last executing test programs: 11m50.107241101s ago: executing program 1 (id=336): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0xa8, 0xc8, 0x0, {0x0, 0x7a010000}, [@common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) socket$alg(0x26, 0x5, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x86b1b18158a7c382) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2}, 0x18) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) getpeername$l2tp(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) 11m49.123253068s ago: executing program 1 (id=341): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000085c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2042, 0x0) futex_waitv(&(0x7f00000022c0)=[{0x8, 0x0, 0x104}], 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r6, &(0x7f0000008340)=[{{&(0x7f0000000400)=@xdp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/100, 0x64}], 0x1, &(0x7f0000000500)=""/114, 0x72}, 0x9}, {{&(0x7f0000000580)=@qipcrtr, 0x80, &(0x7f00000001c0)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000000680)=""/68, 0x44}], 0x2}, 0x9}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000780)=""/184, 0xb8}, {&(0x7f0000000840)=""/137, 0x89}], 0x2, &(0x7f0000000900)=""/103, 0x67}, 0x8}, {{&(0x7f0000000980)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000a00)=""/121, 0x79}, {&(0x7f0000000a80)=""/194, 0xc2}, {&(0x7f0000000b80)=""/210, 0xd2}], 0x3, &(0x7f0000000cc0)=""/71, 0x47}, 0x1}, {{&(0x7f0000000d40)=@x25, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/115, 0x73}, {&(0x7f0000000e40)=""/136, 0x88}], 0x2, &(0x7f0000000f40)=""/230, 0xe6}, 0x3}, {{&(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000055c0)=[{&(0x7f00000010c0)=""/203, 0xcb}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/142, 0x8e}, {&(0x7f0000004340)=""/253, 0xfd}, {&(0x7f0000004440)=""/212, 0xd4}, {&(0x7f0000004540)=""/4096, 0x1000}, {&(0x7f0000001280)=""/43, 0x2b}, {&(0x7f0000005540)=""/102, 0x66}], 0x8, &(0x7f0000005640)=""/85, 0x55}, 0xc}, {{0x0, 0x0, &(0x7f0000006b00)=[{&(0x7f00000056c0)=""/66, 0x42}, {&(0x7f0000005740)=""/120, 0x78}, {&(0x7f00000057c0)=""/198, 0xc6}, {&(0x7f00000058c0)=""/4096, 0x1000}, {&(0x7f00000068c0)=""/136, 0x88}, {&(0x7f0000006980)=""/98, 0x62}, {&(0x7f00000012c0)=""/49, 0x31}, {&(0x7f0000006a00)=""/196, 0xc4}], 0x8, &(0x7f0000006b80)=""/140, 0x8c}, 0x3}, {{&(0x7f0000006c40)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/223, 0xdf}, {&(0x7f0000006dc0)=""/208, 0xd0}], 0x2, &(0x7f0000006f00)=""/4096, 0x1000}, 0xc0}, {{&(0x7f0000007f00)=@caif=@dgm, 0x80, &(0x7f0000008040)=[{&(0x7f0000007f80)=""/146, 0x92}], 0x1}, 0x3}, {{&(0x7f0000008080)=@hci, 0x80, &(0x7f0000008280)=[{&(0x7f0000008100)=""/37, 0x25}, {&(0x7f0000008140)=""/132, 0x84}, {&(0x7f0000008200)=""/118, 0x76}], 0x3, &(0x7f00000082c0)=""/93, 0x5d}, 0x5}], 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x800, 0x0) 11m47.610126851s ago: executing program 1 (id=344): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 11m43.67692406s ago: executing program 1 (id=364): r0 = syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp\x00') r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r2, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000500"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r9, &(0x7f0000000140)='./file0\x00') openat(r9, &(0x7f0000000700)='./file0/../file0\x00', 0x2000, 0x52abe154ad664f64) munlockall() ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mlock(&(0x7f0000287000/0x4000)=nil, 0x4000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x29, &(0x7f0000000440)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xc}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) accept$phonet_pipe(r0, &(0x7f00000001c0), &(0x7f0000000180)=0x10) 11m42.607202533s ago: executing program 1 (id=366): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setsig(r2, 0xa, 0x72cc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0xab, 0x0, 0xd6}]}, 0x10) sendmmsg(r0, &(0x7f0000005640)=[{{&(0x7f0000000200)=@pppoe={0x18, 0x0, {0x2, @multicast, 'bond_slave_0\x00'}}, 0x80, 0x0}}], 0x1, 0x4048000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000730000009500"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r5, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r5, &(0x7f00000000c0), 0x2) read(r5, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000000)={0x2, 0x4}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000040)={0x2, 0x4}, 0x2) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r6 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000015006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000100)) 11m35.52728425s ago: executing program 1 (id=394): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x12000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xfffffdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x2) (async) socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x8801}}], 0x1, 0x20044034) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x12000}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xfffffdef) (async) 11m19.545051861s ago: executing program 32 (id=394): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r0, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x12000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xfffffdef) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x2) (async) socket$unix(0x1, 0x1, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x8801}}], 0x1, 0x20044034) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000000)={0xdf, 0x0, 0x12000}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) (async) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) (async) read$alg(0xffffffffffffffff, &(0x7f0000000240)=""/4096, 0xfffffdef) (async) 1m38.647991327s ago: executing program 3 (id=2575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) (async) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = getpgid(0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) unshare(0x22020600) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) readahead(r4, 0x8, 0x75674525) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x2e, 0x1, 0x3, "fff600f40f000000000000b967351bca40ba3e27ff7eefad00000000ffffffff", 0x47524247}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r5, @ANYBLOB="14005e8008000200040000000800010008001500"], 0x30}}, 0x0) (async) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async, rerun: 32) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async, rerun: 32) r8 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r8}, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$alg(0x26, 0x5, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r9 = getpid() (rerun: 32) sched_setscheduler(r9, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f0000000340)=@abs, 0x6e) (async) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m38.615410247s ago: executing program 3 (id=2576): getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x4c, 0x0, 0x0, 0x2, 0x9, 0xc, 0xfd, 0x12, 0x40, 0x10, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x3, '\x00', 0x4, 0x8000000000002}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000003c00)='proc\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) write$UHID_INPUT(r6, &(0x7f0000002a80)={0x8, {"a7ceb5bebe685a5f4468fbe4376db27249d8be72bcbd6f940dbf991aa7068dc44d688bcfd6361127c9811d637875700ff7716c2b5768e91d6ff381fab166f260ee1f44236a7f311c79b34c0b45ce0b7054851d464566f05af1d05428db2d8813612d871bb64c682f77131a8a2f8098d80a7811ceee27def539754249f950182f7956d001f102189a45272897cca0ec9109d505b38f6f7507ffb1a52507877da5e0ffef74b517fc7b9be7d0aca00925359416f33b67f4c08e4085fb16a27c42f174007fe93a1d24a6abeb34ca7b2dd30e11869736bdd710fe1b20e502492d221057c40cda40ae41d10a2b64da819acdcc5fb8de9c2a6baf2060884e1ed62bab5896fa063cb4e9ceda6186293c5f69a4c85f0bae0c5f6c59c36094d95478d3f385cc4ab6667f0d4fdad7efffdb8e10db43fd449543fb1ce1373705aa45be4cc0b612fe2b63d02a1bb5c012e3ea613afe54b65795a51b0d50605e6039c597091ff0dcefc213200b3e8d58db717087d7e29f75f875067e61a5291a67d0e2ffb5b693ed0a56084094f89d58d752e5cdd87ffe0b58c21aaa2e318ee8b24ec3031d48380f7dc5e7f20cf2f7daaf5907f207670d99c61429ff08cd718377dee9e3c59634d7b50169f1c0e29f2e9fe94bbf168a645af288c2e01dcbc34c599e2e157451bde4f4ca7561372265a52c3c66b9ac8564387203952640d7bb6c2e403c840ae212c00aa3100d9f1c8cff92c3e4eec8aaca765c13494c36cd4f273b739938da79d7e269f76b09ace04ba46f28e7c77aebb92ad3673ffb1b33a4c3b19f2c26c1a1404cac3cbccec03e0b4ee25dca029db1213df140c473b855af7496749b93b1fea6236c15540d756d95c8594470334a7b69c89a617ed0909f4b4df2f51877159c300800c84c3d8f896eab38ca49576fc4ad045a35ae712ab26791dad2034cc0396d1e4f7c2c9adc4aaa4134bd93910e8d9cbd2cc30a4ee367e3c82fd834357b1bc93b21e1ca76673745859e020e697c9da0ade883f090cfb61c1470e9e39bd74603bb2bf479c4f9b810ea74f06bce01065a93e9a859e5d73f21164b5243ed3651656327e6b9ac22bc72a23cdbe146a9407629b3450b04ce2d5c12faa9666031ba1ecaf6454e6671dd783a5b05eec60ce88a5e7a9fb44219abfc6b89727115ea8b437d37ada8ee3ced3ecf288c20c6f48e01f82b4866277ee19e939c0033f6adf5481b432df4ae4192b6359dd3d30537795db1d17875c06738cd29a2adbd4426cf48b37e01e18b206a773b4cce8329525899749e44c4691ec7c074557e88961826d7ac2fbd06d88cdf727a74c4333d4b14f0c5b4f4973aea3ca80b7afa559db1ff698b8040e4168d70bfbf39a0600b181b90c2b128602c1b9152ac568002c4200f8baa04f1c484896d0ef36756b6bc1ad6515c7d469ea7f587a0c23838f488163a15d758d19b66d7cf1ad17052444a5544eb2c7750e6c27a9440ea8126bfa6dcde172b2b1c36cbe76d5bfcfb46687deb95151153b8266c313429d2d9891b6317cacd7f28ef01eb647f5029a8f02b1e9a4ec3b581ccd4e8c5f7596c1065102ba9064e0b9c3c5605440be0315680eefba0786ca42f8c7a2b7b90baf1a9360bae7f0e5bc6a83c8222a1b2dc3d518a75372fdffa1b1abefdfdbfc52e29da79f444ca93a546b05a1385a72915a2d11f8026473963c8edf430be2d3c5309ee1057e43cf2385cda08020ca77f050250ea2d9f191bc704edff1174b5d8bdb2b4521775a84823918bfd65efb58a3c8a77a0d77189ce13e5e0b262ee36f0ffe8c56aa376f588f5a0d8aae07bf2a0c8d580ccca0216b3f8429b62207ecdbb974aaaa488c0651f7f0c0e42c74efabf19deed90903b447c8bffaf1bad06810382cce5dee140c3ef504005cc7c1f25411e9ec244581d69725db72881d5d92b85969b7bebde626f00b2eb9c3a78f6a5379a9548f1abb96c1f300150a7402432a01ddbdabde120b5bf4362ea7ef3eb08f4ca16f798fc18960a6dd5665c7f9bcd9d1e66afc39f60c2725c31c9c3ac39eafd9456b5fb40e8d3cc8bd08f1781926645bdb1a2e8162e1c9055a7f6e2a27251e472f1dcc1158f5d9aa30ad550c9694574a9a7b00d2f536f61ce4606cf8a31df2d140a80377b6acd41bdc1d54f6784b675fe92080036ef98607b43a3e78aefcea96a73adf8a8ef8be54daa9570e4cab89aac42cfd66a7c01803f79828078adef8d7ad0ea0ab0a0dbf6e130356e6ee2df4c6b6f5fef54b04acf278ff1739f367490f7e9229b9afc16144cce87a47472a6c60457d7b6cd6f577e4ab588c3e8aca8465706eec03633a65b2c293c82fdf38ae5221cbc07978798834b5b1e877328928e9d1922433acdb5cad1961b11ea251f32c6a3a013fb14e2648a95c56748e31b1dc6c657dae139af8628defe9eac71314469a5bbc526e9ef21d8280ce51cc59d477714329201b6a689358534700d1e020bd61b27e86f959db8614c4657726a1c22b1fb3125455f33697de90403cc4af60d56ee83757c46fd72886d1ce9d40eaecc18cfb288267e29fc296837d4a5b82b22b2598305dce5e1c34228b3977d8c4abd9dfc2dfd768397c9842c7893f42e86ad3f2e22027f58e9fe876c2e9a5e236c1bd6e20f3661dd7f5eb407425362d6277379bc54c61290850bb52478671f66136f9b8424a1b9e32250c1e618a942b567409001ab77809c5226673a6c03d0f7b2a4c410ac4c42dc032383fa76cb8df52c155a82f80483fdbc060bd66398310f673ed189e8f83064863f1bb2179a407469b1b941b2353c51396171c419779451a9ccd9b296677f9209202328cf4d0a4f66bb2351d114b2b776eaec2003285b1612cd21ceb32400069f0a8ec7a8c6f340073a8961bfd08607d2909b47acb13db7478b640be9c45e5012894317859d7b3b546b7dbcd5c8b6420e7ea3204ada46f79d9d138f1b99943a7f85cd17797c01c201f4654d095c51e5e5650f8afc03c5d35b9ab7c0669e6d4d9aa7c05cbc951e15996aaedee24526f93efaa258eecd43317f91e627b5fdb59e76d3b64a955d32d701bfb16b5b8e1dba6361c9436691573142e2117b0b5c175b9234569ca9dae5b0431e1323ff01fd8dab2bb3746e1602028523fe7d1e9300991208d4927ad70bd7d56b96a840b56888e3d1f5a476ff46e9bac0b8a802e969e3ac668bad47166a1f36cce996ba2eee1716547b41b043769dde03d445940be1688247810731ee4d7b48d871c1e1ae38e36a29a0532ff1a90e5ece01e03ba00a358efa6e99e558226efbb13020d110ad4d71eab14ffda1631882cb7fb04ed67f5dcb4403d89058f8480273b93a778a2e31f3e1d1146eece71de5b3ef96734ebb844f634f148dc94dbce0b2893b35e3e46abf2315dc4691a4cde1b13a606709c34ff56763da2c94856f5332eb6a2c92e39662b8fc69e212e97c949ebcde68d112b484e88e42d75abfddde8111337e8bb5015a1aa1853708fe52cc1a01235961de7cec6032f6c8d0ec2975ffe05343312386a5c82d4dfa9a3d1e4671f0ba49f9988bd8a4b70d4db8b4ae294bc2631f8285bc0914a1f7b0170e1cc3fadc96e2fc0af23b9a4ff20d3e38a2b23986cd4918099d6e8e1ee49f62fdb5ba1a6259ba1113bf2386dcb8ee706513bf1710b41578f2449600bf88117aa9cc3bd563c78750a3b76e9513819d08f1cad3a51d50c4018df548b7640700ec6f0b1624416c5f7891ce3c81a87adb622cee586e14af67f9568d15eaaafbc5ca80944745bd72ff9333f7f4023b9a7ac1ccf8385f6e0f281d4cd2ce9987adb4738b230d66c10604c0cc631b30d075e5e3d5eb71f9ebc53abab6f71a93728a459c2d1b78964278d2ebd850a81a765d1b561d98bc7af9e468805a1c778eb821c30c026cba5c269551f8cf9a5a5b13c2aa2c713edef8dc4b4967b4fceda2e81d9fa4eaf7913ac7cdbf37de18f060b14ad296c8523ad71ddc97e08ab61def0ebd080f40bec6b1b6a4604ab11ba6422098bbaa3ad32050c2a20e239af690182a52b7355920d377bf129d7e5b9eaa21ad069e7b9ae098246b1df67668ba0be9d7c3c413a5cfcea8eab15ca6690f3dc9bf95f54e68b8e487e6231b985bfcf7ddd5d76b84708abc594f504f722ee58883849054e8397c4578658f83ade1a5e2a652383cded94fc4b80fbce5a77b1816d2711806adbc8e96c6a1399132f2c044ed453f61cc00ba9e61905e14f63e065b69a8005392590ece01d1775bb6569873bdf7bdeec023ff49f7da60ed2ccf5084da68e5b5497b559ea5c75227348f325356c4f5d594a806dd9ad6451d5c1b38e47ce4bf775e82c979a26e45597538383291e5e853d0e8946c3cfa773d755c761650e5d78ef538b6bea605fad584d057e4d48f1a32f9c98144110b0b9ba7ae729b4726770b6ce3836b95dbdf95233a65b34b185e1eac985ddb75bb4e1a0069a4545adce402fdb65808547534c96544d79d5bad5ef8f30322d246e0a0342e577e82d395c347d09730a2cd0e65c842b6c4e5470c960bfeb57552a93fede027644f3bf527f0402da8adf4e109d4be739dc3d07ad9710575b9d2b2d83301b222002f41ec6720a18ebb5929b210f8576b8454f106656dcbd427a0548c74d10b8fad4b9bae57727ebbb85c5eb806037e39fe9ee90c881d58406c88bc60abcb13f497ab6223ccaad9aa7f1900c86011ffd45336cc56062a5ca57afa5fbb1a403131c5e153a9ef013f7068a50e652062f79892d405cf71a8e39061f313e43c56f3a41e2ab2f7973a46a438a879215d54724fa39c158365c51cf56475be32639b16733c2bc56496eaf4e6fed334f952522ea5b686946218e5f442bb7d0abff8d67e7b81ea1abef3690932c6247294e8efc4cf25e897ad264df8a1f06ba861dface424e060e6924daa11a5de4d9abec7366449e1703912b9ec04e6fd7656df93657a2783da8c8f10cfbf6d2d9d5999fb4e990d1ff80c17c4d2a5111878b37803606a86500cd87696b95605516d19ba1bf87fed3590f1ede79451570a7d146d74ecaaf95214715b248ecb14cf034f5d993cfe05b4db98a8632d77da641d7a902774073edaaf9f74575abdb5b448fc313276f787c9389f4b66dec1626fb29ce8c60d8fc7e916ae6eb426f25ee50099da37648a82d7718177ed6cceefaa15424f677ab08e888718f942dd249ebfdd172d78bc104fab6ebdab4de9bbdc7a6b0f2f7090c78b1ccdd7793aa6da2df97a240fb9cd5a4fd265bfaad92662d2b30b357ea084967341c030bd2431badc255c01834174cf1f8993acfef16b57aa02bac3550ce236cded35cb16f7bceaba3f06cacc145dca8b9d8eee3aed08c2c390ffe4393a307cf18ca1cca2db0ca33d41ba45c1decba2204a3554e40ca1b70b7ba31759a7fb1fe43d708519de28c1f905ff5e1d42336048bd228f4bcd2a0485e682db825e4b5fff34f6c7ffc804bb33338ed08b887fe08c92cbb505e2232fe45608d470033e05a5d265e7f7bee4997abecd6aa3ec44478d65d222378c0d675ee7a16045a64a58212d39954d22c6164e09abdea361674f04c51e98326ea9eed530ff18acac8c5a248188d12f926828595f219c48221d363c200c5e6066ad72797a855c56e420cb9a7a2d2d93d212d43a0f5743968341271e51e38f641e57e70c4a4ff842e9e552567d37b315a73b87ed548198e3fbecfea63849c5c3a392d84ba91adf29a4f63a89e70393cd29feffa1d9244ff2efd3ad94a8e91c246dc2f0828130c8a28e1e4696591561de8f0c44005477823f0500", 