736 comm=syz.8.5709 [ 1760.782106][T19653] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1760.804949][T19653] usb 5-1: USB disconnect, device number 98 [ 1760.876288][T11312] usb 1-1: USB disconnect, device number 91 [ 1761.003662][T28742] FAULT_INJECTION: forcing a failure. [ 1761.003662][T28742] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.017116][T28742] CPU: 0 UID: 0 PID: 28742 Comm: syz.7.5712 Not tainted syzkaller #0 PREEMPT(full) [ 1761.017141][T28742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1761.017152][T28742] Call Trace: [ 1761.017157][T28742] [ 1761.017161][T28742] dump_stack_lvl+0x16c/0x1f0 [ 1761.017176][T28742] should_fail_ex+0x512/0x640 [ 1761.017189][T28742] ? fs_reclaim_acquire+0xae/0x150 [ 1761.017203][T28742] should_failslab+0xc2/0x120 [ 1761.017222][T28742] __kmalloc_noprof+0xdd/0x880 [ 1761.017237][T28742] ? tomoyo_encode2+0x100/0x3e0 [ 1761.017252][T28742] ? tomoyo_encode2+0x100/0x3e0 [ 1761.017263][T28742] tomoyo_encode2+0x100/0x3e0 [ 1761.017278][T28742] tomoyo_encode+0x29/0x50 [ 1761.017289][T28742] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1761.017306][T28742] tomoyo_mount_acl+0x664/0x850 [ 1761.017317][T28742] ? bpf_ksym_find+0x127/0x1c0 [ 1761.017345][T28742] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 1761.017361][T28742] ? unwind_get_return_address+0x59/0xa0 [ 1761.017402][T28742] ? tomoyo_domain+0xbb/0x150 [ 1761.017419][T28742] ? tomoyo_profile+0x47/0x60 [ 1761.017443][T28742] tomoyo_mount_permission+0x16d/0x420 [ 1761.017459][T28742] ? tomoyo_mount_permission+0x14f/0x420 [ 1761.017479][T28742] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1761.017503][T28742] security_sb_mount+0x9b/0x260 [ 1761.017515][T28742] path_mount+0x158/0x23a0 [ 1761.017530][T28742] ? __pfx_path_mount+0x10/0x10 [ 1761.017544][T28742] ? kmem_cache_free+0x2d4/0x6c0 [ 1761.017552][T28742] ? putname+0x154/0x1a0 [ 1761.017568][T28742] ? putname+0x154/0x1a0 [ 1761.017579][T28742] ? putname+0x154/0x1a0 [ 1761.017593][T28742] ? __x64_sys_mount+0x293/0x310 [ 1761.017605][T28742] __x64_sys_mount+0x293/0x310 [ 1761.017617][T28742] ? __pfx___x64_sys_mount+0x10/0x10 [ 1761.017634][T28742] do_syscall_64+0xcd/0xfa0 [ 1761.017646][T28742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.017657][T28742] RIP: 0033:0x7f38b8d8f749 [ 1761.017667][T28742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1761.017677][T28742] RSP: 002b:00007f38b6fb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1761.017688][T28742] RAX: ffffffffffffffda RBX: 00007f38b8fe6180 RCX: 00007f38b8d8f749 [ 1761.017695][T28742] RDX: 0000200000000300 RSI: 0000200000000000 RDI: 00002000000003c0 [ 1761.017701][T28742] RBP: 00007f38b6fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.017707][T28742] R10: 0000000000200480 R11: 0000000000000246 R12: 0000000000000002 [ 1761.017713][T28742] R13: 00007f38b8fe6218 R14: 00007f38b8fe6180 R15: 00007ffdd30f0778 [ 1761.017728][T28742] [ 1761.017759][T28742] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1761.605388][T28748] geneve2: entered promiscuous mode [ 1761.699443][T28748] geneve2: entered allmulticast mode [ 1761.753650][T14289] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.768119][T14289] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.783340][ T5857] usb 6-1: USB disconnect, device number 19 [ 1761.805128][T14289] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.831914][T14289] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.443987][ T5857] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1762.900663][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1762.910350][ T5857] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1763.027746][ T5857] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1763.246306][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.254325][ T5857] usb 6-1: Product: syz [ 1763.387802][ T5857] usb 6-1: Manufacturer: syz [ 1763.398663][ T5857] usb 6-1: SerialNumber: syz [ 1763.407247][ T5857] usb 6-1: config 0 descriptor?? [ 1764.928783][T28763] CUSE: unknown