last executing test programs: 2m14.451878985s ago: executing program 0 (id=296): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x36, 0x16, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x6, 0x1000, 0x0, 'queue1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5309, &(0x7f0000000000)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x36, 0x16, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x6, 0x1000, 0x0, 'queue1\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) getpid() (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5309, &(0x7f0000000000)) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) (async) read$char_usb(r5, &(0x7f00000001c0)=""/4068, 0xfe4) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) 2m14.122657244s ago: executing program 0 (id=297): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5e, 0x1}}}}}]}}]}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x8000000000000001, 0x1004, 0x804, 0x4, 0xf, 0x120000, 0x9, 0xffffffffffffffff, 0x8, 0x7, 0x4, 0x0, 0x101, 0x400000000000002, 0x9], 0xdddd1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb, 0x9, 0x5, '\x00', 0x381d5667}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x30, 0x5, {0x5, 0x3f, "dced88"}}, 0x0, 0x0, 0x0}, 0x0) 2m11.673881823s ago: executing program 0 (id=305): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='objagg_obj_root_destroy\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) syz_open_pts(r6, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x400000, 0x8000, 0xfffffffc, 0x2}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/122, 0x7a, 0x100, 0x8, 0x80000001, 0x10001, 0xfffffffe}}, 0x120) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x0, 0x1bc}, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x12, 0x0, @fd_index=0x3, 0x20000000000, 0x0}) 2m11.226126117s ago: executing program 0 (id=306): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8000000000000001, 0x113400) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x0, 0xfffffffffffffffd, 0xb3, 0x0, @scatter={0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/248, 0xf8}, {&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000240)=""/55, 0x37}, {&(0x7f0000000280)=""/33, 0x21}]}, &(0x7f0000000300)="07301d6c76bf0f9d230faa6125fbe9c0b7ea5202792ba87f586ed78de0dfa499ff3a2991edf9d8de0be7295379e668f3d275617cff3b66acee1664cf0e3106c5e3bd44a0ae9e15476a67c7a1b16d793a1dd2f9438e1709179692dce7b4353cecb0efe6f75f39d9fd1399e8e07c1d512e29794431788b8208edd2b5144350e8fff090ee90cfffa174a8061b4fb0fe98eb06249c10febba3c6e22a6d633c28179a5b2d34fa00748dafc1445eb81f88e2c59800a8", &(0x7f00000003c0)=""/40, 0x8, 0x5, 0x3, &(0x7f0000000400)}) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000540)=0x60) ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000580)={'batadv_slave_1\x00', @ifru_flags=0x4000}) (async, rerun: 64) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0), 0x200242, 0x0) (async, rerun: 64) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000600)) (async) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000640), 0x4) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x1, 0x5) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000680), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x2c}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x3f}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48044}, 0x4001) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r10, 0x29, 0x37, &(0x7f0000000880)={0x88, 0x5, '\x00', [@pad1, @pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0xf9, 0xa, [0x3, 0x1000, 0x4]}}, @ra={0x5, 0x2, 0x7fff}]}, 0x38) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000900)=0x14) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x5, 0xffffffff, 0x1, 0x40, 0xffffffffffffffff, 0x7f, '\x00', r11, 0xffffffffffffffff, 0x4, 0xc, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) (async, rerun: 64) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x9, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, &(0x7f0000000a40), {[{{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x8001, [0x7974, 0x1], 0xffff, 0x10, 0x3, [@loopback, @private0, @empty, @mcast2, @local, @dev={0xfe, 0x80, '\x00', 0x12}, @private1, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast1, @private1]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2800, 0xa, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (rerun: 64) ioctl$KIOCSOUND(r2, 0x4b2f, 0x2) (async) fcntl$setstatus(r6, 0x4, 0x42800) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000f80)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000001080)=0xe8) (async, rerun: 32) r13 = getuid() (rerun: 32) mount$9p_xen(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40), 0x43080, &(0x7f00000010c0)={'trans=xen,', {[{@version_9p2000}, {@access_uid={'access', 0x3d, r12}}, {@access_client}, {@access_uid={'access', 0x3d, r13}}], [{@flag='rw'}]}}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="230fab85a29ca2a4e40fc3baa42a0cf16ece98b926da4d5f02e2cbc489b2a654e60369d10d747c48be8b8e33335dbaf1083d97b33e830b6aba0201389c50fc27b35676e9f2b8c60cf89cbcb19b6632", 0x4f) 2m11.158887057s ago: executing program 0 (id=309): dup(0xffffffffffffffff) r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES16=r0], 0x29c}, 0x1, 0x0, 0x0, 0x804}, 0x20004181) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000400)={0x9, {{0x2, 0x0, @multicast2}}, 0x1}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000a40)={0x9, {{0x2, 0x0, @multicast2}}, 0x1, 0x1, [{{0x2, 0x0, @loopback}}]}, 0x110) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x5, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r7, 0x541b, 0x0) socket$packet(0x11, 0x2, 0x300) shmctl$IPC_RMID(0x0, 0xfeffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m10.734920363s ago: executing program 0 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="636f6e74657874f9517c218776bd1af376bdc35b3d73797361646d5f752c"]) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x40}, 0x18) socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x1000000000000}) r6 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(r6, r7, 0xb, &(0x7f0000000200)={0x1, 0x3, 0x8}) r8 = syz_open_procfs(r7, &(0x7f0000000380)='net/sco\x00') close_range(0xffffffffffffffff, r4, 0x0) pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 1m55.706651315s ago: executing program 32 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, &(0x7f0000003bc0)={0x0, 0x3938700}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="636f6e74657874f9517c218776bd1af376bdc35b3d73797361646d5f752c"]) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x40}, 0x18) socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8, 0x1000000000000}) r6 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x11, 0x4, @tid=r6}, &(0x7f0000044000)) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) rt_tgsigqueueinfo(r6, r7, 0xb, &(0x7f0000000200)={0x1, 0x3, 0x8}) r8 = syz_open_procfs(r7, &(0x7f0000000380)='net/sco\x00') close_range(0xffffffffffffffff, r4, 0x0) pread64(r8, &(0x7f0000002140)=""/17, 0x11, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) 15.936756189s ago: executing program 2 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x5}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x84, "78e114100985a79874342a70e113343972d01f"}) write$UHID_INPUT(r6, &(0x7f0000001040)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1010}}, 0x1b7) read$FUSE(r6, &(0x7f0000002080)={0x2020}, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8010) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 14.13462054s ago: executing program 2 (id=759): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x74) r1 = syz_open_dev$vim2m(&(0x7f0000000440), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc0405602, &(0x7f00000001c0)=@fd={0x3, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x82, '\x00\x00@\x00'}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 11.623948909s ago: executing program 2 (id=764): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x10140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYBLOB], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 11.494656179s ago: executing program 3 (id=765): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x101000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x7, 0x2, 0x1, 0x2}) memfd_create(&(0x7f0000000dc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2018081, 0x0) creat(0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0x1494) fcntl$setstatus(r7, 0x4, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000480)={0x0, r1, 0x0, 0x7ffffffe, 0x8}) 10.71155085s ago: executing program 2 (id=770): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000001100)='./file0/../file0/../file0\x00', &(0x7f00000010c0)='./file0/../file0/../file0/../file0\x00') capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x82}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$netlink(0x10, 0x3, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0/../file0/../file0/../file0/file0\x00'}, 0xfd28) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 10.479905792s ago: executing program 3 (id=774): r0 = socket(0x2, 0x80805, 0x0) syz_open_procfs(0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) times(&(0x7f0000000280)) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[], 0x11) times(&(0x7f00000002c0)) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x5, @broadcast}, 0x10) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000000)) 10.009565819s ago: executing program 3 (id=775): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x40, 0x1, 0x1a, "84fb4099a09ffea22448df42545cc21ec03ff6c83c7a0d139de9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x24) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4c0a0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x85) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) 8.210772297s ago: executing program 5 (id=780): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x10140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYBLOB], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 7.887820092s ago: executing program 2 (id=782): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setrlimit(0xe, &(0x7f0000000040)={0xfffffffffffffff8}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x90, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="180097ff010005", 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x880, &(0x7f0000000400)={0x11, 0x4d80bc28ddb2705e, r6, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) sendmsg$NL80211_CMD_DEL_TX_TS(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x52}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x2008800) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r8, 0xc004510e, 0x0) sendmsg(r3, 0x0, 0x4) 7.767468346s ago: executing program 2 (id=783): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) poll(&(0x7f0000000340)=[{r1, 0x204}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000002c0)={0x1, 0x15, 0x5fd, 0x8000, 0x74, 0x7b0, &(0x7f0000000240)="a5d37048a7bf18b2e3d82ceeb5e19cd317121a6071eca0cff5f938a98058d975a16470433d370331e200721c8907f920b0865f8900d0b0e4d575cbc1e6656baf8f03f74a28082fcec6ed2d78e69ba7744487c4c71bf441b5a3d28366faaed049af6f63f6087d64db60bb9c14c6693b219db1c2e2"}) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x3, r5, 0x1}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0xc, 0x7f, 0x6, 0xf, 0xfffffff2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0x727, 0x4, 0x3, 0x0, 0x107fff, 0x4c74, 0x9, 0x0, 0xd, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x3, 0x39, 0x2, 0x6, 0x81, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7f, 0x9, 0x5, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12f, 0x8000, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea4, 0x7ffffffc, 0x4, 0x0, 0xd310000, 0x9, 0x400, 0x1, 0x3, 0xfffffffd, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x9, 0x106, 0x2, 0x1ff, 0x27, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0xd, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xc, 0x5, 0x5, 0x76, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x1, 0x10000009, 0x3e7, 0xb, 0x1, 0xb7, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x3, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x5, 0x4, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x405, 0x5, 0x6, 0xffbefffb, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0x4e5, 0x1fd, 0x7669b26d, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.60018659s ago: executing program 33 (id=783): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00'}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000300), 0x28000, 0x0) poll(&(0x7f0000000340)=[{r1, 0x204}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000002c0)={0x1, 0x15, 0x5fd, 0x8000, 0x74, 0x7b0, &(0x7f0000000240)="a5d37048a7bf18b2e3d82ceeb5e19cd317121a6071eca0cff5f938a98058d975a16470433d370331e200721c8907f920b0865f8900d0b0e4d575cbc1e6656baf8f03f74a28082fcec6ed2d78e69ba7744487c4c71bf441b5a3d28366faaed049af6f63f6087d64db60bb9c14c6693b219db1c2e2"}) sendmmsg(r4, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x3, r5, 0x1}) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000040)=0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x1, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x80000006, 0x9, 0x2, 0xc, 0x7f, 0x6, 0xf, 0xfffffff2, 0x5f, 0xa, 0x7, 0xffff2d33, 0x8, 0x6, 0xa, 0x0, 0x80000001, 0xca, 0x7, 0x5, 0x3c5b, 0x6, 0x22, 0x2, 0xfffffffe, 0x1f461e2c, 0x2, 0x727, 0x4, 0x3, 0x0, 0x107fff, 0x4c74, 0x9, 0x0, 0xd, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x3, 0x39, 0x2, 0x6, 0x81, 0x3, 0x5, 0x0, 0x8, 0x8, 0x7f, 0x9, 0x5, 0x5, 0xa, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12f, 0x8000, 0x10, 0x10, 0x129432e6, 0xcb, 0x2, 0xd, 0x22d8, 0x1, 0x9, 0xfffffffc, 0x8, 0xfffffffe, 0x7, 0x5, 0x2f, 0xe, 0x8, 0x78, 0xea4, 0x7ffffffc, 0x4, 0x0, 0xd310000, 0x9, 0x400, 0x1, 0x3, 0xfffffffd, 0xff, 0x1005, 0x801, 0x7, 0x4, 0x9, 0x106, 0x2, 0x1ff, 0x27, 0x9, 0x8, 0x9, 0x8000, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x74ec1f9b, 0x4, 0x2, 0x7, 0xd, 0x9, 0x48c93690, 0x802, 0xff], [0x7, 0x4, 0x0, 0x652, 0xfffffdfe, 0xd, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xc, 0x5, 0x5, 0x76, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x1, 0x10000009, 0x3e7, 0xb, 0x1, 0xb7, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x3, 0x9, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x2, 0x10000, 0xa2, 0x7, 0x53cf6b7b, 0x5, 0x4, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x5, 0x405, 0x5, 0x6, 0xffbefffb, 0x4, 0x3, 0x8, 0x5, 0x8, 0x3], [0x10009, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffc, 0x9, 0x4e5, 0x1fd, 0x7669b26d, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0x2, 0x8, 0x60a7, 0x6, 0x6, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0xfffffff9, 0x7fffffff, 0x9602, 0xa, 0x8, 0x4, 0xffffffff, 0x1, 0x10002, 0x5, 0x8, 0x2b95, 0x7, 0x7, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.596346537s ago: executing program 4 (id=785): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'veth0_virt_wifi\x00', {0x2}, 0x100}) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0003340000003f03d326317b20ad73fcde9de02d0e81e74e3bb55dfeaed7eeba86ccad982f544db3bc75185dec1c3d83985c0be57f4e29ade8d30bad2a4cf3ef2430308752544b3e44b3274d69efa1599bed635c7af2dc"], 0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)="9f51ce1309284ca0558149cc8247d7c86b047de66e0708457e5b4998c0e2b24e", 0x20}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [r2, r1, r3, r1, r6, r5]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r6, r0, r6, r2, r5]}}], 0x70, 0x4000000}}], 0x1, 0x40000080) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, r7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='hrtimer_init\x00'}, 0x18) socket$inet(0x2, 0x2, 0x429) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r8, r8, r8) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*swO\x00\x00\xee\x02\x00\x00', 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000440)={0x191, 0x10, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {0xb4, 0x0, 0x1}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}) 7.159658425s ago: executing program 5 (id=786): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c", @ANYRES32=r1], 0x78}}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000903000000797a30000000000900020073797a32000000000900010073797a30000000000900010073797a30000000000c000580080001400000005e08000a40000000017ee2137175ca0fc033db6f0058232c675bbdc6617c73b2ddb403d059c6ed4b00e59b5f55e02ddd40674046960362cc846e9575b57a82bf63238b30e7c66bd1f0eee3c85cfcbe590764f08598337e6bc9"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000053baeeb6e9fde5fc010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000028000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010004000000000000000000000a"], 0x9c}}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB="2c6772fc6b6cec606f75700400001c00000001ab9fdb3b7b00863e5b99db8b3ab0eada8f0b5ce5218e94eb6569f94a824535a32d7c91ccaace04724caee4809b7aa62b54a8614c2d3915682263d7f23511e1030ee727f868e7887fe658fadd26aac9b48b65a752dd82526e039d94f39f731ca899612001eef7011122faf355ad2ac01b1c4d7726c14659084b48e0076953377bdbdff54a268932645cc77ea653cb72946be9064bab111da432e1cd7d1abcaa679756a238129b4cff96b248a680c1a5ff93bea5272e748e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fchdir(0xffffffffffffffff) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) truncate(&(0x7f0000000680)='./file0\x00', 0x40003e) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)=0x10) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000340)={0xa000001c}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffefffffff01802debc89d52fb5ec1b64500002000005a373da99078000000000000000000014e20000c90780100"/62], 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000600), 0xc) socket$nl_route(0x10, 0x3, 0x0) 6.897373683s ago: executing program 5 (id=788): io_cancel(0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000100)="8b13ca5ceca377ae09508b0a994822bcd5aa1aaba11a3cd6d6ad9cb0280178d7cff6732c46a57872525bf2bf4d297f553e6a9171dbcafd312b93540be13e5d5ac8", 0x41, 0x6, 0x0, 0x2}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="e10931d8640a00000000000086dd600141000010880020010000000000000000000000000000fe8000000000000000000000000000aa000000000007"], 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setscheduler(r0, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x0, r0}) socket(0x11, 0x800000003, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x1b, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x80001, 0x1, 0x1, 0x0, 0xff}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x0, 0x1, 0x2, 0x0, 