last executing test programs: 13m29.587449589s ago: executing program 4 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0x82, 0x3, 0xfffffffa, 0x2, 0x48, "1ae34e0626788a22b2fb12dab2a44926dea5bd", 0x4}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000700000000000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000380), 0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$key(0xf, 0x3, 0x2) 13m25.616511457s ago: executing program 4 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x25, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = memfd_create(&(0x7f0000000100)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabh\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)r\xdc\x17\x99J\xaeE\xbdt\xe2L^2\xca\x8f\x1cZ\x84\xe3\xe6\x86iC\xcc\xa9\xbf\xeb\x92\r \xa86\x82\xc3\xa8\xf1\xb4\x0f\x9b\x88\x0f\xc8U\x99;\x9c\x17\xfc7\xdd\xd6\x8e%4\x17~\x9d\xe1\a\x00\x00\x00\xa5\x8fG\\\xd8\x80\x15\xcaw\x7f\xac\x063\xbaE\x11\xcc~Q\xcb/\x8bv\xf2B_\xc5\x8d\xb3\xdd\xbd\x1e\xde\x19\xb5\xc4\xcf%p\x89\xa2\xda\xc7', 0x2) r4 = fanotify_init(0x8, 0x1000) r5 = dup(r3) fanotify_mark(r4, 0x201, 0x48001038, r5, 0x0) ftruncate(r5, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x8040}, 0x894) 13m24.562664719s ago: executing program 4 (id=396): r0 = syz_usb_connect(0x2, 0x24f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000e40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x110, 0x4, 0x2, 0x3, 0x10, 0xf8}, 0x11, &(0x7f0000000d80)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xd9, 0x0, 0x3, 0x0, 0xc00}]}}) syz_usb_control_io(r0, &(0x7f0000001040)={0x2c, 0x0, 0x0, &(0x7f0000000f40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000fc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x80, 0x2, 0xb, 0x4, "eaacc44f", "e5bb456d"}}, &(0x7f0000001000)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x8, 0x4, 0x8, 0xe9df, 0x2}}}, 0x0) r1 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000406a0517030000000000010902240001000e000009040004e50200000009210100080122070009058103fc0e85e59f2d94ab93b2a8bcf731387e880d9905", @ANYRESHEX=r0, @ANYRES32, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) 13m21.318831837s ago: executing program 4 (id=409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_io_uring_setup(0x3c9e, &(0x7f0000000000)={0x0, 0x86a9, 0x2, 0x5, 0x2b2}, &(0x7f0000000080), &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0xa, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "5f8b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 13m20.03455235s ago: executing program 4 (id=411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000023000000180100002020642500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 13m19.633974718s ago: executing program 4 (id=413): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa3f58dc55767b1b9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffdb9a00fffffffffffffffb06ffbb03018c08720603030303030300000006000f0001000000080026006c09000008000c006400000008000d0000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) shutdown(r1, 0x2) dup3(r0, r1, 0x0) 13m19.164459436s ago: executing program 32 (id=413): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xa3f58dc55767b1b9, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffdb9a00fffffffffffffffb06ffbb03018c08720603030303030300000006000f0001000000080026006c09000008000c006400000008000d0000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) shutdown(r1, 0x2) dup3(r0, r1, 0x0) 5m35.038979271s ago: executing program 1 (id=1874): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x5}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b6395b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000001700)=[{&(0x7f0000001740)="6a573cdab6a05d26f48db18ab9d340420cfafb2b36cdb0ce4754a097d8aa2cad06e3450ae184528f391c2cc485670aec29ed5768201809f7c9e87297554631c7177ea1b5404486d977469eb10ffc6f4ce70cab1b1bc0da3c7921118e7cceef11285aab7d9e87b10b02ad3ac16f2e06a7753ba5b0f0d14f14c2829741913cbaeee517a7bc6c9396c811f37210a043a15347e03e1b3d6e16d1baace3f1ad290015693e3c1efdf24cc816b4e5abcecf796da12fde246276ce5a30b7bcd4dab64c6a2f0c0f34e5590100000000a2245a49caf6a9bb17be4a1fb2269a005bcfaca79d53b3bffd8291a7152d0cfb35a7d651be74f1759f216aa308d8d8482b358f756c710e7e9c3a15838a6a7c68718a6c2f69c56808b42ed6bb56ffcad717ff09396b8e114c540d9bc5a4a1ad0d26140b7634d1e6dd73ab03d85779c405b595c3c0027d737e302c899fcfd046d630492212d4857e564e127184007df6bb976dc9acb2651c", 0x162}, {&(0x7f0000000500)="869369c851aa6392f2e0553aef4db58bd625f858d7de1b7e4b65659ca0feffb456345fd53eeac79bfd36491e1136d13a7bc99f9ad0473b695186bb971691f2d2f5cec8297ea205e8c679fdab80079ad753611a669b71ed1ee80d64801d3f33c2e57c956e000214f91aedb12a56235dd82b213c44cd392fe58bede50df8be199489f6efc4661a", 0x86}, {&(0x7f0000004040)="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", 0xe36}], 0x3) 5m31.445006934s ago: executing program 1 (id=1882): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000080)='./file0/file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r6, 0x0, 0x1, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0x290, 0xffffffff, 0x9e4, 0x9e4, 0xec, 0xffffffff, 0xffffffff, 0xac8, 0xac8, 0xac8, 0xffffffff, 0x5, 0x0, {[{{@ip={@empty, @dev, 0x0, 0x0, 'bridge_slave_1\x00', 'nr0\x00'}, 0x3127, 0x70, 0x98, 0x1ba, {0x46010000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x70, 0xd0, 0x0, {0x0, 0x4}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x1], 0x1, 0x1}, {0x0, [0x4, 0x0, 0x5, 0x1, 0x5, 0x4], 0x4, 0x3}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'lo\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYRES32, @ANYBLOB="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", @ANYRESHEX=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 5m26.333918715s ago: executing program 1 (id=1897): r0 = add_key$fscrypt_v1(&(0x7f0000000e80), &(0x7f0000000ec0)={'fscrypt:', @desc2}, &(0x7f0000000f00)={0x0, "ec75f8bf9d4651b7f6c15bc4dbdd5620e373a5e41ba756b87a0b57b61f6cea4ec1ddb40ad8c0b134955d67b10aac923afc1e68a4a0107b49b0e1199816d2d0aa", 0x15}, 0x48, 0xfffffffffffffffd) stat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x9, 0x3, 0x6}}]}}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x5}, [], {0x4, 0x4}, [{0x8, 0x2}], {0x10, 0x1}, {0x20, 0x2}}, 0x2c, 0x1) r6 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, r1, r6) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="a85b167fe53348ead8191693b6d7182ddfca4b00b932be8f2e4848ccd882693f5879857340786de08a53302e30357e88b61e57cf47ec7df9c114b0248379877dd105807255882a667f9ddaaede95a171b48cc055bde677c1362ff3b61980e5a7da0f5926fe49e2e59a8943b58b32c7a0c37a6872e617fae5e4b23e8555d925db2b55f4c90feff79c2f6698e52fa03448813f8a72b63dfbd9ea14b72afb39a6950f553ac4f9bf6019b56b4cfcbc61d96857bc703b255a393b29bc982454b7c9a055588faf5b9d11682e81bd", 0xcb, r6) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r2) keyctl$assume_authority(0x10, r7) 5m24.530017291s ago: executing program 1 (id=1903): openat$audio(0xffffff9c, 0x0, 0x402, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000000), 0x10800, &(0x7f00000001c0)=ANY=[@ANYBLOB='siie=#8ge5,\x00']) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240)) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x1, 0x404c880, &(0x7f00000000c0)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') syz_pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/235, 0xeb}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000800b0c9f9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r7 = dup(r5) write$UHID_INPUT(r7, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) 5m21.270804836s ago: executing program 1 (id=1911): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20835d4f5e71ca18}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9372b24750476c5c51d77a092eeb08f74796d2762c9b8db3eec05135361a24c71e35ddf62f5c42f4aa44a241d7b23e3ef89a8211ccc82587968d59a30d028ff7ac3ffb7b41cae5488bc5273c1683d3d4d68e4a1bb85e9486b0af1f0e230550899af356ddbc9dfc109fd598f65b09d588b8000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000240)={0x4, 0x5, 0x3, 0x2, 0x0, "0aaa8117923c61d1bcc1a25be4de46044e2603"}) 5m20.762481312s ago: executing program 1 (id=1914): open(&(0x7f0000000080)='./file0\x00', 0x440, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x28) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) timer_create(0x3, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000380)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r3, 0x80079a0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r3, r3, 0x0, 0x200001) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) signalfd4(r4, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x90, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwrite64(r7, &(0x7f0000000180)="dfb811c83b4364d338f0080fba3954af4962ca2f012c26fd2e64482b28ff88fef82f37cb6508a8c38063446387d363cc43edd446b290c1391d28b2b4c0483aa82669eca773e949a2a363e99d1809cf80ee3f1b00a1426654ad035ccc4b77aecec658462f8637cc31c110f890c2377f282f315b3a3e4d78dd6e741cbdd091", 0x7e, 0x8000000000000001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 5m5.779156025s ago: executing program 33 (id=1914): open(&(0x7f0000000080)='./file0\x00', 0x440, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func_proto]}}, 0x0, 0x4a}, 0x28) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5b}, 0x94) timer_create(0x3, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000380)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r3, 0x80079a0) readv(r3, &(0x7f0000000480)=[{&(0x7f0000000180)=""/195, 0xc3}], 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendfile(r3, r3, 0x0, 0x200001) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) signalfd4(r4, &(0x7f0000000140)={[0x3]}, 0x8, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0xa, 0x90, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pwrite64(r7, &(0x7f0000000180)="dfb811c83b4364d338f0080fba3954af4962ca2f012c26fd2e64482b28ff88fef82f37cb6508a8c38063446387d363cc43edd446b290c1391d28b2b4c0483aa82669eca773e949a2a363e99d1809cf80ee3f1b00a1426654ad035ccc4b77aecec658462f8637cc31c110f890c2377f282f315b3a3e4d78dd6e741cbdd091", 0x7e, 0x8000000000000001) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) 25.81031812s ago: executing program 0 (id=2887): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000140)=""/4096, &(0x7f0000000040)=0x1000) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 25.179636239s ago: executing program 0 (id=2891): socket$inet(0x2, 0x3, 0x6) r0 = socket$inet(0x2, 0x4000000805, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x6, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000280)=0x4001) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0xffd, 0x0) read$msr(r3, &(0x7f0000032680)=""/102384, 0x18ff0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0xff, 0x9, 0x9, 0x14, @empty, @empty, 0x8006, 0x7800, 0x5f1, 0x7fff}}) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r6, 0x1, 0x48, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000190c0)=ANY=[], 0x18}, 0x4000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000080)=0x52, 0x4) recvmsg$unix(r1, 0x0, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r8}, 0x18) r9 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r9, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0x0, 0x5, 0xffffff01, 0x1003, 0xffffffff, 0x1, 0x5, 0x344, 0x1, 0x0, 0x2000002, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x10001, 0x1]}) 25.128103425s ago: executing program 0 (id=2892): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3fc8b5a5a72dac2c352d15ca465076507ed8f92ea1347b312fc5102a445384ac92ce7b92d18b474e04ec54ab33cf4abe8fb60bdfeeaa6c5965ec083e53e7e5d5169efac37868e658ce4df2f76952801bab6c45c2a6baf4a783361d355c085148aa19819cb3550970fcdbae4fce"], 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) syz_io_uring_setup(0x5bf, &(0x7f0000000200)={0x0, 0x8000, 0x200, 0x8006, 0x359}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000005c0)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020e08000b000000080e0000000000000300050033000000020000200000000000000000001400ab040900000005000600002000000a004e2000008da1ff0200"], 0x58}}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x2, 0x3, 0x1815}, {@private=0xa010101, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0xf6, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000000000000000fbc0ec66aaecaf630f20080a8b486a03f82bf0ef9c8fa6855be60cf0c52ab90f9c9ef6cc550086228a11784459fe803015b553b186396b9c6c47c1fa18b8b5696c5787bef202473522c1d62315444a767ef6ff2ca18e45327227b2e7cb0a8ddcf2246404939a09416502790e8136b1985b605177a442b9ac4c832d873c065c0c998310759fe01f50768b9834a8e3716bffedf4f88418940c31e6a94d27f629daf3d9f2f11fb727cc64d65f55d34f234f05b09d9be20ecdd9403aaf10", @ANYRES16, @ANYBLOB="040027bd7000fddbdf25070000006000018014000400fc00000000000000000000000000000008000700", @ANYRES32, @ANYBLOB="060001000a00000014000400fe8000000000000000000000000000bb14000400ff020000000000000000000000000001050002000800000008000700", @ANYRES32=r7, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 24.541261426s ago: executing program 0 (id=2895): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23.895886894s ago: executing program 0 (id=2897): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r3) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019640)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000440)='/dev/cpu/#/msr\x00', 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x82, 0x0, 0x0) 20.605227485s ago: executing program 0 (id=2904): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') preadv2(r0, &(0x7f0000000400), 0x0, 0x8, 0x9f55, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x3580, &(0x7f0000000280)={0x0, 0xfffffffd, 0x4, 0xfffffffd, 0x22d, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 14.959654331s ago: executing program 3 (id=2922): open(0x0, 0x80, 0x107) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002aafee08f00a51678b75000000010902240081000000000904000002ffffff00090507"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x10c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xd, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xd8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x1, 0x42}, {0x6, 0x4, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x7ff, 0x5, 0xa4, {0x1, 0x1, 0x0, 0x400, 0x7, 0xff}, {0x9, 0x2, 0x5, 0x7, 0x4, 0x2}, 0x198e066a, 0x80000001, 0xe89}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9d}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r9, 0xc0cc5615, &(0x7f00000007c0)={0xd, @capture={0x1000, 0x1, {0x0, 0x8001}, 0x64, 0x1000}}) syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100), &(0x7f0000000140)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r10, 0x402c542b, &(0x7f0000000040)={0x6, 0x1006, 0xefcc, 0x0, 0x5, "f46fca54683cc267a000002000", 0x5, 0xb}) ioctl$TIOCL_PASTESEL(r10, 0x541c, &(0x7f0000000000)) 8.290389367s ago: executing program 3 (id=2932): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x5, 0x0, 0x0, r3}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b6395b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000001700)=[{&(0x7f0000001740)="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", 0x162}, {&(0x7f0000000500)="869369c851aa6392f2e0553aef4db58bd625f858d7de1b7e4b65659ca0feffb456345fd53eeac79bfd36491e1136d13a7bc99f9ad0473b695186bb971691f2d2f5cec8297ea205e8c679fdab80079ad753611a669b71ed1ee80d64801d3f33c2e57c956e000214f91aedb12a56235dd82b213c44cd392fe58bede50df8be199489f6efc4661a", 0x86}, {&(0x7f0000004040)="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", 0xe36}], 0x3) 8.100576039s ago: executing program 3 (id=2933): r0 = socket$pppl2tp(0x18, 0x1, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x379) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000000340)={0x0, 0x49fa, 0x80, 0x0, 0x4e}, 0x0, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)=ANY=[@ANYBLOB="00406b1d010140000102030109025f0003010380f40904000000010100000a24010f0003020102090401000001020000090401010101020000090501090000f7090607250183020c000904020000010200000904020101010200000905820940002606"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x6, @mcast2, 0x9}}}, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000440)=""/4096, &(0x7f0000000000)=0x1000) 7.966500655s ago: executing program 2 (id=2934): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/tcp6\x00') preadv2(r0, &(0x7f0000000400)=[{0x0}], 0x1, 0x8, 0x9f55, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x3580, &(0x7f0000000280)={0x0, 0xfffffffd, 0x4, 0xfffffffd, 0x22d, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 7.388829166s ago: executing program 6 (id=2935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 7.266939635s ago: executing program 6 (id=2936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_eee={0x45, 0x4, 0x3, 0x8, 0x7fffffff, 0x8, 0x4307, 0x6, [0x7, 0x6]}}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x9, 0x6, 0x2b, @empty, @loopback, 0x0, 0x8, 0x7f, 0x4}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x20, &(0x7f0000000500)={&(0x7f0000000980)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/67, 0x43}}, 0x10) openat$mice(0xffffffffffffff9c, &(0x7f0000000600), 0x4001) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100fdffffff000000000800000008000300", @ANYRES32=r10], 0x1c}}, 0x44040) 7.057805895s ago: executing program 2 (id=2937): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbfc, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0405fa97d7a9f74823"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 6.510927633s ago: executing program 5 (id=2938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]) 6.509864341s ago: executing program 2 (id=2939): r0 = syz_open_procfs(0x0, 0x0) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1, 0x8, 0x9f55, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) syz_io_uring_setup(0x3580, &(0x7f0000000280)={0x0, 0xfffffffd, 0x4, 0xfffffffd, 0x22d, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r6, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x1, @remote}, r8, 0xfffffffc}}, 0x48) 5.402340518s ago: executing program 5 (id=2940): dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 