0x1000}}, 0xfffffffffffffd7c) recvmsg(r1, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/61, 0x3d}, 0x40000040) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) syz_usb_connect(0x2, 0x4f, &(0x7f0000003bc0)=ANY=[], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003d40)=ANY=[@ANYBLOB="40ab4e00"/20, @ANYRESHEX=r5, @ANYBLOB="2b0300000040df00200012800800010067747000140002800800010423401bd7d0f8597ef7410d8cd26e16d4abe60ed3ebfc0530996a424bbf382980526fc2efdf8f963e996137fff982a4500cfcc5e2f87b99a17a6b843c051868a529b464c8367ae05537e79550cba86531b80ed04a8b6eefcad61e7106c9ee941d813352c071973d212f12700e90516f157c1c3cbae796c4f02f49ebfbfd4ac2b31075b0bd7c940e83a15cc228518673a7dfe6fb691307212fa6937a08fa452ca5c2ccc18c6723a56fc7a3ba2bfbd28ad519", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="aad91ba1441bc2b0544626fa8098a4a065b54bc802b6800e8cb481492cc90f70199f603b4581043212aa48b32db3ce048866fa96d5988afecb853600000000000000e265372ac5d5a35307eec30a70b6d3bc460a5341ab1615a78f1095812e8fdd6c340d9eb985485776723a6dd301466dd13c8809fb0049d4158a569f619cc610509718130b78bb1010fab88b288ea337b529e38229171b03ac6fd635e940c870c35317a0c9e081d32150f41a1e516c13da0b75800ed59bbd9681"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x1b, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002940)={0x0, 0x43, "dd2b7a4a55a7111b80b6625741271a3f884bff28799a2414d8a9894844f3aaeb317174b1dcdf323b96d0f17e1f1ec519430f82e3804cd9ec6ffb7b0f33190aebbcfd4c"}, &(0x7f0000000340)=0x4b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000003ac0)={r10, 0x11e}, &(0x7f0000002a00)=0x8) 1m34.642293722s ago: executing program 3 (id=2592): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$inet6(0xa, 0x3, 0x81) connect$inet6(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{0xffff000000000000}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468) socket$alg(0x26, 0x5, 0x0) msgrcv(0x0, 0x0, 0xfffffffffffffff7, 0x1, 0x86b1b18158a7c382) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'geneve0\x00', 0x2}, 0x18) r8 = socket$l2tp(0x2, 0x2, 0x73) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) getpeername$l2tp(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30) readv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/262, 0x106}], 0x1) 1m31.279994805s ago: executing program 3 (id=2602): getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x4c, 0x0, 0x0, 0x2, 0x9, 0xc, 0xfd, 0x12, 0x40, 0x10, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x3, '\x00', 0x4, 0x8000000000002}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000003c00)='proc\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) write$UHID_INPUT(r6, &(0x7f0000002a80)={0x8, {"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", 0x1000}}, 0xfffffffffffffd7c) recvmsg(r1, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=""/61, 0x3d}, 0x40000040) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) syz_usb_connect(0x2, 0x4f, &(0x7f0000003bc0)=ANY=[], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003d40)=ANY=[@ANYBLOB="40ab4e00"/20, @ANYRESHEX=r5, @ANYBLOB="2b0300000040df00200012800800010067747000140002800800010423401bd7d0f8597ef7410d8cd26e16d4abe60ed3ebfc0530996a424bbf382980526fc2efdf8f963e996137fff982a4500cfcc5e2f87b99a17a6b843c051868a529b464c8367ae05537e79550cba86531b80ed04a8b6eefcad61e7106c9ee941d813352c071973d212f12700e90516f157c1c3cbae796c4f02f49ebfbfd4ac2b31075b0bd7c940e83a15cc228518673a7dfe6fb691307212fa6937a08fa452ca5c2ccc18c6723a56fc7a3ba2bfbd28ad519", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="aad91ba1441bc2b0544626fa8098a4a065b54bc802b6800e8cb481492cc90f70199f603b4581043212aa48b32db3ce048866fa96d5988afecb853600000000000000e265372ac5d5a35307eec30a70b6d3bc460a5341ab1615a78f1095812e8fdd6c340d9eb985485776723a6dd301466dd13c8809fb0049d4158a569f619cc610509718130b78bb1010fab88b288ea337b529e38229171b03ac6fd635e940c870c35317a0c9e081d32150f41a1e516c13da0b75800ed59bbd9681"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x1b, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002940)={0x0, 0x43, "dd2b7a4a55a7111b80b6625741271a3f884bff28799a2414d8a9894844f3aaeb317174b1dcdf323b96d0f17e1f1ec519430f82e3804cd9ec6ffb7b0f33190aebbcfd4c"}, &(0x7f0000000340)=0x4b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000003ac0)={r10, 0x11e}, &(0x7f0000002a00)=0x8) 1m28.179417584s ago: executing program 3 (id=2612): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xff02, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008105e00212ba0d81050402020200030f100b067c55a1bc000900b80006990200000005001500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x378, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x1, 0x0, [@local]}}}], 0x28}}, {{&(0x7f0000000080)={0xa, 0x4e24, 0x7f, @mcast1, 0x898}, 0x1c, 0x0}}], 0x2, 0x4044000) 1m27.872042993s ago: executing program 3 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000008c0)=0x10, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {r3, 0xffffffffffffffff}}, './file0\x00'}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="05fbc377d432a8a23075a5000000", @ANYRES16=r7, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r10 = dup2(r8, r8) sendmmsg$unix(r10, &(0x7f0000008380), 0x400000000000174, 0x4008890) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={r0, r3, r11}, 0xc) 1m12.771838282s ago: executing program 33 (id=2616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000008c0)=0x10, 0x80800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2, {r3, 0xffffffffffffffff}}, './file0\x00'}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000002f40), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="05fbc377d432a8a23075a5000000", @ANYRES16=r7, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e0000000000000000000c0003800400038004000100"], 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r9, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r10 = dup2(r8, r8) sendmmsg$unix(r10, &(0x7f0000008380), 0x400000000000174, 0x4008890) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000940)={r0, r3, r11}, 0xc) 9.95616036s ago: executing program 2 (id=2906): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 32) r0 = getpid() (rerun: 32) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23) (rerun: 32) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010002000000fbdbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="000000000046d6c4f4231b4f05f10d060000000000000010af5b"], 0x28}, 0x1, 0x0, 0x0, 0x40008c0}, 0x50) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 9.249898422s ago: executing program 2 (id=2907): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setscheduler(r0, 0x5, &(0x7f0000002040)=0x1) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000002080), &(0x7f00000020c0)=0x4) (async) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f0000002100)={0x36, "cbb4d52bce82e83bb636d50b245226ecab3b5e7a120bc2e11c7043cb5298ab6856420d8046a5f650e33ee021ffc1025f9691beb2f1b5d9f1d5661d86bd7a4ecf0c9f79fabb6cc61a1f0974a71a56108135e3e6784af30f9b53ea3705ac5a8ddd68078b2dd16fa224fec320dfb0fc6b89ee0a9e3c59302fa6c78100e0720ee0ce"}) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000021c0)) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000002200), 0xffffffffffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002240)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async) r3 = syz_create_resource$binfmt(&(0x7f0000002280)='./file0\x00') execveat$binfmt(r2, r3, &(0x7f0000002380)={[&(0x7f00000022c0)='-@%\x00', &(0x7f0000002300)='IPVS\x00', &(0x7f0000002340)='IPVS\x00']}, &(0x7f0000002400)={[&(0x7f00000023c0)='IPVS\x00']}, 0x1000) (async) r4 = syz_create_resource$binfmt(&(0x7f0000002440)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff) r5 = socket(0x2a, 0x800, 0x2) (async) sched_setscheduler(r0, 0x0, &(0x7f0000002480)=0x7fff) (async) readv(r1, &(0x7f00000026c0)=[{&(0x7f00000024c0)=""/148, 0x94}, {&(0x7f0000002580)=""/166, 0xa6}, {&(0x7f0000002640)=""/82, 0x52}], 0x3) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002700)={'team0\x00', 0x0}) bind$xdp(r2, &(0x7f0000002740)={0x2c, 0x5, r6, 0x28, r5}, 0x10) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000027c0), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000028c0)={&(0x7f0000002800)={0x88, r8, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6c06d5d2, 0x5a}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xfe}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x88}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r9, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x74, 0x0, 0x14, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x74}}, 0x4000000) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmsg$inet(r9, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002a80)="8b205ed22e9092fcbf8036a0a802749af722a7b0bf02e6c8e1e025faa3062dc594809a9460b1d6f8528d35cd7fb2488db2eaef36f2e8a123a369142127f17c24b469c6295b468f3b8fd0fffedaf695aed495f824fc7542a441476ee214bf954cc5abac7b754d01239d5d03c75ee6c2a8f0fa3e0cf66388337152fa0d887fc4938d2123507392525bd85c3b53f5753978aa45b83f0751c855cc9c91abea18e591140a406b1221dce5b6bda0e0d66ebe9c8249cec3f1c7a19504c791c7f197a927c539da47080be9c8064e7502947a80a4f012c550dd1356b74900fb53d7c43823cd78870d1cf03ca72e9fed30bf81d3253ac1bfdf4ca753939bea49b31c0cb9399792a8a8de5994a0e303c981d2d7b35e10809295a77b6bd255cbedd0462f502726a13bed83356f1d5f1aaa99a7d79e2ff4351d7e2f74191db7536b596a6432294cb397404cbe8ee55026815875e2ebba2863f7c74cba641538313320a1beb2647b2af7f0616916f13c04c0cea631bf2fd4b3e8afff7d7045e5319404b4c21707a12abd219edb29bfe7f6fe43c3f9038b3850e772917d33956701d65f548b2b4283b627b3bfbe0bf5dffe9f1388ca6197055f0f1690c86d1168d75d4dac6862d61afc1d6e73064506f94c9566b5b5c82281911c1a26655844db1418fb4e20235809cab86d6ede91d64063feda2248787594bf2eeb92e78ce5c814520afbdd4e6a33fc9a76a56c6eeb8cce48de8bb2880eb5734a46043c829c22dca3754798c8f64a8732b61b1e154f29b4277027d9714a7f2ebc221d057aad7feefd676abb34b626f6feea48083fbbc3082da36c75ea4a91dccdf19e064ae923b73ffb5dbf0277da86352557dfb724966fd2db221558aa8623dbb6f24731f7d262fe63d4d4f754af6e474960d576c2d31bfe13b7fc50caf29061b00940fecd28fb172534401db7f5fe7943b921b9c36667ffb156e93900d87cda242802624c3d4ee1b4d31e172743b1da846391eb0b6f6c9fbb346e1052d1590813d1fb39b658f3591ee67a485543a4e28fac78c130a017670d708799ce9dc20ac0bf37345e73d20fe9f207d98c7fd52a400c6ecd42a368f42878ba79d1b401bf8b3e460173b21e95397535da4d478fba5251ee0488ea97df37efc73db8080fd810c971d65e4f2508ff355ffc3fc2073bd9125aaca94d6d1ebde83de16e78e6d54b919b9bdba50dbc49af25ae82dd3a84ab4b33a62eeded3812d2101d12f76c1cdda1c3b20cf0833f180b733d7f4bc1105eeb626490127cfca63b7204eb89cded77bd7af32e163e756878e9269c7e89d1ad6e98264ef3aa548c0820fa451becc5c6fe1e36f1f59987a16f084eb52acf6c3c8d3ef39f50fd1c88e5934debda2b60da02d4d6d13c0370537e4c76b17d8f7aa6effbbb21ac56361d17ea0680a62a17730ddf0e28327776bc999cca1c84c575ca7eca2c135d12e597b4549fdfeb8febbb097a80361a01b5a091db9194cdd16f3392834dfabf47854bee3d575cdf64aae1b8aa32df9d03932d58131f4683c17d46ef5b4816c24eff2a47add490fff1f2cec19e3f74bd9f77199a37a8146b125c7bb7008728a9edeb47fb373463f5278189e7cdcfc80b90637fab9b0768992a2238fcb612dbc117f466f17cbdbdad08e42e64660fe47e0fe3676170292be288b7357ffd35b73643e1e1de6234b7784b7a6fb4b9824a0633a5b14b0b97d4cc51121ca5b542cd60c775a9b6c8b2d5d905865f84bf35c6024f61f15cdde8fd5a2274c1b07997aaed3a172750ce166842df3f84e6edc8e31dc37c6b5d34a1fb7f206ed094c6a3748f3228cca6d39ca2985fe99dcce11769623ec7b9b5cb7be291c6144f4df585efa2babde90fa12d62edd5e5412ecc39a5ee19666bc537939a00c2f3565a79dbd3f6041103b5f1e1bd098d813d7d24babbe8d138f232213953652a32ff3c8ee1e3ddb1c8efd414085