device info "" [ 1764.933865][T28763] CUSE: unknown device info "@" [ 1764.938780][T28763] CUSE: DEVNAME unspecified [ 1765.468359][T27114] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1765.632129][T27114] usb 5-1: device descriptor read/64, error -71 [ 1765.658175][ T5857] usb 6-1: USB disconnect, device number 20 [ 1766.339458][T27114] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1766.365670][ T30] audit: type=1400 audit(1764406889.649:2498): avc: denied { create } for pid=28787 comm="syz.7.5724" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1766.421638][T28791] FAT-fs (nbd7): unable to read boot sector [ 1766.494190][T27114] usb 5-1: device descriptor read/64, error -71 [ 1766.638609][T27114] usb usb5-port1: attempt power cycle [ 1766.811070][T11312] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1766.985746][T11312] usb 8-1: Using ep0 maxpacket: 8 [ 1767.003892][T11312] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1767.015907][T11312] usb 8-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1767.028966][T11312] usb 8-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1767.039036][T27114] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1767.039177][T11312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.060713][T27114] usb 5-1: device descriptor read/8, error -71 [ 1767.135824][ T5857] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1767.187835][T28797] Cannot find del_set index 1 as target [ 1767.317111][T27114] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1767.359127][ T5857] usb 6-1: Using ep0 maxpacket: 16 [ 1767.368611][T27114] usb 5-1: device descriptor read/8, error -71 [ 1767.500271][ T5857] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1767.508526][ T5857] usb 6-1: config 0 has no interface number 0 [ 1767.516844][ T5857] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1767.526486][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.535655][ T5857] usb 6-1: Product: syz [ 1767.539912][ T5857] usb 6-1: Manufacturer: syz [ 1767.544591][ T5857] usb 6-1: SerialNumber: syz [ 1767.556090][ T5857] usb 6-1: config 0 descriptor?? [ 1767.563610][ T5857] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1767.580798][T11312] usb 8-1: string descriptor 0 read error: -71 [ 1767.610257][T11312] usb 8-1: USB disconnect, device number 97 [ 1767.641500][T27114] usb usb5-port1: unable to enumerate USB device [ 1767.845165][ T30] audit: type=1400 audit(1764406891.034:2499): avc: denied { bind } for pid=28802 comm="syz.8.5729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1767.867453][ T30] audit: type=1400 audit(1764406891.063:2500): avc: denied { listen } for pid=28802 comm="syz.8.5729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1768.237189][ T30] audit: type=1400 audit(1764406891.418:2501): avc: denied { getopt } for pid=28807 comm="syz.0.5730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1769.528268][ T5857] gspca_spca1528: reg_w err -110 [ 1769.534028][ T30] audit: type=1400 audit(1764406892.317:2502): avc: denied { write } for pid=28820 comm="syz.7.5733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1769.587960][ T5857] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1770.530634][T28822] kthread_run failed with err -4 [ 1770.788476][ T5857] usb 6-1: USB disconnect, device number 21 [ 1770.891667][T28847] binfmt_misc: register: failed to install interpreter file ./file0 [ 1771.632229][T28859] ip6erspan0: entered allmulticast mode [ 1771.828246][ T30] audit: type=1326 audit(1764406894.778:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1771.923471][ T30] audit: type=1326 audit(1764406894.778:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1771.972755][ T30] audit: type=1326 audit(1764406894.778:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.001435][ T30] audit: type=1326 audit(1764406894.778:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.031031][ T30] audit: type=1326 audit(1764406894.778:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.057346][ T30] audit: type=1326 