0x86}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000492000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="650f083e3ead0fc7bf0a000000b805000000b9ba4500000f01c10fbedcc4e1817cb70e00000066bad004edb84c0000000f23d80f21f835400000b00f23f8660f353e0f0f78678a", 0x47}], 0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000565000/0x1000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x2, 0x1) r5 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r5, 0x110, 0x7, 0x0, &(0x7f0000000280)) semget$private(0x0, 0x8584debdfa27e6de, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="08001efbb07d586e", 0x8}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000700000086"], 0x18}, 0x2000c8d0) 6.201374218s ago: executing program 4 (id=789): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x400, 0x1003, 0x8}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203843, 0x0, [0x2], [0x800, 0x0, 0x0, 0x300]}) 5.220714831s ago: executing program 5 (id=791): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0xe4, 0x2e, 0x201, 0x70bd26, 0x80000000, "", [@generic="c2a89daa1cc6b308a038655b48bf3266cbc2269762c6571f0f18deb7053552839833c2817384624dd3fd878babf09456edbb679b963685c24ca558b98b7cd7fde988f9c06961fedcc7e7883cf3fcad4abfbd2ffb4e883f2f50aed601e38bd6ebc8429f55b1f0b363f3677182b8a0bffd5e0cbd46e05ebfea06bb7ffddf9c17b2aa99636da9101ece8b2e4d0881b879f679ce9b0f3cc8dd002b209b69477ae215e180cd0c2b13e2171b84f37317ed5694a93033af5dcea6b48d2ffbac24cdb6f8", @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0xe4}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79902000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(r1, 0x4, &(0x7f0000000180)={0x5, 0x8000000000000001}, &(0x7f00000001c0)) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000300)="390000001300034700bb5be1c3e4feff06000000010000104528a7978263a2301b297e76b607accd53af0df0ee2a4ed0e4b1735d82aad736610afbda5d", 0x3d}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000001000000000000000800090000"]) epoll_create1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=@newsa={0x114, 0x16, 0x1, 0x2000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x0, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@lifetime_val={0x24, 0x9, {0x1, 0x9, 0x7fff, 0x8000}}]}, 0x114}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 5.202049794s ago: executing program 4 (id=792): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x3, "16f4b2dd"}, @main=@item_4={0x3, 0x0, 0xa, "f5fa0001"}, @main=@item_012={0x0, 0x0, 0xb}]}}, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffeb4, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_newnexthop={0x24, 0x68, 0x510, 0x70bd2a, 0x25dfdbfe, {0xa, 0x0, 0x3, 0x0, 0xa}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x24}}, 0x4000040) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) 4.522627085s ago: executing program 3 (id=793): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x3, 0x3e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040055}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x8948, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x9a, 0x0, &(0x7f0000000740)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r10, 0x26, 0x0) 4.275959776s ago: executing program 1 (id=794): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000420000009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000008000000", @ANYRES32=r0], 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000500)=ANY=[], 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setuid(0xee01) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x100, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1012c00, &(0x7f00000003c0)={[{@nfs_export_off}, {@default_permissions}], [{@dont_hash}, {@fowner_gt={'fowner>', r2}}, {@fsname={'fsname', 0x3d, ':@#'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@flag='async'}, {@audit}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, '-'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0xca4, &(0x7f00000001c0)={0x0, 0x8de0, 0x10310, 0xfffffffe, 0x252}, &(0x7f0000000180), &(0x7f00000000c0)) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3.904747168s ago: executing program 1 (id=795): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x10140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYBLOB], 0x48) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 3.871038962s ago: executing program 3 (id=796): r0 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000000980)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) mkdirat(r3, &(0x7f0000000040)='./file1\x00', 0xb) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8) write$dsp(0xffffffffffffffff, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x5309, 0x0) 2.752248987s ago: executing program 1 (id=797): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008", @ANYRES32=r1], 0x78}}, 0x20000800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000903000000797a30000000000900020073797a32000000000900010073797a30000000000900010073797a30000000000c000580080001400000005e08000a40000000017ee2137175ca0fc033db6f0058232c675bbdc6617c73b2ddb403d059c6ed4b00e59b5f55e02ddd40674046960362cc846e9575b57a82bf63238b30e7c66bd1f0eee3c85cfcbe590764f08598337e6bc9"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000053baeeb6e9fde5fc010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000028000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010004000000000000000000000a"], 0x9c}}, 0x0) recvmmsg(r3, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC, @ANYBLOB="2c6772fc6b6cec606f75700400001c00000001ab9fdb3b7b00863e5b99db8b3ab0eada8f0b5ce5218e94eb6569f94a824535a32d7c91ccaace04724caee4809b7aa62b54a8614c2d3915682263d7f23511e1030ee727f868e7887fe658fadd26aac9b48b65a752dd82526e039d94f39f731ca899612001eef7011122faf355ad2ac01b1c4d7726c14659084b48e0076953377bdbdff54a268932645cc77ea653cb72946be9064bab111da432e1cd7d1abcaa679756a238129b4cff96b248a680c1a5ff93bea5272e748e", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) fchdir(0xffffffffffffffff) r6 = landlock_create_ruleset(&(0x7f0000000000)={0x6084}, 0x10, 0x0) landlock_restrict_self(r6, 0x0) truncate(&(0x7f0000000680)='./file0\x00', 0x40003e) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40088a01, &(0x7f0000000000)=0x10) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000340)={0xa000001c}) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffefffffff01802debc89d52fb5ec1b64500002000005a373da99078000000000000000000014e20000c90780100"/62], 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000600), 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.742236936s ago: executing program 3 (id=798): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x36, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) r5 = socket$inet(0x2, 0x5, 0x0) close(0x3) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f00000006c0)={0x0, "9e6c904a875010a2b08fd7b2e04040cd9fcc284ae9382d42a2ddceda995afbb9"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x200c437, 0x10000, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r5, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r12 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) syz_usb_control_io(r12, 0x0, 0x0) r13 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r13, 0x4b2f, 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newtclass={0x4c, 0x28, 0x400, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xa, 0x4}, {0x60ed62a995d62e79, 0x7}, {0xffff, 0xb}}, [@tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x200}}}, @tclass_kind_options=@c_clsact={0xb}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}]}}]}, 0x3c}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x0) unshare(0x80000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r14) 2.558620292s ago: executing program 1 (id=799): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x1, 0x402) read(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a6563745f723a696e6574645f6368696c645f657865635f743a7330001727b2367c5f8df3bb5c4014b47af6458fb18811f57b7858116189217cf82a5d21430b17b84f90ff2e6cd2eb7563d9883dfdd6f48cf12644fc7a5e8240824b62"], 0x40}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) syz_usb_control_io(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x4a) syz_usb_connect(0x1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x44000) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x1380, &(0x7f00000003c0)=ANY=[]) 2.4438173s ago: executing program 5 (id=800): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c000000010902120001000000000904"], 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f0000000040)="a7f5873688b0529d52bc48fef8539d6d3f28a7607cdfbf0ffb0652045c9dd927fda5fbaba2aaa74a559738b5f49a2f2af16ac2786770bf71cb965fd695e9b736f7a47c84c3dc1e33", 0x48, 0x7}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x81, 0x12, 0x5, '\x00', 0x6}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000000006000000000600150004000000140016"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) 2.114185456s ago: executing program 4 (id=801): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800, 0x0, 0x300]}) 1.988647026s ago: executing program 1 (id=802): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x18, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="54f9e08054482aa3f153d556cd6cf77adfbecbaae774918f7b03f0055150a54277c2efc2999187c60f0c2ea57a57c273e76c4d44f762547be29f0e112e", @ANYRES8=r1, @ANYRESDEC=r0, @ANYRESHEX=r1, @ANYRES16=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_io_uring_setup(0x5bf, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x3, 0x3d9}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa00090582024000000000e19927f2d8af"], 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3200890, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x1, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r8, 0x0, 0x30, 0x0, &(0x7f0000000140)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r9 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1, {0x0, r12}}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r12}}) 1.976900223s ago: executing program 4 (id=803): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33, 0x1, [{0xfe}]}}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) r2 = socket(0x10, 0x3, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) umount2(&(0x7f0000000040)='./file0\x00', 0x1d) (async) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000001010300000000000000000300000304000180342310800800014000000009080001400000000708000140000000ee359040438ff452e696420df01244b506080001400000000a0800014000000001080002400000000908000740000007ff"], 0x64}, 0x1, 0x0, 0x0, 0x24000809}, 0x44040814) (async) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) (async) io_uring_enter(r3, 0x100847c0, 0x0, 0x1, 0x0, 0x0) (async) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010006000000000002000500", @ANYRES32=0x0, @ANYBLOB="040004000000000010000600000000002000070000000000"], 0x2c, 0x3) 1.787710224s ago: executing program 4 (id=804): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005d35b94082058d00ac7a010203010902120001000009000904000000959ec800"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x10000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e20, 0x4, @remote, 0x5}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="0911567c99de3b844856ddbacbde9b3540c9a46d40f0a9fa90319a190a4cdbbf15561e0314ea375bcd18e72478cea33cf05e0ebb8df7d6b342878b0c9e645dd2a7ec0a696fadf66e6d62f7b4d973258568b9be59d5be427941386cdcd0989fa44477a479c537635e213da1e4f00a2dae186c", 0x72}, {&(0x7f0000000280)}, {&(0x7f00000004c0)="7434d602af9ca86b38f75304f87103a13af949d1a3b04427b25c2e99cfec7e5d67bd72233e7c8b1183090948fbc2b165b05dceb6083e706deb6ca3b4e421beef30402c5e544b3be69457f2f0469d0810b92c334c21469513157e94c9b8746ff4381b409bee8692a3a446cab6d9e363df9ea841ccb7c827bb755a4ca939c8981b1f64ca944b8c099bc8bc876d3ebf135ef1cbaa4321d2f9d187b37e", 0x9b}], 0x3, &(0x7f0000000580)=[@tclass={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x0, 0x55, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@generic={0x1, 0x9, "ba942bab3478f1cb5c"}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dstopts={{0x1c8, 0x29, 0x37, {0xc, 0x35, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0xc30f, [0x0]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xf, 0xa0, "f35d4a42dc5ace9fe419a120dd39f51d3b8a35f681cd392cd4518bef4761081c87066a029eed6d64134a238790aa3ef4e52f6a831e9ac36c6028c2c9ddee950eac8bd68de28b1be893c55824f60eef65098668241e9f45e3c715b3fb97ea5a3c3048930743dc38bc69a6adab634753c5822c2117a6411083cc79619fff646d7ec69e7c7dbda8bede63d88ca508d3e18ac8f2554a6a15797cb7cd435fcc2874c8"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x1, 0x5, [0x400, 0xae1, 0x0, 0xac, 0x100000000, 0x4, 0x7]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x40, 0x9d, "d8c64290d2782919b14a10db90f89617379bcf1c54c191a9a1fb095faa83bb4a67eae894cf93f352faadb0235e4d320985569c060bc0ea3ac0827e6cc1b54f6c59e0ef77ceb941951cf67a7521d6edfe3d3961a23a15fabf2ffbe33647ea28dc87bfd4bcb632cb730d05a0f13c455ac30c3ff2d85ab703d5b00891f96f51812ad68450a3b17d1df16c04d5c6e0e42cb5c6330d78e8c8faf9e74adcaab8"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}, @rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x7f, 0x0, [@empty]}}}], 0x2b8}, 0x20000800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040040}, 0x40410) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7356bb2fad247b22}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) 1.299542198s ago: executing program 1 (id=805): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x110) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000240)='smaps_rollup\x00') syz_usb_disconnect(0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x30014e5, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x64b40, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) unlink(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0xffffffff, 0x0, {0x1, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) write$FUSE_INIT(r4, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x2b, 0x3, 0x20000, 0xe0da, 0x0, 0xff, 0x3, 0x0, 0x0, 0x20, 0x37}}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 489.02684ms ago: executing program 5 (id=806): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000180), 0x0, 0x10140, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) r4 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 0s ago: executing program 6 (id=784): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005d35b94082058d00ac7a010203010902120001000009000904000000959ec800"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x10000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000240)={0xa, 0x4e20, 0x4, @remote, 0x5}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000340)="0911567c99de3b844856ddbacbde9b3540c9a46d40f0a9fa90319a190a4cdbbf15561e0314ea375bcd18e72478cea33cf05e0ebb8df7d6b342878b0c9e645dd2a7ec0a696fadf66e6d62f7b4d973258568b9be59d5be427941386cdcd0989fa44477a479c537635e213da1e4f00a2dae186c", 0x72}, {&(0x7f0000000280)}, {&(0x7f00000004c0)="7434d602af9ca86b38f75304f87103a13af949d1a3b04427b25c2e99cfec7e5d67bd72233e7c8b1183090948fbc2b165b05dceb6083e706deb6ca3b4e421beef30402c5e544b3be69457f2f0469d0810b92c334c21469513157e94c9b8746ff4381b409bee8692a3a446cab6d9e363df9ea841ccb7c827bb755a4ca939c8981b1f64ca944b8c099bc8bc876d3ebf135ef1cbaa4321d2f9d187b37e", 0x9b}], 0x3, &(0x7f0000000580)=[@tclass={{0x14}}, @rthdr={{0x28, 0x29, 0x39, {0x5c, 0x2, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x1, 0x2, 0x0, 0x55, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, '\x00', [@generic={0x1, 0x9, "ba942bab3478f1cb5c"}, @jumbo={0xc2, 0x4, 0x8}]}}}, @dstopts={{0x1c8, 0x29, 0x37, {0xc, 0x35, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x7, 0xc30f, [0x0]}}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x4}, @generic={0xf, 0xa0, "f35d4a42dc5ace9fe419a120dd39f51d3b8a35f681cd392cd4518bef4761081c87066a029eed6d64134a238790aa3ef4e52f6a831e9ac36c6028c2c9ddee950eac8bd68de28b1be893c55824f60eef65098668241e9f45e3c715b3fb97ea5a3c3048930743dc38bc69a6adab634753c5822c2117a6411083cc79619fff646d7ec69e7c7dbda8bede63d88ca508d3e18ac8f2554a6a15797cb7cd435fcc2874c8"}, @calipso={0x7, 0x40, {0x2, 0xe, 0x1, 0x5, [0x400, 0xae1, 0x0, 0xac, 0x100000000, 0x4, 0x7]}}, @jumbo={0xc2, 0x4, 0x4}, @generic={0x40, 0x9d, "d8c64290d2782919b14a10db90f89617379bcf1c54c191a9a1fb095faa83bb4a67eae894cf93f352faadb0235e4d320985569c060bc0ea3ac0827e6cc1b54f6c59e0ef77ceb941951cf67a7521d6edfe3d3961a23a15fabf2ffbe33647ea28dc87bfd4bcb632cb730d05a0f13c455ac30c3ff2d85ab703d5b00891f96f51812ad68450a3b17d1df16c04d5c6e0e42cb5c6330d78e8c8faf9e74adcaab8"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x800}}, @rthdr={{0x28, 0x29, 0x39, {0xff, 0x2, 0x2, 0x7f, 0x0, [@empty]}}}], 0x2b8}, 0x20000800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040040}, 0x40410) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7356bb2fad247b22}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8], 0x54}, 0x1, 0x0, 0x0, 0x20008045}, 0x4880) kernel console output (not intermixed with test programs): o altsetting 0 [ 177.915404][ T5891] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=d4.1b [ 177.931762][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.941974][ T6287] team0 (unregistering): Port device team_slave_0 removed [ 177.958982][ T5891] usb 2-1: Product: syz [ 177.974966][ T5891] usb 2-1: Manufacturer: syz [ 177.985001][ T5891] usb 2-1: SerialNumber: syz [ 178.182131][ T974] usb 3-1: reset high-speed USB device number 12 using dummy_hcd [ 178.206709][ T5891] ttusbir 2-1:5.35: cannot find expected altsetting [ 178.229049][ T5891] usb 2-1: USB disconnect, device number 8 [ 178.350736][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.358063][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.387508][ T7396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.407488][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.414776][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.441641][ T7396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.510218][ T7396] hsr_slave_0: entered promiscuous mode [ 178.517504][ T7396] hsr_slave_1: entered promiscuous mode [ 178.524745][ T7396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.533160][ T7396] Cannot create hsr debugfs directory [ 178.849739][ T30] audit: type=1400 audit(1747002561.265:411): avc: denied { ioctl } for pid=7467 comm="syz.1.385" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 178.994758][ T30] audit: type=1400 audit(1747002561.415:412): avc: denied { mount } for pid=7467 comm="syz.1.385" name="/" dev="ramfs" ino=13912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 179.021102][ T7468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 179.066091][ T7396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.098016][ T7396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.109316][ T30] audit: type=1400 audit(1747002561.525:413): avc: denied { accept } for pid=7472 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.140127][ T7396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.167014][ T30] audit: type=1400 audit(1747002561.545:414): avc: denied { getopt } for pid=7472 comm="syz.3.