c162b9e9bc2b8743a473f27617cd6857bf3b07ad277ec56b95feac85247e8530f78713aecaad2156200ca162ac5edbc7fc4e9e2f78811105d529dcdcca443dfa111b7d349d11bd8dac4f38c91068ce511f2fdf7c6a25ae76f373f4578c2691e8f40e92eb3df57c232519fdf801cf447fe97ea6372c1e84f4843fff59d6461c871ca479a323ba3a7ade862a38f11766a94f2138cae1c0d3cbb8e7150858b577abde744e76ceecbb8980e16d398d5f489c772059b77dbc08067677ec6ac4c03b7560ef1a1172324c6c1f2130e3b358653abf1677cd43ce9ede5fb24377d55ccb83ac51835013668a20e4b6dc1aba0800e65827e580008aa3717cdce69ec47d10025e351e53b79bcc4fce4935259ca66a8d52d865f301e0fb33482cc8b169fd43265e09d92337daaccf3bdf2182166672fd7d1f5b82a48f2e9d7b100f45ed7997ebb70b6b7a396c886cdfcc9b767034c584ab46e338b4a584482c8b03a88c93af0db397387df937122f3009bbff014c9d2b7b963212a6af233844a4606d1fdd9b1f5077b18c8d9d1cdce572766570d8d8daafa827d192f705bdef0ca4381f2462ee3e06c8340689f5742ef34239b90232b470efa618d213198185f84c08a6088c963ccf9651f36118783b7c96f23893401117982b35190baceb3fc0a3b5f094cee968a31eb63c104cd0ba9778f94b1f7c7375a33e8cac7d9dc3240743a677e3d23a7c56c1b24e11f149a5694881fb7c2b491ecf7a03230ffac67b6a17d62fbf8c896ab12c78dfc58b4a14de837514e326f3327d3f4ecad597ec2f8cef6cd12472538645333354e02add2a9e9f3277f11ede3e5a2b5f43177ab637fc5b98b7c0ba96e765209f544be928bc2f011b75f4fb6e48cb446fecce92b82dec9ee06d967d94a29f450cbfd7f55344e6170cbbfba5976dee972a1d9e92e1f6c25f30a9aec2e9e62cecb4e35084b20d17d5c4a0ed85721e1d832259b500f8f8134ace505aeb26c303cad41e5e363e9b83f04dd7ea787614d306b26088659ca82ac66d48552a6cb5913b5eef53867b616a0994cd674e1e0aa17e00870fdc05c7df9fd1beb2cb4ae7c41a0d7967f71eb48140c0f5c080495ad60e4f7e562877b181c41d5226e19c2838d0ec357f7c19e7bc4dcb2e84ea4bafe27e60477ea3eb0c684658d1d066d344b5dd52a544f67c930b979974e21ada8b7bd533bdf861a7ba112d63af98037d035cbde2fb1f67490f6d21e84f125e1d6f5d5832804f7f215574d06b08c91b596821ee7c3a898dce875f6ea546e083faa40e11e98bde657073542bf47653d75ca2c968c08695fb62be9238cf757f237e20d965915a7798a14d00c052585ffb3919468b8c697bd43102a4025c0aed7666cd0526718341867ad30be1002b72f9c8edc66f844f8d655b1f1e803736112fda14ed72de45f501757815a218c920457c24d2d5848a7c740af90a0958d3f1773c2a9ddcfc1082e98d16f099e6c97266bd18f12801a086ce53f448840cb092380934537de9f7d25abbea9b623e6ffd7e52eece98aa80845f6e72855191784e43ec76833279c033181a83d6a20f8d471c87215d2e1355bf420701029318dfdad1123c8d5fe0f2f5d5e2a327334197dbabb8ce9bc638080b99940fd8f9e54e3fbc4dc6a760a941d265bd5b76bc4fd9b9441a4fe73176c9b6bb800f0286a3e5953215b6de28bbe8015c236f0a2af08030061ad35178b9ed43a044c04e2c465753be34045da6684b0c33f21d91847fe2887228f60201d6498894db50ea08acfbc10a67b774f07d12d26f6c1d6e5f39e6090b1606f192662ecab70e9d4dda43064ea25389a8053f398b756c2e43d859b3cf284a3ff571fb4a56b18511074e61d141e87b802fa3989a1613668ebaa5cc51eb0efdaa7fa25d4d7e5dcc15e4303f95ae0b78f46ccf2faa6c9a173e1257105433993ba09080bbe1c751ccabd49797c01d80676d3f9cac698e36f388c52fe53fc167095b0d6985506f0fcd9ef0f261c682175b9b3d0c1da6abe695fc4631cbb5b5030103a3fa05fe485f08b8e3003121e493cf86152aff7f2b5e65a13c76263bf902356264b123cb4f4a6b9080f26a12ee5d75683b83f9095c64f5b9a0b9250f62ad2665e2d9e0f1c8cacb417c36cb607673262717eb8db4af09182f8cee8f00c32dad31204587030e452dfe463dd4a909772bef6c92fcddb77bf41f5da032a2f187bbaa05347ebb0dcc781030afd3473a25e54f5666f53cc0c19480f21769d4db1ad641efb3f315ff6122850ef1ebdd81c513db1d4df8524ef3c5e1b80cf96feb2a305bc9e159ac2e779311476b2b11db6fc3c97d8ca13ecb5468bd35cb611a36caa95885313d2337e22b4c1cd1d08777daab5cc8f76167bb1afa59013f526f34d5062a33e79ca2061a691b4de7aa1a09918994462dca490652d2ef5af29d783e7bb51cb42880beb1225f68344545f11d0b4eb2b255b419a131fd82d3c29a35be971c013e639bf492e064deb385f764cbb073cdc69c2bb3677626320dcc1084a490c31d689ea544603f081aa630d41432e8d48b59dc2d986f31a4381946ce04af245a8d582670308dfc4c323ba3f79651359c19407d7f7aef0fda0994a0826bc9532bf7413ca07dd19c228e99af033adf32c25b426cd6d5755b8e90d438d7e4d897cc057d736cb3095d8113cc0b0348024ea3e860f91ae5118a95e6e9a11eea3a15afb93b78c6f7f05065700b979ca302a25ac90c1ddb5346ae60e5f1d933cb9675751aff2634dfc57720de9930d5007abdc962f96381f93c1d487b626e3beda345322a24f20f91aad30ea776f2c2ab08a5d8e4a950920ee5b4bb24882985176816664c2c47a613296ec0ee8535991c5d1a32591d4c1a47eb28dcbb007f4bbc77ccc417c7dc8a6402603f09424eedf5187416d838581dd092c5d03480dc7ccd26684b494c8d977ce2dac2252a8359ac52249c8611412fdc9583b5eceb60b36a33779b7ee3316f4845aa515640601108eeff7a43d2dee15f76e9cbbf6d18afd6588c63f290c97fe51aa349d4cea8e1e16c047728a86a51243f0d6ceec3feae04dfcdf8b91cdfa428a1899ac686cce849102f55061030a597c994e16787656c67bde8e44a7d0f23cab469237fd7ddb6b580aa409268e78883d38b58e8eb8290b02aab198354430fa060df3e8fd69d70075d670ebfb6c630dae603903472e80cf975a20e6e25e683d9e110f0c7f668b0fcf203633f438dbf613e13c7c21dd794dde153447630a9fe105244342a92ba99554e01510a45822580c6e54f8a0bdfb72c70dd80db00b916df02e23e1489d6cd89d8652b0d9ef09748bed05d95f7b4b918337e35caf9ad45b2ccfa526972e2c57f1ab745621b0ee4d6be6bdc6f2250f4c599a20cd2e28813518e8f0461f0413cd2bf3d07cdcece61df16cedb631b8cbd9105c691df5f189adf207b3fa882cb950f3a6bd739368c4a93288b933f770938b19c3c26a632c0ae7733fc137b069aa04b9a803426a743d4a92642fa07b8afc29f4d4cbfce05c5aa81e154af14f3eedaa30ede838a8c6f38213af6b62820f587ba1d0d204a288dce212b5b839bcc0f9b1f9bc07b1a8bf149ca7851f6e2a13a244772772e6255786d74d86ef25102e2d80f9bbac63dd9c2a32a3daabfa698ce984c9a703b860c4523c053c59cc67cce7acfc259c23a3b92c7fc83be16b63e0efe35a03eb157554513c0b77fced2db90d1162275d7431713e520eba9b562e8be9f4d3beedf0d4e9562f736ed651eae00560d39b07a453af068a6276ec3954e6d0e534b0a86544b663b44a9e8f405e665291fb5924cb", 0x1000}, {&(0x7f0000003a80)="53062d6682b093625c886c5eaca6aa5c4803d89e1d3af981217a1167ff97524102550ffbb8083b660f8c80e72d4f01728ef5c7017b8a09a813ea3c475582866f9e99f5e337313a1e3ba60f787905a3087e9aad5cd3ce5193e97e97203407ace1587b61cc31af1386758f8800af819afcbfe339bc1dec067efa4f1c3098759de0c31003147dde393a302bab54e1a80e97304097c3a963418d5f5b3a93fe24c3d2019d3f3fa0fbe89c7f061d0b7e820bf7ca91d84860d1eef0bf049136e04e504a641d47f41dcba706ec27966ec07fd053447751fc4481d8213ed5e9ce9149f642639dc867770fe653cc6daba9b8af", 0xee}, {&(0x7f0000003b80)="b9855734d6c0bf6d6c876181544d2aeea15078eebcaaf7d6c8deb6d46506621a23ac54fdb1ddeb5408fcc2805d95f7c82ec19e90424945dbbc9bdf962819875aeb45561abc1c0892035dfcc419351f64fbe27d323456e2b96f53593c470c3461a64cef6c63ea8a11e164830ce2ca4c3b0653e1544462dcadac40028360129455983d987d9a5a17401e93cb6b24bee58e2413d937a8e92f72cf1b1811f5d046fed95bf564bbcce36b1d13e3fda89b90abe0abf946b8bbbd2e2f2d3e358600a5e5b65678fc60f49a953b0eceb33e96a79e50b1477274743267e676775c38d42898ea0d6d054cf92800a7d4fa4c5da903f61e224c66d06b", 0xf6}], 0x3, &(0x7f0000003cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @local}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x5a, 0x0, 0x0, [0x100]}, @lsrr={0x83, 0xb, 0x52, [@remote, @local]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x88, 0x1, 0x2, [{@remote, 0x5}, {@private=0xa010102, 0x69876080}, {@private=0xa010100, 0x899}, {@multicast2, 0xd}, {@local, 0x2000}, {@multicast2, 0x7f}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xd0}, 0x40800) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000003e00)={0x3, 0x0, 0x1032, 0x6, 0x9, 0x1b, 0x1}) (async) accept4$ax25(r5, &(0x7f0000003e40)={{}, [@netrom, @bcast, @netrom, @remote, @rose, @netrom, @rose, @rose]}, &(0x7f0000003ec0)=0x48, 0x0) (async) connect$inet6(r2, &(0x7f0000003f00)={0xa, 0x4e20, 0x528a1e4b, @empty, 0x5}, 0x1c) (async) prctl$PR_GET_THP_DISABLE(0x2a) (async) preadv(r2, &(0x7f0000003f80)=[{&(0x7f0000003f40)=""/23, 0x17}], 0x1, 0x8, 0x5) (async) ioctl$BTRFS_IOC_SNAP_DESTROY(r7, 0x5000940f, &(0x7f0000003fc0)={{r9}, "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"}) 9.014726143s ago: executing program 5 (id=2909): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x8401) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3}) (async) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x200, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_STATUS(0x1e, r4, &(0x7f0000000340), 0x5005) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, 0x0, 0x0, 0x0) (async) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 8.972270509s ago: executing program 2 (id=2910): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0xc0000005}) sendfile(r0, r1, &(0x7f0000000000)=0x5, 0x20001) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={r4, r5+60000000}, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) 8.969704394s ago: executing program 5 (id=2911): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000840)}, 0x10000}], 0x1, 0x2040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000120000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 8.884447593s ago: executing program 2 (id=2912): getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @remote}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x4c, 0x0, 0x0, 0x2, 0x9, 0xc, 0xfd, 0x12, 0x40, 0x10, 0x0, 0x4, 0xa, 0x0, 0x0, 0x0, 0x3, '\x00', 0x4, 0x8000000000002}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000003c00)='proc\x00', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r4, 0xcccccccc}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) write$UHID_INPUT(r6, &(0x7f0000002a80)={0x8, {"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", 0x1000}}, 0xfffffffffffffd7c) recvmsg(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/153, 0x99}, {&(0x7f0000001540)=""/145, 0x91}, {&(0x7f0000001600)=""/228, 0xe4}, {&(0x7f0000001700)=""/144, 0x90}, {0x0}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x7, &(0x7f00000028c0)=""/61, 0x3d}, 0x40000040) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f0000000240)=[r4], &(0x7f0000000200), &(0x7f00000000c0)=[r5], &(0x7f0000000040), 0x0, 0x300}) syz_usb_connect(0x2, 0x4f, &(0x7f0000003bc0)=ANY=[], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003d40)=ANY=[@ANYBLOB="40ab4e00"/20, @ANYRESHEX=r5, @ANYBLOB="2b0300000040df00200012800800010067747000140002800800010423401bd7d0f8597ef7410d8cd26e16d4abe60ed3ebfc0530996a424bbf382980526fc2efdf8f963e996137fff982a4500cfcc5e2f87b99a17a6b843c051868a529b464c8367ae05537e79550cba86531b80ed04a8b6eefcad61e7106c9ee941d813352c071973d212f12700e90516f157c1c3cbae796c4f02f49ebfbfd4ac2b31075b0bd7c940e83a15cc228518673a7dfe6fb691307212fa6937a08fa452ca5c2ccc18c6723a56fc7a3ba2bfbd28ad519", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="aad91ba1441bc2b0544626fa8098a4a065b54bc802b6800e8cb481492cc90f70199f603b4581043212aa48b32db3ce048866fa96d5988afecb853600000000000000e265372ac5d5a35307eec30a70b6d3bc460a5341ab1615a78f1095812e8fdd6c340d9eb985485776723a6dd301466dd13c8809fb0049d4158a569f619cc610509718130b78bb1010fab88b288ea337b529e38229171b03ac6fd635e940c870c35317a0c9e081d32150f41a1e516c13da0b75800ed59bbd9681"], 0x40}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x1b, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002940)={0x0, 0x43, "dd2b7a4a55a7111b80b6625741271a3f884bff28799a2414d8a9894844f3aaeb317174b1dcdf323b96d0f17e1f1ec519430f82e3804cd9ec6ffb7b0f33190aebbcfd4c"}, &(0x7f0000000340)=0x4b) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000003ac0)={r10, 0x11e}, &(0x7f0000002a00)=0x8) 8.292250134s ago: executing program 5 (id=2914): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="401912"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.785643879s ago: executing program 4 (id=2918): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x8006303, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 7.680222322s ago: executing program 4 (id=2919): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "1d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000480)={[{0x9, 0x0, 0x1, 0x8, 0x8, 0x4, 0x4, 0x6, 0x4, 0x3, 0xf, 0xc0, 0xa8}, {0xaf, 0x6, 0x6, 0x5, 0xf9, 0x4, 0x9, 0x30, 0x6, 0xee, 0xfd, 0x1, 0x3}, {0x9, 0x6, 0x9, 0x0, 0xff, 0x86, 0x2, 0x5, 0x2, 0x9, 0x7f, 0x1, 0x5}], 0x1}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68ff, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000580)={0x0, 0xa, 0x2, 'qu'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.48805307s ago: executing program 0 (id=2924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000840)}, 0x10000}], 0x1, 0x2040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000002b0000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 5.779827177s ago: executing program 0 (id=2926): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fsopen(0x0, 0x0) fsopen(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1, 0xf0ff}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x6, 0x3, 0x0, 0x0, 0x2, 0xdf, 0x6, 0x4, 0x2e, 0x4d, 0x0, 0x33, 0x0, 0x40, 0x8, 0x2, 0x7f, 0x0, 0xbb, '\x00', 0x4, 0x403}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000015000072000040"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000040)={0x3, r8, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) 5.633393359s ago: executing program 2 (id=2927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x5885, 0x4000, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2d02) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0xf3, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0x58}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/182) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000"], 0x8, 0x800) getpid() r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba", 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000050000000000000000bfb1000000000000000000"], 0x50) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r9, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="04000000039100000100e7ff29a50000008502d66c31000000000000000000000069ecd4e2bcf4b576dbb35f6a9e08fc762cca039f194dd79bc7743a37c884990121a6b7675571ed600382a6b96f589562294b5e330236ca3256f568cced22c309010ebebb0eb8c9ee9bbbcf0ff275cfd18cd3eb4e93c6de413a56fcd6989ae9f86ea04db4013b93b05e9816b0662fd2"], 