4.63453402s ago: executing program 6 (id=2941): preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)=""/245, 0xf5}], 0x1, 0x8, 0x9f55, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x80801) syz_io_uring_setup(0x3580, &(0x7f0000000280)={0x0, 0xfffffffd, 0x4, 0xfffffffd, 0x22d}, 0x0, 0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r5, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x1, @remote}, r7, 0xfffffffc}}, 0x48) 4.599084s ago: executing program 2 (id=2942): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.597790666s ago: executing program 3 (id=2943): syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x1) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) bind$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00000000c0)=0xd77, 0xffffffffffffff7c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.368796634s ago: executing program 5 (id=2944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbfc, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0405fa97d7a9f74823"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 3.690650873s ago: executing program 6 (id=2945): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r4 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x107) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.557795967s ago: executing program 2 (id=2946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x7, @mcast2}, {0xa, 0x0, 0xb, @mcast1}}}, 0x48) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbfc, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0405fa97d7a9f74823"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 3.222490124s ago: executing program 5 (id=2947): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x107) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)="58ec51e8797342d1a100f492eb61156ec020e53a0323daf9c968de2af5a9f224da111d456f836acbb91ca09fbef1ec5bcb8ecdc90f0767943530219940d2d86f2866d897e4b7be73c2ec768ae7faa5fdfb34cea3eb2876cc2696b3104be7f561f68221403f2145b362a9220ab3fb9502433f352109b4b9", 0x77}, 0x1, 0x0, 0x0, 0x2004c014}, 0x4008044) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) 2.592854309s ago: executing program 3 (id=2948): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x1c4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x2) recvmmsg(r6, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x40010002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000010960000000000000000000039fa2ff060a067dc4ac93972549ccbc50dfc2626bd", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x38011, r7, 0x7de98000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close(r4) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x88, 0xfffffffffffffffd, 0xc, 0x0, 0x0, 0x24}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x8, 0x4, 0x10, '\x00', 0xc1d}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 2.343128492s ago: executing program 6 (id=2949): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000000000000700ffff0100000007000000060000000600000002000000000000000000000000000000070000800400000000000000ff7f000027000000070000000500000000000000000000100003000000ffffff7f05000000ffff00000000000000000000000000000b0000005f0e00000100000007000000f40d000006000000010000800000000000000000000000000d000000bb020000010000000d000000ff07000000040000000000000000000000000000000000800001000004000000060000000300000001000000030000000000000000000000000000007455aea86295af3168bd8cfff72f40ed2c4da8e7040ff04fae4549dcaaecaa3f2d9db230a6c81bd4dd8b1e7e9bce7676c4c9497db763d4c7ffc64298f5d4cfc7af9666cc99fd58513708835f8d17ec50366ca60258d92f34fecacc3a36ef531c45d647ddf57dc053515c8338cefa58cb48b13ba553fe384028c42314d92bef9605dbc43fd1b2b5fc0593770700bd76b3bae7a440441918f5779e53ebe67944d4ea333e4835fc694b6510b13c11f6c72679a07527dc56b866fd597717000000ea940c6d525b489f5209d7a197d64d68d75217c584aa78a4d7616e80b00383fa1f89b3dee95d60e60e8a48712ce4ac06a4c3c552724a071213a5be4db3594fc0ea0845317211219aa40801872f81eace95705358ca637f3835fc0ce0f3562f8385718b6a0000000065af406f463c951def40db8000000000000000000000b48f475b8dcbdbbb6e641215afe828e9330148671dfa6c6ab7b8787ffc6faf5c3dfbcff549b5a8da70bbfe90f6df46221472036da8b0d7df22536c26c58dd7be5bde1e3ea80741c0f2290b792d3bdb7f412267b1caa4b472f179d6fa7de1050b173f42ac92ec3f67aac39b0d76f332fc22379e1f1997375de73ae78de69225833769bd7e853f49ad5d903103815f2bac0bda50ea0d01ee0f"]) 2.342152s ago: executing program 2 (id=2950): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280), 0x14) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000"], 0xd0}}, 0x2400c800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r5, 0x13, 0x6, @local}, 0x10) connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) syz_usb_connect(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003a1306910720506cb5e220400000000000000010101500e0904550602f79fd000090501004000ff80bc09050e02ff0302067dfb5f6a0df741317beeb4131c80512aa98d313c990350b1a98957f911150d9c65b3a9247550f7f3a6e5fd7a5ba9224b67550c3a001549db87e47e3ea5de1a9e6d428cdb54cb2d10c1f258957bc7109a8f5a5b1f7b23d4a3197ec96d1b1de67758e8bfe7318d6e3f9cd6158495ab745181922b994b14bccfb06c153ba3120e422cfcf63616a750a8ced272c629ce518e1ad144f598bf889e7402155d5ba78e0574e42ed77ed6d44e5cb7882ef5f29c00"/242], &(0x7f0000000a80)={0x0, 0x0, 0x20b, 0x0}) 1.105981195s ago: executing program 6 (id=2951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eb", 0x2}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0x1, 0x1000d6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x109801, 0x0) write$dsp(r6, &(0x7f0000002000)='`', 0x88020) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r7 = socket(0x11, 0x5, 0x0) setsockopt(r7, 0x107, 0x1, &(0x7f00000001c0)="0100000000000600", 0x8) close(r7) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xc, 0x2, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) 649.2179ms ago: executing program 5 (id=2952): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000190"], 0xfdef) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xfca12000) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000f3"]) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)}, 0x4000080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xd9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) dup(r8) 231.20992ms ago: executing program 5 (id=2953): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x5, 0x0, 0x0, r3}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b6395b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000001700)=[{&(0x7f0000001740)="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", 0x162}, {&(0x7f0000000500)="869369c851aa6392f2e0553aef4db58bd625f858d7de1b7e4b65659ca0feffb456345fd53eeac79bfd36491e1136d13a7bc99f9ad0473b695186bb971691f2d2f5cec8297ea205e8c679fdab80079ad753611a669b71ed1ee80d64801d3f33c2e57c956e000214f91aedb12a56235dd82b213c44cd392fe58bede50df8be199489f6efc4661a", 0x86}, {&(0x7f0000004040)="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", 0xe36}], 0x3) 0s ago: executing program 3 (id=2954): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f000000c580)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000000c0)="75d6e4666ac1a0652ae4b4c25305fba606bad0b67568223b119fc67a225f90cd01eb4273453674c33b70732202ce651625961a6d038ff350ec4ef393b86f", 0x3e}, {&(0x7f0000000540)="0f9c3d01d83647bbf8bf9f83a658826acc0eca3f60029ce660adfe9d8b28b1295a40375f72a75b6aae5d93f2090e81199f835dea9ed1b9e305c94ffcb7d764c73d79e7099bb39dd843ac90644e4e983cca80f523a5f4f02d5e8396b505c213345c5f5678cdcc95bf28f56dd04b20884ddbba6e7c1ab2a1d517c6236e0bb6576739b79643096f1494a72a1428e3c941cb622333112f19ca8aadf50470ae1bc98d5f81af24c32641b8ffa335167190749d17c0e621c6cf130eabd9914135395488b713aeb1500b45981e1688a1bbc515a0857a16f4ceb33f1a09724aff098d1a3f70cd", 0xe2}, {&(0x7f0000000640)="4a622145b803af6e898d559f91fdde8e2a6ddc16b4ebcd6fd7dcc4a4a32171eb7d1be4d8f9b99b50abd191e635913ebc98f6d4aa56fe61c50bb62367de0a16a4f71538797daec1f0c3ba6c475826240d11795d9a244c5bb0ddc10981a2ff0e01ddb19532dbed4ddb9ff69dc811e53a461694eefcf8ca2a1e52dc8971f690f6c01c8165d0d8f4defe83ef681087", 0x8d}, {&(0x7f0000000700)="6a66c611c086fd46109fe9a49b5ff17b16b5739dbc2e809bb6ebb8ce5f2dd0edeb8822e65e85bd2bb9c7532fca83452c247bf3511774abf504797d2caacfedf25a2694d12a841722186853f9549217d0254cf42734c5d614f6cdae839b3013ffa2cb70035525d7df744ae9d197da5cdf6ef3746edf77c27a0e65e2409e1f82aec0c32e2b0a99baca2a71b7fd93a516a3c919fc7b5f129cda47dac7f47d1091ff7a02dbb99524d8878e21a8754da053de21c2db896ca9045c6b1171f41d547238e009b5fef49f0d51bdc4a6afbb9e5c99d04ce9d1bd271ac1c70357", 0xdb}, {&(0x7f0000000a40)="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", 0x1000}], 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="ffe87336a1d05622beb339ae4c79134b93af2c3218a1dabcc0ff807036aae09c97e3187a03fecc7d1afc7c2f", @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c010000fffffffffffffffd0200000064953a59ee9c4331ba00749f8e5d534b734c27114a366e2937d83496c62fe8", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xb0, 0x4}}, {{&(0x7f00000062c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000006680), 0x0, &(0x7f0000006840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r0, 0xffffffffffffffff]}}], 0x60, 0xaa47de67119743fb}}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f00000068c0)="0f0cb00f57dcf13eca027f74022d12198627a195a3a034bbd8876759d3f0ed8b564e977303429e6668aadba36c67ee66826404795af2acddc7b9712dfcbceabbda4604167758657f2edb626bdc4f147277a56619c94043", 0x57}, {&(0x7f0000006940)}, {&(0x7f0000006980)="2776b7e3dbd6adf90ad3592eb163b542c8c934818aeb8779b19450e0c0aa4c34de57a1dc43f2e2d7dedb27249ed0306afecc33ebf2e107ffd094ddc6dab71af42403fc1d464a630cdc3d2a4b74a69f3be2653d1d7f80c0b4305c685984da21dc45", 0x61}], 0x3, &(0x7f0000006a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0, 0x20000041}}, {{&(0x7f0000006b40)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000006e80)=[{&(0x7f0000006bc0)="d09be60b1b1a67d961bbe9bd37d430a9e3bb1f98015d4d4423465e612d0d44b0b6257f7708d00af08b2d8dc2eb3a178da640214447240abbc45967e98f54357ebfbc2d15745c1312983797afdd872aeeb69c5ade838213b03ca8a0", 0x5b}, {&(0x7f0000006c40)="ae37ff3dd9e5a65faf4a3d25945cc2bfa308005d851a92676d6d80f3723d0089e4f19294f35da75788216ad328d31156363825e953474a08743724a01fea00ce9073024372c9416cff1358fb328e0d339223cce82f2e2f9b1ddfc2a3cf13385a3cc3fbadd29a0c2c4e6b58e77f29f8c923bb41e6e1760fc8216ec586b63a5f1da3cbe1", 0x83}, {&(0x7f0000006d00)="942d10dcbb209a0d06e4d80b6473efa652ece0098cab36eef73bd9b718f55c8a174d9e6341f913f7a63a35de4cffec31", 0x30}, {&(0x7f0000006d40)="58394b40047ecc7b55077e4b19b71e237ebda02273b10552ccbd6a4409c1b49fc3a61ab9e138451fdf0475367754d16b09160fd0155afecbaecaec797e3b0f0b6d8056c8a88bcd9d9538375b1b39", 0x4e}, {&(0x7f0000000900)="647499cfe32aaa563bbfc0d5c0553752906f019ffd80e174a6bf305a2252523388d13ab4268815d9c2a95b7bd6e3abb46ded64e024561c809387d4d5b3fa2407458144cdbf409b0faab0566153cae80c68c27909f87e8b392e5c6f2e8720e2419b84c7fcc4559f4a72bcea0dc32c99413badb57c35b6d44b1f32a8237a9059041201a248f2442e69b201bedfe5d1a8b2462f5eeebb76944b7a9a330411cb62a36e241aba90e961af", 0xa8}], 0x5, &(0x7f0000007080)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8, 0x8040}}, {{&(0x7f0000008280)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f000000c280)=[{&(0x7f0000008300)="e9b84444d19a935d64391ae142db3d86b72a92473b299b3e9ea6799b54b149cf87a8ff092df85a98423128eaa6c192", 0x2f}, {&(0x7f0000008340)="5154600c90804e708c9db612dbd95550c88121b923164146b123fee323400dc86e8529f7da2d81907dfcda2d3067feb1c93fca9e40644321e857d15f59b8d8166f", 0x41}], 0x2, &(0x7f000000c440)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x128, 0x10}}], 0x5, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)={0x2, 0x5, 0x0, 0x5, 0xc, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x0, 0x0, {0x6, 0x3cae3734fd0dd38e, 0xd0, 0x8, 0x0, 0x7fff, 0x0, @in=@multicast2, @in=@empty}}]}, 0x60}}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) ioctl$TIOCMGET(r3, 0x541e, &(0x7f0000000040)) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100003}) r6 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$inet(0x2, 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r8}}, 0x10) rt_sigqueueinfo(0x0, 0xe, &(0x7f00000004c0)={0x22, 0x6, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) fsopen(&(0x7f0000000000)='autofs\x00', 0x0) socket$alg(0x2d, 0x5, 0x0) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) kernel console output (not intermixed with test programs): o=50421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 836.454748][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 836.492174][ T30] audit: type=1400 audit(1754155974.002:3038): avc: denied { read } for pid=22580 comm="syz.0.2444" path="socket:[50421]" dev="sockfs" ino=50421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 836.600439][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 836.663800][ T24] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 836.789531][ T24] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 836.842957][ T24] usb 4-1: config 0 has no interface number 0 [ 836.881456][ T24] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 836.992523][ T24] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 837.015467][ T24] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 837.070774][ T24] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 837.098329][ T24] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 837.106510][ T24] usb 4-1: Product: syz [ 837.116297][ T24] usb 4-1: config 0 descriptor?? [ 837.125300][T22575] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 837.295055][T22594] syz.0.2448: attempt to access beyond end of device [ 837.295055][T22594] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 837.391346][T22594] FAT-fs (loop1): unable to read boot sector [ 837.624778][T22594] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2448'. [ 837.793844][T22605] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[22605] [ 837.817529][T22605] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2447'. [ 838.281116][ T5922] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 838.558563][T22616] i2c i2c-0: Invalid block write size 153 [ 838.710229][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 838.917924][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 838.941861][ T5922] usb 3-1: no configurations [ 839.103370][ T5922] usb 3-1: can't read configurations, error -22 [ 839.110005][T22625] hfs: unable to load iocharset "io#harset" [ 839.250285][ T5922] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 839.400475][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 839.413236][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 839.431766][ T5922] usb 3-1: no configurations [ 839.443234][ T5922] usb 3-1: can't read configurations, error -22 [ 839.452011][ T5922] usb usb3-port1: attempt power cycle [ 839.595956][ T30] audit: type=1400 audit(1754155977.162:3039): avc: denied { listen } for pid=22633 comm="syz.5.2453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 839.784909][ T30] audit: type=1400 audit(1754155977.162:3040): avc: denied { ioctl } for pid=22633 comm="syz.5.2453" path="socket:[50125]" dev="sockfs" ino=50125 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 839.826678][ T5922] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 840.377662][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 840.396516][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 840.402122][ T24] usb 4-1: USB disconnect, device number 65 [ 840.416983][ T5922] usb 3-1: no configurations [ 840.422509][ T5922] usb 3-1: can't read configurations, error -22 [ 840.590296][ T5922] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 840.636282][T22651] FAULT_INJECTION: forcing a failure. [ 840.636282][T22651] name failslab, interval 1, probability 0, space 0, times 0 [ 840.649285][T22651] CPU: 0 UID: 0 PID: 22651 Comm: syz.5.2456 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 840.649310][T22651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 840.649321][T22651] Call Trace: [ 840.649326][T22651] [ 840.649337][T22651] dump_stack_lvl+0x16c/0x1f0 [ 840.649368][T22651] should_fail_ex+0x512/0x640 [ 840.649394][T22651] ? fs_reclaim_acquire+0xae/0x150 [ 840.649417][T22651] ? tomoyo_encode2+0x100/0x3e0 [ 840.649455][T22651] should_failslab+0xc2/0x120 [ 840.649477][T22651] __kmalloc_noprof+0xd2/0x510 [ 840.649494][T22651] ? d_absolute_path+0x136/0x1a0 [ 840.649523][T22651] tomoyo_encode2+0x100/0x3e0 [ 840.649547][T22651] tomoyo_encode+0x29/0x50 [ 840.649566][T22651] tomoyo_realpath_from_path+0x18f/0x6e0 [ 840.649594][T22651] tomoyo_path_number_perm+0x245/0x580 [ 840.649612][T22651] ? tomoyo_path_number_perm+0x237/0x580 [ 840.649633][T22651] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 840.649679][T22651] ? find_held_lock+0x2b/0x80 [ 840.649701][T22651] ? hook_file_ioctl_common+0x145/0x410 [ 840.649732][T22651] ? __fget_files+0x20e/0x3c0 [ 840.649756][T22651] security_file_ioctl+0x9b/0x240 [ 840.649779][T22651] __x64_sys_ioctl+0xb7/0x210 [ 840.649807][T22651] do_syscall_64+0xcd/0x4c0 [ 840.649834][T22651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.649852][T22651] RIP: 0033:0x7f01c138eb69 [ 840.649867][T22651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.649884][T22651] RSP: 002b:00007f01c21d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 840.649901][T22651] RAX: ffffffffffffffda RBX: 00007f01c15b5fa0 RCX: 00007f01c138eb69 [ 840.649912][T22651] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 840.649924][T22651] RBP: 00007f01c21d8090 R08: 0000000000000000 R09: 0000000000000000 [ 840.649934][T22651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.649945][T22651] R13: 0000000000000000 R14: 00007f01c15b5fa0 R15: 00007ffe7209f1c8 [ 840.649970][T22651] [ 840.853562][T22651] ERROR: Out of memory at tomoyo_realpath_from_path. [ 840.930758][ T5922] usb 3-1: device descriptor read/8, error -71 [ 841.041088][ T5922] usb usb3-port1: unable to enumerate USB device [ 841.271536][T22665] netlink: 'syz.3.2457': attribute type 21 has an invalid length. [ 841.279585][T22665] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2457'. [ 841.289517][T22665] netlink: 