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 179.225115][ T7396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.359560][ T5891] usb 5-1: USB disconnect, device number 13 [ 179.941727][ T5821] Bluetooth: hci1: command tx timeout [ 180.150090][ T30] audit: type=1400 audit(1747002562.495:415): avc: denied { ioctl } for pid=7488 comm="syz.4.389" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x55c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 180.190876][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.229824][ T5860] usb 3-1: USB disconnect, device number 12 [ 180.318777][ T7396] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.417255][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 180.450110][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.457239][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.470564][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.477679][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.581820][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 180.612668][ T30] audit: type=1400 audit(1747002562.955:416): avc: denied { write } for pid=7502 comm="syz.2.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 180.898768][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.919312][ T7396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 180.933285][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.944102][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.957838][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 180.960835][ T7396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.967201][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.991075][ T9] usb 2-1: config 0 descriptor?? [ 181.625719][ T9] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 181.653105][ T9] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 181.714544][ T9] koneplus 0003:1E7D:2E22.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 181.813588][ T30] audit: type=1400 audit(1747002564.155:417): avc: denied { read write } for pid=7516 comm="syz.2.394" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 181.866155][ T9] koneplus 0003:1E7D:2E22.000B: couldn't init struct koneplus_device [ 181.874787][ T9] koneplus 0003:1E7D:2E22.000B: couldn't install mouse [ 181.883263][ T30] audit: type=1400 audit(1747002564.155:418): avc: denied { open } for pid=7516 comm="syz.2.394" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 181.912734][ T9] koneplus 0003:1E7D:2E22.000B: probe with driver koneplus failed with error -71 [ 181.927699][ T9] usb 2-1: USB disconnect, device number 9 [ 182.021982][ T5821] Bluetooth: hci1: command tx timeout [ 182.116897][ T7525] fido_id[7525]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 182.158768][ T7396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.438791][ T30] audit: type=1326 audit(1747002564.855:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7533 comm="syz.4.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfb478e969 code=0x0 [ 182.536358][ T30] audit: type=1326 audit(1747002564.945:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7539 comm="syz.2.396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b7b98e969 code=0x0 [ 182.664455][ T7548] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.395'. [ 182.698133][ T7550] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.396'. [ 182.707578][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 182.738192][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 183.151724][ T7564] trusted_key: encrypted_key: insufficient parameters specified [ 183.776246][ T30] audit: type=1326 audit(1747002565.975:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7549 comm="syz.1.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd878e969 code=0x7fc00000 [ 184.080724][ T7396] veth0_vlan: entered promiscuous mode [ 184.095045][ T7396] veth1_vlan: entered promiscuous mode [ 184.126628][ T7396] veth0_macvtap: entered promiscuous mode [ 184.136790][ T7396] veth1_macvtap: entered promiscuous mode [ 184.155597][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.166253][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.176651][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.189248][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.199336][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.244341][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.261968][ T30] audit: type=1400 audit(1747002566.675:422): avc: denied { name_connect } for pid=7568 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 184.265694][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.318406][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.348435][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.366957][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.380390][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.390974][ T5860] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 184.464277][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.475076][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.484954][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.495422][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.511182][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.531413][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.547616][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.599052][ T7396] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.698293][ T7396] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.808312][ T7396] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.976851][ T5861] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 185.554210][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.567319][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.578121][ T5860] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 185.587394][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.764502][ T7396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.872011][ T5861] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.937584][ T5860] usb 5-1: config 0 descriptor?? [ 185.942965][ T5861] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.973070][ T5861] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.997384][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.027122][ T7578] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 186.080922][ T7595] netlink: 16 bytes leftover after parsing attributes in process `syz.3.407'. [ 186.085423][ T5861] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.174751][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.183688][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.191991][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.200630][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.202651][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.208472][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.225533][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.233289][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.241047][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.249340][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.258032][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.261552][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.265842][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.285485][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.293498][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.301621][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.309348][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.317937][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.326168][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.333989][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.343385][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.351354][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.360209][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.368507][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.376920][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.385637][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.393508][ T5860] usbhid 5-1:0.0: can't add hid device: -71 [ 186.399483][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 186.407798][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.415609][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.423382][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.431649][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.439364][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.447136][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.454882][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.463393][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.471073][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 186.490326][ T5860] usb 5-1: USB disconnect, device number 14 [ 186.524676][ T5861] usb 2-1: USB disconnect, device number 10 [ 187.142059][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.253357][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.415922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.532036][ T7620] fuse: Bad value for 'fd' [ 187.598193][ T30] audit: type=1400 audit(1747002570.015:423): avc: denied { mounton } for pid=7396 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 187.951670][ T7633] tmpfs: Bad value for 'mpol' [ 187.982995][ T7634] netdevsim netdevsim3: Direct firmware load for . [ 187.982995][ T7634] failed with error -2 [ 188.215660][ T7634] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 188.215660][ T7634] [ 188.226243][ T30] audit: type=1400 audit(1747002570.475:424): avc: denied { firmware_load } for pid=7622 comm="syz.3.412" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 188.247356][ T7644] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 188.626138][ T30] audit: type=1400 audit(1747002571.045:425): avc: denied { getopt } for pid=7657 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 188.712091][ T974] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 188.872740][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.885368][ T974] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.911683][ T974] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 188.921023][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.953238][ T974] usb 2-1: config 0 descriptor?? [ 189.830981][ T7680] trusted_key: encrypted_key: insufficient parameters specified [ 189.865098][ T7681] delete_channel: no stack [ 190.604023][ T7683] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 191.439398][ T5860] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 191.491068][ T30] audit: type=1400 audit(1747002573.735:426): avc: denied { listen } for pid=7698 comm="syz.2.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 191.576220][ T7703] 9pnet_fd: Insufficient options for proto=fd [ 191.618575][ T30] audit: type=1400 audit(1747002574.035:427): avc: denied { ioctl } for pid=7704 comm="syz.2.430" path="socket:[15635]" dev="sockfs" ino=15635 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 191.674644][ T5860] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 191.704772][ T5860] usb 5-1: config 0 has no interface number 0 [ 191.715743][ T5860] usb 5-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4 [ 191.725547][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.801485][ T5860] usb 5-1: Product: syz [ 191.805669][ T5860] usb 5-1: Manufacturer: syz [ 191.810894][ T5860] usb 5-1: SerialNumber: syz [ 191.820835][ T5860] usb 5-1: config 0 descriptor?? [ 191.840094][ T5860] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618 [ 191.974553][ T974] hid-led 0003:0FC5:B080.000C: probe with driver hid-led failed with error -71 [ 192.024295][ T974] usb 2-1: USB disconnect, device number 11 [ 192.050527][ T30] audit: type=1400 audit(1747002574.465:428): avc: denied { write } for pid=7691 comm="syz.4.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.211544][ T5890] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 192.250195][ T5860] gspca_sn9c20x: Write register 1000 failed -71 [ 192.258917][ T5860] gspca_sn9c20x: Device initialization failed [ 192.266324][ T5860] gspca_sn9c20x 5-1:0.217: probe with driver gspca_sn9c20x failed with error -71 [ 192.522027][ T5860] usb 5-1: USB disconnect, device number 15 [ 192.547198][ T30] audit: type=1400 audit(1747002574.915:429): avc: denied { connect } for pid=7725 comm="syz.5.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 192.611375][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 192.635232][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.657214][ T5890] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.728471][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.760900][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.786258][ T5890] usb 4-1: SerialNumber: syz [ 193.249158][ T30] audit: type=1400 audit(1747002575.665:430): avc: denied { mount } for pid=7716 comm="syz.3.432" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 193.317782][ T5890] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 193.353505][ T5890] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 193.360124][ T30] audit: type=1400 audit(1747002575.695:431): avc: denied { remount } for pid=7716 comm="syz.3.432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 193.409500][ T5890] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 193.469690][ T5890] usb 4-1: USB disconnect, device number 17 [ 193.484311][ T5817] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 193.525049][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.5.437'. [ 193.964935][ T5860] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.983325][ T30] audit: type=1400 audit(1747002576.395:432): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 194.462292][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.551218][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 194.559253][ T5860] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.578282][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.586433][ T5817] Bluetooth: hci1: command 0x0405 tx timeout [ 194.596682][ T5860] usb 2-1: Product: syz [ 194.600890][ T5860] usb 2-1: Manufacturer: syz [ 194.616824][ T5860] usb 2-1: SerialNumber: syz [ 194.625171][ T5860] usb 2-1: config 0 descriptor?? [ 194.743175][ T7773] overlayfs: failed to resolve './file1': -2 [ 194.749742][ T7774] overlayfs: failed to resolve './file1': -2 [ 194.758265][ T30] audit: type=1400 audit(1747002577.165:433): avc: denied { shutdown } for pid=7771 comm="syz.3.443" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.857971][ T5860] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 195.027712][ T30] audit: type=1326 audit(1747002577.425:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7775 comm="syz.2.444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b7b98e969 code=0x0 [ 195.063352][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 195.195163][ T7789] FAT-fs (nullb0): bogus number of reserved sectors [ 195.203460][ T7789] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 195.236506][ T30] audit: type=1326 audit(1747002577.645:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7784 comm="syz.4.446" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfb478e969 code=0x0 [ 195.419488][ T7796] can0: slcan on ttyS3. [ 195.475086][ T7798] netlink: 'syz.5.447': attribute type 3 has an invalid length. [ 195.605060][ T7796] can0 (unregistered): slcan off ttyS3. [ 195.623767][ T7802] pim6reg1: entered promiscuous mode [ 195.653223][ T7802] pim6reg1: entered allmulticast mode [ 195.846384][ T5860] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 196.228289][ T7756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.400689][ T7756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.660256][ T5890] usb 2-1: USB disconnect, device number 12 [ 196.665117][ T7815] tmpfs: Bad value for 'mpol' [ 196.702889][ T30] audit: type=1400 audit(1747002579.125:436): avc: denied { read write } for pid=7813 comm="syz.5.452" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 196.754186][ T30] audit: type=1400 audit(1747002579.125:437): avc: denied { open } for pid=7813 comm="syz.5.452" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 196.882411][ T7821] netlink: 'syz.5.452': attribute type 10 has an invalid length. [ 196.896170][ T7821] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.912858][ T7823] PKCS7: Unknown OID: [5] (bad) [ 196.925071][ T30] audit: type=1400 audit(1747002579.295:438): avc: denied { bind } for pid=7813 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 196.932415][ T7823] PKCS7: Only support pkcs7_signedData type [ 196.957403][ T30] audit: type=1400 audit(1747002579.305:439): avc: denied { connect } for pid=7813 comm="syz.5.