0x50) 5.552804765s ago: executing program 6 (id=2928): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3b930000802200001c0012800b000100697036746e6c00000c00028006000f00000300005405a80833cb54148f44ef6fe3518eee1a8f36ceff61659874196f7b2196deb56f74d4701f151c847fad701e8bb6"], 0x3c}}, 0x40080) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000500)={0x1ff, 0xf64, 0x0, 0x5, 0xfffffffffffffffa, 0xfff, 0x5, 0x9}, &(0x7f0000000540)={0x1, 0x7fff, 0x1, 0x9, 0xd5, 0x3, 0x0, 0x7fff}, &(0x7f0000000580)={0x4, 0x3a, 0x8, 0xfffffffffffffff7, 0x7, 0x7fffffffffffffff, 0x4, 0x7}, &(0x7f00000005c0)={0x77359400}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="18"], 0x48}], 0x1, 0x40) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) dup(r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000880}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x80605414, 0xffffffffffffffff) r7 = memfd_create(&(0x7f0000000880)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\x91\x8a\x11A\xc2\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86/1\x19cC^\xccX\x14', 0x3) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_debug_messages', 0x80802, 0x0) sendfile(r8, r8, 0x0, 0x6) fcntl$addseals(r7, 0x409, 0x8) 5.156088579s ago: executing program 0 (id=2929): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=@gettfilter={0x64, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0xf}, {0x10, 0xfff3}, {0xb, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x7fff}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xf3}, {0x8, 0xb, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x40000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x5c, 0x64, 0x531, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0x5}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffffff, 0xffffff00, 0xff000000]}]}}]}, 0x5c}}, 0x1000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES8=0x0], &(0x7f0000000480)=""/246, 0x64, 0xf6, 0x1, 0x37}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000580)=""/70, 0x46}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0xc00c0, 0x138) r10 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r11 = fanotify_init(0xf00, 0x1) fanotify_mark(r11, 0x105, 0x40009975, r10, 0x0) fallocate(r9, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000380)='ext4_unlink_enter\x00', r3, 0x0, 0x2}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4014, r0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) 5.141170446s ago: executing program 4 (id=2930): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xee60060, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.87728849s ago: executing program 4 (id=2931): r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x940c, 0x3002, 0x210, 0x2c0, 0x320, 0x3d8, 0x3d8, 0x320, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@ecn={{0x28}, {0x10, 0x2, 0x7, 0x3}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) ppoll(&(0x7f0000000000)=[{r6, 0x2}], 0x1, &(0x7f0000000280)={0x0, 0x3938700}, &(0x7f0000000300)={[0xf1]}, 0x8) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xfffff) 4.195012936s ago: executing program 5 (id=2932): socket$kcm(0x10, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='itimer_state\x00'}, 0x10) setitimer(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0xfffffffffffffe31) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000040)={0x0, 0x2315, 0x9, 0x0, 0x7}) listen(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$binfmt_format(0xffffffffffffffff, 0x0, 0x0) 3.428160651s ago: executing program 4 (id=2933): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x4, &(0x7f00000007c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$rtc(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x60f7, &(0x7f0000000a40)={0x0, 0xf687, 0x2, 0xfffffffe, 0x3bd}) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r3) close_range(r2, 0xffffffffffffffff, 0x0) 3.184775484s ago: executing program 5 (id=2934): r0 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000044c0)=[@tclass={{0x14, 0x29, 0x43, 0x2}}, @hoplimit={{0x14, 0x29, 0x34, 0x975}}], 0x30}}], 0x2, 0x81) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f00000001c0)=""/148) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) io_uring_enter(r4, 0x94a, 0xbca4, 0x10, &(0x7f0000000000)={[0x4]}, 0x8) ioctl$sock_rose_SIOCADDRT(r2, 0x5411, &(0x7f00000009c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f00000000c0)={0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.872409635s ago: executing program 2 (id=2935): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42, 0xc2) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000002040)={0x7e, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='7', 0x1}]) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000001000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d"], 0x148}}, 0x0) 2.841512403s ago: executing program 6 (id=2936): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) (async) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x2, 0x0, 0x0, {0x132e712c, 0x2fd, 0x3ff, 0x3d45}}) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) io_submit(0x0, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x14) (async) clock_adjtime(0x0, &(0x7f0000000240)={0x7fffffff, 0x400000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) (async) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) read$FUSE(r6, &(0x7f0000001240)={0x2020}, 0x2020) (async) write$binfmt_aout(r5, &(0x7f0000000380)=ANY=[], 0x20) splice(r5, &(0x7f0000000040), r7, 0x0, 0x808, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010102, @empty=0xe0000001}, {0x0, 0x4e21, 0x8}}}}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 2.66022309s ago: executing program 6 (id=2937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000300)=@phonet, 0x80, &(0x7f0000000840)}, 0x10000}], 0x1, 0x2040, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff0200000000000000000000000000010000000000002c0000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.12284469s ago: executing program 6 (id=2938): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)="604a772826dea736729103ad8de752c24b2367617ecb7b6e6831a11ecd0b3617817414bf3243338133aeb1ef59f7bb", 0x2f, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) add_key(&(0x7f0000000200)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060826d775bb1aeca7ca3792", 0xe, 0xfffffffffffffffc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x2010}, 0x20048490) syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) (async, rerun: 32) syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) (async, rerun: 32) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_create1(0x0) 2.082614455s ago: executing program 0 (id=2939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0x9], &(0x7f0000000140), &(0x7f0000000180), 0x0}) 1.08802334s ago: executing program 0 (id=2940): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.040204189s ago: executing program 6 (id=2941): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x1, 0x9, 0x8001}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x2000, 0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$userns(r2, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) 555.475109ms ago: executing program 0 (id=2942): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) rt_sigqueueinfo(r0, 0x3e, &(0x7f00000001c0)={0x16, 0x9a5, 0x3}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xfffffc01}}, './file0\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, 0x0, 0x10) r4 = open(0x0, 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141302) writev(r5, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18050000000004000000000000000000850000007d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000640)=r8, 0x4) sendmsg$unix(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000090) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r11, 0xc040aed5, &(0x7f0000000280)={0x10000, 0x108000}) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) r12 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r12, 0x3, &(0x7f0000000180)='utf8', 0x0, 0xffffffffffffff9c) syz_usb_connect$uac1(0x5, 0x9f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102000000406b1d010140000102030109028d0003010320100904000000010100000a24010100050201020624440206460904010000010200000904010101010200000724010401050009240202ff03010000082402016904050a0905010900040705f8072501010104080904020000010200000904020101010200000924020203000900ff07240181a002100905820999480471040725010000a600b2a18b8cb95b25d915d10536200206193d3439cf9695eca887640110b108f97dc3c74a0bc571d1176cf2af6ed7daf8baa1350d3d9aec790688ca2800a703004b0eee3b39be66236000"/247], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 548.063518ms ago: executing program 4 (id=2943): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x20) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000280)={0x14, &(0x7f0000000040)=ANY=[], 0x0}, &(0x7f0000000740)={0x34, &(0x7f0000000500)={0x60, 0xa, 0x5, "97d105a316"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 90.17376ms ago: executing program 6 (id=2944): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/84, 0x54}], 0x4f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x3c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8809}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x806}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}]}, @NFT_MSG_DELCHAIN={0x16c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x66, 0xc, "38b4c7639375b4434958f3197786abf3194842304a4369c2403cd7fde8683e48bd0bf7862320c87ac402cb3a3275e260241374b8416d0af1babf8fcbc200ec220fd4930c70967fb796348d4b6b6b344bbe8457ef3e097f925f02e2fb327ed4f6aac9"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x75c5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x26}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xad17}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1bd1e2f2}, @NFTA_HOOK_DEV={0x14, 0x3, 'nicvf0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c00315f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7dce9ae3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1f0}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00') pread64(r5, &(0x7f0000002c00)=""/4126, 0x101e, 0x8b) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r11, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) timerfd_create(0x0, 0x800) r12 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x6776, 0x8, 0x22, 0x335}, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(0x0, r13, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r12, 0x47ba, 0x0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x8002, r2}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r4], 0x44}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x8e383, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='nfs4\x00', 0x0, 0x0) 0s ago: executing program 5 (id=2945): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20d00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000400)={0x0, 0x5885, 0x4000, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2d02) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0xf3, 0x0}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_NOP={0x0, 0x58}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) uname(&(0x7f0000000000)=""/182) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000"], 0x8, 0x800) getpid() r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba", 0x2) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000002000000050000000000000000bfb1000000000000000000"], 0x50) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=r9, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="04000000039100000100e7ff29a50000008502d66c31000000000000000000000069ecd4e2bcf4b576dbb35f6a9e08fc762cca039f194dd79bc7743a37c884990121a6b7675571ed600382a6b96f589562294b5e330236ca3256f568cced22c309010ebebb0eb8c9ee9bbbcf0ff275cfd18cd3eb4e93c6de413a56fcd6989ae9f86ea04db4013b93b05e9816b0662fd2"], 0x50) kernel console output (not intermixed with test programs): 4][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.971866][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.003085][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.010290][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.035077][T15335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 773.073150][ T5889] usb 6-1: USB disconnect, device number 55 [ 773.080809][T15335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 773.311541][T15335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.325472][T15951] syz.3.2490: attempt to access beyond end of device [ 773.325472][T15951] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 773.341935][T15951] vxfs: unable to read disk superblock at 1 [ 773.352241][T15951] syz.3.2490: attempt to access beyond end of device [ 773.352241][T15951] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 773.371900][T15951] vxfs: unable to read disk superblock at 8 [ 773.386481][T15951] vxfs: can't find superblock. [ 773.738255][T15967] --map-set only usable from mangle table [ 774.319753][ T5818] Bluetooth: hci1: command tx timeout [ 774.642439][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 774.642455][ T30] audit: type=1400 audit(1751665383.732:5652): avc: denied { bind } for pid=15975 comm="syz.5.