audit(1764406894.778:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.086050][ T30] audit: type=1326 audit(1764406894.778:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.110303][ T30] audit: type=1326 audit(1764406894.778:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.143683][ T30] audit: type=1326 audit(1764406894.778:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.175826][ T30] audit: type=1326 audit(1764406894.778:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28869 comm="syz.0.5751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8680b8f749 code=0x7ffc0000 [ 1772.286429][T28893] bridge_slave_0: left allmulticast mode [ 1772.292357][T28893] bridge_slave_0: left promiscuous mode [ 1772.299555][T28893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1772.587426][T28893] bridge_slave_1: left allmulticast mode [ 1772.593105][T28893] bridge_slave_1: left promiscuous mode [ 1772.599843][T28893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.647182][T28893] bond0: (slave bond_slave_0): Releasing backup interface [ 1772.675430][T28893] bond0: (slave bond_slave_1): Releasing backup interface [ 1772.735552][T28893] team0: Port device team_slave_0 removed [ 1772.752299][T28893] team0: Port device team_slave_1 removed [ 1772.764921][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1772.784027][T28893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.796344][T28893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1772.822189][T28893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.842742][T28893] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1775.171066][T28967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5785'. [ 1775.851090][T28989] QAT: Invalid ioctl 1074356734 [ 1775.871094][T28990] netlink: 'syz.7.5799': attribute type 37 has an invalid length. [ 1776.188849][T29014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.034141][T29062] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1777.440094][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1777.440110][ T30] audit: type=1400 audit(1764406900.028:2521): avc: denied { ioctl } for pid=29078 comm="syz.7.5838" path="uts:[4026534408]" dev="nsfs" ino=4026534408 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1777.752734][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'. [ 1777.802607][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'. [ 1777.828851][T29095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5837'. [ 1779.074124][ T30] audit: type=1400 audit(1764406901.554:2522): avc: denied { create } for pid=29158 comm="syz.8.5873" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1779.107464][ T30] audit: type=1400 audit(1764406901.554:2523): avc: denied { mounton } for pid=29158 comm="syz.8.5873" path="/510/file0" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1781.248125][ T30] audit: type=1400 audit(1764406903.576:2524): avc: denied { audit_write } for pid=29226 comm="syz.5.5898" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1781.850896][T29253] overlayfs: failed to resolve './file2': -2 [ 1782.194258][ T30] audit: type=1400 audit(1764406904.474:2525): avc: denied { write } for pid=29269 comm="syz.5.5918" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1782.325038][T29275] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1782.500542][ T30] audit: type=1400 audit(1764406904.764:2526): avc: denied { getattr } for pid=29282 comm="syz.5.5923" lport=49927 faddr=::ffff:100.1.1.0 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1783.417407][ T30] audit: type=1400 audit(1764406905.616:2527): avc: denied { unlink } for pid=19121 comm="syz-executor" name="file0" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1785.558558][T29355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1785.924084][ T30] audit: type=1400 audit(1764406907.965:2528): avc: denied { setopt } for pid=29376 comm="syz.7.