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.992305][ T7821] bond0: (slave team0): Enslaving as an active interface with an up link [ 197.074253][ T7827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.456'. [ 197.938725][ T5821] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 197.947947][ T5821] Bluetooth: hci4: Injecting HCI hardware error event [ 197.956327][ T5821] Bluetooth: hci4: hardware error 0x00 [ 199.019105][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 199.019121][ T30] audit: type=1400 audit(1747002581.435:442): avc: denied { mount } for pid=7833 comm="syz.2.457" name="/" dev="configfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 199.283862][ T30] audit: type=1400 audit(1747002581.665:443): avc: denied { setopt } for pid=7851 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.311731][ T5891] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.912353][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 200.092846][ T5821] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 200.239865][ T5891] usb 2-1: config 0 has an invalid interface number: 192 but max is 0 [ 200.297560][ T5891] usb 2-1: config 0 has no interface number 0 [ 200.602169][ T5891] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=f1.46 [ 200.667242][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.736269][ T5891] usb 2-1: Product: syz [ 200.763536][ T5891] usb 2-1: Manufacturer: syz [ 200.794248][ T5891] usb 2-1: SerialNumber: syz [ 200.822215][ T5891] usb 2-1: config 0 descriptor?? [ 200.847024][ T5891] ems_usb 2-1:0.192 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 200.893769][ T5891] ems_usb 2-1:0.192: probe with driver ems_usb failed with error -22 [ 201.011316][ T5860] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 201.081419][ T5891] usb 2-1: USB disconnect, device number 13 [ 201.416277][ T5860] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 201.455474][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.490080][ T5860] usb 5-1: config 0 descriptor?? [ 201.519557][ T5860] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 201.702623][ T82] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.743188][ T5860] gp8psk: usb in 128 operation failed. [ 201.820743][ T30] audit: type=1400 audit(1747002584.235:444): avc: denied { read } for pid=7882 comm="syz.1.468" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.846150][ T30] audit: type=1400 audit(1747002584.265:445): avc: denied { open } for pid=7882 comm="syz.1.468" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 201.881667][ T5891] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 201.882996][ T30] audit: type=1400 audit(1747002584.285:446): avc: denied { getattr } for pid=7882 comm="syz.1.468" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15205 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.923356][ T82] usb 6-1: Using ep0 maxpacket: 32 [ 201.936622][ T82] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.972303][ T82] usb 6-1: config 0 has no interface number 0 [ 201.999588][ T7892] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.023141][ T30] audit: type=1400 audit(1747002584.415:447): avc: denied { write } for pid=7889 comm="syz.2.469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 202.077697][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.469'. [ 202.165940][ T5891] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 202.184032][ T82] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 202.212912][ T30] audit: type=1400 audit(1747002584.485:448): avc: denied { listen } for pid=7889 comm="syz.2.469" lport=37239 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.236108][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.256522][ T82] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.305349][ T5891] usb 4-1: Product: syz [ 202.314867][ T5860] gp8psk: FW Version = 143.53.200 (0x8f35c8) Build 2244/167/217 [ 202.315520][ T82] usb 6-1: Product: syz [ 202.335474][ T5891] usb 4-1: Manufacturer: syz [ 202.354535][ T5891] usb 4-1: SerialNumber: syz [ 202.376170][ T82] usb 6-1: Manufacturer: syz [ 202.385412][ T30] audit: type=1400 audit(1747002584.485:449): avc: denied { accept } for pid=7889 comm="syz.2.469" lport=37239 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.426219][ T82] usb 6-1: SerialNumber: syz [ 202.439087][ T5863] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 202.471933][ T5891] usb 4-1: config 0 descriptor?? [ 202.496727][ T82] usb 6-1: config 0 descriptor?? [ 202.597393][ T82] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.658057][ T5891] usb 4-1: selecting invalid altsetting 3 [ 202.684538][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.714325][ T5891] comedi comedi0: could not set alternate setting 3 in high speed [ 202.777670][ T5863] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 202.804176][ T5860] gp8psk: usb in 149 operation failed. [ 202.817717][ T5860] gp8psk: failed to get FPGA version [ 202.825408][ T82] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 202.826500][ T5860] gp8psk: usb in 138 operation failed. [ 202.840402][ T5860] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 202.841221][ T5891] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 202.851441][ T5860] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 202.872731][ T5860] usb 5-1: USB disconnect, device number 16 [ 202.903464][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.938659][ T82] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 202.959033][ T5863] usb 2-1: Product: syz [ 202.969132][ T5863] usb 2-1: Manufacturer: syz [ 202.982106][ T5891] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 203.001318][ T5863] usb 2-1: SerialNumber: syz [ 203.104409][ T5863] usb 2-1: config 0 descriptor?? [ 203.118272][ T5891] usb 4-1: USB disconnect, device number 18 [ 203.343412][ T5863] ims_pcu 2-1:0.0: Zero length descriptor [ 203.444718][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 203.456771][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.483893][ T82] usb 6-1: USB disconnect, device number 2 [ 203.507997][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.518454][ T5863] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 203.550489][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.570912][ T82] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.573508][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.606032][ T82] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.624674][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.657725][ T82] quatech2 6-1:0.51: device disconnected [ 203.700661][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.009126][ T7910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=7910 comm=syz.3.472 [ 204.059137][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.348414][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.422253][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.456074][ T7908] overlayfs: missing 'lowerdir' [ 204.494741][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.671888][ T7923] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 204.717481][ T7923] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 204.816950][ T30] audit: type=1400 audit(1747002587.235:450): avc: denied { append } for pid=7933 comm="syz.3.479" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 204.856569][ T7935] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 204.865191][ T7935] /dev/nullb0: Can't open blockdev [ 205.194795][ T974] usb 2-1: USB disconnect, device number 14 [ 205.214658][ T7936] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 205.301504][ T5860] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 205.530885][ T5860] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.666454][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.692613][ T30] audit: type=1400 audit(1747002587.975:451): avc: denied { associate } for pid=7943 comm="syz.1.480" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 206.819139][ T30] audit: type=1400 audit(1747002588.075:452): avc: denied { read } for pid=7922 comm="syz.4.477" path="socket:[16018]" dev="sockfs" ino=16018 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 206.945661][ T30] audit: type=1400 audit(1747002588.115:453): avc: denied { create } for pid=7948 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.966945][ T30] audit: type=1400 audit(1747002588.115:454): avc: denied { bind } for pid=7948 comm="syz.5.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 206.988336][ T30] audit: type=1400 audit(1747002589.215:455): avc: denied { read } for pid=7933 comm="syz.3.479" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.036347][ T30] audit: type=1400 audit(1747002589.215:456): avc: denied { open } for pid=7933 comm="syz.3.479" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 207.064105][ T5860] usb 3-1: config 0 descriptor?? [ 207.135610][ T5860] cp210x 3-1:0.0: cp210x converter detected [ 207.279839][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.483'. [ 207.377919][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.483'. [ 207.423867][ T82] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 207.499194][ T7964] tipc: Started in network mode [ 207.500665][ T5860] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 207.526221][ T7964] tipc: Node identity 9a38ce62321e, cluster identity 4711 [ 207.542562][ T7964] tipc: Enabled bearer , priority 0 [ 207.578737][ T7963] tipc: Disabling bearer [ 207.614993][ T82] usb 6-1: unable to get BOS descriptor or descriptor too short [ 207.627802][ T82] usb 6-1: not running at top speed; connect to a high speed hub [ 207.663695][ T82] usb 6-1: config 2 has an invalid interface number: 131 but max is 0 [ 207.693443][ T82] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 207.963860][ T30] audit: type=1400 audit(1747002590.135:457): avc: denied { execmem } for pid=7919 comm="syz.2.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 207.993950][ T82] usb 6-1: config 2 has no interface number 0 [ 208.012659][ T82] usb 6-1: config 2 interface 131 altsetting 8 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 208.042967][ T82] usb 6-1: config 2 interface 131 altsetting 8 endpoint 0x82 has invalid wMaxPacketSize 0 [ 208.045269][ T30] audit: type=1400 audit(1747002590.295:458): avc: denied { search } for pid=7919 comm="syz.2.476" name="/" dev="configfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.240416][ T82] usb 6-1: config 2 interface 131 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.290145][ T82] usb 6-1: config 2 interface 131 has no altsetting 0 [ 208.315515][ T7983] netlink: 68 bytes leftover after parsing attributes in process `syz.3.485'. [ 208.348612][ T82] usb 6-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice=57.30 [ 208.352861][ T30] audit: type=1400 audit(1747002590.295:459): avc: denied { write } for pid=7919 comm="syz.2.476" name="/" dev="configfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.377865][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 208.399362][ T82] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.437501][ T82] usb 6-1: Product: syz [ 208.638642][ T7993] fuse: Bad value for 'user_id' [ 208.652628][ T7993] fuse: Bad value for 'user_id' [ 208.747076][ T82] usb 6-1: Manufacturer: syz [ 208.757437][ T82] usb 6-1: SerialNumber: syz [ 208.998057][ T7961] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20004 [ 210.328514][ T5860] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 210.527551][ T5860] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 210.574290][ T5860] usb 3-1: cp210x converter now attached to ttyUSB0 [ 210.605380][ T5860] usb 3-1: USB disconnect, device number 13 [ 210.630872][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 210.668857][ T5860] cp210x 3-1:0.0: device disconnected [ 210.813961][ T8020] trusted_key: encrypted_key: insufficient parameters specified [ 211.657472][ T82] em28xx 6-1:2.131: New device syz syz @ 12 Mbps (2013:8461, interface 131, class 131) [ 211.736745][ T82] em28xx 6-1:2.131: Device initialization failed. [ 211.780646][ T82] em28xx 6-1:2.131: Device must be connected to a high-speed USB 2.0 port. [ 211.844124][ T5821] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 211.852241][ T5821] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 211.862819][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 211.862833][ T30] audit: type=1400 audit(1747002594.285:462): avc: denied { map } for pid=8024 comm="syz.5.495" path="socket:[16160]" dev="sockfs" ino=16160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 211.895924][ T8023] block device autoloading is deprecated and will be removed. [ 211.911941][ T82] usb 6-1: USB disconnect, device number 3 [ 211.926966][ T30] audit: type=1400 audit(1747002594.285:463): avc: denied { read accept } for pid=8024 comm="syz.5.495" path="socket:[16160]" dev="sockfs" ino=16160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 211.950938][ T8030] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 212.010670][ T8034] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 212.019073][ T8034] netlink: 228 bytes leftover after parsing attributes in process `syz.2.493'. [ 212.047017][ T8023] syz.2.493: attempt to access beyond end of device [ 212.047017][ T8023] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 212.117491][ T30] audit: type=1400 audit(1747002594.535:464): avc: denied { bind } for pid=8032 comm="syz.4.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 212.633494][ T8030] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.103025][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'. [ 213.848204][ T8065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 214.125767][ T8076] trusted_key: encrypted_key: insufficient parameters specified [ 214.139009][ T82] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 214.610056][ T82] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.874899][ T8073] ptrace attach of "./syz-executor exec"[5816] was attempted by "./syz-executor exec"[8073] [ 214.902365][ T82] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.954890][ T8078] dns_resolver: Unsupported server list version (0) [ 215.015975][ T82] usb 6-1: config 0 descriptor?? [ 215.096603][ T82] cp210x 6-1:0.0: cp210x converter detected [ 215.183747][ T30] audit: type=1400 audit(1747002597.565:465): avc: denied { getopt } for pid=8080 comm="syz.1.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 215.184985][ T8083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3394 sclass=netlink_route_socket pid=8083 comm=syz.3.505 [ 215.339485][ T30] audit: type=1400 audit(1747002597.755:466): avc: denied { shutdown } for pid=8089 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.641528][ T30] audit: type=1400 audit(1747002598.055:467): avc: denied { write } for pid=8089 comm="syz.1.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 215.660948][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.722322][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 216.673823][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 216.705814][ T10] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 216.733436][ T10] usb 4-1: config 0 has no interface number 0 [ 216.754017][ T10] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 216.779649][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.797190][ T10] usb 4-1: Product: syz [ 216.802187][ T10] usb 4-1: Manufacturer: syz [ 216.806925][ T10] usb 4-1: SerialNumber: syz [ 216.829232][ T10] usb 4-1: config 0 descriptor?? [ 216.843811][ T8109] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 216.870676][ T8109] netlink: 'syz.2.510': attribute type 1 has an invalid length. [ 217.052940][ T10] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v224 fw v207.0.0 (2 channels) [ 217.284966][ T8118] evm: overlay not supported [ 217.321922][ T30] audit: type=1400 audit(1747002599.585:468): avc: denied { unlink } for pid=8111 comm="syz.4.512" name="#1" dev="tmpfs" ino=593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 217.343949][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.519229][ T10] peak_usb 4-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 217.583742][ T8122] netlink: 'syz.2.513': attribute type 2 has an invalid length. [ 217.599624][ T8122] : entered promiscuous mode [ 217.694289][ T82] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 217.705203][ T82] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 217.794099][ T10] peak_usb 4-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 217.909500][ T82] usb 6-1: cp210x converter now attached to ttyUSB0 [ 218.091414][ T8130] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 218.156395][ T82] usb 6-1: USB disconnect, device number 4 [ 218.294008][ T8133] trusted_key: encrypted_key: insufficient parameters specified [ 218.308795][ T82] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.535437][ T82] cp210x 6-1:0.0: device disconnected [ 218.604803][ T10] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -71 [ 218.653201][ T5821] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 218.683835][ T10] usb 4-1: USB disconnect, device number 19 [ 218.868190][ T5860] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 219.071951][ T82] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 219.266578][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.288382][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.313201][ T82] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 219.321177][ T5860] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 219.347021][ T82] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.356299][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.417187][ T82] usb 6-1: config 0 descriptor?? [ 219.522817][ T82] cp210x 6-1:0.0: cp210x converter detected [ 220.151086][ T5860] usb 5-1: config 0 descriptor?? [ 220.449462][ T30] audit: type=1400 audit(1747002602.865:469): avc: denied { connect } for pid=8142 comm="syz.5.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 220.664753][ T5860] bigben 0003:146B:0902.000D: unexpected rdesc, please submit for review [ 220.791825][ T974] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 220.848071][ T5860] bigben 0003:146B:0902.000D: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 220.954211][ T5860] bigben 0003:146B:0902.000D: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 220.979269][ T5860] bigben 0003:146B:0902.000D: no output report found [ 221.021963][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 221.050110][ T5860] usb 5-1: USB disconnect, device number 17 [ 221.065546][ T974] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 221.103237][ T974] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 221.136113][ T974] usb 3-1: Product: syz [ 221.165449][ T974] usb 3-1: Manufacturer: syz [ 221.187298][ T974] usb 3-1: SerialNumber: syz [ 221.215116][ T974] usb 3-1: config 0 descriptor?? [ 221.948384][ T82] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 222.737877][ T82] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 222.755326][ T82] usb 6-1: cp210x converter now attached to ttyUSB0 [ 222.765562][ T82] usb 6-1: USB disconnect, device number 5 [ 222.784187][ T82] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 222.792594][ T82] cp210x 6-1:0.0: device disconnected [ 222.977062][ T5891] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 223.562868][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 224.044709][ T5891] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.069923][ T5891] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 224.265334][ T5891] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.285483][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.285509][ T5891] usb 4-1: Product: syz [ 224.285523][ T5891] usb 4-1: Manufacturer: syz [ 224.285589][ T5891] usb 4-1: SerialNumber: syz [ 224.366173][ T9] usb 3-1: USB disconnect, device number 14 [ 224.559322][ T5891] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 224.671557][ T5891] usb 4-1: USB disconnect, device number 20 [ 224.857771][ T974] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 225.511402][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 225.564349][ T30] audit: type=1400 audit(1747002607.975:470): avc: denied { getopt } for pid=8230 comm="syz.1.