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 774.697704][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2496'. [ 774.739986][ T30] audit: type=1400 audit(1751665383.782:5653): avc: denied { nlmsg_read } for pid=15975 comm="syz.5.2496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 775.096068][T15335] veth0_vlan: entered promiscuous mode [ 775.130593][T15335] veth1_vlan: entered promiscuous mode [ 775.328256][T15335] veth0_macvtap: entered promiscuous mode [ 775.356843][T15335] veth1_macvtap: entered promiscuous mode [ 775.397487][T15335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.422348][T15335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.452395][T15335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.489208][T15335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.518290][T15335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.541773][T15335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.660219][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.681910][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.694871][ T30] audit: type=1400 audit(1751665384.782:5654): avc: denied { shutdown } for pid=15981 comm="syz.0.2498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 775.751858][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.761772][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.780420][ T30] audit: type=1400 audit(1751665384.862:5655): avc: denied { mounton } for pid=15335 comm="syz-executor" path="/root/syzkaller.hujuSV/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 775.810401][T11658] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 775.838092][ T30] audit: type=1400 audit(1751665384.862:5656): avc: denied { mount } for pid=15335 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 775.903529][ T30] audit: type=1400 audit(1751665384.862:5657): avc: denied { mounton } for pid=15335 comm="syz-executor" path="/root/syzkaller.hujuSV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 775.962753][ T30] audit: type=1400 audit(1751665384.892:5658): avc: denied { mounton } for pid=15335 comm="syz-executor" path="/root/syzkaller.hujuSV/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 776.023692][ T30] audit: type=1400 audit(1751665384.912:5659): avc: denied { mounton } for pid=15335 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 776.034880][T11658] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 776.073442][ T30] audit: type=1400 audit(1751665384.922:5660): avc: denied { mount } for pid=15335 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 776.096248][T11658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.096278][T11658] usb 4-1: Product: syz [ 776.096295][T11658] usb 4-1: Manufacturer: syz [ 776.096310][T11658] usb 4-1: SerialNumber: syz [ 776.120329][ T30] audit: type=1400 audit(1751665384.922:5661): avc: denied { mounton } for pid=15335 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 776.147925][T11658] usb 4-1: config 0 descriptor?? [ 776.179676][ T5889] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 776.331352][ T5889] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 776.389462][T11658] usb 4-1: USB disconnect, device number 84 [ 776.395329][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.406710][ T5889] usb 5-1: config 0 descriptor?? [ 776.840169][ T5889] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 776.855350][ T5889] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 776.879802][ T5889] asix 5-1:0.0: probe with driver asix failed with error -32 [ 777.390662][T16096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2518'. [ 777.764128][ T5825] Bluetooth: hci1: command 0x0405 tx timeout [ 777.955252][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 778.109788][ T5924] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 778.272955][ T5924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.285548][ T5924] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 778.296845][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 778.296898][T16143] IPVS: persistence engine module ip_vs_pe_ not found [ 778.312617][ T5924] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 778.338137][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.365746][ T5924] usb 6-1: config 0 descriptor?? [ 778.379242][ T5889] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 778.529229][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 778.536369][ T5889] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 778.545337][ T5889] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.557479][ T5889] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 778.568090][ T5889] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.581969][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.583857][T16104] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2521'. [ 778.590621][ T5889] usb 3-1: Product: syz [ 778.603328][ T5889] usb 3-1: Manufacturer: syz [ 778.607932][ T5889] usb 3-1: SerialNumber: syz [ 778.719314][ T10] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 778.831291][ T5924] corsair-psu 0003:1B1C:1C0C.0013: unknown main item tag 0x4 [ 778.839109][ T5924] corsair-psu 0003:1B1C:1C0C.0013: item fetching failed at offset 1/3 [ 778.848091][ T5924] corsair-psu 0003:1B1C:1C0C.0013: probe with driver corsair-psu failed with error -22 [ 778.883496][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 778.892886][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.900961][ T10] usb 4-1: Product: syz [ 778.915307][ T10] usb 4-1: Manufacturer: syz [ 778.920025][ T10] usb 4-1: SerialNumber: syz [ 778.933325][ T5873] usb 5-1: USB disconnect, device number 44 [ 778.940861][ T10] usb 4-1: config 0 descriptor?? [ 779.042454][ T5889] usb 3-1: 0:2 : does not exist [ 779.300327][ T5972] usb 4-1: USB disconnect, device number 85 [ 779.341542][ T5924] usb 6-1: USB disconnect, device number 56 [ 779.969175][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 779.969193][ T30] audit: type=1400 audit(1751665389.052:5670): avc: denied { write } for pid=16212 comm="syz.4.2533" path="socket:[42323]" dev="sockfs" ino=42323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 780.068214][ T5889] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 780.111853][ T5889] usb 3-1: USB disconnect, device number 70 [ 780.939713][ T30] audit: type=1400 audit(1751665390.032:5671): avc: denied { create } for pid=16242 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 780.983267][ T30] audit: type=1400 audit(1751665390.032:5672): avc: denied { write } for pid=16242 comm="syz.4.2537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 781.416376][T16253] xt_connbytes: Forcing CT accounting to be enabled [ 781.423394][T16253] Cannot find add_set index 0 as target [ 781.464367][T16254] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 2, id = 0 [ 782.143511][ T30] audit: type=1400 audit(1751665391.232:5673): avc: denied { create } for pid=16264 comm="syz.3.2543" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 782.143950][ T30] audit: type=1400 audit(1751665391.232:5674): avc: denied { associate } for pid=16264 comm="syz.3.2543" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 782.236011][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.327730][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.401334][T16265] overlayfs: conflicting lowerdir path [ 782.404677][ T30] audit: type=1400 audit(1751665391.482:5675): avc: denied { mounton } for pid=16264 comm="syz.3.2543" path="/487/bus" dev="tmpfs" ino=2632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 782.406864][ T30] audit: type=1400 audit(1751665391.482:5676): avc: denied { add_name } for pid=16264 comm="syz.3.2543" name="work" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 782.498213][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.589797][ C1] vkms_vblank_simulate: vblank timer overrun [ 783.060977][T11658] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 783.068889][ T30] audit: type=1400 audit(1751665391.482:5677): avc: denied { setattr } for pid=16264 comm="syz.3.2543" name="work" dev="tmpfs" ino=2633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 783.148800][ T30] audit: type=1400 audit(1751665391.482:5678): avc: denied { write open } for pid=16264 comm="syz.3.2543" path=2F202864656C6574656429 dev="tmpfs" ino=2634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 783.251582][ T30] audit: type=1400 audit(1751665391.482:5679): avc: denied { create } for pid=16264 comm="syz.3.2543" name="#2a" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 783.370946][T11658] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 783.528746][T16284] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 783.580974][T11658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.591243][T16292] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 783.615971][T11658] usb 1-1: config 0 descriptor?? [ 783.697314][T16298] FAULT_INJECTION: forcing a failure. [ 783.697314][T16298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 783.712131][T16298] CPU: 0 UID: 0 PID: 16298 Comm: syz.3.2549 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 783.712158][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 783.712169][T16298] Call Trace: [ 783.712176][T16298] [ 783.712182][T16298] dump_stack_lvl+0x16c/0x1f0 [ 783.712214][T16298] should_fail_ex+0x512/0x640 [ 783.712242][T16298] _copy_from_user+0x2e/0xd0 [ 783.712267][T16298] io_submit_one+0xbb/0x1df0 [ 783.712294][T16298] ? __lock_acquire+0xb8a/0x1c90 [ 783.712323][T16298] ? __pfx_io_submit_one+0x10/0x10 [ 783.712355][T16298] ? __might_fault+0xe3/0x190 [ 783.712376][T16298] ? __might_fault+0x13b/0x190 [ 783.712403][T16298] ? __x64_sys_io_submit+0x1a9/0x350 [ 783.712427][T16298] __x64_sys_io_submit+0x1a9/0x350 [ 783.712459][T16298] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 783.712482][T16298] ? fput+0x70/0xf0 [ 783.712521][T16298] do_syscall_64+0xcd/0x4c0 [ 783.712549][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.712568][T16298] RIP: 0033:0x7f81dab8e929 [ 783.712583][T16298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.712599][T16298] RSP: 002b:00007f81dba37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 783.712616][T16298] RAX: ffffffffffffffda RBX: 00007f81dadb5fa0 RCX: 00007f81dab8e929 [ 783.712628][T16298] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007f81dba16000 [ 783.712639][T16298] RBP: 00007f81dba37090 R08: 0000000000000000 R09: 0000000000000000 [ 783.712649][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.712660][T16298] R13: 0000000000000000 R14: 00007f81dadb5fa0 R15: 00007fff963b2348 [ 783.712683][T16298] [ 783.779612][ T5924] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 784.152792][T16310] Cannot find add_set index 0 as target [ 784.506585][T11658] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 784.516666][T11658] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 784.541635][T11658] asix 1-1:0.0: probe with driver asix failed with error -32 [ 784.555770][ T5924] usb 3-1: device descriptor read/64, error -71 [ 784.675373][T16309] FAULT_INJECTION: forcing a failure. [ 784.675373][T16309] name failslab, interval 1, probability 0, space 0, times 0 [ 784.747465][T16309] CPU: 1 UID: 0 PID: 16309 Comm: syz.4.2553 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 784.747497][T16309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 784.747508][T16309] Call Trace: [ 784.747514][T16309] [ 784.747521][T16309] dump_stack_lvl+0x16c/0x1f0 [ 784.747555][T16309] should_fail_ex+0x512/0x640 [ 784.747579][T16309] ? fs_reclaim_acquire+0xae/0x150 [ 784.747601][T16309] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.747625][T16309] should_failslab+0xc2/0x120 [ 784.747649][T16309] __kmalloc_noprof+0xd2/0x510 [ 784.747675][T16309] tomoyo_realpath_from_path+0xc2/0x6e0 [ 784.747698][T16309] ? tomoyo_profile+0x47/0x60 [ 784.747723][T16309] tomoyo_path_number_perm+0x245/0x580 [ 784.747741][T16309] ? tomoyo_path_number_perm+0x237/0x580 [ 784.747761][T16309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 784.747781][T16309] ? find_held_lock+0x2b/0x80 [ 784.747818][T16309] ? find_held_lock+0x2b/0x80 [ 784.747836][T16309] ? hook_file_ioctl_common+0x145/0x410 [ 784.747865][T16309] ? __fget_files+0x20e/0x3c0 [ 784.747890][T16309] security_file_ioctl+0x9b/0x240 [ 784.747916][T16309] __x64_sys_ioctl+0xb7/0x210 [ 784.747938][T16309] do_syscall_64+0xcd/0x4c0 [ 784.747964][T16309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.747980][T16309] RIP: 0033:0x7fd7ef98e929 [ 784.747995][T16309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.748011][T16309] RSP: 002b:00007fd7f07ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.748027][T16309] RAX: ffffffffffffffda RBX: 00007fd7efbb5fa0 RCX: 00007fd7ef98e929 [ 784.748038][T16309] RDX: 00002000000000c0 RSI: 0000000000004605 RDI: 0000000000000003 [ 784.748047][T16309] RBP: 00007fd7f07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 784.748056][T16309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.748066][T16309] R13: 0000000000000000 R14: 00007fd7efbb5fa0 R15: 00007ffdd5ba31a8 [ 784.748085][T16309] [ 784.949131][ C1] vkms_vblank_simulate: vblank timer overrun [ 784.957348][T16309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 785.009613][ T5924] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 785.149888][ T5924] usb 3-1: device descriptor read/64, error -71 [ 785.229249][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 785.259501][ T5924] usb usb3-port1: attempt power cycle [ 785.389304][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 785.407035][ T10] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 785.440329][ T10] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 785.457999][ T10] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 785.470504][ T10] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 785.491122][ T10] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 785.501325][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.513553][ T10] usb 6-1: Product: syz [ 785.517958][ T10] usb 6-1: Manufacturer: syz [ 785.522707][ T10] usb 6-1: SerialNumber: syz [ 785.572255][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input30 [ 785.605526][ T5873] usb 1-1: USB disconnect, device number 77 [ 785.609167][ T5924] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 785.662572][ T5924] usb 3-1: device descriptor read/8, error -71 [ 785.709549][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2560'. [ 785.806160][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 785.806176][ T30] audit: type=1400 audit(1751665394.892:5686): avc: denied { connect } for pid=16317 comm="syz.5.