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1786.707657][T29391] [ 1786.710009][T29391] ===================================================== [ 1786.716921][T29391] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1786.724359][T29391] syzkaller #0 Not tainted [ 1786.728754][T29391] ----------------------------------------------------- [ 1786.735657][T29391] syz.7.5968/29391 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1786.743354][T29391] ffff888056b5dd38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 1786.752044][T29391] [ 1786.752044][T29391] and this task is already holding: [ 1786.759385][T29391] ffff888080568028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 1786.769197][T29391] which would create a new lock dependency: [ 1786.775062][T29391] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1786.783139][T29391] [ 1786.783139][T29391] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1786.792561][T29391] (&client->buffer_lock){..-.}-{3:3} [ 1786.792580][T29391] [ 1786.792580][T29391] ... which became SOFTIRQ-irq-safe at: [ 1786.805607][T29391] lock_acquire+0x179/0x350 [ 1786.810190][T29391] _raw_spin_lock+0x2e/0x40 [ 1786.814765][T29391] evdev_pass_values+0x10e/0x9b0 [ 1786.819773][T29391] evdev_events+0x1bb/0x390 [ 1786.824345][T29391] input_pass_values+0x74e/0x880 [ 1786.829355][T29391] input_handle_event+0xf00/0x14d0 [ 1786.834540][T29391] input_event+0x8e/0xd0 [ 1786.838873][T29391] hidinput_report_event+0xb2/0x100 [ 1786.844175][T29391] hid_report_raw_event+0x268/0x1290 [ 1786.849531][T29391] __hid_input_report.constprop.0+0x33f/0x450 [ 1786.855669][T29391] hid_irq_in+0x35e/0x870 [ 1786.860068][T29391] __usb_hcd_giveback_urb+0x38b/0x610 [ 1786.865513][T29391] usb_hcd_giveback_urb+0x39b/0x450 [ 1786.870785][T29391] dummy_timer+0x1809/0x3a00 [ 1786.875440][T29391] __hrtimer_run_queues+0x202/0xad0 [ 1786.880705][T29391] hrtimer_run_softirq+0x17d/0x350 [ 1786.885882][T29391] handle_softirqs+0x219/0x8e0 [ 1786.890712][T29391] __irq_exit_rcu+0x109/0x170 [ 1786.895454][T29391] irq_exit_rcu+0x9/0x30 [ 1786.899766][T29391] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1786.905481][T29391] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1786.911528][T29391] [ 1786.911528][T29391] to a SOFTIRQ-irq-unsafe lock: [ 1786.918522][T29391] (tasklist_lock){.+.?}-{3:3} [ 1786.918544][T29391] [ 1786.918544][T29391] ... which became SOFTIRQ-irq-unsafe at: [ 1786.931147][T29391] ... [ 1786.931153][T29391] lock_acquire+0x179/0x350 [ 1786.938298][T29391] _raw_read_lock+0x5f/0x70 [ 1786.942890][T29391] __do_wait+0x105/0x890 [ 1786.947207][T29391] do_wait+0x21d/0x590 [ 1786.951339][T29391] kernel_wait+0x9f/0x160 [ 1786.955732][T29391] call_usermodehelper_exec_work+0xf1/0x170 [ 1786.961692][T29391] process_one_work+0x9cf/0x1b70 [ 1786.966696][T29391] worker_thread+0x6c8/0xf10 [ 1786.971351][T29391] kthread+0x3c5/0x780 [ 1786.975482][T29391] ret_from_fork+0x675/0x7d0 [ 1786.980162][T29391] ret_from_fork_asm+0x1a/0x30 [ 1786.985003][T29391] [ 1786.985003][T29391] other info that might help us debug this: [ 1786.985003][T29391] [ 1786.995205][T29391] Chain exists of: [ 1786.995205][T29391] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1786.995205][T29391] [ 1787.008306][T29391] Possible interrupt unsafe locking scenario: [ 1787.008306][T29391] [ 1787.016599][T29391] CPU0 CPU1 [ 1787.021943][T29391] ---- ---- [ 1787.027283][T29391] lock(tasklist_lock); [ 1787.031505][T29391] local_irq_disable(); [ 1787.038232][T29391] lock(&client->buffer_lock); [ 1787.045586][T29391] lock(&new->fa_lock); [ 1787.052324][T29391] [ 1787.055754][T29391] lock(&client->buffer_lock); [ 1787.060754][T29391] [ 1787.060754][T29391] *** DEADLOCK *** [ 1787.060754][T29391] [ 1787.068872][T29391] 7 locks held by syz.7.5968/29391: [ 1787.074043][T29391] #0: ffff88802b0bf118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 1787.083167][T29391] #1: ffff88802ad6f230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 1787.093260][T29391] #2: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 1787.102900][T29391] #3: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 1787.112449][T29391] #4: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 1787.121565][T29391] #5: ffff888080568028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 1787.131812][T29391] #6: ffffffff8e3c4760 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 1787.140839][T29391] [ 1787.140839][T29391] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1787.151239][T29391] -> (&client->buffer_lock){..