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.615915][ T974] usb 5-1: device descriptor read/64, error -71 [ 225.671221][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 225.715629][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 225.751214][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.769529][ T9] usb 6-1: Product: syz [ 225.779134][ T9] usb 6-1: Manufacturer: syz [ 225.791230][ T9] usb 6-1: SerialNumber: syz [ 225.832018][ T9] usb 6-1: config 0 descriptor?? [ 225.880290][ T9] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 225.891713][ T974] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 226.005385][ T30] audit: type=1400 audit(1747002608.425:471): avc: denied { ioctl } for pid=8241 comm="syz.2.544" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 226.036610][ T30] audit: type=1400 audit(1747002608.455:472): avc: denied { create } for pid=8241 comm="syz.2.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 226.071828][ T974] usb 5-1: device descriptor read/64, error -71 [ 226.305758][ T974] usb usb5-port1: attempt power cycle [ 226.661801][ T974] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 226.751606][ T974] usb 5-1: device descriptor read/8, error -71 [ 226.819826][ T8265] trusted_key: encrypted_key: insufficient parameters specified [ 227.051349][ T9] ssu100 6-1:0.0: probe with driver ssu100 failed with error -110 [ 227.668037][ T5891] usb 6-1: USB disconnect, device number 6 [ 227.675546][ T974] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 227.941720][ T974] usb 5-1: device not accepting address 21, error -71 [ 228.369147][ T30] audit: type=1400 audit(1747002610.285:473): avc: denied { ioctl } for pid=8267 comm="syz.3.549" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.611483][ T974] usb usb5-port1: unable to enumerate USB device [ 228.732409][ T8271] netlink: 'syz.4.548': attribute type 1 has an invalid length. [ 228.972407][ T30] audit: type=1400 audit(1747002611.375:474): avc: denied { execute_no_trans } for pid=8280 comm="syz.3.551" path="/120/file1/file2" dev="tmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.135879][ T8285] No control pipe specified [ 229.164107][ T8271] 8021q: adding VLAN 0 to HW filter on device bond2 [ 230.774357][ T5891] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 230.882556][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.561'. [ 231.311597][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 231.318633][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 40727, setting to 1024 [ 231.330871][ T5891] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 231.348031][ T5891] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 231.357703][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.365979][ T5891] usb 3-1: Product: syz [ 231.370347][ T5891] usb 3-1: Manufacturer: syz [ 231.376590][ T5891] usb 3-1: SerialNumber: syz [ 231.397289][ T5891] usb 3-1: config 0 descriptor?? [ 231.411771][ T8320] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 231.531415][ T82] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 231.596800][ T5891] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 231.691385][ T82] usb 5-1: Using ep0 maxpacket: 16 [ 231.715027][ T78] usb 3-1: Failed to submit usb control message: -71 [ 231.715191][ T9] usb 3-1: USB disconnect, device number 15 [ 231.730325][ T82] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 231.750703][ T78] usb 3-1: unable to send the bmi data to the device: -71 [ 231.772925][ T82] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.781721][ T78] usb 3-1: unable to get target info from device [ 231.788482][ T78] usb 3-1: could not get target info (-71) [ 231.796102][ T82] usb 5-1: Product: syz [ 231.800383][ T82] usb 5-1: Manufacturer: syz [ 231.811434][ T82] usb 5-1: SerialNumber: syz [ 231.850831][ T78] usb 3-1: could not probe fw (-71) [ 231.960546][ T82] usb 5-1: config 0 descriptor?? [ 232.061916][ T5891] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 232.073536][ T82] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 232.134154][ T82] usb 5-1: Detected FT232H [ 232.221365][ T82] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 232.271703][ T5891] usb 4-1: Using ep0 maxpacket: 16 [ 232.284730][ T5891] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 232.301666][ T5891] usb 4-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 232.309943][ T5891] usb 4-1: Product: syz [ 232.314615][ T5891] usb 4-1: Manufacturer: syz [ 232.319256][ T5891] usb 4-1: SerialNumber: syz [ 232.326715][ T5891] usb 4-1: config 0 descriptor?? [ 232.362343][ T5891] usb 4-1: selecting invalid altsetting 1 [ 232.407456][ T5891] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 232.427207][ T8372] FAULT_INJECTION: forcing a failure. [ 232.427207][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 232.446160][ T8372] CPU: 1 UID: 0 PID: 8372 Comm: syz.2.570 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 232.446185][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.446194][ T8372] Call Trace: [ 232.446199][ T8372] [ 232.446205][ T8372] dump_stack_lvl+0x16c/0x1f0 [ 232.446233][ T8372] should_fail_ex+0x512/0x640 [ 232.446253][ T8372] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 232.446285][ T8372] should_failslab+0xc2/0x120 [ 232.446302][ T8372] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 232.446333][ T8372] ? __kernfs_new_node+0xd2/0x8a0 [ 232.446353][ T8372] __kernfs_new_node+0xd2/0x8a0 [ 232.446371][ T8372] ? __pfx___kernfs_new_node+0x10/0x10 [ 232.446392][ T8372] ? find_held_lock+0x2b/0x80 [ 232.446413][ T8372] ? kernfs_root+0xee/0x2a0 [ 232.446432][ T8372] kernfs_new_node+0x13c/0x1e0 [ 232.446454][ T8372] __kernfs_create_file+0x53/0x350 [ 232.446479][ T8372] sysfs_add_file_mode_ns+0x207/0x3c0 [ 232.446506][ T8372] internal_create_group+0x578/0xf30 [ 232.446527][ T8372] ? __pfx_internal_create_group+0x10/0x10 [ 232.446546][ T8372] ? kernfs_create_link+0x1bd/0x240 [ 232.446570][ T8372] internal_create_groups+0x9d/0x150 [ 232.446588][ T8372] device_add+0x6d1/0x1a70 [ 232.446609][ T8372] ? __pfx_device_add+0x10/0x10 [ 232.446628][ T8372] ? kasan_save_track+0x14/0x30 [ 232.446652][ T8372] ? kfree_const+0x1c/0x60 [ 232.446671][ T8372] netdev_register_kobject+0x182/0x3a0 [ 232.446694][ T8372] register_netdevice+0x13dc/0x2270 [ 232.446718][ T8372] ? __pfx_register_netdevice+0x10/0x10 [ 232.446742][ T8372] macvlan_common_newlink+0x10e7/0x1a20 [ 232.446763][ T8372] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 232.446779][ T8372] ? rtnl_create_link+0xa52/0xfa0 [ 232.446796][ T8372] ? __pfx_macvlan_newlink+0x10/0x10 [ 232.446811][ T8372] rtnl_newlink+0xc42/0x2000 [ 232.446835][ T8372] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.446850][ T8372] ? find_held_lock+0x2b/0x80 [ 232.446868][ T8372] ? avc_has_perm_noaudit+0x117/0x3b0 [ 232.446887][ T8372] ? avc_has_perm_noaudit+0x149/0x3b0 [ 232.446922][ T8372] ? find_held_lock+0x2b/0x80 [ 232.446939][ T8372] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.446954][ T8372] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.446969][ T8372] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 232.446986][ T8372] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.447003][ T8372] rtnetlink_rcv_msg+0x95b/0xe90 [ 232.447022][ T8372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 232.447050][ T8372] netlink_rcv_skb+0x16a/0x440 [ 232.447069][ T8372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 232.447087][ T8372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.447118][ T8372] ? netlink_deliver_tap+0x1ae/0xd30 [ 232.447140][ T8372] netlink_unicast+0x53a/0x7f0 [ 232.447161][ T8372] ? __pfx_netlink_unicast+0x10/0x10 [ 232.447186][ T8372] netlink_sendmsg+0x8d1/0xdd0 [ 232.447208][ T8372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.447235][ T8372] ____sys_sendmsg+0xa95/0xc70 [ 232.447256][ T8372] ? copy_msghdr_from_user+0x10a/0x160 [ 232.447272][ T8372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.447303][ T8372] ___sys_sendmsg+0x134/0x1d0 [ 232.447327][ T8372] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.447376][ T8372] __sys_sendmsg+0x16d/0x220 [ 232.447392][ T8372] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.447416][ T8372] ? rcu_is_watching+0x12/0xc0 [ 232.447441][ T8372] do_syscall_64+0xcd/0x260 [ 232.447465][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.447479][ T8372] RIP: 0033:0x7f8b7b98e969 [ 232.447492][ T8372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.447507][ T8372] RSP: 002b:00007f8b7c768038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.447522][ T8372] RAX: ffffffffffffffda RBX: 00007f8b7bbb5fa0 RCX: 00007f8b7b98e969 [ 232.447532][ T8372] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 232.447540][ T8372] RBP: 00007f8b7c768090 R08: 0000000000000000 R09: 0000000000000000 [ 232.447549][ T8372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.447558][ T8372] R13: 0000000000000000 R14: 00007f8b7bbb5fa0 R15: 00007ffe944da558 [ 232.447578][ T8372] [ 232.467264][ T5966] udevd[5966]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.498367][ T30] audit: type=1400 audit(1747002614.915:475): avc: denied { getopt } for pid=8369 comm="syz.1.569" lport=40163 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 232.904640][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.910975][ T972] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 232.931772][ T9] usb 4-1: USB disconnect, device number 21 [ 232.954901][ T82] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.970249][ T82] usb 5-1: USB disconnect, device number 22 [ 233.003172][ T82] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 233.076536][ T972] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 233.086578][ T972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.125201][ T82] ftdi_sio 5-1:0.0: device disconnected [ 233.292872][ T972] usb 6-1: config 0 descriptor?? [ 233.559509][ T972] kaweth 6-1:0.0: Firmware present in device. [ 233.828546][ T30] audit: type=1400 audit(1747002616.225:476): avc: denied { read } for pid=8367 comm="syz.5.568" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 233.851443][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.205584][ T8367] delete_channel: no stack [ 234.214532][ T972] kaweth 6-1:0.0: Error reading configuration (-71), no net device created [ 234.244153][ T8392] macvtap0: entered allmulticast mode [ 234.259811][ T8392] veth0_macvtap: entered allmulticast mode [ 234.267165][ T972] kaweth 6-1:0.0: probe with driver kaweth failed with error -5 [ 234.443418][ T972] usb 6-1: USB disconnect, device number 7 [ 234.634062][ T30] audit: type=1400 audit(1747002616.925:477): avc: denied { watch_sb } for pid=8389 comm="syz.4.575" path="/120/file0" dev="tmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 234.773549][ T5860] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 234.946435][ T30] audit: type=1400 audit(1747002617.365:478): avc: denied { map } for pid=8405 comm="syz.5.578" path="socket:[17826]" dev="sockfs" ino=17826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 235.083728][ T5860] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 235.092278][ T5860] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.104195][ T5860] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 235.222818][ T8408] netlink: 'syz.5.579': attribute type 1 has an invalid length. [ 235.239219][ T5860] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 235.257071][ T5860] usb 3-1: Manufacturer: syz [ 235.296340][ T5860] usb 3-1: config 0 descriptor?? [ 235.934115][ T5860] igorplugusb 3-1:0.0: incorrect number of endpoints [ 236.131817][ T8399] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.577'. [ 236.148731][ T30] audit: type=1400 audit(1747002618.525:479): avc: denied { create } for pid=8407 comm="syz.5.579" name="#5" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.183543][ T30] audit: type=1400 audit(1747002618.545:480): avc: denied { link } for pid=8407 comm="syz.5.579" name="#5" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.313025][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 236.329151][ T8420] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.339105][ T8420] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.532170][ T8420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 236.538779][ T8420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.546823][ T30] audit: type=1400 audit(1747002618.545:481): avc: denied { rename } for pid=8407 comm="syz.5.579" name="#6" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 236.580288][ T8420] vhci_hcd vhci_hcd.0: Device attached [ 236.584931][ T30] audit: type=1400 audit(1747002618.995:482): avc: denied { create } for pid=8417 comm="syz.4.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 236.638288][ T8425] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 236.644926][ T8425] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.654345][ T8425] vhci_hcd vhci_hcd.0: Device attached [ 236.716310][ T8399] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14) [ 236.722929][ T8399] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 236.732226][ T8399] vhci_hcd vhci_hcd.0: Device attached [ 236.773521][ T82] vhci_hcd: vhci_device speed not set [ 236.815892][ T8421] vhci_hcd: connection closed [ 236.816092][ T13] vhci_hcd: stop threads [ 236.817751][ T8431] vhci_hcd: connection closed [ 236.820794][ T13] vhci_hcd: release socket [ 236.838686][ T8426] vhci_hcd: connection closed [ 236.846933][ T30] audit: type=1400 audit(1747002619.265:483): avc: denied { write } for pid=8434 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.861188][ T82] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 236.900816][ T9] usb 3-1: USB disconnect, device number 16 [ 236.918770][ T13] vhci_hcd: disconnect device [ 236.933804][ T8438] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 236.946460][ T13] vhci_hcd: stop threads [ 236.950473][ T82] usb 37-1: enqueue for inactive port 0 [ 236.961546][ T13] vhci_hcd: release socket [ 236.966144][ T30] audit: type=1400 audit(1747002619.265:484): avc: denied { nlmsg_write } for pid=8434 comm="syz.4.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 237.011205][ T13] vhci_hcd: disconnect device [ 237.029526][ T13] vhci_hcd: stop threads [ 237.048391][ T13] vhci_hcd: release socket [ 237.062981][ T13] vhci_hcd: disconnect device [ 237.073283][ T82] vhci_hcd: vhci_device speed not set [ 237.233943][ T8446] FAULT_INJECTION: forcing a failure. [ 237.233943][ T8446] name failslab, interval 1, probability 0, space 0, times 0 [ 237.345526][ T8446] CPU: 1 UID: 0 PID: 8446 Comm: syz.5.589 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 237.345551][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.345559][ T8446] Call Trace: [ 237.345564][ T8446] [ 237.345570][ T8446] dump_stack_lvl+0x16c/0x1f0 [ 237.345594][ T8446] should_fail_ex+0x512/0x640 [ 237.345614][ T8446] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 237.345643][ T8446] should_failslab+0xc2/0x120 [ 237.345660][ T8446] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 237.345686][ T8446] ? __alloc_skb+0x2b2/0x380 [ 237.345705][ T8446] __alloc_skb+0x2b2/0x380 [ 237.345720][ T8446] ? __pfx___alloc_skb+0x10/0x10 [ 237.345733][ T8446] ? __pfx_tc_new_tfilter+0x10/0x10 [ 237.345762][ T8446] netlink_ack+0x15d/0xb80 [ 237.345791][ T8446] netlink_rcv_skb+0x347/0x440 [ 237.345809][ T8446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 237.345829][ T8446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.345862][ T8446] ? netlink_deliver_tap+0x1ae/0xd30 [ 237.345884][ T8446] netlink_unicast+0x53a/0x7f0 [ 237.345906][ T8446] ? __pfx_netlink_unicast+0x10/0x10 [ 237.345932][ T8446] netlink_sendmsg+0x8d1/0xdd0 [ 237.345956][ T8446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.345983][ T8446] ____sys_sendmsg+0xa95/0xc70 [ 237.346006][ T8446] ? copy_msghdr_from_user+0x10a/0x160 [ 237.346022][ T8446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.346054][ T8446] ___sys_sendmsg+0x134/0x1d0 [ 237.346073][ T8446] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.346116][ T8446] __sys_sendmsg+0x16d/0x220 [ 237.346133][ T8446] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.346157][ T8446] ? rcu_is_watching+0x12/0xc0 [ 237.346182][ T8446] do_syscall_64+0xcd/0x260 [ 237.346204][ T8446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.346220][ T8446] RIP: 0033:0x7fbaaf38e969 [ 237.346234][ T8446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.346248][ T8446] RSP: 002b:00007fbab017a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.346264][ T8446] RAX: ffffffffffffffda RBX: 00007fbaaf5b5fa0 RCX: 00007fbaaf38e969 [ 237.346275][ T8446] RDX: 000000002400c084 RSI: 0000200000006040 RDI: 0000000000000006 [ 237.346285][ T8446] RBP: 00007fbab017a090 R08: 0000000000000000 R09: 0000000000000000 [ 237.346294][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.346303][ T8446] R13: 0000000000000000 R14: 00007fbaaf5b5fa0 R15: 00007ffdf53f1798 [ 237.346328][ T8446] [ 238.742949][ T30] audit: type=1400 audit(1747002621.165:485): avc: denied { append } for pid=8464 comm="syz.4.595" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 238.995638][ T30] audit: type=1400 audit(1747002621.395:486): avc: denied { append } for pid=8463 comm="syz.5.594" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 242.091030][ T8492] vivid-003: ================= START STATUS ================= [ 242.109835][ T8492] vivid-003: Radio HW Seek Mode: Bounded [ 242.126837][ T8492] vivid-003: Radio Programmable HW Seek: false [ 242.137432][ T8492] vivid-003: RDS Rx I/O Mode: Block I/O [ 242.234649][ T8492] vivid-003: Generate RBDS Instead of RDS: false [ 242.242479][ T8492] vivid-003: RDS Reception: true [ 242.247821][ T8492] vivid-003: RDS Program Type: 0 inactive [ 242.255602][ T8492] vivid-003: RDS PS Name: inactive [ 242.260857][ T8492] vivid-003: RDS Radio Text: inactive [ 242.266774][ T8492] vivid-003: RDS Traffic Announcement: false inactive [ 242.274157][ T8500] macvlan2: entered promiscuous mode [ 242.274180][ T8500] macvlan2: entered allmulticast mode [ 242.291931][ T8492] vivid-003: RDS Traffic Program: false inactive [ 242.312460][ T30] audit: type=1400 audit(1747002624.735:487): avc: denied { read write } for pid=8490 comm="syz.4.601" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 242.359217][ T8492] vivid-003: RDS Music: false inactive [ 242.359422][ T8492] vivid-003: ================== END STATUS ================== [ 242.381930][ T82] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 242.521251][ T82] usb 4-1: device descriptor read/64, error -71 [ 242.659543][ T30] audit: type=1400 audit(1747002624.775:488): avc: denied { open } for pid=8490 comm="syz.4.601" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 242.665132][ T8492] ERROR: device name not specified. [ 242.683830][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.931707][ T82] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 243.229864][ T82] usb 4-1: device descriptor read/64, error -71 [ 243.371350][ T82] usb usb4-port1: attempt power cycle [ 244.211259][ T82] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 244.255332][ T82] usb 4-1: device descriptor read/8, error -71 [ 244.471251][ T5892] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 244.561527][ T82] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 244.607475][ T82] usb 4-1: device descriptor read/8, error -71 [ 244.720710][ T5892] usb 6-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 244.730437][ T82] usb usb4-port1: unable to enumerate USB device [ 244.738890][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.903564][ T5892] usb 6-1: Product: syz [ 244.907801][ T5892] usb 6-1: Manufacturer: syz [ 244.913460][ T5892] usb 6-1: SerialNumber: syz [ 244.920351][ T5892] usb 6-1: config 0 descriptor?? [ 244.929156][ T5892] usb 6-1: interface 1 not found [ 245.833238][ T8549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.620'. [ 245.964153][ T8552] netlink: 56 bytes leftover after parsing attributes in process `syz.5.614'. [ 246.493176][ T974] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 246.725346][ T5892] usb 6-1: USB disconnect, device number 8 [ 246.872182][ T974] usb 5-1: Using ep0 maxpacket: 32 [ 246.983093][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 247.118028][ T974] usb 5-1: config 0 has an invalid interface number: 215 but max is 0 [ 247.129568][ T974] usb 5-1: config 0 has no interface number 0 [ 247.155170][ T974] usb 5-1: New USB device found, idVendor=1608, idProduct=0301, bcdDevice=f1.24 [ 247.164422][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.175885][ T974] usb 5-1: Product: syz [ 247.182824][ T974] usb 5-1: Manufacturer: syz [ 247.187784][ T974] usb 5-1: SerialNumber: syz [ 247.198774][ T974] usb 5-1: config 0 descriptor?? [ 247.206060][ T974] io_ti 5-1:0.215: required endpoints missing [ 247.248958][ T30] audit: type=1400 audit(1747002629.665:489): avc: denied { getopt } for pid=8572 comm="syz.1.