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 785.839731][ T30] audit: type=1400 audit(1751665394.892:5687): avc: denied { bind } for pid=16317 comm="syz.5.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 785.865054][T16354] netlink: 'syz.0.2560': attribute type 6 has an invalid length. [ 785.889720][ T10] imon:send_packet: packet tx failed (-71) [ 785.929416][ T10] imon 6-1:155.0: panel buttons/knobs setup failed [ 785.929532][ T5924] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 785.936220][ T10] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 785.952355][ T10] (id 0x00) [ 785.984299][ T5924] usb 3-1: device descriptor read/8, error -71 [ 786.100447][ T5924] usb usb3-port1: unable to enumerate USB device [ 786.109335][ T5873] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 786.118337][ T10] rc_core: IR keymap rc-imon-pad not found [ 786.124571][ T10] Registered IR keymap rc-empty [ 786.133774][ T10] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 786.157131][ T10] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 786.177243][ T10] imon:send_packet: packet tx failed (-71) [ 786.200170][ T10] imon 6-1:155.0: remote input dev register failed [ 786.207008][ T10] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 786.238866][ T10] imon 6-1:155.0: unable to initialize intf0, err 0 [ 786.247870][ T10] imon:imon_probe: failed to initialize context! [ 786.254716][ T10] imon 6-1:155.0: unable to register, err -19 [ 786.263160][ T5873] usb 1-1: device descriptor read/64, error -71 [ 786.274307][ T10] usb 6-1: USB disconnect, device number 57 [ 786.619576][ T5873] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 786.759374][ T5873] usb 1-1: device descriptor read/64, error -71 [ 787.411096][ T5873] usb usb1-port1: attempt power cycle [ 787.484734][ T30] audit: type=1400 audit(1751665396.572:5688): avc: denied { setopt } for pid=16396 comm="syz.5.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 787.497055][T16394] FAULT_INJECTION: forcing a failure. [ 787.497055][T16394] name failslab, interval 1, probability 0, space 0, times 0 [ 787.525840][T16394] CPU: 0 UID: 0 PID: 16394 Comm: syz.2.2565 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 787.525869][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 787.525881][T16394] Call Trace: [ 787.525887][T16394] [ 787.525894][T16394] dump_stack_lvl+0x16c/0x1f0 [ 787.525926][T16394] should_fail_ex+0x512/0x640 [ 787.525950][T16394] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 787.525976][T16394] should_failslab+0xc2/0x120 [ 787.525997][T16394] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 787.526016][T16394] ? io_submit_one+0x122/0x1df0 [ 787.526038][T16394] io_submit_one+0x122/0x1df0 [ 787.526059][T16394] ? __lock_acquire+0xb8a/0x1c90 [ 787.526085][T16394] ? __pfx_io_submit_one+0x10/0x10 [ 787.526111][T16394] ? __might_fault+0xe3/0x190 [ 787.526128][T16394] ? __might_fault+0x13b/0x190 [ 787.526149][T16394] ? __x64_sys_io_submit+0x1a9/0x350 [ 787.526168][T16394] __x64_sys_io_submit+0x1a9/0x350 [ 787.526189][T16394] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 787.526209][T16394] ? fput+0x70/0xf0 [ 787.526240][T16394] do_syscall_64+0xcd/0x4c0 [ 787.526263][T16394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.526278][T16394] RIP: 0033:0x7f210818e929 [ 787.526291][T16394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.526306][T16394] RSP: 002b:00007f210904a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 787.526321][T16394] RAX: ffffffffffffffda RBX: 00007f21083b5fa0 RCX: 00007f210818e929 [ 787.526331][T16394] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007f2109029000 [ 787.526339][T16394] RBP: 00007f210904a090 R08: 0000000000000000 R09: 0000000000000000 [ 787.526348][T16394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.526356][T16394] R13: 0000000000000000 R14: 00007f21083b5fa0 R15: 00007ffda7700d68 [ 787.526374][T16394] [ 788.203551][ T5873] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 788.549264][ T5873] usb 1-1: device descriptor read/8, error -71 [ 788.820263][T16407] FAULT_INJECTION: forcing a failure. [ 788.820263][T16407] name failslab, interval 1, probability 0, space 0, times 0 [ 788.833198][T16407] CPU: 0 UID: 0 PID: 16407 Comm: syz.3.2568 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 788.833227][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 788.833239][T16407] Call Trace: [ 788.833245][T16407] [ 788.833252][T16407] dump_stack_lvl+0x16c/0x1f0 [ 788.833285][T16407] should_fail_ex+0x512/0x640 [ 788.833309][T16407] ? fs_reclaim_acquire+0xae/0x150 [ 788.833329][T16407] ? tomoyo_encode2+0x100/0x3e0 [ 788.833351][T16407] should_failslab+0xc2/0x120 [ 788.833376][T16407] __kmalloc_noprof+0xd2/0x510 [ 788.833398][T16407] ? d_absolute_path+0x136/0x1a0 [ 788.833420][T16407] tomoyo_encode2+0x100/0x3e0 [ 788.833447][T16407] tomoyo_encode+0x29/0x50 [ 788.833470][T16407] tomoyo_realpath_from_path+0x18f/0x6e0 [ 788.833501][T16407] tomoyo_path_number_perm+0x245/0x580 [ 788.833521][T16407] ? tomoyo_path_number_perm+0x237/0x580 [ 788.833544][T16407] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 788.833566][T16407] ? find_held_lock+0x2b/0x80 [ 788.833609][T16407] ? find_held_lock+0x2b/0x80 [ 788.833629][T16407] ? hook_file_ioctl_common+0x145/0x410 [ 788.833666][T16407] ? __fget_files+0x20e/0x3c0 [ 788.833694][T16407] security_file_ioctl+0x9b/0x240 [ 788.833720][T16407] __x64_sys_ioctl+0xb7/0x210 [ 788.833743][T16407] do_syscall_64+0xcd/0x4c0 [ 788.833771][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.833789][T16407] RIP: 0033:0x7f81dab8e929 [ 788.833804][T16407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.833821][T16407] RSP: 002b:00007f81dba37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 788.833839][T16407] RAX: ffffffffffffffda RBX: 00007f81dadb5fa0 RCX: 00007f81dab8e929 [ 788.833850][T16407] RDX: 00002000000000c0 RSI: 0000000000004605 RDI: 0000000000000003 [ 788.833861][T16407] RBP: 00007f81dba37090 R08: 0000000000000000 R09: 0000000000000000 [ 788.833872][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.833882][T16407] R13: 0000000000000000 R14: 00007f81dadb5fa0 R15: 00007fff963b2348 [ 788.833906][T16407] [ 788.834012][T16407] ERROR: Out of memory at tomoyo_realpath_from_path. [ 789.051856][ T974] usb 3-1: new low-speed USB device number 75 using dummy_hcd [ 789.781156][ T974] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 789.876940][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.945211][ T974] usb 3-1: config 0 descriptor?? [ 790.150431][T16444] Cannot find add_set index 0 as target [ 790.999598][T16454] overlayfs: failed to resolve './bus': -2 [ 791.074491][T16457] --map-set only usable from mangle table [ 791.639213][ T5924] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 791.768555][T16463] FAULT_INJECTION: forcing a failure. [ 791.768555][T16463] name failslab, interval 1, probability 0, space 0, times 0 [ 791.781289][ T974] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 791.781487][ T974] asix 3-1:0.0: probe with driver asix failed with error -32 [ 791.804410][T16463] CPU: 1 UID: 0 PID: 16463 Comm: syz.5.2581 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 791.804439][T16463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.804450][T16463] Call Trace: [ 791.804456][T16463] [ 791.804464][T16463] dump_stack_lvl+0x16c/0x1f0 [ 791.804499][T16463] should_fail_ex+0x512/0x640 [ 791.804523][T16463] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 791.804551][T16463] should_failslab+0xc2/0x120 [ 791.804578][T16463] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 791.804600][T16463] ? __alloc_skb+0x2b2/0x380 [ 791.804629][T16463] __alloc_skb+0x2b2/0x380 [ 791.804653][T16463] ? __pfx___alloc_skb+0x10/0x10 [ 791.804684][T16463] alloc_skb_with_frags+0xe0/0x860 [ 791.804718][T16463] sock_alloc_send_pskb+0x7fb/0x990 [ 791.804742][T16463] ? avc_has_perm+0x11a/0x1c0 [ 791.804761][T16463] ? __pfx_avc_has_perm+0x10/0x10 [ 791.804781][T16463] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 791.804801][T16463] ? avc_has_perm_noaudit+0x149/0x3b0 [ 791.804822][T16463] ? sock_has_perm+0x259/0x2f0 [ 791.804842][T16463] ? __pfx_sock_has_perm+0x10/0x10 [ 791.804864][T16463] hci_sock_sendmsg+0x1c7/0x25f0 [ 791.804896][T16463] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 791.804926][T16463] sock_write_iter+0x4fc/0x5b0 [ 791.804946][T16463] ? __pfx_sock_write_iter+0x10/0x10 [ 791.804963][T16463] ? kasan_save_stack+0x42/0x60 [ 791.804990][T16463] ? bpf_lsm_file_permission+0x9/0x10 [ 791.805016][T16463] ? security_file_permission+0x71/0x210 [ 791.805040][T16463] ? rw_verify_area+0xcf/0x680 [ 791.805061][T16463] aio_write+0x3b9/0x910 [ 791.805084][T16463] ? __pfx_aio_write+0x10/0x10 [ 791.805105][T16463] ? __lock_acquire+0xb8a/0x1c90 [ 791.805153][T16463] ? __might_fault+0xe3/0x190 [ 791.805173][T16463] ? __might_fault+0x13b/0x190 [ 791.805199][T16463] ? io_submit_one+0x1243/0x1df0 [ 791.805221][T16463] io_submit_one+0x1243/0x1df0 [ 791.805252][T16463] ? __lock_acquire+0xb8a/0x1c90 [ 791.805281][T16463] ? __pfx_io_submit_one+0x10/0x10 [ 791.805314][T16463] ? __might_fault+0xe3/0x190 [ 791.805334][T16463] ? __might_fault+0x13b/0x190 [ 791.805360][T16463] ? __x64_sys_io_submit+0x1a9/0x350 [ 791.805390][T16463] __x64_sys_io_submit+0x1a9/0x350 [ 791.805416][T16463] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 791.805438][T16463] ? fput+0x70/0xf0 [ 791.805474][T16463] do_syscall_64+0xcd/0x4c0 [ 791.805502][T16463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.805520][T16463] RIP: 0033:0x7f9d4178e929 [ 791.805536][T16463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 791.805553][T16463] RSP: 002b:00007f9d4262e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 791.805571][T16463] RAX: ffffffffffffffda RBX: 00007f9d419b5fa0 RCX: 00007f9d4178e929 [ 791.805583][T16463] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007f9d4260d000 [ 791.805595][T16463] RBP: 00007f9d4262e090 R08: 0000000000000000 R09: 0000000000000000 [ 791.805605][T16463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.805615][T16463] R13: 0000000000000000 R14: 00007f9d419b5fa0 R15: 00007ffebd932ee8 [ 791.805638][T16463] [ 792.116003][ C1] vkms_vblank_simulate: vblank timer overrun [ 792.131641][ T5924] usb 4-1: device descriptor read/64, error -71 [ 792.369277][ T5924] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 792.371582][T16478] FAULT_INJECTION: forcing a failure. [ 792.371582][T16478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.396699][T16478] CPU: 0 UID: 0 PID: 16478 Comm: syz.0.2584 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 792.396729][T16478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 792.396740][T16478] Call Trace: [ 792.396747][T16478] [ 792.396755][T16478] dump_stack_lvl+0x16c/0x1f0 [ 792.396789][T16478] should_fail_ex+0x512/0x640 [ 792.396818][T16478] _copy_from_user+0x2e/0xd0 [ 792.396845][T16478] do_fb_ioctl+0x19f/0x7e0 [ 792.396866][T16478] ? __pfx_do_fb_ioctl+0x10/0x10 [ 792.396888][T16478] ? do_vfs_ioctl+0x523/0x1a60 [ 792.396940][T16478] ? selinux_file_ioctl+0x180/0x270 [ 792.396970][T16478] fb_ioctl+0xe5/0x150 [ 792.396985][T16478] ? __pfx_fb_ioctl+0x10/0x10 [ 792.397001][T16478] __x64_sys_ioctl+0x18b/0x210 [ 792.397022][T16478] do_syscall_64+0xcd/0x4c0 [ 792.397052][T16478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.397071][T16478] RIP: 0033:0x7f9a0f58e929 [ 792.397087][T16478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.397103][T16478] RSP: 002b:00007f9a103dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.397122][T16478] RAX: ffffffffffffffda RBX: 00007f9a0f7b6080 RCX: 00007f9a0f58e929 [ 792.397135][T16478] RDX: 00002000000000c0 RSI: 0000000000004605 RDI: 0000000000000003 [ 792.397150][T16478] RBP: 00007f9a103dd090 R08: 0000000000000000 R09: 0000000000000000 [ 792.397160][T16478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.397171][T16478] R13: 0000000000000000 R14: 00007f9a0f7b6080 R15: 00007fff5e954608 [ 792.397196][T16478] [ 792.499437][ T5924] usb 4-1: device descriptor read/64, error -71 [ 792.629225][ T5873] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 792.707939][ T30] audit: type=1400 audit(1751665401.792:5689): avc: denied { mount } for pid=16488 