'syz.3.2457': attribute type 5 has an invalid length. [ 841.297308][T22665] netlink: 'syz.3.2457': attribute type 6 has an invalid length. [ 841.305069][T22665] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2457'. [ 844.283580][ T30] audit: type=1400 audit(1754155981.832:3041): avc: denied { getattr } for pid=22686 comm="syz.6.2463" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 844.304420][T22694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 844.337630][ T30] audit: type=1400 audit(1754155981.842:3042): avc: denied { watch } for pid=22691 comm="syz.3.2465" path="/497" dev="tmpfs" ino=2727 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 844.718342][T22708] QAT: Device 11 not found [ 845.290403][ T5922] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 845.552089][T22722] hfs: unable to load iocharset "io#harset" [ 845.603802][ T5922] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 845.622845][T22717] netlink: 'syz.3.2471': attribute type 10 has an invalid length. [ 845.630995][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.661199][ T5922] usb 1-1: Product: syz [ 845.673630][T22732] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 845.677626][ T5922] usb 1-1: Manufacturer: syz [ 845.690424][ T5922] usb 1-1: SerialNumber: syz [ 845.693880][T22717] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.715655][T22717] bond0: (slave team0): Enslaving as an active interface with an up link [ 845.725901][ T5922] usb 1-1: config 0 descriptor?? [ 845.760885][ T5922] pwc: Philips PCA645VC USB webcam detected. [ 845.810263][ T30] audit: type=1400 audit(1754155983.372:3043): avc: denied { read } for pid=22733 comm="syz.6.2472" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 845.854678][ T30] audit: type=1400 audit(1754155983.372:3044): avc: denied { open } for pid=22733 comm="syz.6.2472" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 845.975466][ T30] audit: type=1400 audit(1754155983.372:3045): avc: denied { ioctl } for pid=22733 comm="syz.6.2472" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 845.981683][T22745] binder: BINDER_SET_CONTEXT_MGR already set [ 846.019844][T22745] binder: 22744:22745 ioctl 4018620d 2000000000c0 returned -16 [ 846.420218][T14754] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 846.442273][T22749] binder: BINDER_SET_CONTEXT_MGR already set [ 846.448426][T22749] binder: 22744:22749 ioctl 4018620d 2000000002c0 returned -16 [ 846.571074][T14754] usb 4-1: Using ep0 maxpacket: 8 [ 846.578561][T14754] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 846.593470][T14754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.616675][T22751] dummy0: entered promiscuous mode [ 846.625096][T22751] bond0: entered promiscuous mode [ 846.635355][T22751] bond_slave_0: entered promiscuous mode [ 846.641296][T14754] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 846.652375][T22751] bond_slave_1: entered promiscuous mode [ 846.658122][T14754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 846.670847][T22751] hsr1: entered allmulticast mode [ 846.676388][T22751] dummy0: entered allmulticast mode [ 846.681972][T22751] bond0: entered allmulticast mode [ 846.687377][T22751] bond_slave_0: entered allmulticast mode [ 846.693383][T22751] bond_slave_1: entered allmulticast mode [ 846.734552][T14754] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.753299][T14754] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 846.762976][T14754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.865902][T14754] usb 4-1: config 0 descriptor?? [ 847.066935][T14754] hso 4-1:0.0: Can't find BULK IN endpoint [ 847.078559][T22758] binder: 22752:22758 ioctl c0306201 200000000240 returned -11 [ 847.428203][T22774] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2478'. [ 847.438812][T22774] tipc: Invalid UDP bearer configuration [ 847.438842][T22774] tipc: Enabling of bearer rejected, failed to enable media [ 847.457517][ T30] audit: type=1400 audit(1754155985.022:3046): avc: denied { read write } for pid=22769 comm="syz.5.2478" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 847.480155][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.513733][ T5922] pwc: send_video_command error -71 [ 847.583955][ T5922] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 847.595980][ T5922] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 847.674474][ T30] audit: type=1400 audit(1754155985.022:3047): avc: denied { open } for pid=22769 comm="syz.5.2478" path="/412/file0/file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 847.697535][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.715172][ T5922] usb 1-1: USB disconnect, device number 81 [ 847.848127][T22785] Bluetooth: MGMT ver 1.23 [ 847.854241][ T30] audit: type=1400 audit(1754155985.412:3048): avc: denied { write } for pid=22781 comm="syz.6.2480" path="socket:[51514]" dev="sockfs" ino=51514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 848.440195][ T5922] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 849.710438][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 849.736549][ T5922] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 849.747708][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 849.777924][ T5922] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 849.788484][ T5922] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 849.867357][ T5922] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 849.878181][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.968483][ T5959] usb 4-1: USB disconnect, device number 66 [ 850.184364][T22836] netlink: 'syz.6.2484': attribute type 1 has an invalid length. [ 850.220593][ T5922] usb 1-1: GET_CAPABILITIES returned 0 [ 850.236984][ T5922] usbtmc 1-1:16.0: can't read capabilities [ 850.284650][T22836] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.450019][T22837] vlan0: entered allmulticast mode [ 850.496635][ T24] usb 1-1: USB disconnect, device number 82 [ 850.618868][T22837] veth1: entered allmulticast mode [ 850.953111][T22837] bond1: (slave vlan0): making interface the new active one [ 851.194001][T22837] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 851.374962][T22891] overlayfs: conflicting lowerdir path [ 851.758718][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2486'. [ 852.515572][ T30] audit: type=1400 audit(1754155989.712:3049): avc: denied { setopt } for pid=22892 comm="syz.0.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 852.630967][T22900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'. [ 852.824676][T22900] syzkaller1: entered promiscuous mode [ 852.960459][T22900] syzkaller1: entered allmulticast mode [ 853.054634][T22916] QAT: Device 11 not found [ 853.310323][T14754] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 853.653326][T14754] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 853.664952][T14754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.759171][T14754] usb 4-1: Product: syz [ 853.774628][T14754] usb 4-1: Manufacturer: syz [ 853.779564][T14754] usb 4-1: SerialNumber: syz [ 853.837117][T14754] usb 4-1: config 0 descriptor?? [ 853.969293][T14754] pwc: Philips PCA645VC USB webcam detected. [ 854.343429][ T5922] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 854.737712][ T5922] usb 6-1: Using ep0 maxpacket: 32 [ 854.756084][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.776942][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.808089][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 854.859203][ T5922] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 854.909043][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.132026][ T5922] usb 6-1: config 0 descriptor?? [ 855.403450][T22940] hfs: unable to load iocharset "io#harset" [ 855.916538][T22954] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 855.930677][T22954] Error validating options; rc = [-22] [ 856.130665][T14754] pwc: send_video_command error -71 [ 856.135901][T14754] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 856.147161][T22928] 9pnet_fd: Insufficient options for proto=fd [ 856.149165][ T5922] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.001D/input/input69 [ 856.160743][ T30] audit: type=1400 audit(1754155993.712:3050): avc: denied { read write } for pid=22927 comm="syz.5.2492" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 856.189954][T14754] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 856.242975][T14754] usb 4-1: USB disconnect, device number 67 [ 856.248995][ T30] audit: type=1400 audit(1754155993.712:3051): avc: denied { open } for pid=22927 comm="syz.5.2492" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 856.290416][ T5922] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.001D/input/input70 [ 856.362892][ T5922] kye 0003:0458:5011.001D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 856.454261][ T5922] usb 6-1: USB disconnect, device number 48 [ 856.491652][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.505592][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.513533][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.524590][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.534368][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.543506][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.560276][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.576643][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.587525][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.598609][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: unknown main item tag 0x0 [ 856.830500][ T5894] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 856.950554][ T5959] hid-generic 0000:007F:FFFFFFFE.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 856.989740][T23021] hfs: unable to load iocharset "io#harset" [ 857.083757][ T5894] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 857.093108][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.101219][ T5894] usb 7-1: Product: syz [ 857.105415][ T5894] usb 7-1: Manufacturer: syz [ 857.110044][ T5894] usb 7-1: SerialNumber: syz [ 857.118075][ T5894] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 857.135943][ T24] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 857.260303][ T5959] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 857.501728][ T5959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.519237][ T5959] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 857.528668][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.540600][ T5959] usb 1-1: config 0 descriptor?? [ 857.548699][ T5959] pwc: Askey VC010 type 2 USB webcam detected. [ 857.989139][ T5959] pwc: recv_control_msg error -32 req 02 val 2b00 [ 858.036355][T23054] QAT: Device 11 not found [ 858.280873][T22357] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 858.420430][ T5959] pwc: recv_control_msg error -32 req 04 val 1000 [ 858.448340][ T5959] pwc: recv_control_msg error -32 req 04 val 1300 [ 858.485491][T22357] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 858.501151][ T5959] pwc: recv_control_msg error -32 req 04 val 1400 [ 858.528216][T22357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.566904][ T5959] pwc: recv_control_msg error -32 req 02 val 2000 [ 858.570344][ T24] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 858.596881][ T5894] usb 7-1: USB disconnect, device number 15 [ 858.611597][ T24] ath9k_htc: Failed to initialize the device [ 858.619552][ T5894] usb 7-1: ath9k_htc: USB layer deinitialized [ 858.623135][ T5959] pwc: recv_control_msg error -32 req 02 val 2100 [ 858.642520][T22357] usb 3-1: Product: syz [ 858.757074][T22357] usb 3-1: Manufacturer: syz [ 858.913499][T22357] usb 3-1: SerialNumber: syz [ 858.940627][ T5959] pwc: recv_control_msg error -32 req 04 val 1500 [ 859.000655][T22357] usb 3-1: config 0 descriptor?? [ 859.010556][ T5959] pwc: recv_control_msg error -32 req 02 val 2500 [ 859.038523][T22357] pwc: Philips PCA645VC USB webcam detected. [ 859.049005][ T5959] pwc: recv_control_msg error -32 req 02 val 2400 [ 859.057119][ T5959] pwc: recv_control_msg error -32 req 02 val 2600 [ 859.077226][ T5959] pwc: recv_control_msg error -32 req 02 val 2900 [ 859.099474][ T5959] pwc: recv_control_msg error -32 req 02 val 2800 [ 859.108511][ T5959] pwc: recv_control_msg error -32 req 04 val 1100 [ 859.162130][ T5959] pwc: recv_control_msg error -32 req 04 val 1200 [ 859.249879][T23079] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 859.263563][T23079] Error validating options; rc = [-22] [ 859.277790][ T5959] pwc: Registered as video103. [ 859.483344][ T5959] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input71 [ 860.249020][ T24] usb 1-1: USB disconnect, device number 83 [ 860.580615][T22357] pwc: send_video_command error -71 [ 860.585849][T22357] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 860.607625][T22357] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 860.730755][T23204] overlayfs: conflicting lowerdir path [ 860.800414][T23216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2517'. [ 860.968468][T22357] usb 3-1: USB disconnect, device number 59 [ 861.639193][T23267] ./file0: Can't lookup blockdev [ 862.951957][T22357] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 863.502127][T22357] usb 3-1: Using ep0 maxpacket: 8 [ 863.549806][T22357] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 863.559044][T22357] usb 3-1: config 1 has no interface number 0 [ 863.565280][T22357] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.576244][T22357] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 863.587254][T22357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 863.596626][T22357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.625098][T22357] usb 3-1: Product: syz [ 863.643632][T22357] usb 3-1: Manufacturer: syz [ 863.663917][T22357] usb 3-1: SerialNumber: syz [ 863.702542][T23292] hfs: unable to load iocharset "io#harset" [ 864.021090][ T5882] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 864.230364][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 864.244637][T23318] overlayfs: conflicting lowerdir path [ 864.262793][ T5882] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 864.445667][T23320] overlayfs: conflicting lowerdir path [ 864.524652][T22357] cdc_ncm 3-1:1.1: bind() failure [ 864.533009][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.533113][T23319] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2528'. [ 864.543537][ T5882] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 864.564139][T23316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2534'. [ 864.611849][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 864.704773][ T5882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.902184][T23328] dummy0: entered promiscuous mode [ 864.909163][T23328] debugfs: 'hsr1' already exists in 'hsr' [ 864.929940][T23328] Cannot create hsr debugfs directory [ 864.961975][T23328] hsr1: entered allmulticast mode [ 864.973348][T23328] dummy0: entered allmulticast mode [ 864.978681][T23328] bond0: entered allmulticast mode [ 864.985802][T23328] bond_slave_0: entered allmulticast mode [ 864.991831][T23328] bond_slave_1: entered allmulticast mode [ 864.999086][T23328] batadv0: entered allmulticast mode [ 865.033796][T23315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2531'. [ 865.043196][ T5882] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 865.052459][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.063298][ T5882] usb 4-1: config 0 descriptor?? [ 865.086958][ T5882] hso 4-1:0.0: Can't find BULK IN endpoint [ 866.578023][T23337] netlink: 'syz.5.2536': attribute type 11 has an invalid length. [ 866.586082][T23337] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2536'. [ 866.619932][T22357] usb 3-1: USB disconnect, device number 60 [ 867.213132][T22357] usb 4-1: USB disconnect, device number 68 [ 867.587380][T23387] hfs: unable to load iocharset "io#harset" [ 867.701659][ T30] audit: type=1400 audit(1754156005.262:3052): avc: denied { call } for pid=23391 comm="syz.5.2544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 868.185386][T23415] QAT: Device 11 not found [ 868.894582][ T30] audit: type=1400 audit(1754156006.392:3053): avc: denied { setopt } for pid=23412 comm="syz.3.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 869.205669][ T30] audit: type=1400 audit(1754156006.392:3054): avc: denied { write } for pid=23412 comm="syz.3.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 869.278243][ T30] audit: type=1400 audit(1754156006.822:3055): avc: denied { read } for pid=23412 comm="syz.3.2549" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 869.580193][T23425] overlayfs: conflicting lowerdir path [ 869.605448][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2553'. [ 869.698364][ T30] audit: type=1400 audit(1754156006.832:3056): avc: denied { open } for pid=23412 comm="syz.3.2549" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 869.725766][ T30] audit: type=1400 audit(1754156007.162:3057): avc: denied { ioctl } for pid=23412 comm="syz.3.2549" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 869.726274][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.121562][ T30] audit: type=1400 audit(1754156007.602:3058): avc: denied { bind } for pid=23436 comm="syz.2.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 870.205308][T23424] lo speed is unknown, defaulting to 1000 [ 870.223035][T23424] lo speed is unknown, defaulting to 1000 [ 870.244974][T23424] lo speed is unknown, defaulting to 1000 [ 871.634191][T23489] hfs: unable to load iocharset "io#harset" [ 871.738105][T23502] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 871.810420][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 871.975237][T23507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.752119][T23520] overlayfs: conflicting lowerdir path [ 872.860517][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'. [ 873.707617][T23531] overlayfs: conflicting lowerdir path [ 874.038603][ T30] audit: type=1400 audit(1754156011.582:3059): avc: denied { read } for pid=23522 comm="syz.5.