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 247.271850][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 247.294284][ T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 247.305059][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.335098][ T10] usb 4-1: Product: syz [ 247.339303][ T10] usb 4-1: Manufacturer: syz [ 247.371195][ T10] usb 4-1: SerialNumber: syz [ 247.380408][ T10] usb 4-1: config 0 descriptor?? [ 247.403009][ T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 247.435076][ T10] usb 4-1: setting power ON [ 247.449878][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 247.480102][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 247.501936][ T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 247.516000][ T10] usb 4-1: media controller created [ 247.561690][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 247.570908][ T8588] tun0: tun_chr_ioctl cmd 1074025675 [ 247.588516][ T8588] tun0: persist enabled [ 247.602361][ T8587] tun0: tun_chr_ioctl cmd 1074025675 [ 247.607703][ T8587] tun0: persist disabled [ 247.614167][ T10] usb 4-1: selecting invalid altsetting 6 [ 247.636038][ T10] usb 4-1: digital interface selection failed (-22) [ 247.643582][ T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 247.663230][ T5892] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 247.666813][ T8592] overlayfs: failed to clone upperpath [ 247.677509][ T10] usb 4-1: setting power OFF [ 247.685202][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 247.722977][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 247.777579][ T10] (NULL device *): no alternate interface [ 247.809796][ T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 247.913726][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 247.922894][ T8598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.635'. [ 247.932916][ T5892] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 247.943971][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.955080][ T5892] usb 6-1: Product: syz [ 247.959340][ T5892] usb 6-1: Manufacturer: syz [ 247.964020][ T5892] usb 6-1: SerialNumber: syz [ 247.978755][ T5892] usb 6-1: config 0 descriptor?? [ 247.989306][ T10] usb 4-1: USB disconnect, device number 26 [ 247.993373][ T5892] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 248.072224][ T30] audit: type=1400 audit(1747002630.435:490): avc: denied { accept } for pid=8597 comm="syz.1.635" path="socket:[17118]" dev="sockfs" ino=17118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 248.096230][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.136677][ T5892] usb 6-1: setting power ON [ 248.149625][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 248.343598][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.357719][ T5892] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 248.375022][ T5892] usb 6-1: media controller created [ 248.889765][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.943114][ T5892] usb 6-1: selecting invalid altsetting 6 [ 248.950624][ T5892] usb 6-1: digital interface selection failed (-22) [ 248.957629][ T5892] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 248.970167][ T5892] usb 6-1: setting power OFF [ 248.982609][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 248.995567][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 249.009966][ T8617] tmpfs: Bad value for 'mpol' [ 249.015480][ T5892] (NULL device *): no alternate interface [ 249.017106][ T8618] tmpfs: Bad value for 'mpol' [ 249.037836][ T8615] bridge1: entered promiscuous mode [ 249.072215][ T5892] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 249.085486][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.095532][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.113346][ T5892] usb 6-1: USB disconnect, device number 9 [ 249.172227][ T8624] ERROR: device name not specified. [ 249.205708][ T8626] vivid-004: ================= START STATUS ================= [ 249.215030][ T8626] vivid-004: Radio HW Seek Mode: Bounded [ 249.220708][ T8626] vivid-004: Radio Programmable HW Seek: false [ 249.228341][ T8626] vivid-004: RDS Rx I/O Mode: Block I/O [ 249.238535][ T8626] vivid-004: Generate RBDS Instead of RDS: false [ 249.244979][ T8626] vivid-004: RDS Reception: true [ 249.250076][ T8626] vivid-004: RDS Program Type: 0 inactive [ 249.262770][ T8626] vivid-004: RDS PS Name: inactive [ 249.268369][ T8626] vivid-004: RDS Radio Text: inactive [ 249.275985][ T8626] vivid-004: RDS Traffic Announcement: false inactive [ 249.283798][ T8626] vivid-004: RDS Traffic Program: false inactive [ 249.290307][ T8626] vivid-004: RDS Music: false inactive [ 249.296800][ T8626] vivid-004: ================== END STATUS ================== [ 249.319811][ T8626] ERROR: device name not specified. [ 249.432986][ T5892] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 249.475546][ T8638] FAULT_INJECTION: forcing a failure. [ 249.475546][ T8638] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 249.499145][ T8638] CPU: 0 UID: 0 PID: 8638 Comm: syz.2.644 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 249.499184][ T8638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 249.499194][ T8638] Call Trace: [ 249.499199][ T8638] [ 249.499205][ T8638] dump_stack_lvl+0x16c/0x1f0 [ 249.499225][ T8638] should_fail_ex+0x512/0x640 [ 249.499241][ T8638] _copy_to_user+0x32/0xd0 [ 249.499257][ T8638] simple_read_from_buffer+0xcb/0x170 [ 249.499279][ T8638] proc_fail_nth_read+0x197/0x270 [ 249.499302][ T8638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.499322][ T8638] ? rw_verify_area+0xcf/0x680 [ 249.499335][ T8638] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.499350][ T8638] vfs_read+0x1de/0xc70 [ 249.499366][ T8638] ? __pfx___mutex_lock+0x10/0x10 [ 249.499380][ T8638] ? __pfx_vfs_read+0x10/0x10 [ 249.499412][ T8638] ? __fget_files+0x20e/0x3c0 [ 249.499431][ T8638] ksys_read+0x12a/0x240 [ 249.499445][ T8638] ? __pfx_ksys_read+0x10/0x10 [ 249.499463][ T8638] do_syscall_64+0xcd/0x260 [ 249.499479][ T8638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.499490][ T8638] RIP: 0033:0x7f8b7b98d37c [ 249.499499][ T8638] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.499508][ T8638] RSP: 002b:00007f8b7c747030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.499519][ T8638] RAX: ffffffffffffffda RBX: 00007f8b7bbb6080 RCX: 00007f8b7b98d37c [ 249.499525][ T8638] RDX: 000000000000000f RSI: 00007f8b7c7470a0 RDI: 000000000000000a [ 249.499530][ T8638] RBP: 00007f8b7c747090 R08: 0000000000000000 R09: 0000000000000000 [ 249.499536][ T8638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.499541][ T8638] R13: 0000000000000001 R14: 00007f8b7bbb6080 R15: 00007ffe944da558 [ 249.499554][ T8638] [ 249.651774][ T5892] usb 6-1: device descriptor read/64, error -71 [ 249.655277][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.694340][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.841814][ T5860] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 249.901213][ T5892] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 249.991173][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 250.003981][ T5860] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 250.023401][ T5860] usb 4-1: config 0 has no interface number 0 [ 250.045578][ T5860] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 250.078138][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.093842][ T5860] usb 4-1: Product: syz [ 250.103191][ T5860] usb 4-1: Manufacturer: syz [ 250.111211][ T5892] usb 6-1: device descriptor read/64, error -71 [ 250.124279][ T5860] usb 4-1: SerialNumber: syz [ 250.129763][ T10] usb 5-1: USB disconnect, device number 23 [ 250.159302][ T5860] usb 4-1: config 0 descriptor?? [ 250.221439][ T5892] usb usb6-port1: attempt power cycle [ 250.387130][ T5860] peak_usb 4-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 250.465662][ T30] audit: type=1400 audit(1747002632.885:491): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 250.582236][ T5892] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 250.589322][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.603970][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.612619][ T5892] usb 6-1: device descriptor read/8, error -71 [ 250.620085][ T5860] peak_usb 4-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 250.635717][ T5860] peak_usb 4-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 250.697953][ T30] audit: type=1400 audit(1747002633.115:492): avc: denied { accept } for pid=8641 comm="syz.4.647" path="socket:[18298]" dev="sockfs" ino=18298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 250.722466][ T5860] peak_usb 4-1:0.56: probe with driver peak_usb failed with error -71 [ 250.739719][ T5860] usb 4-1: USB disconnect, device number 27 [ 250.887554][ T8648] dvmrp0: entered allmulticast mode [ 250.960406][ T5892] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 250.982219][ T5892] usb 6-1: device descriptor read/8, error -71 [ 251.101955][ T5892] usb usb6-port1: unable to enumerate USB device [ 251.124622][ T8651] netlink: 84 bytes leftover after parsing attributes in process `syz.2.650'. [ 251.148760][ T30] audit: type=1800 audit(1747002633.565:493): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.650" name="bus" dev="overlay" ino=776 res=0 errno=0 [ 252.057663][ T8665] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 252.695309][ T972] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 252.881187][ T972] usb 6-1: Using ep0 maxpacket: 8 [ 253.031579][ T972] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 253.046959][ T972] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 253.065306][ T972] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 253.075985][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.084426][ T972] usb 6-1: Product: syz [ 253.088572][ T972] usb 6-1: Manufacturer: syz [ 253.094662][ T972] usb 6-1: SerialNumber: syz [ 253.101662][ T972] usb 6-1: config 0 descriptor?? [ 253.323188][ T8694] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 253.332889][ T8694] VFS: Can't find a romfs filesystem on dev nullb0. [ 253.332889][ T8694] [ 253.351191][ T8694] IPVS: Unknown mcast interface: veth0_virt_wifi [ 253.720969][ T8670] batman_adv: batadv0: Adding interface: geneve2 [ 253.757811][ T8670] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 254.124204][ T972] usb 6-1: USB disconnect, device number 14 [ 254.455234][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.665'. [ 254.566438][ T8723] FAULT_INJECTION: forcing a failure. [ 254.566438][ T8723] name failslab, interval 1, probability 0, space 0, times 0 [ 254.584947][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.4.668 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 254.584973][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.584982][ T8723] Call Trace: [ 254.584988][ T8723] [ 254.584993][ T8723] dump_stack_lvl+0x16c/0x1f0 [ 254.585019][ T8723] should_fail_ex+0x512/0x640 [ 254.585040][ T8723] ? __kmalloc_node_noprof+0xc5/0x500 [ 254.585058][ T8723] should_failslab+0xc2/0x120 [ 254.585075][ T8723] __kmalloc_node_noprof+0xd8/0x500 [ 254.585090][ T8723] ? load_msg+0x43/0x4a0 [ 254.585122][ T8723] load_msg+0x43/0x4a0 [ 254.585146][ T8723] do_msgsnd+0x1a7/0x17b0 [ 254.585164][ T8723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 254.585191][ T8723] ? __pfx_do_msgsnd+0x10/0x10 [ 254.585207][ T8723] ? find_held_lock+0x2b/0x80 [ 254.585226][ T8723] ? __might_fault+0xe3/0x190 [ 254.585241][ T8723] ? __might_fault+0xe3/0x190 [ 254.585254][ T8723] ? __might_fault+0x13b/0x190 [ 254.585272][ T8723] ? __x64_sys_msgsnd+0xe5/0x130 [ 254.585286][ T8723] __x64_sys_msgsnd+0xe5/0x130 [ 254.585304][ T8723] do_syscall_64+0xcd/0x260 [ 254.585328][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.585343][ T8723] RIP: 0033:0x7fdfb478e969 [ 254.585357][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.585372][ T8723] RSP: 002b:00007fdfb56ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 254.585389][ T8723] RAX: ffffffffffffffda RBX: 00007fdfb49b5fa0 RCX: 00007fdfb478e969 [ 254.585399][ T8723] RDX: 0000000000000008 RSI: 00002000000003c0 RDI: 0000000000000000 [ 254.585408][ T8723] RBP: 00007fdfb56ce090 R08: 0000000000000000 R09: 0000000000000000 [ 254.585415][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.585423][ T8723] R13: 0000000000000000 R14: 00007fdfb49b5fa0 R15: 00007ffdfa3b2168 [ 254.585442][ T8723] [ 254.781331][ C0] vkms_vblank_simulate: vblank timer overrun [ 254.837546][ T30] audit: type=1326 audit(1747002637.255:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8727 comm="syz.4.670" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfb478e969 code=0x0 [ 254.860192][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.119904][ T30] audit: type=1400 audit(1747002637.535:495): avc: denied { setopt } for pid=8736 comm="syz.3.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.145782][ T5821] Bluetooth: hci1: link tx timeout [ 255.152643][ T5821] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.164826][ T5820] Bluetooth: hci1: link tx timeout [ 255.170030][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.321979][ T5820] Bluetooth: hci1: link tx timeout [ 255.329362][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.341122][ T5820] Bluetooth: hci1: link tx timeout [ 255.348398][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.358728][ T5820] Bluetooth: hci1: link tx timeout [ 255.364174][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.376257][ T5820] Bluetooth: hci1: link tx timeout [ 255.382392][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.409583][ T5820] Bluetooth: hci1: link tx timeout [ 255.415800][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.432097][ T5820] Bluetooth: hci1: link tx timeout [ 255.437683][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.447056][ T5820] Bluetooth: hci1: link tx timeout [ 255.452600][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.484896][ T5820] Bluetooth: hci1: link tx timeout [ 255.493532][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.512794][ T5820] Bluetooth: hci1: link tx timeout [ 255.514630][ T5817] block nbd0: Receive control failed (result -104) [ 255.519131][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.527270][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.548220][ T5820] Bluetooth: hci1: link tx timeout [ 255.553822][ T5820] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 255.701243][ T5863] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.796455][ T8755] xt_cgroup: path and classid specified [ 256.270025][ T5892] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 256.292042][ T8762] fuse: Unknown parameter 'grou00000000000000000000' [ 256.321629][ T5863] usb 6-1: Using ep0 maxpacket: 32 [ 256.955402][ T5863] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 256.962960][ T8759] block device autoloading is deprecated and will be removed. [ 257.068317][ T5863] usb 6-1: config 0 has no interface number 0 [ 257.077624][ T5863] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 257.087668][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.102245][ T5863] usb 6-1: Product: syz [ 257.106443][ T5863] usb 6-1: Manufacturer: syz [ 257.111045][ T5863] usb 6-1: SerialNumber: syz [ 257.117890][ T5863] usb 6-1: config 0 descriptor?? [ 257.166248][ T8769] trusted_key: encrypted_key: insufficient parameters specified [ 257.234233][ T5820] Bluetooth: hci1: command 0x0405 tx timeout [ 257.261644][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 257.417247][ T5892] usb 4-1: config 2 has an invalid interface number: 114 but max is 1 [ 257.425531][ T5892] usb 4-1: config 2 has an invalid interface number: 102 but max is 1 [ 257.433717][ T5892] usb 4-1: config 2 has an invalid interface number: 174 but max is 1 [ 257.442206][ T5892] usb 4-1: config 2 has 3 interfaces, different from the descriptor's value: 2 [ 257.451532][ T5892] usb 4-1: config 2 has no interface number 0 [ 257.457635][ T5892] usb 4-1: config 2 has no interface number 1 [ 257.492372][ T5892] usb 4-1: config 2 has no interface number 2 [ 257.504901][ T5892] usb 4-1: config 2 interface 102 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 257.541053][ T5892] usb 4-1: config 2 interface 102 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 257.586225][ T5892] usb 4-1: config 2 interface 102 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 257.645593][ T5863] radio-si470x 6-1:0.35: this is not a si470x device. [ 257.702717][ T8773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.714084][ T8773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.743814][ T5892] usb 4-1: config 2 interface 102 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 257.757336][ T5892] usb 4-1: config 2 interface 102 altsetting 1 endpoint 0x9 has invalid maxpacket 511, setting