-.}-{3:3} { [ 1787.156979][T29391] IN-SOFTIRQ-W at: [ 1787.160936][T29391] lock_acquire+0x179/0x350 [ 1787.167069][T29391] _raw_spin_lock+0x2e/0x40 [ 1787.173205][T29391] evdev_pass_values+0x10e/0x9b0 [ 1787.179779][T29391] evdev_events+0x1bb/0x390 [ 1787.185929][T29391] input_pass_values+0x74e/0x880 [ 1787.192499][T29391] input_handle_event+0xf00/0x14d0 [ 1787.199245][T29391] input_event+0x8e/0xd0 [ 1787.205117][T29391] hidinput_report_event+0xb2/0x100 [ 1787.211942][T29391] hid_report_raw_event+0x268/0x1290 [ 1787.218857][T29391] __hid_input_report.constprop.0+0x33f/0x450 [ 1787.226549][T29391] hid_irq_in+0x35e/0x870 [ 1787.232511][T29391] __usb_hcd_giveback_urb+0x38b/0x610 [ 1787.239516][T29391] usb_hcd_giveback_urb+0x39b/0x450 [ 1787.246347][T29391] dummy_timer+0x1809/0x3a00 [ 1787.252566][T29391] __hrtimer_run_queues+0x202/0xad0 [ 1787.259394][T29391] hrtimer_run_softirq+0x17d/0x350 [ 1787.266135][T29391] handle_softirqs+0x219/0x8e0 [ 1787.272536][T29391] __irq_exit_rcu+0x109/0x170 [ 1787.278841][T29391] irq_exit_rcu+0x9/0x30 [ 1787.284718][T29391] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1787.291986][T29391] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1787.299596][T29391] INITIAL USE at: [ 1787.303467][T29391] lock_acquire+0x179/0x350 [ 1787.309509][T29391] _raw_spin_lock+0x2e/0x40 [ 1787.315559][T29391] evdev_pass_values+0x10e/0x9b0 [ 1787.322043][T29391] evdev_events+0x1bb/0x390 [ 1787.328093][T29391] input_pass_values+0x74e/0x880 [ 1787.334578][T29391] input_handle_event+0xf00/0x14d0 [ 1787.341234][T29391] input_event+0x8e/0xd0 [ 1787.347023][T29391] hidinput_report_event+0xb2/0x100 [ 1787.353761][T29391] hid_report_raw_event+0x268/0x1290 [ 1787.360584][T29391] __hid_input_report.constprop.0+0x33f/0x450 [ 1787.368191][T29391] hid_irq_in+0x35e/0x870 [ 1787.374066][T29391] __usb_hcd_giveback_urb+0x38b/0x610 [ 1787.380985][T29391] usb_hcd_giveback_urb+0x39b/0x450 [ 1787.387735][T29391] dummy_timer+0x1809/0x3a00 [ 1787.393871][T29391] __hrtimer_run_queues+0x202/0xad0 [ 1787.400612][T29391] hrtimer_run_softirq+0x17d/0x350 [ 1787.407268][T29391] handle_softirqs+0x219/0x8e0 [ 1787.413574][T29391] __irq_exit_rcu+0x109/0x170 [ 1787.419793][T29391] irq_exit_rcu+0x9/0x30 [ 1787.425579][T29391] sysvec_apic_timer_interrupt+0x57/0xc0 [ 1787.432765][T29391] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1787.440292][T29391] } [ 1787.442768][T29391] ... key at: [] __key.83+0x0/0x40 [ 1787.449941][T29391] [ 1787.449941][T29391] the dependencies between the lock to be acquired [ 1787.449948][T29391] and SOFTIRQ-irq-unsafe lock: [ 1787.463419][T29391] -> (tasklist_lock){.+.?}-{3:3} { [ 1787.468730][T29391] HARDIRQ-ON-R at: [ 1787.472870][T29391] lock_acquire+0x179/0x350 [ 1787.479362][T29391] _raw_read_lock+0x5f/0x70 [ 1787.485862][T29391] __do_wait+0x105/0x890 [ 1787.492093][T29391] do_wait+0x21d/0x590 [ 1787.498139][T29391] kernel_wait+0x9f/0x160 [ 1787.504482][T29391] call_usermodehelper_exec_work+0xf1/0x170 [ 1787.512371][T29391] process_one_work+0x9cf/0x1b70 [ 1787.519292][T29391] worker_thread+0x6c8/0xf10 [ 1787.525858][T29391] kthread+0x3c5/0x780 [ 1787.531925][T29391] ret_from_fork+0x675/0x7d0 [ 1787.538532][T29391] ret_from_fork_asm+0x1a/0x30 [ 1787.545301][T29391] IN-SOFTIRQ-R at: [ 1787.549437][T29391] lock_acquire+0x179/0x350 [ 1787.555917][T29391] _raw_read_lock+0x3a/0x70 [ 1787.562405][T29391] send_sigurg+0xed/0xc80 [ 1787.568713][T29391] sk_send_sigurg+0x76/0x360 [ 1787.575285][T29391] tcp_urg+0x341/0xb80 [ 1787.581350][T29391] tcp_rcv_established+0xa6d/0x3700 [ 1787.588544][T29391] tcp_v4_do_rcv+0xc65/0x10a0 [ 1787.595209][T29391] tcp_v4_rcv+0x3077/0x4db0 [ 1787.601695][T29391] ip_protocol_deliver_rcu+0xba/0x4c0 [ 1787.609055][T29391] ip_local_deliver_finish+0x3f2/0x720 [ 1787.616498][T29391] ip_local_deliver+0x18e/0x1f0 [ 1787.623327][T29391] ip_rcv+0x2e0/0x600 [ 1787.629288][T29391] __netif_receive_skb_one_core+0x197/0x1e0 [ 1787.637161][T29391] __netif_receive_skb+0x1d/0x160 [ 1787.644166][T29391] process_backlog+0x439/0x15e0 [ 1787.650997][T29391] __napi_poll.constprop.0+0xba/0x550 [ 1787.658367][T29391] net_rx_action+0x97f/0xef0 [ 1787.664933][T29391] handle_softirqs+0x219/0x8e0 [ 1787.671678][T29391] do_softirq+0xb2/0xf0 [ 1787.677812][T29391] __local_bh_enable_ip+0x100/0x120 [ 1787.684992][T29391] sk_stream_wait_memory+0x65c/0x10e0 [ 1787.692348][T29391] tcp_sendmsg_locked+0x15cb/0x42e0 [ 1787.699525][T29391] tcp_sendmsg+0x2e/0x50 [ 1787.705743][T29391] inet_sendmsg+0xb9/0x140 [ 1787.712141][T29391] __sys_sendto+0x43c/0x520 [ 1787.718624][T29391] __x64_sys_sendto+0xe0/0x1c0 [ 1787.725366][T29391] do_syscall_64+0xcd/0xfa0 [ 1787.731852][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.739724][T29391] SOFTIRQ-ON-R at: [ 1787.743855][T29391] lock_acquire+0x179/0x350 [ 1787.750330][T29391] _raw_read_lock+0x5f/0x70 [ 1787.756903][T29391] __do_wait+0x105/0x890 [ 1787.763127][T29391] do_wait+0x21d/0x590 [ 1787.769173][T29391] kernel_wait+0x9f/0x160 [ 1787.775474][T29391] call_usermodehelper_exec_work+0xf1/0x170 [ 1787.783344][T29391] process_one_work+0x9cf/0x1b70 [ 1787.790346][T29391] worker_thread+0x6c8/0xf10 [ 1787.796928][T29391] kthread+0x3c5/0x780 [ 1787.802970][T29391] ret_from_fork+0x675/0x7d0 [ 1787.809533][T29391] ret_from_fork_asm+0x1a/0x30 [ 1787.816277][T29391] INITIAL USE at: [ 1787.820321][T29391] lock_acquire+0x179/0x350 [ 1787.826715][T29391] _raw_write_lock_irq+0x36/0x50 [ 1787.833552][T29391] copy_process+0x4fe3/0x76a0 [ 1787.840123][T29391] kernel_clone+0xfc/0x930 [ 1787.846430][T29391] user_mode_thread+0xc8/0x110 [ 1787.853088][T29391] rest_init+0x23/0x2b0 [ 1787.859135][T29391] start_kernel+0x3f6/0x4e0 [ 1787.865539][T29391] x86_64_start_reservations+0x18/0x30 [ 1787.872894][T29391] x86_64_start_kernel+0x130/0x190 [ 1787.879916][T29391] common_startup_64+0x13e/0x148 [ 1787.886744][T29391] INITIAL READ USE at: [ 1787.891221][T29391] lock_acquire+0x179/0x350 [ 1787.898051][T29391] _raw_read_lock+0x5f/0x70 [ 1787.904889][T29391] __do_wait+0x105/0x890 [ 1787.911468][T29391] do_wait+0x21d/0x590 [ 1787.917857][T29391] kernel_wait+0x9f/0x160 [ 1787.924506][T29391] call_usermodehelper_exec_work+0xf1/0x170 [ 1787.932743][T29391] process_one_work+0x9cf/0x1b70 [ 1787.940005][T29391] worker_thread+0x6c8/0xf10 [ 1787.947003][T29391] kthread+0x3c5/0x780 [ 1787.953394][T29391] ret_from_fork+0x675/0x7d0 [ 1787.960304][T29391] ret_from_fork_asm+0x1a/0x30 [ 1787.967393][T29391] } [ 1787.970040][T29391] ... key at: [] tasklist_lock+0x18/0x40 [ 1787.977917][T29391] ... acquired at: [ 1787.981871][T29391] _raw_read_lock+0x5f/0x70 [ 1787.986535][T29391] send_sigurg+0xed/0xc80 [ 1787.991020][T29391] sk_send_sigurg+0x76/0x360 [ 1787.995779][T29391] tcp_urg+0x341/0xb80 [ 1787.999999][T29391] tcp_rcv_established+0xa6d/0x3700 [ 1788.005436][T29391] tcp_v4_do_rcv+0xc65/0x10a0 [ 1788.010268][T29391] __release_sock+0x361/0x450 [ 1788.015099][T29391] release_sock+0x5a/0x220 [ 1788.019670][T29391] sk_stream_wait_memory+0x65c/0x10e0 [ 1788.025195][T29391] tcp_sendmsg_locked+0x15cb/0x42e0 [ 1788.030547][T29391] tcp_sendmsg+0x2e/0x50 [ 1788.034941][T29391] inet_sendmsg+0xb9/0x140 [ 1788.039509][T29391] __sys_sendto+0x43c/0x520 [ 1788.044171][T29391] __x64_sys_sendto+0xe0/0x1c0 [ 1788.049088][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.053744][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.059787][T29391] [ 1788.062088][T29391] -> (&f_owner->lock){...