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 874.530700][ T5847] Bluetooth: hci6: command 0x1003 tx timeout [ 874.549381][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 874.880850][T23550] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[23550] [ 874.925620][T23550] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2573'. [ 875.014839][T23551] binder: BINDER_SET_CONTEXT_MGR already set [ 875.050255][T23551] binder: 23549:23551 ioctl 4018620d 2000000002c0 returned -16 [ 875.769198][ T5959] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 876.610224][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 876.628894][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 876.930847][ T5959] usb 3-1: no configurations [ 877.091694][ T5959] usb 3-1: can't read configurations, error -22 [ 877.230418][ T5959] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 877.339057][ T30] audit: type=1400 audit(1754156014.902:3060): avc: denied { map } for pid=23581 comm="syz.5.2581" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 877.630619][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 877.657233][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 877.682286][ T5959] usb 3-1: no configurations [ 877.695696][ T5959] usb 3-1: can't read configurations, error -22 [ 877.708897][ T5959] usb usb3-port1: attempt power cycle [ 877.820217][T14754] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 878.042316][T14754] usb 4-1: Using ep0 maxpacket: 8 [ 878.136119][T23605] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2560 sclass=netlink_xfrm_socket pid=23605 comm=syz.2.2585 [ 878.137483][T14754] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 878.158344][T14754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.168582][T14754] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 878.318716][T14754] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 878.456967][T14754] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.470244][T14754] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 878.479906][T14754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.504605][T14754] usb 4-1: config 0 descriptor?? [ 878.528561][T14754] hso 4-1:0.0: Can't find BULK IN endpoint [ 878.836523][ T30] audit: type=1400 audit(1754156016.392:3061): avc: denied { watch } for pid=23624 comm="syz.0.2589" path="/529/file0" dev="tmpfs" ino=3087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 878.836549][T23626] sctp: [Deprecated]: syz.0.2589 (pid 23626) Use of int in max_burst socket option deprecated. [ 878.836549][T23626] Use struct sctp_assoc_value instead [ 880.747421][ T30] audit: type=1400 audit(1754156016.932:3062): avc: denied { watch_reads } for pid=23624 comm="syz.0.2589" path="/529" dev="tmpfs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 880.769965][ C0] vkms_vblank_simulate: vblank timer overrun [ 881.064956][T14754] usb 4-1: USB disconnect, device number 69 [ 881.369760][T23657] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 881.426732][T23659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2595'. [ 881.436415][T23659] netlink: 'syz.5.2595': attribute type 7 has an invalid length. [ 881.447630][T23659] netlink: 'syz.5.2595': attribute type 8 has an invalid length. [ 881.455617][T23659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2595'. [ 881.668526][T23665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.180818][T23668] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[23668] [ 882.350282][T23668] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2596'. [ 883.002005][ T5959] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 883.060491][ T5922] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 883.203179][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 883.217544][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 883.228527][ T5922] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 883.238061][ T5959] usb 3-1: no configurations [ 883.243129][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.251912][ T5959] usb 3-1: can't read configurations, error -22 [ 883.326456][T23693] netlink: 492 bytes leftover after parsing attributes in process `syz.6.2600'. [ 883.654065][ T5922] usb 4-1: Product: syz [ 883.658261][ T5922] usb 4-1: Manufacturer: syz [ 883.663548][ T5922] usb 4-1: SerialNumber: syz [ 883.676804][ T5922] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 883.692477][T14754] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 883.719393][T23697] syzkaller0: entered promiscuous mode [ 883.725577][T23697] syzkaller0: entered allmulticast mode [ 883.870026][T23705] overlayfs: conflicting lowerdir path [ 883.960239][ T5959] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 884.350248][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 884.363762][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 884.372849][ T5959] usb 3-1: no configurations [ 884.377551][ T5959] usb 3-1: can't read configurations, error -22 [ 884.385202][ T5959] usb usb3-port1: attempt power cycle [ 884.436461][ T30] audit: type=1400 audit(1754156022.002:3063): avc: denied { getopt } for pid=23670 comm="syz.3.2597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 884.458682][ T5894] usb 4-1: USB disconnect, device number 70 [ 884.764239][T14754] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 884.771720][T14754] ath9k_htc: Failed to initialize the device [ 884.782034][ T5894] usb 4-1: ath9k_htc: USB layer deinitialized [ 884.802316][ T5959] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 884.841703][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 884.858438][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 884.877129][ T5959] usb 3-1: no configurations [ 884.881983][ T5959] usb 3-1: can't read configurations, error -22 [ 885.025556][ T5959] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 885.054465][ T5959] usb 3-1: Using ep0 maxpacket: 16 [ 885.062367][ T5959] usb 3-1: unable to get BOS descriptor or descriptor too short [ 885.090380][ T5959] usb 3-1: no configurations [ 885.096628][ T5959] usb 3-1: can't read configurations, error -22 [ 885.119167][ T5959] usb usb3-port1: unable to enumerate USB device [ 885.464262][T23730] input: syz0 as /devices/virtual/input/input72 [ 885.510352][ T30] audit: type=1400 audit(1754156023.072:3064): avc: denied { mount } for pid=23729 comm="syz.2.2608" name="/" dev="rpc_pipefs" ino=53190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 885.611630][ T30] audit: type=1400 audit(1754156023.122:3065): avc: denied { unmount } for pid=5859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 885.706784][ T30] audit: type=1400 audit(1754156023.182:3066): avc: denied { create } for pid=23744 comm="syz.2.2609" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 885.930623][T23749] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 885.944256][T23749] Error validating options; rc = [-22] [ 887.083780][T23761] kAFS: No cell specified [ 888.584930][ T30] audit: type=1400 audit(1754156026.152:3067): avc: denied { create } for pid=23776 comm="syz.2.2618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 888.893620][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2604'. [ 888.910456][T23710] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2604'. [ 889.093974][T23788] overlayfs: conflicting lowerdir path [ 889.234511][ T30] audit: type=1400 audit(1754156026.792:3068): avc: denied { ioctl } for pid=23776 comm="syz.2.2618" path="socket:[53757]" dev="sockfs" ino=53757 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 889.648210][ T30] audit: type=1400 audit(1754156026.842:3069): avc: denied { write } for pid=23790 comm="syz.6.2620" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 889.840219][T14754] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 890.003613][T14754] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 890.020992][T14754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.029578][T14754] usb 1-1: Product: syz [ 890.036588][T14754] usb 1-1: Manufacturer: syz [ 890.046625][T14754] usb 1-1: SerialNumber: syz [ 890.304084][T14754] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 890.398796][ T5922] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 890.840342][T22357] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 890.864563][ T5882] usb 1-1: USB disconnect, device number 84 [ 891.496061][ T5922] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 891.612113][ T5922] ath9k_htc: Failed to initialize the device [ 891.622393][T22357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.680776][ T5882] usb 1-1: ath9k_htc: USB layer deinitialized [ 891.687395][T22357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.705557][T22357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.757383][ T975] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 891.760893][T22357] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 892.195605][T22357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.225308][T22357] usb 6-1: config 0 descriptor?? [ 892.242553][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 892.249765][ T975] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 892.258970][ T975] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.269350][ T975] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.286397][ T975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 892.296236][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.321831][ T975] usb 4-1: Product: syz [ 892.326043][ T975] usb 4-1: Manufacturer: syz [ 892.331745][ T975] usb 4-1: SerialNumber: syz [ 892.420263][ T5894] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 892.459490][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.475530][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.486684][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.495966][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.558865][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.579468][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.601738][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.620856][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.640948][T23825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.660924][T23825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.700535][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 892.707416][ T5894] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 892.716544][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.747238][ T975] usb 4-1: 0:2 : does not exist [ 892.764708][ T5894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 892.789096][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 892.814522][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 892.843944][ T5894] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 892.862336][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.896181][ T5894] usb 3-1: config 0 descriptor?? [ 892.908982][T22357] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 892.939210][ T5894] hso 3-1:0.0: Can't find BULK IN endpoint [ 893.352471][ T5894] usb 6-1: USB disconnect, device number 49 [ 894.810319][ T975] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 895.054350][ T975] usb 4-1: USB disconnect, device number 71 [ 895.311315][ T30] audit: type=1400 audit(1754156032.882:3070): avc: denied { append } for pid=23933 comm="syz.0.2636" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 895.382525][ T30] audit: type=1400 audit(1754156032.882:3071): avc: denied { open } for pid=23933 comm="syz.0.2636" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 895.442442][T22357] usb 3-1: USB disconnect, device number 68 [ 896.354555][T23959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'. [ 896.362730][T23958] netlink: 'syz.2.2639': attribute type 11 has an invalid length. [ 896.422243][T23959] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'. [ 896.630879][ T5922] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 896.790351][T22357] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 896.804890][ T5922] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 896.830606][T14754] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 896.838353][ T5922] usb 3-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 896.865547][ T5922] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 896.933695][ T5922] usb 3-1: config 1 has no interface number 1 [ 896.955799][ T5922] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 896.983347][ T5922] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.000917][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.005105][T23982] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2642'. [ 897.009182][ T5922] usb 3-1: Product: syz [ 897.022864][T14754] usb 4-1: Using ep0 maxpacket: 16 [ 897.032942][T22357] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 897.044595][T14754] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 897.060173][T22357] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.068170][T22357] usb 1-1: Product: syz [ 897.072470][T14754] usb 4-1: config 0 has no interface number 0 [ 897.078583][T14754] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.090042][ T5922] usb 3-1: Manufacturer: syz [ 897.100242][ T5922] usb 3-1: SerialNumber: syz [ 897.115281][T22357] usb 1-1: Manufacturer: syz [ 897.156008][T22357] usb 1-1: SerialNumber: syz [ 897.170464][T14754] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.310515][T22357] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 897.360314][T14754] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 897.505533][T14754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.519390][ T5915] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 897.535571][T14754] usb 4-1: config 0 descriptor?? [ 897.854792][T23997] tmpfs: Unknown parameter 'quot' [ 897.869210][T23997] syz.6.2647: attempt to access beyond end of device [ 897.869210][T23997] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 897.882713][T23997] SQUASHFS error: Failed to read block 0x0: -5 [ 897.888994][T23997] unable to read squashfs_super_block [ 897.942722][T23998] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2647'. [ 897.959901][ T30] audit: type=1400 audit(1754156035.502:3072): avc: denied { write } for pid=23992 comm="syz.6.2647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 897.996897][ T975] usb 1-1: USB disconnect, device number 85 [ 898.290197][T23974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2644'. [ 898.290320][T14754] uclogic 0003:28BD:0071.0020: pen parameters not found [ 898.313282][T14754] uclogic 0003:28BD:0071.0020: interface is invalid, ignoring [ 898.373530][T14754] usb 4-1: USB disconnect, device number 72 [ 898.748124][ T5915] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 898.763811][ T5915] ath9k_htc: Failed to initialize the device [ 898.771306][ T975] usb 1-1: ath9k_htc: USB layer deinitialized [ 899.087627][T24035] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2652'. [ 899.388542][ T5922] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 899.414932][ T5922] usb 3-1: MIDIStreaming interface descriptor not found [ 899.475510][T24041] dummy0: entered promiscuous mode [ 899.505580][T24041] dummy0: left promiscuous mode [ 899.954381][ T5922] usb 3-1: USB disconnect, device number 69 [ 900.619128][ T30] audit: type=1400 audit(1754156038.182:3073): avc: denied { bind } for pid=24085 comm="syz.6.2659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 900.703286][ T30] audit: type=1400 audit(1754156038.182:3074): avc: denied { node_bind } for pid=24085 comm="syz.6.2659" saddr=fc02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 901.230338][ T5922] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 901.310433][ T5915] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 901.633855][ T30] audit: type=1400 audit(1754156039.192:3075): avc: denied { bind } for pid=24090 comm="syz.3.2662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 901.702351][ T5915] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 901.717931][ T5915] usb 3-1: config 0 has no interface number 0 [ 901.724643][ T5915] usb 3-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 901.735427][ T5915] usb 3-1: config 0 interface 235 has no altsetting 0 [ 901.766964][ T5915] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 901.776927][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.788690][ T5922] usb 6-1: Using ep0 maxpacket: 16 [ 901.795346][ T5915] usb 3-1: Product: syz [ 901.801306][ T5922] usb 6-1: config 4 has an invalid interface number: 9 but max is 0 [ 901.810059][ T5922] usb 6-1: config 4 has no interface number 0 [ 901.816493][ T5922] usb 6-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 901.828363][ T5915] usb 3-1: Manufacturer: syz [ 901.834306][ T5915] usb 3-1: SerialNumber: syz [ 901.841162][ T5922] usb 6-1: config 4 interface 9 has no altsetting 0 [ 901.855057][ T5922] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 901.869093][ T5915] usb 3-1: config 0 descriptor?? [ 901.874324][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.886077][ T5922] usb 6-1: Product: syz [ 901.891812][ T5915] keyspan 3-1:0.235: Keyspan 1 port adapter converter detected [ 901.899725][ T5922] usb 6-1: Manufacturer: syz [ 901.909289][ T5915] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 87 [ 901.917781][ T5922] usb 6-1: SerialNumber: syz [ 901.925018][ T5915] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 7 [ 901.937348][T24096] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 901.952867][ T5915] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 81 [ 901.964008][ T5915] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 1 [ 901.972828][ T5922] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 901.986082][ T5915] keyspan 3-1:0.235: found no endpoint descriptor for endpoint 85 [ 901.995516][ T5915] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 902.535600][T24129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.545730][T24129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.570361][ T49] usb 6-1: Failed to submit usb control message: -110 [ 903.590908][ T49] usb 6-1: unable to send the bmi data to the device: -110 [ 903.598725][ T49] usb 6-1: unable to get target info from device [ 903.607286][ T49] usb 6-1: could not get target info (-110) [ 903.617214][ T49] usb 6-1: could not probe fw (-110) [ 903.788675][ T5882] usb 6-1: USB disconnect, device number 50 [ 904.140567][ T5894] usb 3-1: USB disconnect, device number 70 [ 904.164544][ T5894] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 904.175798][ T5894] keyspan 3-1:0.235: device disconnected [ 904.260239][ T5922] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 904.421916][ T5922] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 904.434603][T24174] QAT: Device 11 not found [ 904.437283][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 904.527720][T24181] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 904.541399][T24181] Error validating options; rc = [-22] [ 904.820264][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 904.861544][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 904.876280][ T5922] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 904.889537][ T5922] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 904.906564][ T5922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.915897][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 904.932373][ T5922] usb 1-1: SerialNumber: syz [ 904.970778][T24189] dummy0: entered promiscuous mode [ 904.977452][T24189] bond0: entered promiscuous mode [ 905.092241][ T30] audit: type=1326 audit(1754156042.652:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 905.124688][T24142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 905.130152][T24189] bond_slave_0: entered promiscuous mode [ 905.133645][T24142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 905.145993][ T30] audit: type=1326 audit(1754156042.652:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 905.170288][ T5894] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 905.171033][T24189] bond_slave_1: entered promiscuous mode [ 905.183856][T24142] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 905.192820][ T5922] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 905.206208][ T30] audit: type=1326 audit(1754156042.652:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 905.208427][T24189] bridge0: entered promiscuous mode [ 905.230405][ T30] audit: type=1326 audit(1754156042.652:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 905.343981][T24189] team0: entered promiscuous mode [ 905.349041][T24189] team_slave_0: entered promiscuous mode [ 905.625941][T24189] team_slave_1: entered promiscuous mode [ 905.626103][ T5894] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 905.734738][ T30] audit: type=1326 audit(1754156042.652:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 905.769474][T24189] debugfs: 'hsr1' already exists in 'hsr' [ 905.775528][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.790449][T24189] Cannot create hsr debugfs directory [ 905.795894][ T5894] usb 3-1: Product: syz [ 905.799603][T24189] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 905.809949][ T5894] usb 3-1: Manufacturer: syz [ 905.816313][T24142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2668'. [ 905.842499][T24189] hsr1: entered allmulticast mode [ 905.847671][T24189] dummy0: entered allmulticast mode [ 905.854443][T24189] bond0: entered allmulticast mode [ 905.859683][T24189] bond_slave_0: entered allmulticast mode [ 905.869877][T24189] bond_slave_1: entered allmulticast mode [ 905.870018][ T30] audit: type=1326 audit(1754156042.652:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 905.930380][ T5894] usb 3-1: SerialNumber: syz [ 905.948738][T24189] bridge0: entered allmulticast mode [ 905.964884][T24189] team0: entered allmulticast mode [ 905.977043][ T5894] usb 3-1: config 0 descriptor?? [ 905.977075][T24189] team_slave_0: entered allmulticast mode [ 905.994692][ T5894] pwc: Philips PCA645VC USB webcam detected. [ 906.013038][T24189] team_slave_1: entered allmulticast mode [ 906.018950][ T30] audit: type=1326 audit(1754156042.652:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.086662][T24202] bpq0: entered promiscuous mode [ 906.089759][ T30] audit: type=1326 audit(1754156042.652:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.151534][ T30] audit: type=1326 audit(1754156042.652:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.175979][ T30] audit: type=1326 audit(1754156042.652:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.211483][ T5894] pwc: send_video_command error -71 [ 906.216992][ T5894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 906.234041][ T5894] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 906.346361][ T5908] usb 1-1: USB disconnect, device number 86 [ 906.368630][ T5894] usb 3-1: USB disconnect, device number 71 [ 906.383284][T24216] blktrace: Concurrent blktraces are not allowed on sg0 [ 906.391304][T24216] relay: one or more items not logged [item size (56) > sub-buffer size (4)] [ 906.403521][ T30] audit: type=1326 audit(1754156042.652:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.448343][ T30] audit: type=1326 audit(1754156042.652:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.479143][ T30] audit: type=1326 audit(1754156042.652:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.503666][ T30] audit: type=1326 audit(1754156042.652:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24184 comm="syz.3.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442258eb69 code=0x7ffc0000 [ 906.528072][T24228] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 906.562762][T24228] netlink: 'syz.6.2679': attribute type 3 has an invalid length. [ 906.584009][T24230] fuse: Unknown parameter 'group_id00000000000000000000' [ 906.680468][T22357] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 906.950339][T22357] usb 6-1: Using ep0 maxpacket: 16 [ 907.054078][T22357] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 907.067501][T22357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.102592][T22357] usb 6-1: Product: syz [ 907.118383][T22357] usb 6-1: Manufacturer: syz [ 907.128636][T22357] usb 6-1: SerialNumber: syz [ 907.153236][T22357] usb 6-1: config 0 descriptor?? [ 907.300592][ T5894] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 907.441435][T22357] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 907.453566][T22357] usb 6-1: Detected FT232H [ 907.469698][T22357] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 907.646913][T24254] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2685'. [ 907.797880][T24253] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[24253] [ 907.809088][T22357] ftdi_sio 6-1:0.0: GPIO initialisation failed: -5 [ 907.817911][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 907.819384][T22357] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 907.846123][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 907.859628][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 907.871789][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 907.885520][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 907.894779][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.910400][ T5894] usb 3-1: config 0 descriptor?? [ 907.917493][T24237] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 908.053561][T24267] overlayfs: conflicting lowerdir path [ 908.084458][ T5915] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 908.181618][T24267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 908.350796][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 908.357698][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 908.367085][ T5915] usb 4-1: no configurations [ 908.371813][ T5915] usb 4-1: can't read configurations, error -22 [ 908.500329][ T5915] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 908.555383][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 908.561713][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 908.571824][ T5894] usb 3-1: USB disconnect, device number 72 [ 908.590206][ T5908] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 908.650245][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 908.657972][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 908.667609][ T5915] usb 4-1: no configurations [ 908.672559][ T5915] usb 4-1: can't read configurations, error -22 [ 908.679192][ T5915] usb usb4-port1: attempt power cycle [ 908.744496][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 908.756443][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 908.768490][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 908.780369][ T5908] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.793818][ T5908] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 908.803029][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.842498][ T5908] usb 7-1: config 0 descriptor?? [ 908.859529][T24270] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 908.861747][T24285] overlayfs: conflicting lowerdir path [ 908.908604][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 909.111529][ T5915] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 909.194468][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 909.207155][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 909.215714][ T5915] usb 4-1: no configurations [ 909.230742][ T5915] usb 4-1: can't read configurations, error -22 [ 909.347219][ T5908] usbhid 7-1:0.0: can't add hid device: -71 [ 909.353333][ T5908] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 909.375843][ T5908] usb 7-1: USB disconnect, device number 16 [ 909.388400][ T5922] usb 6-1: USB disconnect, device number 51 [ 909.399840][ T5922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 909.415259][ T5922] ftdi_sio 6-1:0.0: device disconnected [ 909.849423][ T5915] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 909.870597][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 909.893062][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 909.906234][ T5915] usb 4-1: no configurations [ 909.910999][ T5915] usb 4-1: can't read configurations, error -22 [ 909.918601][ T5915] usb usb4-port1: unable to enumerate USB device [ 910.328758][T24321] QAT: Device 11 not found [ 910.510343][ T5915] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 911.151042][ T5915] usb 6-1: device descriptor read/64, error -71 [ 911.160439][T22357] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 911.219603][T24332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2694'. [ 911.333338][T22357] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 911.352731][T22357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.362861][T22357] usb 3-1: Product: syz [ 911.367155][T22357] usb 3-1: Manufacturer: syz [ 911.372327][T22357] usb 3-1: SerialNumber: syz [ 911.384400][T22357] usb 3-1: config 0 descriptor?? [ 911.395771][T22357] pwc: Philips PCA645VC USB webcam detected. [ 911.420462][ T5915] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 911.570418][ T5915] usb 6-1: device descriptor read/64, error -71 [ 911.599346][T22357] pwc: send_video_command error -71 [ 911.607221][T22357] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 911.614991][T22357] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 911.750404][ T5915] usb usb6-port1: attempt power cycle [ 911.773301][T22357] usb 3-1: USB disconnect, device number 73 [ 911.924571][T24359] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2696'. [ 912.131242][ T5915] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 912.132656][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 912.132670][ T30] audit: type=1400 audit(1754156049.692:3129): avc: denied { write } for pid=24363 comm="syz.0.2698" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 912.150756][ T5915] usb 6-1: device descriptor read/8, error -71 [ 912.214934][ T30] audit: type=1400 audit(1754156049.742:3130): avc: denied { ioctl } for pid=24360 comm="syz.3.2697" path="socket:[55015]" dev="sockfs" ino=55015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 913.160225][ T5915] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 913.196518][ T5915] usb 6-1: device descriptor read/8, error -71 [ 913.471064][ T5915] usb usb6-port1: unable to enumerate USB device [ 913.499753][T24386] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2703'. [ 913.535831][T24392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2704'. [ 913.855205][T24385] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[24385] [ 914.318627][T24400] serio: Serial port ptm0 [ 914.570285][ T5908] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 914.603786][T24413] netlink: 'syz.2.2707': attribute type 1 has an invalid length. [ 914.695663][T24427] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 914.706565][T24427] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 914.731567][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 914.735113][T24427] bond0: (slave vti0): making interface the new active one [ 914.745413][T24427] bond0: (slave vti0): Enslaving as an active interface with an up link [ 914.749217][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 914.764169][ T5908] usb 4-1: no configurations [ 914.768892][ T5908] usb 4-1: can't read configurations, error -22 [ 915.005773][ T5882] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 915.014371][ T5908] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 915.023258][T24462] QAT: Device 11 not found [ 915.070199][ T5894] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 915.180170][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 915.187626][ T5882] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 915.194981][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 915.206132][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 915.214968][ T5908] usb 4-1: no configurations [ 915.219647][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 915.232769][ T5908] usb 4-1: can't read configurations, error -22 [ 915.240815][ T5908] usb usb4-port1: attempt power cycle [ 915.249962][ T5894] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 915.258877][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 915.270119][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 915.270258][ T5915] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 915.281335][ T5882] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 915.299786][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 915.310875][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 915.325475][ T5882] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 915.338553][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 915.353729][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 915.368215][ T5882] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.377576][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 915.385945][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.395148][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 915.403244][ T5882] usb 7-1: SerialNumber: syz [ 915.418063][ T5894] usb 1-1: SerialNumber: syz [ 915.438507][T24457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 915.448069][T24417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 915.450316][T24457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 915.464158][T24457] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 915.464355][T24417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 915.472865][ T5894] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 915.479794][ T5915] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 915.489704][T24417] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 915.496736][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.514474][ T5882] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 915.515544][ T5915] usb 3-1: Product: syz [ 915.528143][ T5915] usb 3-1: Manufacturer: syz [ 915.533073][ T5915] usb 3-1: SerialNumber: syz [ 915.550507][ T5915] usb 3-1: config 0 descriptor?? [ 915.563825][ T5915] pwc: Philips PCA645VC USB webcam detected. [ 915.600404][ T5908] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 915.634103][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 915.705154][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 915.768301][ T5908] usb 4-1: no configurations [ 915.768303][ T5915] pwc: send_video_command error -71 [ 915.768322][ T5915] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 915.778401][ T5908] usb 4-1: can't read configurations, error -22 [ 915.790008][T24416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2708'. [ 915.819064][ T9] usb 1-1: USB disconnect, device number 87 [ 915.837345][ T5915] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 915.856715][ T5915] usb 3-1: USB disconnect, device number 74 [ 915.859831][T24410] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2706'. [ 915.976982][T22357] usb 7-1: USB disconnect, device number 17 [ 916.030954][ T5908] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 916.051272][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 916.058098][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 916.066342][ T5908] usb 4-1: no configurations [ 916.072631][ T5908] usb 4-1: can't read configurations, error -22 [ 916.079285][ T5908] usb usb4-port1: unable to enumerate USB device [ 916.297231][T24504] fuse: Bad value for 'user_id' [ 916.302329][T24504] fuse: Bad value for 'user_id' [ 916.346274][T24507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.410486][T24507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.411406][ T30] audit: type=1400 audit(1754156053.982:3131): avc: denied { append } for pid=24511 comm="syz.3.2716" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 916.495311][T24507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 916.611730][ T30] audit: type=1400 audit(1754156054.182:3132): avc: denied { write } for pid=24520 comm="syz.6.2718" path="socket:[55121]" dev="sockfs" ino=55121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 916.752913][ T5922] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 916.769772][T24522] syz.6.2718: attempt to