to 64 [ 257.768819][ T5892] usb 4-1: config 2 interface 102 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 257.780487][ T5863] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 257.788004][ T5892] usb 4-1: config 2 interface 102 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 257.813435][ T5892] usb 4-1: config 2 interface 102 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 257.842933][ T8782] overlayfs: missing 'lowerdir' [ 257.847891][ T5892] usb 4-1: too many endpoints for config 2 interface 174 altsetting 22: 78, using maximum allowed: 30 [ 257.860728][ T5892] usb 4-1: config 2 interface 174 altsetting 22 has a duplicate endpoint with address 0xD, skipping [ 257.877988][ T5892] usb 4-1: config 2 interface 174 altsetting 22 has a duplicate endpoint with address 0x9, skipping [ 257.900634][ T8773] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.909573][ T8773] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.918787][ T8773] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.927655][ T8773] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.952333][ T8773] macvlan2: left promiscuous mode [ 257.957388][ T8773] macvlan2: left allmulticast mode [ 257.962955][ T8773] bridge1: left promiscuous mode [ 257.973512][ T5892] usb 4-1: config 2 interface 174 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 257.985697][ T5892] usb 4-1: config 2 interface 174 altsetting 22 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 257.996993][ T5892] usb 4-1: config 2 interface 174 altsetting 22 has an invalid descriptor for endpoint zero, skipping [ 258.008393][ T5892] usb 4-1: config 2 interface 174 altsetting 22 has a duplicate endpoint with address 0x5, skipping [ 258.019800][ T5892] usb 4-1: config 2 interface 174 altsetting 22 has 7 endpoint descriptors, different from the interface descriptor's value: 78 [ 258.089084][ T5892] usb 4-1: config 2 interface 114 has no altsetting 0 [ 258.184373][ T5892] usb 4-1: config 2 interface 102 has no altsetting 0 [ 258.193405][ T5892] usb 4-1: config 2 interface 174 has no altsetting 0 [ 258.200999][ T5892] usb 4-1: string descriptor 0 read error: -71 [ 258.213964][ T5892] usb 4-1: New USB device found, idVendor=19d2, idProduct=1267, bcdDevice=62.e3 [ 258.234678][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.256402][ T5892] usb 4-1: can't set config #2, error -71 [ 258.269063][ T5892] usb 4-1: USB disconnect, device number 28 [ 258.444460][ T5891] usb 6-1: USB disconnect, device number 15 [ 258.484199][ T30] audit: type=1400 audit(1747002640.885:496): avc: denied { create } for pid=8786 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 258.503537][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.536026][ T30] audit: type=1400 audit(1747002640.885:497): avc: denied { read } for pid=8786 comm="syz.3.682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 258.800153][ T8803] netlink: 'syz.4.684': attribute type 1 has an invalid length. [ 258.807942][ T8803] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.684'. [ 258.980767][ T8809] Cannot find add_set index 0 as target [ 259.025805][ T8811] netlink: 148 bytes leftover after parsing attributes in process `syz.1.691'. [ 259.401855][ T5860] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 259.703780][ T5860] usb 3-1: Using ep0 maxpacket: 8 [ 260.012754][ T5860] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 260.024255][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.032522][ T5860] usb 3-1: Product: syz [ 260.036678][ T5860] usb 3-1: Manufacturer: syz [ 260.045782][ T5860] usb 3-1: SerialNumber: syz [ 260.058550][ T5860] usb 3-1: config 0 descriptor?? [ 260.182535][ T30] audit: type=1400 audit(1747002642.585:498): avc: denied { map } for pid=8837 comm="syz.3.701" path="/dev/usbmon7" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 260.206051][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.738612][ T5860] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.836621][ T8848] netlink: 148 bytes leftover after parsing attributes in process `syz.5.702'. [ 261.744075][ T8867] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 261.752712][ T8867] VFS: Can't find a romfs filesystem on dev nullb0. [ 261.752712][ T8867] [ 262.185245][ T5860] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 262.254986][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.602074][ T30] audit: type=1400 audit(1747002644.765:499): avc: denied { write } for pid=8863 comm="syz.4.709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 262.647789][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.866012][ T30] audit: type=1400 audit(1747002645.265:500): avc: denied { setattr } for pid=8874 comm="syz.4.712" name="PACKET" dev="sockfs" ino=19653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 262.888794][ C0] vkms_vblank_simulate: vblank timer overrun [ 262.901920][ T972] usb 3-1: USB disconnect, device number 17 [ 262.967357][ T30] audit: type=1400 audit(1747002645.275:501): avc: denied { mount } for pid=8874 comm="syz.4.712" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 262.989618][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.074513][ T8879] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 263.083079][ T8879] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.708'. [ 263.237362][ T8882] program syz.4.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.288349][ T8895] netlink: 'syz.4.716': attribute type 10 has an invalid length. [ 265.723877][ T30] audit: type=1400 audit(1747002648.115:502): avc: denied { bind } for pid=8899 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 265.900222][ T30] audit: type=1400 audit(1747002648.135:503): avc: denied { ioctl } for pid=8899 comm="syz.4.721" path="socket:[18844]" dev="sockfs" ino=18844 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 266.025806][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.721'. [ 266.111860][ T30] audit: type=1400 audit(1747002648.175:504): avc: denied { read } for pid=8899 comm="syz.4.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 267.016763][ T8915] netlink: 'syz.5.724': attribute type 1 has an invalid length. [ 267.024457][ T8915] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.724'. [ 267.073108][ T8918] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 267.080065][ T8918] VFS: Can't find a romfs filesystem on dev nullb0. [ 267.080065][ T8918] [ 267.271742][ T5860] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 267.460623][ T5860] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 267.490828][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.517999][ T5860] usb 4-1: Product: syz [ 267.528616][ T5860] usb 4-1: Manufacturer: syz [ 267.614892][ T30] audit: type=1400 audit(1747002649.955:505): avc: denied { name_bind } for pid=8923 comm="syz.2.726" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 267.614900][ T5860] usb 4-1: SerialNumber: syz [ 267.686043][ T5860] usb 4-1: config 0 descriptor?? [ 267.735682][ T5860] usb 4-1: interface 1 not found [ 268.051390][ T5860] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 268.147361][ T8943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.723'. [ 268.729725][ T5860] usb 3-1: device descriptor read/64, error -71 [ 268.785412][ T972] usb 4-1: USB disconnect, device number 29 [ 269.211659][ T5860] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 269.341193][ T5860] usb 3-1: device descriptor read/64, error -71 [ 269.463475][ T5860] usb usb3-port1: attempt power cycle [ 269.469104][ T8946] Cannot find add_set index 1026 as target [ 269.612366][ T8959] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.922975][ T8975] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 269.931967][ T8975] VFS: Can't find a romfs filesystem on dev nullb0. [ 269.931967][ T8975] [ 270.307438][ T5860] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 270.353025][ T5860] usb 3-1: device descriptor read/8, error -71 [ 270.592700][ T8978] FAULT_INJECTION: forcing a failure. [ 270.592700][ T8978] name failslab, interval 1, probability 0, space 0, times 0 [ 270.611211][ T5860] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 270.632094][ T5860] usb 3-1: device descriptor read/8, error -71 [ 270.710235][ T8978] CPU: 1 UID: 0 PID: 8978 Comm: syz.4.739 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 270.710261][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.710271][ T8978] Call Trace: [ 270.710276][ T8978] [ 270.710282][ T8978] dump_stack_lvl+0x16c/0x1f0 [ 270.710308][ T8978] should_fail_ex+0x512/0x640 [ 270.710329][ T8978] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 270.710356][ T8978] should_failslab+0xc2/0x120 [ 270.710373][ T8978] __kmalloc_cache_noprof+0x6a/0x3e0 [ 270.710394][ T8978] ? subflow_create_ctx+0x9b/0x2c0 [ 270.710421][ T8978] subflow_create_ctx+0x9b/0x2c0 [ 270.710444][ T8978] subflow_ulp_init+0xc3/0x4d0 [ 270.710468][ T8978] tcp_set_ulp+0x326/0x7f0 [ 270.710490][ T8978] mptcp_subflow_create_socket+0x361/0xed0 [ 270.710506][ T8978] ? avc_has_perm_noaudit+0x117/0x3b0 [ 270.710526][ T8978] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 270.710556][ T8978] ? look_up_lock_class+0x59/0x150 [ 270.710581][ T8978] __mptcp_nmpc_sk+0x182/0x7d0 [ 270.710599][ T8978] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 270.710617][ T8978] ? __lock_acquire+0xaa4/0x1ba0 [ 270.710646][ T8978] mptcp_connect+0x7f/0xfe0 [ 270.710666][ T8978] __inet_stream_connect+0x3c5/0x1020 [ 270.710695][ T8978] ? __pfx___inet_stream_connect+0x10/0x10 [ 270.710717][ T8978] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.710735][ T8978] ? __pfx_inet_stream_connect+0x10/0x10 [ 270.710757][ T8978] ? __local_bh_enable_ip+0xa4/0x120 [ 270.710781][ T8978] ? __pfx_inet_stream_connect+0x10/0x10 [ 270.710799][ T8978] inet_stream_connect+0x57/0xa0 [ 270.710820][ T8978] __sys_connect_file+0x13e/0x1a0 [ 270.710847][ T8978] __sys_connect+0x14d/0x170 [ 270.710871][ T8978] ? __pfx___sys_connect+0x10/0x10 [ 270.710903][ T8978] ? __pfx_ksys_write+0x10/0x10 [ 270.710925][ T8978] ? rcu_is_watching+0x12/0xc0 [ 270.710949][ T8978] __x64_sys_connect+0x72/0xb0 [ 270.710972][ T8978] ? lockdep_hardirqs_on+0x7c/0x110 [ 270.710992][ T8978] do_syscall_64+0xcd/0x260 [ 270.711011][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.711033][ T8978] RIP: 0033:0x7fdfb478e969 [ 270.711046][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.711061][ T8978] RSP: 002b:00007fdfb56ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 270.711080][ T8978] RAX: ffffffffffffffda RBX: 00007fdfb49b5fa0 RCX: 00007fdfb478e969 [ 270.711089][ T8978] RDX: 000000000000001b RSI: 0000200000000180 RDI: 0000000000000003 [ 270.711098][ T8978] RBP: 00007fdfb56ce090 R08: 0000000000000000 R09: 0000000000000000 [ 270.711107][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.711116][ T8978] R13: 0000000000000000 R14: 00007fdfb49b5fa0 R15: 00007ffdfa3b2168 [ 270.711138][ T8978] [ 270.773297][ T5860] usb usb3-port1: unable to enumerate USB device [ 271.075458][ T30] audit: type=1400 audit(1747002653.495:506): avc: denied { append } for pid=8982 comm="syz.4.741" name="sg0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 271.129275][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 271.138892][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 271.149890][ T8985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.741'. [ 271.207381][ T8989] Set syz0 is full, maxelem 0 reached [ 271.231235][ T30] audit: type=1400 audit(1747002653.645:507): avc: denied { name_connect } for pid=8986 comm="syz.1.744" dest=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 271.309367][ T8991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.744'. [ 271.578844][ T9001] trusted_key: encrypted_key: insufficient parameters specified [ 271.596915][ T5860] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 272.066666][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.115187][ T5860] usb 5-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 272.223833][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.381406][ T5860] usb 5-1: config 0 descriptor?? [ 272.457991][ T9005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.748'. [ 272.474980][ T30] audit: type=1400 audit(1747002654.875:508): avc: denied { bind } for pid=9004 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 272.631722][ T8993] veth0_to_bridge: entered promiscuous mode [ 272.736674][ T30] audit: type=1400 audit(1747002655.145:509): avc: denied { ioctl } for pid=8992 comm="syz.4.745" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x4804 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 272.774261][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 272.852833][ T8992] veth0_to_bridge: left promiscuous mode [ 272.873663][ T5860] usbhid 5-1:0.0: can't add hid device: -71 [ 272.890849][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.912037][ T5860] usb 5-1: USB disconnect, device number 24 [ 272.942518][ T30] audit: type=1400 audit(1747002655.365:510): avc: denied { getopt } for pid=9013 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 273.804053][ T30] audit: type=1400 audit(1747002656.225:511): avc: denied { setattr } for pid=9022 comm="syz.5.754" name="task" dev="proc" ino=19162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 273.833038][ T30] audit: type=1400 audit(1747002656.245:512): avc: denied { map } for pid=9022 comm="syz.5.754" path="/proc/194/task" dev="proc" ino=19162 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 274.546097][ T30] audit: type=1400 audit(1747002656.965:513): avc: denied { mount } for pid=9026 comm="syz.5.755" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 274.665662][ T30] audit: type=1400 audit(1747002657.075:514): avc: denied { mounton } for pid=9026 comm="syz.5.755" path="/59/file0" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 274.719222][ T30] audit: type=1400 audit(1747002657.135:515): avc: denied { append } for pid=9033 comm="syz.4.761" name="nbd4" dev="devtmpfs" ino=683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.963999][ T82] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 275.441267][ T82] usb 6-1: Using ep0 maxpacket: 8 [ 275.633082][ T82] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 26 [ 275.637751][ T9046] input: syz1 as /devices/virtual/input/input14 [ 276.866102][ T30] audit: type=1400 audit(1747002657.225:516): avc: denied { ioctl } for pid=9033 comm="syz.4.761" path="socket:[19212]" dev="sockfs" ino=19212 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 276.891733][ T82] usb 6-1: can't read configurations, error -22 [ 277.022059][ T82] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 277.255005][ T82] usb 6-1: Using ep0 maxpacket: 8 [ 277.264904][ T82] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 26 [ 277.273826][ T82] usb 6-1: can't read configurations, error -22 [ 277.280514][ T82] usb usb6-port1: attempt power cycle [ 277.473032][ T30] audit: type=1400 audit(1747002659.895:517): avc: denied { read } for pid=9065 comm="syz.4.766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 277.904233][ T82] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 277.921651][ T30] audit: type=1400 audit(1747002660.335:518): avc: denied { unmount } for pid=7396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 277.979749][ T30] audit: type=1400 audit(1747002660.395:519): avc: denied { ioctl } for pid=9065 comm="syz.4.766" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 278.134506][ T30] audit: type=1400 audit(1747002660.545:520): avc: denied { set_context_mgr } for pid=9080 comm="syz.2.770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 278.167333][ T82] usb 6-1: device not accepting address 18, error -71 [ 278.168286][ T30] audit: type=1326 audit(1747002660.585:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd878e969 code=0x7ffc0000 [ 278.260741][ T9085] netlink: 76 bytes leftover after parsing attributes in process `syz.5.772'. [ 278.273709][ T30] audit: type=1326 audit(1747002660.585:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd878e969 code=0x7ffc0000 [ 278.297687][ T30] audit: type=1326 audit(1747002660.585:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbd878e969 code=0x7ffc0000 [ 278.328518][ T9085] netlink: 68 bytes leftover after parsing attributes in process `syz.5.772'. [ 278.357845][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.5.772'. [ 278.370105][ T30] audit: type=1326 audit(1747002660.585:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd878e969 code=0x7ffc0000 [ 278.402494][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 278.509191][ T30] audit: type=1326 audit(1747002660.595:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.1.