-}-{3:3} { [ 1788.067362][T29391] IN-SOFTIRQ-R at: [ 1788.071403][T29391] lock_acquire+0x179/0x350 [ 1788.077707][T29391] _raw_read_lock_irqsave+0x46/0x90 [ 1788.084712][T29391] send_sigurg+0x5f/0xc80 [ 1788.090847][T29391] sk_send_sigurg+0x76/0x360 [ 1788.097239][T29391] tcp_urg+0x341/0xb80 [ 1788.103105][T29391] tcp_rcv_established+0xa6d/0x3700 [ 1788.110106][T29391] tcp_v4_do_rcv+0xc65/0x10a0 [ 1788.116583][T29391] tcp_v4_rcv+0x3077/0x4db0 [ 1788.122891][T29391] ip_protocol_deliver_rcu+0xba/0x4c0 [ 1788.130068][T29391] ip_local_deliver_finish+0x3f2/0x720 [ 1788.137332][T29391] ip_local_deliver+0x18e/0x1f0 [ 1788.143989][T29391] ip_rcv+0x2e0/0x600 [ 1788.149777][T29391] __netif_receive_skb_one_core+0x197/0x1e0 [ 1788.157478][T29391] __netif_receive_skb+0x1d/0x160 [ 1788.164313][T29391] process_backlog+0x439/0x15e0 [ 1788.170964][T29391] __napi_poll.constprop.0+0xba/0x550 [ 1788.178136][T29391] net_rx_action+0x97f/0xef0 [ 1788.184531][T29391] handle_softirqs+0x219/0x8e0 [ 1788.191097][T29391] do_softirq+0xb2/0xf0 [ 1788.197057][T29391] __local_bh_enable_ip+0x100/0x120 [ 1788.204057][T29391] sk_stream_wait_memory+0x65c/0x10e0 [ 1788.211231][T29391] tcp_sendmsg_locked+0x15cb/0x42e0 [ 1788.218320][T29391] tcp_sendmsg+0x2e/0x50 [ 1788.224368][T29391] inet_sendmsg+0xb9/0x140 [ 1788.230606][T29391] __sys_sendto+0x43c/0x520 [ 1788.236913][T29391] __x64_sys_sendto+0xe0/0x1c0 [ 1788.243480][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.249786][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.257483][T29391] INITIAL USE at: [ 1788.261439][T29391] lock_acquire+0x179/0x350 [ 1788.267665][T29391] _raw_write_lock_irq+0x36/0x50 [ 1788.274343][T29391] __f_setown+0x61/0x3c0 [ 1788.280305][T29391] generic_setlease+0xef2/0x1300 [ 1788.286965][T29391] kernel_setlease+0x106/0x140 [ 1788.293442][T29391] vfs_setlease+0x258/0x2d0 [ 1788.299663][T29391] fcntl_setlease+0x3ed/0x5a0 [ 1788.306056][T29391] do_fcntl+0x751/0x15a0 [ 1788.312018][T29391] __x64_sys_fcntl+0x163/0x200 [ 1788.318524][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.324743][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.332355][T29391] INITIAL READ USE at: [ 1788.336746][T29391] lock_acquire+0x179/0x350 [ 1788.343437][T29391] _raw_read_lock_irqsave+0x74/0x90 [ 1788.350789][T29391] send_sigio+0x31/0x3e0 [ 1788.357184][T29391] kill_fasync+0x214/0x510 [ 1788.363755][T29391] lease_break_callback+0x23/0x30 [ 1788.370936][T29391] __break_lease+0x674/0x1810 [ 1788.377777][T29391] do_dentry_open+0x91f/0x1530 [ 1788.384699][T29391] vfs_open+0x82/0x3f0 [ 1788.390920][T29391] path_openat+0x1de4/0x2cb0 [ 1788.397662][T29391] do_filp_open+0x20b/0x470 [ 1788.404328][T29391] file_open_name+0x2a3/0x450 [ 1788.411156][T29391] acct_on+0xc7/0xa00 [ 1788.417292][T29391] __x64_sys_acct+0x81/0x1e0 [ 1788.424047][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.430703][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.438743][T29391] } [ 1788.441302][T29391] ... key at: [] __key.1+0x0/0x40 [ 1788.448485][T29391] ... acquired at: [ 1788.452356][T29391] _raw_read_lock_irqsave+0x74/0x90 [ 1788.457712][T29391] send_sigio+0x31/0x3e0 [ 1788.462110][T29391] kill_fasync+0x214/0x510 [ 1788.466680][T29391] lease_break_callback+0x23/0x30 [ 1788.471866][T29391] __break_lease+0x674/0x1810 [ 1788.476694][T29391] do_dentry_open+0x91f/0x1530 [ 1788.481613][T29391] vfs_open+0x82/0x3f0 [ 1788.485861][T29391] path_openat+0x1de4/0x2cb0 [ 1788.490601][T29391] do_filp_open+0x20b/0x470 [ 1788.495254][T29391] file_open_name+0x2a3/0x450 [ 1788.500087][T29391] acct_on+0xc7/0xa00 [ 1788.504221][T29391] __x64_sys_acct+0x81/0x1e0 [ 1788.508964][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.513620][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.519663][T29391] [ 1788.521964][T29391] -> (&new->fa_lock){....