comm="syz.0.2588" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 792.739987][ T5924] usb usb4-port1: attempt power cycle [ 792.812842][ T5873] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 792.830372][ T5873] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8199, setting to 1024 [ 792.923503][ T5873] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 792.960364][ T5873] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 793.305649][ T5889] usb 1-1: new low-speed USB device number 82 using dummy_hcd [ 793.549069][ T5924] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 793.698826][ T5873] usb 6-1: Manufacturer: syz [ 793.703757][ T974] usb 3-1: USB disconnect, device number 75 [ 793.711560][ T5873] usb 6-1: config 0 descriptor?? [ 793.721746][ T5873] igorplugusb 6-1:0.0: endpoint incorrect [ 793.885312][ T5924] usb 4-1: device descriptor read/8, error -71 [ 793.926024][ T5889] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 793.949682][ T5889] usb 1-1: config 0 has no interface number 0 [ 793.962561][ T5889] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 793.983605][ T5889] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 794.006257][ T5889] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 794.030315][ T5889] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 794.049435][T16516] syzkaller0: entered promiscuous mode [ 794.055100][ T5889] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 794.080104][T16516] syzkaller0: entered allmulticast mode [ 794.085755][ T5889] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 794.119203][ T5889] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 794.206758][T16529] --map-set only usable from mangle table [ 794.244135][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.294873][ T974] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 794.427914][ T5866] usb 6-1: USB disconnect, device number 58 [ 794.509304][ T974] usb 5-1: Using ep0 maxpacket: 16 [ 794.529396][ T5889] usb 1-1: config 0 descriptor?? [ 794.550613][ T974] usb 5-1: config 1 interface 0 altsetting 174 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 794.571631][ T974] usb 5-1: config 1 interface 0 has no altsetting 0 [ 794.578848][T16489] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 794.587649][T16489] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 794.601767][ T5889] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 794.620033][ T974] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 794.635535][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.645396][ T974] usb 5-1: Product: syz [ 794.651498][ T974] usb 5-1: Manufacturer: syz [ 794.656293][ T974] usb 5-1: SerialNumber: syz [ 794.835067][T16489] fuseblk: Bad value for 'fd' [ 794.839759][ T30] audit: type=1400 audit(1751665403.922:5690): avc: denied { mounton } for pid=16488 comm="syz.0.2588" path="/482/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 794.901027][ T30] audit: type=1400 audit(1751665403.982:5691): avc: denied { ioctl } for pid=16488 comm="syz.0.2588" path="mnt:[4026532814]" dev="nsfs" ino=4026532814 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 795.027308][T16547] 9pnet_fd: Insufficient options for proto=fd [ 796.342111][ T5924] usb 1-1: USB disconnect, device number 82 [ 796.354645][ T5924] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 797.109219][ T5889] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 797.132157][ T5866] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 797.303737][ T5889] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 797.409961][ T5866] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 797.419529][ T5889] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 797.429219][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.437328][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.514870][ T5866] usb 1-1: config 0 descriptor?? [ 797.530149][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2603'. [ 797.536021][ T5889] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 797.733540][ T974] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input32 [ 797.768908][ T974] usb 5-1: USB disconnect, device number 45 [ 797.789468][ T10] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 797.798204][ T30] audit: type=1400 audit(1751665406.882:5692): avc: denied { getopt } for pid=16612 comm="syz.4.2604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 797.919694][ T10] usb 4-1: device descriptor read/64, error -71 [ 798.170011][ T5866] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 798.180143][ T10] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 798.188731][ T5866] asix 1-1:0.0: probe with driver asix failed with error -32 [ 798.244841][T16623] syz.5.2601: attempt to access beyond end of device [ 798.244841][T16623] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 798.285259][T16623] gfs2: error -5 reading superblock [ 798.329193][ T10] usb 4-1: device descriptor read/64, error -71 [ 798.439905][ T10] usb usb4-port1: attempt power cycle [ 798.650246][ T5889] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 799.068755][ T5889] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 799.077702][ T5889] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 799.086543][ T5889] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 799.099780][ T10] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 799.116123][ T5889] usb 6-1: USB disconnect, device number 59 [ 799.411209][ T10] usb 4-1: device descriptor read/8, error -71 [ 799.471171][T16654] FAULT_INJECTION: forcing a failure. [ 799.471171][T16654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.486802][T16654] CPU: 0 UID: 0 PID: 16654 Comm: syz.2.2610 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 799.486833][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.486847][T16654] Call Trace: [ 799.486854][T16654] [ 799.486862][T16654] dump_stack_lvl+0x16c/0x1f0 [ 799.486898][T16654] should_fail_ex+0x512/0x640 [ 799.486930][T16654] _copy_from_iter+0x29f/0x16f0 [ 799.486958][T16654] ? __pfx_avc_has_perm+0x10/0x10 [ 799.486982][T16654] ? __pfx__copy_from_iter+0x10/0x10 [ 799.487006][T16654] ? avc_has_perm_noaudit+0x149/0x3b0 [ 799.487028][T16654] ? sock_has_perm+0x259/0x2f0 [ 799.487049][T16654] ? __pfx_sock_has_perm+0x10/0x10 [ 799.487073][T16654] hci_sock_sendmsg+0x46d/0x25f0 [ 799.487107][T16654] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 799.487142][T16654] sock_write_iter+0x4fc/0x5b0 [ 799.487164][T16654] ? __pfx_sock_write_iter+0x10/0x10 [ 799.487183][T16654] ? kasan_save_stack+0x42/0x60 [ 799.487214][T16654] ? bpf_lsm_file_permission+0x9/0x10 [ 799.487242][T16654] ? security_file_permission+0x71/0x210 [ 799.487271][T16654] ? rw_verify_area+0xcf/0x680 [ 799.487293][T16654] aio_write+0x3b9/0x910 [ 799.487326][T16654] ? __pfx_aio_write+0x10/0x10 [ 799.487349][T16654] ? __lock_acquire+0xb8a/0x1c90 [ 799.487392][T16654] ? __might_fault+0xe3/0x190 [ 799.487414][T16654] ? __might_fault+0x13b/0x190 [ 799.487441][T16654] ? io_submit_one+0x1243/0x1df0 [ 799.487463][T16654] io_submit_one+0x1243/0x1df0 [ 799.487490][T16654] ? __lock_acquire+0xb8a/0x1c90 [ 799.487520][T16654] ? __pfx_io_submit_one+0x10/0x10 [ 799.487552][T16654] ? __might_fault+0xe3/0x190 [ 799.487571][T16654] ? __might_fault+0x13b/0x190 [ 799.487599][T16654] ? __x64_sys_io_submit+0x1a9/0x350 [ 799.487623][T16654] __x64_sys_io_submit+0x1a9/0x350 [ 799.487649][T16654] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 799.487672][T16654] ? fput+0x70/0xf0 [ 799.487709][T16654] do_syscall_64+0xcd/0x4c0 [ 799.487738][T16654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.487756][T16654] RIP: 0033:0x7f210818e929 [ 799.487773][T16654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.487790][T16654] RSP: 002b:00007f210904a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 799.487809][T16654] RAX: ffffffffffffffda RBX: 00007f21083b5fa0 RCX: 00007f210818e929 [ 799.487821][T16654] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007f2109029000 [ 799.487832][T16654] RBP: 00007f210904a090 R08: 0000000000000000 R09: 0000000000000000 [ 799.487843][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.487853][T16654] R13: 0000000000000000 R14: 00007f21083b5fa0 R15: 00007ffda7700d68 [ 799.487876][T16654] [ 800.369563][ T10] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 800.380815][ T5972] usb 1-1: USB disconnect, device number 83 [ 800.456741][ T30] audit: type=1400 audit(1751665409.532:5693): avc: denied { mount } for pid=16671 comm="syz.3.2612" name="/" dev="autofs" ino=42883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 800.486607][T16678] xt_ecn: cannot match TCP bits for non-tcp packets [ 800.494176][ T30] audit: type=1400 audit(1751665409.582:5694): avc: denied { read } for pid=16673 comm="syz.4.2611" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 800.517214][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.526838][ T30] audit: type=1400 audit(1751665409.582:5695): avc: denied { open } for pid=16673 comm="syz.4.2611" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 800.550824][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.582421][ T30] audit: type=1400 audit(1751665409.662:5696): avc: denied { mounton } for pid=16671 comm="syz.3.2612" path="/500/file1/file1" dev="autofs" ino=43022 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 800.747762][ T10] usb 4-1: device not accepting address 93, error -71 [ 800.776298][T16684] Cannot find add_set index 0 as target [ 800.802541][ T10] usb usb4-port1: unable to enumerate USB device [ 800.920158][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 800.933871][ T30] audit: type=1400 audit(1751665409.712:5697): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 801.183596][T16689] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2617'. [ 801.819650][ T10] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 801.980231][ T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 801.993823][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.005535][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.017211][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 802.031440][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 802.040615][ T10] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 802.048690][ T10] usb 6-1: Manufacturer: syz [ 802.178485][ T10] usb 6-1: config 0 descriptor?? [ 803.025063][ T30] audit: type=1400 audit(1751665412.112:5698): avc: denied { append } for pid=16694 comm="syz.5.2619" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 803.029685][T16695] dlm: Unknown command passed to DLM device : 3 [ 803.029685][T16695] [ 803.048264][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.078174][ T30] audit: type=1400 audit(1751665412.162:5699): avc: denied { write } for pid=16694 comm="syz.5.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 803.098052][ T30] audit: type=1400 audit(1751665412.162:5700): avc: denied { read } for pid=16694 comm="syz.5.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 803.249200][ T5889] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 803.409170][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 803.429553][ T5889] usb 5-1: unable to get BOS descriptor or descriptor too short [ 803.437313][ T5889] usb 5-1: too many configurations: 105, using maximum allowed: 8 [ 803.445910][ T5889] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 803.453620][ T5889] usb 5-1: can't read configurations, error -71 [ 804.161414][ T5866] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 804.243651][T16734] FAULT_INJECTION: forcing a failure. [ 804.243651][T16734] name failslab, interval 1, probability 0, space 0, times 0 [ 804.262166][T16734] CPU: 0 UID: 0 PID: 16734 Comm: syz.4.2625 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 804.262198][T16734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.262208][T16734] Call Trace: [ 804.262213][T16734] [ 804.262220][T16734] dump_stack_lvl+0x16c/0x1f0 [ 804.262254][T16734] should_fail_ex+0x512/0x640 [ 804.262277][T16734] ? trace_contention_end+0xdd/0x130 [ 804.262307][T16734] should_failslab+0xc2/0x120 [ 804.262332][T16734] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 804.262354][T16734] ? hci_sock_sendmsg+0xde2/0x25f0 [ 804.262379][T16734] ? __alloc_skb+0x2b2/0x380 [ 804.262405][T16734] __alloc_skb+0x2b2/0x380 [ 804.262427][T16734] ? __pfx___alloc_skb+0x10/0x10 [ 804.262460][T16734] hci_sock_sendmsg+0x1a6f/0x25f0 [ 804.262492][T16734] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 804.262525][T16734] sock_write_iter+0x4fc/0x5b0 [ 804.262550][T16734] ? __pfx_sock_write_iter+0x10/0x10 [ 804.262568][T16734] ? kasan_save_stack+0x42/0x60 [ 804.262598][T16734] ? bpf_lsm_file_permission+0x9/0x10 [ 804.262625][T16734] ? security_file_permission+0x71/0x210 [ 804.262652][T16734] ? rw_verify_area+0xcf/0x680 [ 804.262674][T16734] aio_write+0x3b9/0x910 [ 804.262699][T16734] ? __pfx_aio_write+0x10/0x10 [ 804.262720][T16734] ? __lock_acquire+0xb8a/0x1c90 [ 804.262762][T16734] ? __might_fault+0xe3/0x190 [ 804.262783][T16734] ? __might_fault+0x13b/0x190 [ 804.262810][T16734] ? io_submit_one+0x1243/0x1df0 [ 804.262832][T16734] io_submit_one+0x1243/0x1df0 [ 804.262858][T16734] ? __lock_acquire+0xb8a/0x1c90 [ 804.262888][T16734] ? __pfx_io_submit_one+0x10/0x10 [ 804.262920][T16734] ? __might_fault+0xe3/0x190 [ 804.262940][T16734] ? __might_fault+0x13b/0x190 [ 804.262967][T16734] ? __x64_sys_io_submit+0x1a9/0x350 [ 