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbd878e969 code=0x7ffc0000 [ 278.511778][ T9085] fuse: Bad value for 'user_id' [ 278.733553][ T9085] fuse: Bad value for 'user_id' [ 278.805680][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.819153][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.835980][ T10] usb 5-1: Product: syz [ 278.843132][ T10] usb 5-1: Manufacturer: syz [ 278.847762][ T10] usb 5-1: SerialNumber: syz [ 278.870694][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 278.889509][ T974] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 279.101884][ T5860] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 279.193618][ T9] usb 5-1: USB disconnect, device number 25 [ 279.272626][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 280.263749][ T974] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 280.271808][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 280.301327][ T974] ath9k_htc: Failed to initialize the device [ 280.624807][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 280.630978][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 280.709275][ T5860] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 280.727664][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.751976][ T5860] usb 4-1: Product: syz [ 280.756187][ T5860] usb 4-1: Manufacturer: syz [ 280.777525][ T5860] usb 4-1: SerialNumber: syz [ 280.801061][ T5860] usb 4-1: config 0 descriptor?? [ 280.817962][ T9095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.867975][ T9095] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 280.877733][ T5860] usb 4-1: ucan: probing device on interface #0 [ 280.935533][ T9118] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 281.098338][ T5860] usb 4-1: ucan: could not read protocol version, ret=0 [ 281.109059][ T5860] usb 4-1: ucan: probe failed; try to update the device firmware [ 281.424212][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.433715][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.443372][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.454881][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.464486][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.643926][ T9128] netlink: 76 bytes leftover after parsing attributes in process `syz.5.786'. [ 281.681633][ T9128] netlink: 68 bytes leftover after parsing attributes in process `syz.5.786'. [ 281.696920][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.786'. [ 281.711276][ T9128] fuse: Bad value for 'user_id' [ 281.717048][ T9128] fuse: Bad value for 'user_id' [ 283.244824][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 283.430930][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.449566][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.459931][ T9125] bridge_slave_0: entered allmulticast mode [ 283.467799][ T9125] bridge_slave_0: entered promiscuous mode [ 283.476760][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.484617][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.492623][ T9125] bridge_slave_1: entered allmulticast mode [ 283.500435][ T9125] bridge_slave_1: entered promiscuous mode [ 283.551940][ T5820] Bluetooth: hci4: command tx timeout [ 283.737688][ T974] usb 4-1: USB disconnect, device number 30 [ 283.759438][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.198098][ T9154] netlink: 192 bytes leftover after parsing attributes in process `syz.5.791'. [ 284.235218][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.311803][ T82] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 284.343013][ T9161] bridge_slave_0: default FDB implementation only supports local addresses [ 284.358205][ T9125] team0: Port device team_slave_0 added [ 284.375035][ T9161] binder: 9160:9161 ioctl c0306201 2000000001c0 returned -22 [ 284.405164][ T9125] team0: Port device team_slave_1 added [ 284.481253][ T82] usb 5-1: Using ep0 maxpacket: 16 [ 284.495103][ T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.525037][ T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.563298][ T82] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.655609][ T82] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 284.709519][ T82] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.801670][ T82] usb 5-1: config 0 descriptor?? [ 284.829301][ T9164] trusted_key: encrypted_key: insufficient parameters specified [ 284.846425][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.858135][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.890959][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.925372][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.948476][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.013948][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.085739][ T9170] netlink: 28 bytes leftover after parsing attributes in process `syz.5.791'. [ 285.153666][ T9125] hsr_slave_0: entered promiscuous mode [ 285.257854][ T9174] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 285.343826][ T9125] hsr_slave_1: entered promiscuous mode [ 285.425273][ T82] wacom 0003:056A:0317.000E: unbalanced collection at end of report description [ 285.459486][ T82] wacom 0003:056A:0317.000E: parse failed [ 285.466307][ T82] wacom 0003:056A:0317.000E: probe with driver wacom failed with error -22 [ 285.621417][ T5820] Bluetooth: hci4: command tx timeout [ 285.631829][ T9125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.639523][ T9125] Cannot create hsr debugfs directory [ 286.097179][ T9178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.797'. [ 286.125807][ T82] usb 5-1: USB disconnect, device number 26 [ 286.127080][ T9178] netlink: 68 bytes leftover after parsing attributes in process `syz.1.797'. [ 286.164711][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 286.175657][ T9178] fuse: Bad value for 'user_id' [ 286.180590][ T9178] fuse: Bad value for 'user_id' [ 286.381238][ T974] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 286.403472][ T9125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.413105][ T9125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 286.422220][ T9125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.433277][ T9125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.486790][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.506082][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.516484][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.523578][ T6599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.540055][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.547205][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.553113][ T974] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 286.574592][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.593475][ T974] usb 4-1: config 0 has no interface number 0 [ 286.600204][ T974] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 286.611067][ T974] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.612071][ T5891] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 286.627436][ T9125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.653227][ T974] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 286.662611][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.670596][ T974] usb 4-1: Product: syz [ 286.695056][ T974] usb 4-1: Manufacturer: syz [ 286.733848][ T974] usb 4-1: SerialNumber: syz [ 286.752687][ T974] usb 4-1: config 0 descriptor?? [ 286.842822][ T5891] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 286.861156][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.882135][ T5891] usb 6-1: config 0 descriptor?? [ 286.886844][ T9194] netdevsim netdevsim4: Direct firmware load for þ failed with error -2 [ 286.896006][ T9194] netdevsim netdevsim4: Falling back to sysfs fallback for: þ [ 286.922097][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.245576][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 287.265746][ T5891] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 287.299766][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.439307][ T974] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 287.489383][ T974] usb 4-1: USB disconnect, device number 31 [ 287.507034][ T9180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.543414][ T5891] usb 5-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 287.562298][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.570554][ T5891] usb 5-1: Product: syz [ 287.597171][ T5891] usb 5-1: Manufacturer: syz [ 287.609581][ T5891] usb 5-1: SerialNumber: syz [ 287.610568][ T9125] veth0_vlan: entered promiscuous mode [ 287.619327][ T5891] usb 5-1: config 0 descriptor?? [ 287.635453][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.800'. [ 287.648305][ T9184] netlink: 16 bytes leftover after parsing attributes in process `syz.5.800'. [ 287.667174][ T5891] usb 5-1: interface 1 not found [ 287.687045][ T9125] veth1_vlan: entered promiscuous mode [ 287.701641][ T5820] Bluetooth: hci4: command tx timeout [ 287.713408][ T9] usb 6-1: USB disconnect, device number 20 [ 287.737735][ T9125] veth0_macvtap: entered promiscuous mode [ 287.747207][ T9125] veth1_macvtap: entered promiscuous mode [ 287.762618][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.773523][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.784715][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.795431][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.806355][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.818225][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.828634][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.843775][ T974] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 287.861298][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.964769][ T9214] netlink: 56 bytes leftover after parsing attributes in process `syz.4.804'. [ 288.056327][ T9210] fuse: Unknown parameter '0x00000000000000000x0000000000000002' [ 288.058013][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.108665][ T974] usb 4-1: Using ep0 maxpacket: 16 [ 288.184025][ T974] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 288.187997][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.201593][ T974] usb 4-1: config 0 has no interface number 0 [ 288.206804][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.220545][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.233244][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.244714][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.245760][ T974] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 288.255528][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.275648][ T974] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 288.328271][ T974] usb 4-1: Product: syz [ 288.336988][ T974] usb 4-1: SerialNumber: syz [ 288.351894][ T974] usb 4-1: config 0 descriptor?? [ 288.438736][ T5891] usb 5-1: USB disconnect, device number 27 [ 288.450973][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.464858][ T974] cm109 4-1:0.8: invalid payload size 16, expected 4 [ 288.477077][ T974] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 288.505756][ T9125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.514918][ T9125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.524079][ T9125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.533874][ T9125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.629997][ T6287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.645567][ T6287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.685059][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.694262][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.709793][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 288.709808][ T30] audit: type=1400 audit(1747002671.125:538): avc: denied { mounton } for pid=9125 comm="syz-executor" path="/root/syzkaller.Hd9rA3/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=21845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 288.750108][ T30] audit: type=1400 audit(1747002671.165:539): avc: denied { mount } for pid=9125 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 288.877123][ T5892] usb 4-1: USB disconnect, device number 32 [ 288.877123][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 288.877145][ C0] ------------[ cut here ]------------ [ 288.895915][ C0] URB ffff88802a3dd800 submitted while active [ 288.902294][ C0] WARNING: CPU: 0 PID: 0 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14d5/0x1730 [ 288.911666][ C0] Modules linked in: [ 288.915769][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 288.927391][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.937553][ C0] RIP: 0010:usb_submit_urb+0x14d5/0x1730 [ 288.943185][ C0] Code: fd eb cb bb fe ff ff ff e9 c6 f3 ff ff e8 33 65 94 fa c6 05 ef aa 46 09 01 90 48 c7 c7 c0 2d 51 8c 48 89 de e8 9c f0 53 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 96 f3 ff ff 48 89 ef [ 288.962778][ C0] RSP: 0000:ffffc90000007a90 EFLAGS: 00010082 [ 288.968844][ C0] RAX: 0000000000000000 RBX: ffff88802a3dd800 RCX: ffffc900021a1000 [ 288.976809][ C0] RDX: 0000000000040000 RSI: ffffffff817ab005 RDI: 0000000000000001 [ 288.984768][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 288.992734][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000087 [ 289.000692][ C0] R13: ffff888059541858 R14: 000000000000000f R15: 0000000000000001 [ 289.008649][ C0] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 289.017566][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 289.024138][ C0] CR2: 00007fabbce65760 CR3: 000000005737c000 CR4: 00000000003526f0 [ 289.032112][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 289.040070][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 289.048027][ C0] Call Trace: [ 289.051292][ C0] [ 289.054120][ C0] ? find_held_lock+0x2b/0x80 [ 289.058791][ C0] ? __pfx____ratelimit+0x10/0x10 [ 289.063809][ C0] cm109_urb_irq_callback+0x2e7/0xb70 [ 289.069176][ C0] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 289.074544][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 289.079746][ C0] dummy_timer+0x180e/0x3a20 [ 289.084430][ C0] ? find_held_lock+0x2b/0x80 [ 289.089099][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 289.094730][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 289.100362][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 289.106341][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 289.111275][ C0] ? rcu_is_watching+0x12/0xc0 [ 289.116029][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 289.121829][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 289.126759][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 289.131954][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 289.137660][ C0] ? read_tsc+0x9/0x20 [ 289.141729][ C0] hrtimer_run_softirq+0x17d/0x350 [ 289.146832][ C0] handle_softirqs+0x216/0x8e0 [ 289.151590][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 289.156868][ C0] __irq_exit_rcu+0x109/0x170 [ 289.161542][ C0] irq_exit_rcu+0x9/0x30 [ 289.165781][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 289.171425][ C0] [ 289.174360][ C0] [ 289.177282][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.183279][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 289.188902][ C0] Code: 25 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 289.208504][ C0] RSP: 0000:ffffffff8e007e10 EFLAGS: 000002c6 [ 289.214560][ C0] RAX: 00000000012de90f RBX: 0000000000000000 RCX: ffffffff8b6cd419 [ 289.222535][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0 [ 289.230492][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 289.238450][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 289.246409][ C0] R13: ffffffff8e097740 R14: ffffffff9084f610 R15: 0000000000000000 [ 289.254384][ C0] ? ct_kernel_exit+0x139/0x190 [ 289.259236][ C0] default_idle+0x13/0x20 [ 289.263560][ C0] default_idle_call+0x6d/0xb0 [ 289.268331][ C0] do_idle+0x391/0x510 [ 289.272395][ C0] ? __pfx_do_idle+0x10/0x10 [ 289.276983][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 289.282178][ C0] cpu_startup_entry+0x4f/0x60 [ 289.286930][ C0] rest_init+0x16b/0x2b0 [ 289.291175][ C0] ? acpi_subsystem_init+0x133/0x180 [ 289.296452][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 289.301996][ C0] start_kernel+0x3e9/0x4d0 [ 289.306492][ C0] x86_64_start_reservations+0x18/0x30 [ 289.311944][ C0] x86_64_start_kernel+0xb0/0xc0 [ 289.316873][ C0] common_startup_64+0x13e/0x148 [ 289.321812][ C0] [ 289.324822][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 289.332088][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 289.343702][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.353745][ C0] Call Trace: [ 289.357009][ C0] [ 289.359937][ C0] dump_stack_lvl+0x3d/0x1f0 [ 289.364524][ C0] panic+0x71c/0x800 [ 289.368414][ C0] ? __pfx_panic+0x10/0x10 [ 289.372824][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 289.378021][ C0] ? usb_submit_urb+0x14d5/0x1730 [ 289.383033][ C0] check_panic_on_warn+0xab/0xb0 [ 289.387966][ C0] __warn+0xf6/0x3c0 [ 289.391849][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 289.396863][ C0] ? usb_submit_urb+0x14d5/0x1730 [ 289.401878][ C0] report_bug+0x3c3/0x580 [ 289.406203][ C0] ? usb_submit_urb+0x14d5/0x1730 [ 289.411215][ C0] handle_bug+0x184/0x210 [ 289.415627][ C0] exc_invalid_op+0x17/0x50 [ 289.420124][ C0] asm_exc_invalid_op+0x1a/0x20 [ 289.424987][ C0] RIP: 0010:usb_submit_urb+0x14d5/0x1730 [ 289.430607][ C0] Code: fd eb cb bb fe ff ff ff e9 c6 f3 ff ff e8 33 65 94 fa c6 05 ef aa 46 09 01 90 48 c7 c7 c0 2d 51 8c 48 89 de e8 9c f0 53 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 96 f3 ff ff 48 89 ef [ 289.450202][ C0] RSP: 0000:ffffc90000007a90 EFLAGS: 00010082 [ 289.456258][ C0] RAX: 0000000000000000 RBX: ffff88802a3dd800 RCX: ffffc900021a1000 [ 289.464212][ C0] RDX: 0000000000040000 RSI: ffffffff817ab005 RDI: 0000000000000001 [ 289.472178][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 289.480134][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000087 [ 289.488105][ C0] R13: ffff888059541858 R14: 000000000000000f R15: 0000000000000001 [ 289.496069][ C0] ? __warn_printk+0x1a5/0x350 [ 289.500833][ C0] ? find_held_lock+0x2b/0x80 [ 289.505499][ C0] ? __pfx____ratelimit+0x10/0x10 [ 289.510520][ C0] cm109_urb_irq_callback+0x2e7/0xb70 [ 289.515885][ C0] __usb_hcd_giveback_urb+0x38a/0x6e0 [ 289.521269][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 289.526496][ C0] dummy_timer+0x180e/0x3a20 [ 289.531098][ C0] ? find_held_lock+0x2b/0x80 [ 289.535765][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 289.541399][ C0] ? debug_object_deactivate+0x1ec/0x3a0 [ 289.547040][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 289.553031][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 289.557962][ C0] ? rcu_is_watching+0x12/0xc0 [ 289.562715][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 289.568541][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 289.573574][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 289.578775][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 289.584483][ C0] ? read_tsc+0x9/0x20 [ 289.588550][ C0] hrtimer_run_softirq+0x17d/0x350 [ 289.593653][ C0] handle_softirqs+0x216/0x8e0 [ 289.598423][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 289.603705][ C0] __irq_exit_rcu+0x109/0x170 [ 289.608371][ C0] irq_exit_rcu+0x9/0x30 [ 289.612603][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 289.618225][ C0] [ 289.621147][ C0] [ 289.624073][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.630050][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 289.635681][ C0] Code: 25 62 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 1a 1d 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 289.655276][ C0] RSP: 0000:ffffffff8e007e10 EFLAGS: 000002c6 [ 289.661358][ C0] RAX: 00000000012de90f RBX: 0000000000000000 RCX: ffffffff8b6cd419 [ 289.669316][ C0] RDX: 0000000000000000 RSI: ffffffff8dbe1547 RDI: ffffffff8bf483a0 [ 289.677291][ C0] RBP: fffffbfff1c12ee8 R08: 0000000000000001 R09: ffffed10170865bd [ 289.685273][ C0] R10: ffff8880b8432deb R11: 0000000000000000 R12: 0000000000000000 [ 289.693258][ C0] R13: ffffffff8e097740 R14: ffffffff9084f610 R15: 0000000000000000 [ 289.701224][ C0] ? ct_kernel_exit+0x139/0x190 [ 289.706074][ C0] default_idle+0x13/0x20 [ 289.710407][ C0] default_idle_call+0x6d/0xb0 [ 289.715174][ C0] do_idle+0x391/0x510 [ 289.719244][ C0] ? __pfx_do_idle+0x10/0x10 [ 289.723825][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 289.729024][ C0] cpu_startup_entry+0x4f/0x60 [ 289.733776][ C0] rest_init+0x16b/0x2b0 [ 289.738018][ C0] ? acpi_subsystem_init+0x133/0x180 [ 289.743295][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 289.748832][ C0] start_kernel+0x3e9/0x4d0 [ 289.753332][ C0] x86_64_start_reservations+0x18/0x30 [ 289.758803][ C0] x86_64_start_kernel+0xb0/0xc0 [ 289.763736][ C0] common_startup_64+0x13e/0x148 [ 289.768670][ C0] [ 289.771896][ C0] Kernel Offset: disabled [ 289.776202][ C0] Rebooting in 86400 seconds..