}-{3:3} { [ 1788.527069][T29391] INITIAL USE at: [ 1788.530957][T29391] lock_acquire+0x179/0x350 [ 1788.537000][T29391] _raw_write_lock_irq+0x36/0x50 [ 1788.543508][T29391] fasync_remove_entry+0xb2/0x1e0 [ 1788.550096][T29391] fasync_helper+0xaf/0xd0 [ 1788.556058][T29391] pipe_fasync+0x117/0x200 [ 1788.562014][T29391] __fput+0x96b/0xb70 [ 1788.567539][T29391] task_work_run+0x150/0x240 [ 1788.573756][T29391] exit_to_user_mode_loop+0xec/0x130 [ 1788.580582][T29391] do_syscall_64+0x426/0xfa0 [ 1788.586714][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.594149][T29391] INITIAL READ USE at: [ 1788.598459][T29391] lock_acquire+0x179/0x350 [ 1788.604935][T29391] _raw_read_lock_irqsave+0x74/0x90 [ 1788.612114][T29391] kill_fasync+0x138/0x510 [ 1788.618511][T29391] sock_wake_async+0x132/0x160 [ 1788.625254][T29391] af_alg_wmem_wakeup+0x401/0x4d0 [ 1788.632256][T29391] skcipher_recvmsg+0xa0a/0x1030 [ 1788.639169][T29391] sock_recvmsg+0x1f9/0x250 [ 1788.645644][T29391] ____sys_recvmsg+0x218/0x6b0 [ 1788.652386][T29391] ___sys_recvmsg+0x114/0x1a0 [ 1788.659039][T29391] __sys_recvmsg+0x16a/0x220 [ 1788.665607][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.672083][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.679951][T29391] } [ 1788.682429][T29391] ... key at: [] __key.0+0x0/0x40 [ 1788.689526][T29391] ... acquired at: [ 1788.693304][T29391] lock_acquire+0x179/0x350 [ 1788.697958][T29391] _raw_read_lock_irqsave+0x74/0x90 [ 1788.703314][T29391] kill_fasync+0x138/0x510 [ 1788.707887][T29391] evdev_pass_values+0x619/0x9b0 [ 1788.712983][T29391] evdev_events+0x1bb/0x390 [ 1788.717643][T29391] input_pass_values+0x74e/0x880 [ 1788.722736][T29391] input_handle_event+0xf00/0x14d0 [ 1788.728002][T29391] input_inject_event+0x1e8/0x3b0 [ 1788.733183][T29391] evdev_write+0x457/0x750 [ 1788.737757][T29391] vfs_write+0x2a0/0x11d0 [ 1788.742238][T29391] ksys_write+0x1f8/0x250 [ 1788.746717][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.751370][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.757414][T29391] [ 1788.759715][T29391] [ 1788.759715][T29391] stack backtrace: [ 1788.765578][T29391] CPU: 0 UID: 0 PID: 29391 Comm: syz.7.5968 Not tainted syzkaller #0 PREEMPT(full) [ 1788.765596][T29391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1788.765605][T29391] Call Trace: [ 1788.765612][T29391] [ 1788.765619][T29391] dump_stack_lvl+0x116/0x1f0 [ 1788.765634][T29391] check_irq_usage+0x7dc/0x920 [ 1788.765660][T29391] ? check_path.constprop.0+0x24/0x50 [ 1788.765682][T29391] ? __lock_acquire+0x1285/0x1c90 [ 1788.765694][T29391] __lock_acquire+0x1285/0x1c90 [ 1788.765709][T29391] lock_acquire+0x179/0x350 [ 1788.765721][T29391] ? kill_fasync+0x138/0x510 [ 1788.765742][T29391] _raw_read_lock_irqsave+0x74/0x90 [ 1788.765763][T29391] ? kill_fasync+0x138/0x510 [ 1788.765780][T29391] kill_fasync+0x138/0x510 [ 1788.765798][T29391] evdev_pass_values+0x619/0x9b0 [ 1788.765821][T29391] evdev_events+0x1bb/0x390 [ 1788.765841][T29391] input_pass_values+0x74e/0x880 [ 1788.765863][T29391] input_handle_event+0xf00/0x14d0 [ 1788.765882][T29391] ? _copy_from_user+0x59/0xd0 [ 1788.765902][T29391] input_inject_event+0x1e8/0x3b0 [ 1788.765923][T29391] evdev_write+0x457/0x750 [ 1788.765944][T29391] ? __pfx_evdev_write+0x10/0x10 [ 1788.765965][T29391] ? bpf_lsm_file_permission+0x9/0x10 [ 1788.765979][T29391] ? security_file_permission+0x71/0x210 [ 1788.765998][T29391] ? rw_verify_area+0xcf/0x6c0 [ 1788.766018][T29391] ? __pfx_evdev_write+0x10/0x10 [ 1788.766037][T29391] vfs_write+0x2a0/0x11d0 [ 1788.766051][T29391] ? __pfx_vfs_write+0x10/0x10 [ 1788.766063][T29391] ? find_held_lock+0x2b/0x80 [ 1788.766080][T29391] ? __fget_files+0x204/0x3c0 [ 1788.766095][T29391] ? __fget_files+0x20e/0x3c0 [ 1788.766110][T29391] ksys_write+0x1f8/0x250 [ 1788.766123][T29391] ? __pfx_ksys_write+0x10/0x10 [ 1788.766139][T29391] do_syscall_64+0xcd/0xfa0 [ 1788.766154][T29391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.766173][T29391] RIP: 0033:0x7f38b8d8f749 [ 1788.766186][T29391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.766200][T29391] RSP: 002b:00007f38b6ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1788.766214][T29391] RAX: ffffffffffffffda RBX: 00007f38b8fe5fa0 RCX: 00007f38b8d8f749 [ 1788.766223][T29391] RDX: 000000000000005b RSI: 00002000000000c0 RDI: 0000000000000003 [ 1788.766232][T29391] RBP: 00007f38b8e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1788.766240][T29391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1788.766249][T29391] R13: 00007f38b8fe6038 R14: 00007f38b8fe5fa0 R15: 00007ffdd30f0778 [ 1788.766263][T29391]