access beyond end of device [ 916.769772][T24522] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 917.150265][ T5922] usb 4-1: Using ep0 maxpacket: 8 [ 917.157675][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 917.169746][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 917.264544][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 917.313179][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 917.544923][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 917.558604][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.894698][ T5922] usb 4-1: usb_control_msg returned -32 [ 918.050289][ T5922] usbtmc 4-1:16.0: can't read capabilities [ 918.062442][ T5922] usb 4-1: USB disconnect, device number 81 [ 918.309864][T24547] openvswitch: netlink: Message has 16 unknown bytes. [ 918.731574][T24572] QAT: Device 11 not found [ 919.070445][ T5894] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 919.304842][ T5894] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 919.332762][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.364885][ T5894] usb 1-1: Product: syz [ 919.446636][ T5908] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 919.459805][ T5894] usb 1-1: Manufacturer: syz [ 919.475484][ T5894] usb 1-1: SerialNumber: syz [ 919.486329][ T5894] usb 1-1: config 0 descriptor?? [ 919.499826][ T5894] pwc: Philips PCA645VC USB webcam detected. [ 919.707716][ T5894] pwc: send_video_command error -71 [ 919.713651][ T5894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 919.727283][ T5894] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 920.163981][ T5908] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 920.171385][ T5908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 920.185010][ T5894] usb 1-1: USB disconnect, device number 88 [ 920.191162][ T5908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 920.207570][ T5908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 920.245057][ T5908] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 920.265631][ T5908] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 920.401708][ T5908] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.640642][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 920.703934][ T5908] usb 7-1: SerialNumber: syz [ 920.752693][T24575] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 920.760023][T24575] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 920.870563][T24575] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 920.913979][ T5908] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 921.723153][ T30] audit: type=1400 audit(1754156059.282:3133): avc: denied { ioctl } for pid=24615 comm="syz.0.2733" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 921.737769][T24571] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2726'. [ 921.784996][ T5922] hid_parser_main: 33 callbacks suppressed [ 921.785021][ T5922] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 921.820465][ T5922] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 921.890964][ T5922] usb 7-1: USB disconnect, device number 18 [ 922.133989][T24651] overlayfs: missing 'lowerdir' [ 922.281045][T24653] mkiss: ax0: crc mode is auto. [ 922.388979][T24675] QAT: Device 11 not found [ 922.398078][T24651] block nbd0: server does not support multiple connections per device. [ 922.438767][T24651] block nbd0: shutting down sockets [ 922.586174][T24682] overlayfs: conflicting lowerdir path [ 922.746023][T24682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2742'. [ 922.781025][ T5922] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 923.276516][ T5922] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 923.306489][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.325738][ T5922] usb 3-1: Product: syz [ 923.346675][ T5922] usb 3-1: Manufacturer: syz [ 923.380611][ T5922] usb 3-1: SerialNumber: syz [ 923.399973][ T5922] usb 3-1: config 0 descriptor?? [ 923.564567][ T5922] pwc: Philips PCA645VC USB webcam detected. [ 924.020625][T24705] ptrace attach of "./syz-executor exec"[19075] was attempted by "./syz-executor exec"[24705] [ 924.060128][T24705] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2747'. [ 924.435934][T24709] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 924.450097][T24709] Error validating options; rc = [-22] [ 924.658620][T22357] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 925.120372][T22357] usb 7-1: Using ep0 maxpacket: 16 [ 925.232116][T22357] usb 7-1: unable to get BOS descriptor or descriptor too short [ 925.240011][T22357] usb 7-1: no configurations [ 925.268010][T24722] dummy0: entered promiscuous mode [ 925.273307][T22357] usb 7-1: can't read configurations, error -22 [ 925.331839][T24722] dummy0: left promiscuous mode [ 925.436261][ T5922] pwc: send_video_command error -71 [ 925.442522][ T5922] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 925.450031][ T5922] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 925.499566][T22357] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 925.512839][ T5922] usb 3-1: USB disconnect, device number 75 [ 925.660203][T22357] usb 7-1: Using ep0 maxpacket: 16 [ 925.667817][T22357] usb 7-1: unable to get BOS descriptor or descriptor too short [ 925.678150][T22357] usb 7-1: no configurations [ 925.683590][T24741] fuse: Bad value for 'fd' [ 925.696090][T22357] usb 7-1: can't read configurations, error -22 [ 925.705873][T22357] usb usb7-port1: attempt power cycle [ 925.768971][T24748] netlink: 'syz.5.2756': attribute type 3 has an invalid length. [ 925.777035][T24748] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2756'. [ 925.789155][T24748] netlink: 'syz.5.2756': attribute type 3 has an invalid length. [ 925.798248][T24748] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2756'. [ 925.968666][T24754] overlayfs: conflicting lowerdir path [ 926.000283][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2755'. [ 926.081075][T22357] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 926.171373][T22357] usb 7-1: Using ep0 maxpacket: 16 [ 926.178474][T22357] usb 7-1: unable to get BOS descriptor or descriptor too short [ 926.210785][ T5922] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 926.491498][T22357] usb 7-1: no configurations [ 926.622803][T22357] usb 7-1: can't read configurations, error -22 [ 926.649620][ T5922] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 927.085052][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 927.096921][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 927.107983][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 927.119858][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 927.130908][ T5922] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 927.233029][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.259615][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 927.286357][ T5922] usb 3-1: SerialNumber: syz [ 927.694416][T24779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 927.969944][T24750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.089585][T24750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.171216][T24750] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 928.184491][ T5922] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 928.413369][T24744] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2754'. [ 928.546769][ T5922] usb 3-1: USB disconnect, device number 76 [ 928.552921][T24770] hfs: unable to load iocharset "io#harset" [ 928.572771][T24774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24774 comm=syz.3.2760 [ 930.019783][T24808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2767'. [ 930.077533][T24808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2767'. [ 930.105837][T24816] QAT: Device 11 not found [ 930.226424][T24822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2768'. [ 930.308696][T24822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2768'. [ 930.400304][ T5882] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 930.543955][ T5894] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 930.652372][ T5882] usb 7-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 930.703569][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.746268][ T5882] usb 7-1: Product: syz [ 930.794714][ T5894] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 930.810654][ T5882] usb 7-1: Manufacturer: syz [ 930.839966][ T5882] usb 7-1: SerialNumber: syz [ 930.845733][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.017049][ T5882] usb 7-1: config 0 descriptor?? [ 931.027885][ T5882] pwc: Philips PCA645VC USB webcam detected. [ 931.034544][ T5894] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 931.203422][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.590913][ T5894] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 931.599302][ T5894] usb 4-1: Manufacturer: syz [ 931.631514][ T5894] usb 4-1: config 0 descriptor?? [ 931.770283][ T5894] rc_core: IR keymap rc-hauppauge not found [ 932.170285][ T5894] Registered IR keymap rc-empty [ 932.176468][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 932.195392][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input74 [ 932.222412][ T5894] usb 4-1: USB disconnect, device number 82 [ 932.278198][T24869] fuse: Bad value for 'fd' [ 933.255903][ T5894] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 933.294944][ T5882] pwc: send_video_command error -71 [ 933.300553][ T5882] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 933.309735][ T5882] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 933.330825][ T5882] usb 7-1: USB disconnect, device number 23 [ 933.433756][ T5894] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 933.660212][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 933.722501][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 933.745238][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 933.769954][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 933.781315][ T5894] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 933.800411][ T5894] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 933.810470][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 933.932322][ T5894] usb 4-1: SerialNumber: syz [ 933.942770][T24888] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 933.950060][T24888] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 933.959816][T24888] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 933.973318][ T5894] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 934.440852][T24881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2777'. [ 934.481888][ T5922] usb 4-1: USB disconnect, device number 83 [ 935.641232][T24946] QAT: Device 11 not found [ 936.595251][T24961] dummy0: entered promiscuous mode [ 936.603233][T24961] dummy0: left promiscuous mode [ 938.000284][T24978] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 938.013724][T24978] Error validating options; rc = [-22] [ 939.102468][T24987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 939.111485][T24987] netlink: 'syz.0.2794': attribute type 15 has an invalid length. [ 939.786653][T25001] overlayfs: conflicting lowerdir path [ 940.220568][T25012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2802'. [ 941.352836][T25023] 9pnet_fd: Insufficient options for proto=fd [ 941.893250][T25034] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 942.026886][T25041] binder: 25036:25041 ioctl c0306201 0 returned -14 [ 942.524486][T25032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.460192][ T5882] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 943.510214][ T5894] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 943.673011][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 943.680378][ T5908] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 943.688658][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 943.702923][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 943.715125][ T5882] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 943.861362][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.869532][ T5882] usb 6-1: Product: syz [ 943.874544][ T5882] usb 6-1: Manufacturer: syz [ 943.879280][ T5882] usb 6-1: SerialNumber: syz [ 943.890781][ T5882] usb 6-1: config 0 descriptor?? [ 943.898812][ T5882] hub 6-1:0.0: bad descriptor, ignoring hub [ 943.904825][ T5882] hub 6-1:0.0: probe with driver hub failed with error -5 [ 943.929431][ T5882] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 943.940164][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 943.945666][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 943.956680][ T5908] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 943.967633][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.979148][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 943.993673][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 944.011615][ T5894] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 944.025185][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.037658][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.058136][ T5894] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 944.073858][ T5882] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 944.088188][T25069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2820'. [ 944.097957][ T5908] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 944.128420][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 944.146922][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.167526][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.185723][ T5894] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 944.285839][ T5908] usb 1-1: config 0 descriptor?? [ 944.291326][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.300571][ T5908] hso 1-1:0.0: Can't find BULK IN endpoint [ 944.344718][ T5894] usb 3-1: config 0 descriptor?? [ 944.360769][ T5894] hso 3-1:0.0: Can't find BULK IN endpoint [ 946.077923][T25100] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.085322][T25100] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.363118][ T5922] usb 1-1: USB disconnect, device number 89 [ 946.797955][ T5908] usb 3-1: USB disconnect, device number 77 [ 947.620399][ T5882] usb 6-1: USB disconnect, device number 56 [ 950.299718][T25187] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 950.418388][T25190] IPv6: NLM_F_CREATE should be specified when creating new route [ 951.194362][T25186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 952.100384][ T30] audit: type=1400 audit(1754156089.602:3134): avc: denied { setopt } for pid=25218 comm="syz.2.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 952.378227][T25210] netlink: 'syz.3.2837': attribute type 20 has an invalid length. [ 952.533667][ T5922] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 952.615775][T25210] dvmrp17: entered allmulticast mode [ 952.830234][T25232] ptrace attach of "./syz-executor exec"[19075] was attempted by "./syz-executor exec"[25232] [ 952.915607][T25232] netlink: 180 bytes leftover after parsing attributes in process `syz.6.2842'. [ 953.106002][ T30] audit: type=1400 audit(1754156090.672:3135): avc: denied { bind } for pid=25238 comm="syz.2.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 953.125608][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.134516][ T30] audit: type=1400 audit(1754156090.682:3136): avc: denied { read } for pid=25238 comm="syz.2.2844" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 953.158644][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.168071][ T30] audit: type=1400 audit(1754156090.682:3137): avc: denied { ioctl } for pid=25238 comm="syz.2.2844" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 953.169078][ T5922] usb 6-1: config 1 descriptor has 1 excess byte, ignoring [ 953.193426][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.207880][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.218942][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 953.236471][T14754] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 953.244964][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 953.260762][ T5922] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 953.271698][ T5922] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 953.286181][ T5922] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.295331][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 953.303558][ T5922] usb 6-1: SerialNumber: syz [ 953.313409][T25209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.340119][T25209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.348174][T25209] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 953.361530][ T5922] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 953.390362][T14754] usb 7-1: Using ep0 maxpacket: 16 [ 953.398870][T14754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 953.407274][T14754] usb 7-1: no configurations [ 953.412491][T14754] usb 7-1: can't read configurations, error -22 [ 953.540236][T14754] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 953.579680][T25208] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2838'. [ 953.614669][T22357] usb 6-1: USB disconnect, device number 57 [ 953.710518][T14754] usb 7-1: Using ep0 maxpacket: 16 [ 953.719925][T14754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 953.728091][T14754] usb 7-1: no configurations [ 953.733979][T14754] usb 7-1: can't read configurations, error -22 [ 953.740683][T14754] usb usb7-port1: attempt power cycle [ 953.867815][T25263] netlink: 'syz.2.2848': attribute type 4 has an invalid length. [ 953.882149][T25263] netlink: 'syz.2.2848': attribute type 4 has an invalid length. [ 953.940182][ T5922] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 954.194390][T14754] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 954.241750][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 954.256144][T14754] usb 7-1: Using ep0 maxpacket: 16 [ 954.274340][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 954.289383][T14754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 954.301092][T14754] usb 7-1: no configurations [ 954.306509][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 954.318836][T14754] usb 7-1: can't read configurations, error -22 [ 954.340351][ T30] audit: type=1400 audit(1754156091.902:3138): avc: denied { shutdown } for pid=25268 comm="syz.2.2851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 954.364053][ T5922] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 954.378247][ T5922] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.392232][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.407429][ T5922] usb 1-1: config 0 descriptor?? [ 954.414639][T25254] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 954.460512][T14754] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 954.674129][T14754] usb 7-1: Using ep0 maxpacket: 16 [ 954.685291][T14754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 954.695902][T14754] usb 7-1: no configurations [ 954.701169][T14754] usb 7-1: can't read configurations, error -22 [ 954.707909][T14754] usb usb7-port1: unable to enumerate USB device [ 955.151290][ T5922] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 955.457162][ T5922] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 955.472951][ T5922] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 955.500156][ T5922] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 955.520267][ T5922] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 955.531591][ T5922] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 955.543340][ T5922] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 955.567301][ T5922] usb 1-1: USB disconnect, device number 90 [ 956.230338][ T5882] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 956.341338][ T975] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 956.393865][ T5882] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 956.412964][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 956.439541][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 956.555149][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 956.575049][ T5882] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 957.028727][ T5882] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 957.050618][ T5882] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.060299][ T975] usb 3-1: config 1 descriptor has 1 excess byte, ignoring [ 957.067586][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 957.079049][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.087155][ T5882] usb 4-1: SerialNumber: syz [ 957.091870][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 957.107501][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 64 [ 957.119899][T25324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 957.119898][ T975] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 7668, setting to 64 [ 957.119925][ T975] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 957.151421][T25324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 957.163913][T25324] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 957.172849][ T5882] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 957.187612][ T975] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.203619][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 957.212852][ T975] usb 3-1: SerialNumber: syz [ 957.220748][T25333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 957.227971][T25333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 957.235364][T25333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 957.243500][ T975] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 957.313711][ T30] audit: type=1400 audit(1754156094.882:3139): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 957.450298][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 957.649166][T25326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2860'. [ 957.687278][T25320] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2858'. [ 957.706138][ T5882] usb 4-1: USB disconnect, device number 84 [ 957.717178][ T975] usb 3-1: USB disconnect, device number 78 [ 957.797346][ T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.810545][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 957.822128][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 957.833689][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 957.847198][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 957.856639][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.867189][ T24] usb 7-1: config 0 descriptor?? [ 957.872973][T25358] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 958.153701][ T5882] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 958.162731][ T5882] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 958.172849][ T5882] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 958.180818][ T5882] hid-generic 0000:007F:FFFFFFFE.0023: unknown main item tag 0x0 [ 958.191584][ T5882] hid-generic 0000:007F:FFFFFFFE.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 958.290298][ T24] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 958.307038][ T24] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 958.480222][ T5882] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 958.551145][ T24] usb 7-1: USB disconnect, device number 28 [ 958.642937][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 958.642966][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 958.642983][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 958.642998][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 958.643021][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 958.643035][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.671846][ T5882] usb 1-1: config 0 descriptor?? [ 958.672556][T25396] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 959.228985][ T5882] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 959.252767][ T5882] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 959.782568][T14754] usb 1-1: USB disconnect, device number 91 [ 961.237525][T25516] QAT: Device 11 not found [ 961.586852][T25524] QAT: Device 11 not found [ 962.260240][ T5882] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 962.561339][T22357] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 962.576904][ T5882] usb 7-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 962.653063][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.693088][ T5882] usb 7-1: Product: syz [ 962.711160][ T5882] usb 7-1: Manufacturer: syz [ 962.721209][ T5882] usb 7-1: SerialNumber: syz [ 962.749910][ T5882] usb 7-1: config 0 descriptor?? [ 962.769147][ T5882] pwc: Philips PCA645VC USB webcam detected. [ 962.780386][T22357] usb 6-1: Using ep0 maxpacket: 8 [ 962.787188][T22357] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 962.818741][T22357] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 962.864655][T22357] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 962.893622][T22357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 962.924099][T22357] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 962.966581][T22357] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 962.987244][T22357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.323701][T22357] usb 6-1: config 0 descriptor?? [ 963.410780][T22357] hso 6-1:0.0: Can't find BULK IN endpoint [ 965.448088][ T5882] pwc: send_video_command error -71 [ 965.456619][ T5882] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 965.486379][ T5882] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 965.491848][T25560] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 965.509218][T25560] Error validating options; rc = [-22] [ 965.771207][ T5882] usb 7-1: USB disconnect, device number 29 [ 965.876271][T25573] overlayfs: conflicting lowerdir path [ 965.890526][T14754] usb 6-1: USB disconnect, device number 58 [ 965.918315][T25573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2883'. [ 966.345707][T22357] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 966.520304][T22357] usb 3-1: Using ep0 maxpacket: 8 [ 966.578589][T22357] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 966.583461][T25604] netlink: 'syz.0.2895': attribute type 22 has an invalid length. [ 966.597048][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 966.677005][T22357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.687468][T22357] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 966.696722][T22357] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 966.725534][T22357] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 966.758168][T22357] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 966.767847][T25604] netlink: 'syz.0.2895': attribute type 22 has an invalid length. [ 967.012345][T25604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 967.112715][T22357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.165410][T22357] usb 3-1: config 0 descriptor?? [ 967.172031][T25613] hfs: unable to load iocharset "io#harset" [ 967.185785][T22357] hso 3-1:0.0: Can't find BULK IN endpoint [ 967.312192][T25624] netlink: 'syz.0.2897': attribute type 10 has an invalid length. [ 967.323261][T25624] syz_tun: entered promiscuous mode [ 967.337481][T25624] syz_tun: entered allmulticast mode [ 967.344928][T25624] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 967.362475][T25627] fuse: Bad value for 'rootmode' [ 969.166167][T25645] ptrace attach of "./syz-executor exec"[8493] was attempted by "./syz-executor exec"[25645] [ 969.205058][T25645] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2900'. [ 969.463330][ T5922] usb 3-1: USB disconnect, device number 79 [ 969.610394][T22357] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 969.831711][T22357] usb 6-1: Using ep0 maxpacket: 16 [ 969.848960][T22357] usb 6-1: unable to get BOS descriptor or descriptor too short [ 969.856766][T22357] usb 6-1: no configurations [ 969.861710][T22357] usb 6-1: can't read configurations, error -22 [ 969.954488][T25659] QAT: Device 11 not found [ 970.400229][T22357] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 970.550579][T22357] usb 6-1: Using ep0 maxpacket: 16 [ 970.671623][T22357] usb 6-1: unable to get BOS descriptor or descriptor too short [ 970.685905][T22357] usb 6-1: no configurations [ 970.693440][T22357] usb 6-1: can't read configurations, error -22 [ 970.703407][T22357] usb usb6-port1: attempt power cycle [ 971.243321][T22357] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 971.284784][T22357] usb 6-1: Using ep0 maxpacket: 16 [ 971.296927][T22357] usb 6-1: unable to get BOS descriptor or descriptor too short [ 971.305203][T22357] usb 6-1: no configurations [ 971.314112][T22357] usb 6-1: can't read configurations, error -22 [ 971.450184][T22357] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 971.511647][T22357] usb 6-1: Using ep0 maxpacket: 16 [ 971.546545][T22357] usb 6-1: unable to get BOS descriptor or descriptor too short [ 971.571191][T22357] usb 6-1: no configurations [ 971.588063][T22357] usb 6-1: can't read configurations, error -22 [ 971.656616][T22357] usb usb6-port1: unable to enumerate USB device [ 971.748125][T25682] overlayfs: conflicting lowerdir path [ 971.962565][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 971.973000][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 971.986456][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 972.004220][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 972.007160][T25680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'. [ 972.045330][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 972.125991][ T30] audit: type=1400 audit(1754156109.662:3140): avc: denied { mounton } for pid=25683 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 972.147617][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.180256][T25683] lo speed is unknown, defaulting to 1000 [ 972.189695][T25683] lo speed is unknown, defaulting to 1000 [ 972.369084][T22896] bond0: (slave syz_tun): Releasing backup interface [ 972.392443][T22896] syz_tun (unregistering): left allmulticast mode [ 972.412331][T25698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2908'. [ 972.425953][T25698] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2908'. [ 972.528353][T25702] fuse: Bad value for 'rootmode' [ 972.577148][T24664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.589792][T24664] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.327027][T24664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.478817][T24664] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.015007][T25820] netlink: 492 bytes leftover after parsing attributes in process `syz.5.2914'. [ 974.385551][ T51] Bluetooth: hci6: command tx timeout [ 974.500268][T25821] hfs: unable to load iocharset "io#harset" [ 974.806199][T24664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 974.840347][T24664] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.909853][T25830] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 974.924148][T25830] Error validating options; rc = [-22] [ 975.861404][T25683] chnl_net:caif_netlink_parms(): no params data found [ 976.088443][T25868] overlayfs: conflicting lowerdir path [ 976.109136][T24664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.119916][T24664] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.184589][T25864] fuse: Unknown parameter 'use00000000000000000000' [ 976.245431][T25868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 976.318521][T25683] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.345332][T25683] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.353418][T25683] bridge_slave_0: entered allmulticast mode [ 976.365844][T25683] bridge_slave_0: entered promiscuous mode [ 976.384160][T25914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2921'. [ 976.388504][T25683] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.406404][T25683] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.413633][T22357] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 976.423717][T25683] bridge_slave_1: entered allmulticast mode [ 976.439561][T25683] bridge_slave_1: entered promiscuous mode [ 976.447944][T25914] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2921'. [ 976.458907][ T51] Bluetooth: hci6: command tx timeout [ 976.572091][T22357] usb 4-1: Using ep0 maxpacket: 8 [ 976.599300][T22357] usb 4-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 976.654231][T22357] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.661629][T25683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.696883][T25683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.722444][T22357] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 976.744098][T22357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 976.815785][T22357] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 976.856901][T25683] team0: Port device team_slave_0 added [ 976.892198][T22357] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 976.907771][T25683] team0: Port device team_slave_1 added [ 976.915441][T22357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.929596][T24664] bridge_slave_1: left allmulticast mode [ 976.942043][T22357] usb 4-1: config 0 descriptor?? [ 976.950413][T22357] hso 4-1:0.0: Can't find BULK IN endpoint [ 976.957842][T24664] bridge_slave_1: left promiscuous mode [ 976.970443][T24664] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.985537][T24664] bridge_slave_0: left allmulticast mode [ 976.991924][T24664] bridge_slave_0: left promiscuous mode [ 976.998515][T24664] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.658194][ T51] Bluetooth: hci6: command tx timeout [ 981.119159][ T51] Bluetooth: hci6: command tx timeout [ 981.540265][T22357] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 981.710309][T22357] usb 7-1: Using ep0 maxpacket: 16 [ 981.744331][T22357] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 981.759393][T22357] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.771582][T22357] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 981.784133][T22357] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.793774][T22357] usb 7-1: Product: syz [ 981.798129][T22357] usb 7-1: Manufacturer: syz [ 981.802817][T22357] usb 7-1: SerialNumber: syz [ 982.089321][T24664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.108930][T24664] bond_slave_0: left promiscuous mode [ 982.114545][T24664] bond_slave_0: left allmulticast mode [ 982.127485][T24664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.137927][T24664] bond_slave_1: left promiscuous mode [ 982.145437][T24664] bond_slave_1: left allmulticast mode [ 982.160628][T24664] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 982.169297][T24664] batadv0: left promiscuous mode [ 982.177678][T24664] batadv0: left allmulticast mode [ 982.184722][T24664] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 982.204915][T24664] bond0 (unregistering): Released all slaves [ 982.337446][T24664] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 982.345570][T24664] vcan1: left promiscuous mode [ 982.352063][T24664] bond1 (unregistering): Released all slaves [ 982.422437][T25683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.429394][T25683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.468938][T25683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.495831][T26006] vlan1: entered allmulticast mode [ 982.584497][T24664] k›*·]‘: left promiscuous mode [ 982.606702][T25683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.616209][T25683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.642781][T25683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.654097][T22357] usb 7-1: 0:2 : does not exist [ 982.679524][T24664] tipc: Left network mode [ 982.714314][ T30] audit: type=1400 audit(1754156120.282:3141): avc: denied { setopt } for pid=26045 comm="syz.5.2931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 982.744158][T22357] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 982.759779][T22357] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 982.778295][T22357] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 982.792276][T22357] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 982.801203][ T5894] usb 4-1: USB disconnect, device number 85 [ 982.819317][T25683] hsr_slave_0: entered promiscuous mode [ 982.826118][T22357] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 982.839162][T25683] hsr_slave_1: entered promiscuous mode [ 982.845921][T22357] usb 7-1: USB disconnect, device number 30 [ 982.852750][T25683] debugfs: 'hsr0' already exists in 'hsr' [ 982.859372][T25683] Cannot create hsr debugfs directory [ 982.927185][T26098] fuse: Unknown parameter 'use00000000000000000000' [ 983.695942][T26045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 983.815412][ T5894] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 984.013203][ T5894] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 984.037488][ T5894] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 984.100222][T24664] dummy0: left promiscuous mode [ 984.107969][ T5894] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 984.138952][ T5894] usb 4-1: config 220 has no interface number 2 [ 984.154466][ T5894] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 984.172483][ T5894] usb 4-1: config 220 interface 0 has no altsetting 0 [ 984.175488][T24664] hsr_slave_0: left promiscuous mode [ 984.179327][ T5894] usb 4-1: config 220 interface 76 has no altsetting 0 [ 984.196431][ T5894] usb 4-1: config 220 interface 1 has no altsetting 0 [ 984.216720][ T5894] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 984.225953][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.234185][ T5894] usb 4-1: Product: syz [ 984.248928][ T5894] usb 4-1: Manufacturer: syz [ 984.269254][ T5894] usb 4-1: SerialNumber: syz [ 984.490282][T24664] hsr_slave_1: left promiscuous mode [ 984.610236][T24664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.617660][T24664] batadv0: mtu less than device minimum [ 984.658059][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.669958][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.681390][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.692828][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.704282][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.715713][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.727135][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.738560][T24664] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 984.793578][T24664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.804395][T24664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.844826][T24664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.303476][T24664] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 985.354144][T24664] batman_adv: batadv0: Removing interface: ipvlan0 [ 985.388946][T24664] batman_adv: batadv0: Interface deactivated: dummy0 [ 985.416169][T24664] batman_adv: batadv0: Removing interface: dummy0 [ 985.507152][T24664] veth1_macvtap: left promiscuous mode [ 985.516038][T24664] veth0_macvtap: left promiscuous mode [ 985.638535][T24664] pim6reg (unregistering): left allmulticast mode [ 985.998192][T24664] team0 (unregistering): Port device team_slave_1 removed [ 986.481168][ T5894] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 986.534474][ T5894] usb 4-1: No valid video chain found. [ 986.556382][ T5894] usb 4-1: selecting invalid altsetting 0 [ 986.607616][ T5894] usb 4-1: selecting invalid altsetting 0 [ 986.615273][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 986.697717][T26230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2942'. [ 986.717837][T26230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2942'. [ 986.869981][ T5894] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 987.107729][T26230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2942'. [ 987.141890][ T5894] usb 4-1: USB disconnect, device number 86 [ 987.787884][T24664] IPVS: stop unused estimator thread 0... [ 988.495409][T25683] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 988.501719][T26260] hfs: unable to load iocharset "io#harset" [ 988.556351][ T30] audit: type=1400 audit(1754156126.122:3142): avc: denied { write } for pid=26271 comm="syz.3.2948" name="file0" dev="tmpfs" ino=3256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 988.561322][T25683] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 988.590812][T25683] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 988.616434][ T30] audit: type=1400 audit(1754156126.122:3143): avc: denied { open } for pid=26271 comm="syz.3.2948" path="/588/file0" dev="tmpfs" ino=3256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 988.670575][T25683] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 988.783827][T26276] overlayfs: conflicting lowerdir path [ 988.875635][T26285] ptrace attach of "./syz-executor exec"[5859] was attempted by "./syz-executor exec"[26285] [ 988.974247][T26285] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2950'. [ 989.230442][ T30] audit: type=1400 audit(1754156126.792:3144): avc: denied { ioctl } for pid=26271 comm="syz.3.2948" path="/588/file0" dev="tmpfs" ino=3256 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 989.746800][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2947'. [ 989.791698][T25683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.845019][T25683] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.878683][T24663] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.885811][T24663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.987257][T24667] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.994421][T24667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.059599][T26301] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 990.074036][ T30] audit: type=1400 audit(1754156127.642:3145): avc: denied { append } for pid=26300 comm="syz.6.2951" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 990.098015][ T975] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 990.136657][T25683] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 990.400198][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 990.409760][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 990.417780][ T975] usb 3-1: no configurations [ 990.429865][ T975] usb 3-1: can't read configurations, error -22 [ 990.480191][ T5894] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 990.590627][ T975] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 990.729620][T25683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.738836][ T5894] usb 7-1: config 0 interface 0 has no altsetting 0 [ 990.745597][ T5894] usb 7-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 990.754823][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 990.765894][ T975] usb 3-1: unable to get BOS descriptor or descriptor too short [ 990.790698][ T975] usb 3-1: no configurations [ 990.797312][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.813249][ T975] usb 3-1: can't read configurations, error -22 [ 990.829740][ T5894] usb 7-1: config 0 descriptor?? [ 990.836168][ T975] usb usb3-port1: attempt power cycle [ 990.856629][T25683] veth0_vlan: entered promiscuous mode [ 990.900195][T25683] veth1_vlan: entered promiscuous mode [ 990.952497][T25683] veth0_macvtap: entered promiscuous mode [ 990.975711][T25683] veth1_macvtap: entered promiscuous mode [ 991.013429][T25683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.053003][T25683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.108423][T24662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.118262][T26325] fuse: Unknown parameter 'user_i00000000000000000000' [ 991.147242][T24662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.166340][T24662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.190793][T24662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.210526][ T975] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1096.240025][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1096.246996][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24667/1:b..l [ 1096.255588][ C1] rcu: (detected by 1, t=10502 jiffies, g=86413, q=86 ncpus=2) [ 1096.263205][ C1] task:kworker/u8:21 state:R running task stack:25864 pid:24667 tgid:24667 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1096.277362][ C1] Workqueue: bat_events batadv_nc_worker [ 1096.283009][ C1] Call Trace: [ 1096.286275][ C1] [ 1096.289198][ C1] __schedule+0x1190/0x5de0 [ 1096.293691][ C1] ? mark_held_locks+0x49/0x80 [ 1096.298448][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 1096.304249][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 1096.310045][ C1] ? trace_sched_exit_tp+0xd1/0x120 [ 1096.315235][ C1] ? __pfx___schedule+0x10/0x10 [ 1096.320084][ C1] ? mark_held_locks+0x49/0x80 [ 1096.324846][ C1] preempt_schedule_irq+0x51/0x90 [ 1096.329861][ C1] irqentry_exit+0x36/0x90 [ 1096.334267][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1096.339713][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 1096.344903][ C1] Code: b8 3d 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 0a 13 0f 0f 82 74 02 00 00 8b 35 ea 3b 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 b8 3d 12 0f 85 c7 02 00 00 48 83 c4 [ 1096.364495][ C1] RSP: 0018:ffffc90021b77a40 EFLAGS: 00000206 [ 1096.370550][ C1] RAX: 0000000000000046 RBX: ffffffff8e5c1120 RCX: 00000000a0ddb310 [ 1096.378505][ C1] RDX: 0000000000000000 RSI: ffffffff8de27535 RDI: ffffffff8c15fb80 [ 1096.386463][ C1] RBP: 0000000000000002 R08: 2b9fae8fdf9cd17f R09: 0000000000000000 [ 1096.394421][ C1] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 1096.402378][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1096.410352][ C1] ? batadv_nc_process_nc_paths.part.0+0x215/0x3e0 [ 1096.416847][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1096.422466][ C1] batadv_nc_process_nc_paths.part.0+0xe4/0x3e0 [ 1096.428696][ C1] ? batadv_nc_process_nc_paths.part.0+0xd3/0x3e0 [ 1096.435114][ C1] batadv_nc_worker+0xcd3/0x1030 [ 1096.440043][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1096.445844][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1096.451212][ C1] ? rcu_is_watching+0x12/0xc0 [ 1096.455971][ C1] process_one_work+0x9cc/0x1b70 [ 1096.460904][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1096.466268][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1096.471637][ C1] ? assign_work+0x1a0/0x250 [ 1096.476214][ C1] worker_thread+0x6c8/0xf10 [ 1096.480803][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1096.485904][ C1] kthread+0x3c5/0x780 [ 1096.489964][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.494542][ C1] ? rcu_is_watching+0x12/0xc0 [ 1096.499295][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.503872][ C1] ret_from_fork+0x5d7/0x6f0 [ 1096.508447][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.513023][ C1] ret_from_fork_asm+0x1a/0x30 [ 1096.517788][ C1] [ 1096.520790][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g86413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1096.533096][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=68942 [ 1096.540968][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g86413 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1096.552316][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1096.562264][ C1] rcu: RCU grace-period kthread stack dump: [ 1096.568131][ C1] task:rcu_preempt state:I stack:28096 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1096.580039][ C1] Call Trace: [ 1096.583301][ C1] [ 1096.586223][ C1] __schedule+0x1190/0x5de0 [ 1096.590735][ C1] ? __pfx___schedule+0x10/0x10 [ 1096.595581][ C1] ? find_held_lock+0x2b/0x80 [ 1096.600248][ C1] ? schedule+0x2d7/0x3a0 [ 1096.604570][ C1] schedule+0xe7/0x3a0 [ 1096.608628][ C1] schedule_timeout+0x123/0x290 [ 1096.613466][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1096.618825][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1096.624110][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1096.629904][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 1096.635360][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 1096.640117][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1096.645385][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1096.650576][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1096.655499][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 1096.660342][ C1] rcu_gp_kthread+0x270/0x380 [ 1096.665003][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1096.670185][ C1] ? rcu_is_watching+0x12/0xc0 [ 1096.674939][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1096.680131][ C1] ? __kthread_parkme+0x19e/0x250 [ 1096.685148][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1096.690336][ C1] kthread+0x3c5/0x780 [ 1096.694390][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.698967][ C1] ? rcu_is_watching+0x12/0xc0 [ 1096.703722][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.708299][ C1] ret_from_fork+0x5d7/0x6f0 [ 1096.712874][ C1] ? __pfx_kthread+0x10/0x10 [ 1096.717452][ C1] ret_from_fork_asm+0x1a/0x30 [ 1096.722215][ C1] [ 1096.725218][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1096.731519][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1096.736708][ C0] NMI backtrace for cpu 0 [ 1096.736719][ C0] CPU: 0 UID: 0 PID: 26328 Comm: syz.3.2954 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1096.736736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1096.736744][ C0] RIP: 0010:debug_object_deactivate+0x140/0x3a0 [ 1096.736763][ C0] Code: 48 c1 e3 03 48 8d 93 c8 16 fd 9a 4c 8d a3 c0 16 fd 9a 48 89 d7 48 89 54 24 08 e8 3b 35 ab 06 48 8b 54 24 08 48 89 c1 4c 89 e0 <48> c1 e8 03 42 80 3c 28 00 0f 85 da 01 00 00 48 8b 9b c0 16 fd 9a [ 1096.736775][ C0] RSP: 0018:ffffc90000007d50 EFLAGS: 00000096 [ 1096.736785][ C0] RAX: ffffffff9b04bb68 RBX: 000000000007a4a8 RCX: 0000000000000002 [ 1096.736794][ C0] RDX: ffffffff9b04bb70 RSI: 0000000000000004 RDI: ffffc90000007cc0 [ 1096.736802][ C0] RBP: ffffc90000007e30 R08: 0000000000000001 R09: fffff52000000f98 [ 1096.736810][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff9b04bb68 [ 1096.736818][ C0] R13: dffffc0000000000 R14: ffff888079957340 R15: 1ffff92000000fac [ 1096.736827][ C0] FS: 000055557f4f8500(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 1096.736841][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1096.736850][ C0] CR2: 000000110c34d543 CR3: 000000005c60d000 CR4: 00000000003526f0 [ 1096.736859][ C0] Call Trace: [ 1096.736864][ C0] [ 1096.736868][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1096.736885][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1096.736902][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1096.736918][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 1096.736936][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1096.736950][ C0] ? read_tsc+0x9/0x20 [ 1096.736969][ C0] hrtimer_interrupt+0x397/0x8e0 [ 1096.736989][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3f0 [ 1096.737004][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1096.737022][ C0] [ 1096.737027][ C0] [ 1096.737032][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1096.737046][ C0] RIP: 0010:stack_depot_save_flags+0xf/0xa40 [ 1096.737067][ C0] Code: e9 07 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 83 f9 03 0f 87 90 03 00 00 41 57 <41> 56 49 89 fe 41 55 41 54 41 89 d4 55 89 cd 53 48 83 ec 30 e8 58 [ 1096.737079][ C0] RSP: 0018:ffffc9002152f950 EFLAGS: 00000293 [ 1096.737089][ C0] RAX: 000000000000000f RBX: ffffc9002152f960 RCX: 0000000000000000 [ 1096.737097][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: ffffc9002152f960 [ 1096.737105][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1096.737113][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 1096.737121][ C0] R13: 0000000000000000 R14: ffff88805d2e3248 R15: ffffffff8ce3e560 [ 1096.737136][ C0] kasan_save_stack+0x42/0x60 [ 1096.737150][ C0] ? kasan_save_stack+0x33/0x60 [ 1096.737162][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 1096.737178][ C0] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1096.737192][ C0] ? destroy_inode+0x12c/0x1b0 [ 1096.737209][ C0] ? evict+0x5b4/0x920 [ 1096.737224][ C0] ? iput+0x521/0x880 [ 1096.737239][ C0] ? dentry_unlink_inode+0x29c/0x480 [ 1096.737255][ C0] ? __dentry_kill+0x1d0/0x600 [ 1096.737270][ C0] ? dput.part.0+0x4b1/0x9b0 [ 1096.737286][ C0] ? dput+0x1f/0x30 [ 1096.737301][ C0] ? __fput+0x51c/0xb70 [ 1096.737317][ C0] ? task_work_run+0x150/0x240 [ 1096.737330][ C0] ? exit_to_user_mode_loop+0xeb/0x110 [ 1096.737344][ C0] ? do_syscall_64+0x3f6/0x4c0 [ 1096.737366][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.737397][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 1096.737413][ C0] ? __pfx_i_callback+0x10/0x10 [ 1096.737426][ C0] __call_rcu_common.constprop.0+0xa5/0xa10 [ 1096.737440][ C0] ? __destroy_inode+0x2e4/0x730 [ 1096.737455][ C0] ? __pfx_sock_free_inode+0x10/0x10 [ 1096.737469][ C0] destroy_inode+0x12c/0x1b0 [ 1096.737486][ C0] evict+0x5b4/0x920 [ 1096.737502][ C0] ? __pfx_evict+0x10/0x10 [ 1096.737521][ C0] ? iput+0x519/0x880 [ 1096.737539][ C0] iput+0x521/0x880 [ 1096.737557][ C0] dentry_unlink_inode+0x29c/0x480 [ 1096.737573][ C0] __dentry_kill+0x1d0/0x600 [ 1096.737591][ C0] dput.part.0+0x4b1/0x9b0 [ 1096.737608][ C0] dput+0x1f/0x30 [ 1096.737623][ C0] __fput+0x51c/0xb70 [ 1096.737641][ C0] task_work_run+0x150/0x240 [ 1096.737655][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1096.737669][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 1096.737687][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 1096.737700][ C0] do_syscall_64+0x3f6/0x4c0 [ 1096.737719][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.737732][ C0] RIP: 0033:0x7f442258eb69 [ 1096.737743][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.737754][ C0] RSP: 002b:00007fff09713fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1096.737767][ C0] RAX: 0000000000000000 RBX: 00000000000f1fa8 RCX: 00007f442258eb69 [ 1096.737774][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1096.737782][ C0] RBP: 00007f44227b7ba0 R08: 0000000000000001 R09: 0000001e097142cf [ 1096.737790][ C0] R10: 00007f4422400000 R11: 0000000000000246 R12: 00007f44227b5fac [ 1096.737798][ C0] R13: 00007f44227b5fa0 R14: ffffffffffffffff R15: 00007fff097140f0 [ 1096.737812][ C0]