804.262990][T16734] __x64_sys_io_submit+0x1a9/0x350 [ 804.263016][T16734] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 804.263039][T16734] ? fput+0x70/0xf0 [ 804.263077][T16734] do_syscall_64+0xcd/0x4c0 [ 804.263105][T16734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.263123][T16734] RIP: 0033:0x7fd7ef98e929 [ 804.263139][T16734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.263157][T16734] RSP: 002b:00007fd7f07ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 804.263176][T16734] RAX: ffffffffffffffda RBX: 00007fd7efbb5fa0 RCX: 00007fd7ef98e929 [ 804.263189][T16734] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007fd7f07ce000 [ 804.263200][T16734] RBP: 00007fd7f07ef090 R08: 0000000000000000 R09: 0000000000000000 [ 804.263211][T16734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.263222][T16734] R13: 0000000000000000 R14: 00007fd7efbb5fa0 R15: 00007ffdd5ba31a8 [ 804.263246][T16734] [ 804.545506][ T5866] usb 3-1: device descriptor read/64, error -71 [ 804.591106][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 804.597113][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 804.608282][ T10] usb 6-1: USB disconnect, device number 60 [ 804.671905][ T30] audit: type=1400 audit(1751665413.762:5701): avc: denied { ioctl } for pid=16742 comm="syz.5.2626" path="socket:[43073]" dev="sockfs" ino=43073 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 804.681613][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2626'. [ 804.806151][ T5866] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 805.039416][ T5866] usb 3-1: device descriptor read/64, error -71 [ 805.936487][ T30] audit: type=1400 audit(1751665414.802:5702): avc: denied { remount } for pid=16753 comm="syz.5.2628" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 805.936746][ T5818] Bluetooth: hci5: unexpected event 0x03 length: 17 > 11 [ 805.964742][ T5866] usb usb3-port1: attempt power cycle [ 805.972075][ T30] audit: type=1400 audit(1751665415.052:5703): avc: denied { unmount } for pid=7611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 806.222998][T16764] Cannot find add_set index 0 as target [ 806.649251][ T5866] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 806.679438][ T5866] usb 3-1: device descriptor read/8, error -71 [ 806.722331][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2630'. [ 807.623404][T16784] netlink: 'syz.2.2633': attribute type 6 has an invalid length. [ 807.735458][T16791] FAULT_INJECTION: forcing a failure. [ 807.735458][T16791] name failslab, interval 1, probability 0, space 0, times 0 [ 807.750211][T16791] CPU: 0 UID: 0 PID: 16791 Comm: syz.2.2635 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 807.750230][T16791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 807.750238][T16791] Call Trace: [ 807.750242][T16791] [ 807.750247][T16791] dump_stack_lvl+0x16c/0x1f0 [ 807.750269][T16791] should_fail_ex+0x512/0x640 [ 807.750284][T16791] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 807.750301][T16791] should_failslab+0xc2/0x120 [ 807.750318][T16791] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 807.750332][T16791] ? __alloc_skb+0x2b2/0x380 [ 807.750349][T16791] __alloc_skb+0x2b2/0x380 [ 807.750363][T16791] ? __pfx___alloc_skb+0x10/0x10 [ 807.750382][T16791] alloc_skb_with_frags+0xe0/0x860 [ 807.750402][T16791] sock_alloc_send_pskb+0x7fb/0x990 [ 807.750417][T16791] ? avc_has_perm+0x11a/0x1c0 [ 807.750429][T16791] ? __pfx_avc_has_perm+0x10/0x10 [ 807.750440][T16791] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 807.750454][T16791] ? avc_has_perm_noaudit+0x149/0x3b0 [ 807.750466][T16791] ? sock_has_perm+0x259/0x2f0 [ 807.750478][T16791] ? __pfx_sock_has_perm+0x10/0x10 [ 807.750497][T16791] hci_sock_sendmsg+0x1c7/0x25f0 [ 807.750517][T16791] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 807.750536][T16791] sock_write_iter+0x4fc/0x5b0 [ 807.750548][T16791] ? __pfx_sock_write_iter+0x10/0x10 [ 807.750562][T16791] ? kasan_save_stack+0x42/0x60 [ 807.750580][T16791] ? bpf_lsm_file_permission+0x9/0x10 [ 807.750597][T16791] ? security_file_permission+0x71/0x210 [ 807.750613][T16791] ? rw_verify_area+0xcf/0x680 [ 807.750627][T16791] aio_write+0x3b9/0x910 [ 807.750643][T16791] ? __pfx_aio_write+0x10/0x10 [ 807.750656][T16791] ? __lock_acquire+0xb8a/0x1c90 [ 807.750681][T16791] ? __might_fault+0xe3/0x190 [ 807.750695][T16791] ? __might_fault+0x13b/0x190 [ 807.750711][T16791] ? io_submit_one+0x1243/0x1df0 [ 807.750725][T16791] io_submit_one+0x1243/0x1df0 [ 807.750741][T16791] ? __lock_acquire+0xb8a/0x1c90 [ 807.750759][T16791] ? __pfx_io_submit_one+0x10/0x10 [ 807.750778][T16791] ? __might_fault+0xe3/0x190 [ 807.750791][T16791] ? __might_fault+0x13b/0x190 [ 807.750807][T16791] ? __x64_sys_io_submit+0x1a9/0x350 [ 807.750821][T16791] __x64_sys_io_submit+0x1a9/0x350 [ 807.750838][T16791] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 807.750852][T16791] ? fput+0x70/0xf0 [ 807.750875][T16791] do_syscall_64+0xcd/0x4c0 [ 807.750892][T16791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.750904][T16791] RIP: 0033:0x7f210818e929 [ 807.750913][T16791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.750923][T16791] RSP: 002b:00007f210904a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 807.750934][T16791] RAX: ffffffffffffffda RBX: 00007f21083b5fa0 RCX: 00007f210818e929 [ 807.750941][T16791] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 00007f2109029000 [ 807.750947][T16791] RBP: 00007f210904a090 R08: 0000000000000000 R09: 0000000000000000 [ 807.750954][T16791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.750960][T16791] R13: 0000000000000000 R14: 00007f21083b5fa0 R15: 00007ffda7700d68 [ 807.750973][T16791] [ 808.796232][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.803427][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.681490][T16817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2643'. [ 810.606390][ T30] audit: type=1400 audit(1751665419.562:5704): avc: denied { create } for pid=16820 comm="syz.2.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 810.814452][ C1] vkms_vblank_simulate: vblank timer overrun [ 810.843267][ T30] audit: type=1400 audit(1751665419.602:5705): avc: denied { write } for pid=16820 comm="syz.2.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 811.651908][ T30] audit: type=1400 audit(1751665420.742:5706): avc: denied { name_bind } for pid=16836 comm="syz.5.2648" src=127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 812.058398][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 812.618529][T16861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2654'. [ 812.840456][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 812.999308][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 813.020844][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 813.033167][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.048225][ T10] usb 3-1: config 0 descriptor?? [ 813.062283][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 813.999019][ T49] wlan1: Trigger new scan to find an IBSS to join [ 814.063207][T16856] netlink: 'syz.2.2653': attribute type 6 has an invalid length. [ 814.086544][ T30] audit: type=1400 audit(1751665423.172:5707): avc: denied { map } for pid=16855 comm="syz.2.2653" path="socket:[43296]" dev="sockfs" ino=43296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 814.112685][ T10] gspca_sq930x: ucbus_write failed -71 [ 814.125080][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 814.147139][ T30] audit: type=1400 audit(1751665423.172:5708): avc: denied { accept } for pid=16855 comm="syz.2.2653" path="socket:[43296]" dev="sockfs" ino=43296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 814.147654][ T10] usb 3-1: USB disconnect, device number 80 [ 814.182713][T16871] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2657'. [ 814.316705][T16884] netlink: 'syz.5.2658': attribute type 1 has an invalid length. [ 814.361880][ T30] audit: type=1400 audit(1751665423.452:5709): avc: denied { getopt } for pid=16883 comm="syz.5.2658" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 814.382406][ C1] vkms_vblank_simulate: vblank timer overrun [ 814.405379][T16884] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 816.628518][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.640227][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.658904][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.675254][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.683505][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 816.721269][T16941] lo speed is unknown, defaulting to 1000 [ 816.761621][T16950] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2662'. [ 817.389429][T16974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'. [ 817.430928][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 817.460847][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 817.490991][ T13] bridge0: port 3(netdevsim0) entered disabled state [ 817.557836][T16988] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 817.584693][T16988] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 817.688786][ T30] audit: type=1400 audit(1751665426.712:5710): avc: denied { connect } for pid=16989 comm="syz.4.2667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 817.991639][ T1338] wlan1: Trigger new scan to find an IBSS to join [ 818.292352][ T13] bridge_slave_1: left allmulticast mode [ 818.309753][ T13] bridge_slave_1: left promiscuous mode [ 818.332050][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.363629][ T13] bridge_slave_0: left allmulticast mode [ 818.419520][ T13] bridge_slave_0: left promiscuous mode [ 818.444931][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.577455][T17088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 818.590257][T17088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2670'. [ 818.628989][T17093] tmpfs: Unknown parameter '' [ 818.772578][ T5818] Bluetooth: hci0: command tx timeout [ 818.790227][ T13] dvmrp0 (unregistering): left allmulticast mode [ 818.808615][ T13] dvmrp1 (unregistering): left allmulticast mode [ 818.877352][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2672'. [ 819.511490][ T6405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.526670][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.538311][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.539290][ T5866] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 819.557468][ T13] bond0 (unregistering): Released all slaves [ 819.585052][T16941] chnl_net:caif_netlink_parms(): no params data found [ 819.655339][ T13] tipc: Disabling bearer [ 819.679665][ T13] tipc: Left network mode [ 820.039894][ T5866] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 820.053978][ T13] IPVS: stopping master sync thread 8589 ... [ 820.060871][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.191643][ T5866] usb 1-1: config 0 descriptor?? [ 820.216140][ T5866] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 820.274565][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.284496][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.293377][T16941] bridge_slave_0: entered allmulticast mode [ 820.303966][T16941] bridge_slave_0: entered promiscuous mode [ 820.327802][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.335152][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.348676][T16941] bridge_slave_1: entered allmulticast mode [ 820.356983][T16941] bridge_slave_1: entered promiscuous mode [ 820.416144][ T5866] gp8psk: usb in 128 operation failed. [ 820.434806][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.447990][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.506692][T16941] team0: Port device team_slave_0 added [ 820.518180][T16941] team0: Port device team_slave_1 added [ 820.626278][ T5866] gp8psk: usb in 146 operation failed. [ 820.646584][ T5866] gp8psk: failed to get FW version [ 820.723295][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.763590][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.848879][ T5818] Bluetooth: hci0: command tx timeout [ 820.869578][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.205543][ T13] hsr_slave_0: left promiscuous mode [ 821.216288][ T13] hsr_slave_1: left promiscuous mode [ 821.222474][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 821.233698][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.241769][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.856450][ T13] team0 (unregistering): Port device team_slave_0 removed [ 822.014128][ T30] audit: type=1400 audit(1751665431.102:5711): avc: denied { setopt } for pid=17264 comm="syz.5.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 822.044004][ T30] audit: type=1400 audit(1751665431.122:5712): avc: denied { write } for pid=17264 comm="syz.5.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 822.240240][T11658] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 822.256197][ T5866] gp8psk: usb in 149 operation failed. [ 822.271158][ T5866] gp8psk: failed to get FPGA version [ 822.277031][ T5866] gp8psk: usb in 138 operation failed. [ 822.282542][ T5866] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 822.293123][ T10] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 822.301110][ T5866] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 822.315868][ T5866] usb 1-1: USB disconnect, device number 84 [ 822.343578][ T30] audit: type=1400 audit(1751665431.432:5713): avc: denied { map } for pid=17280 comm="syz.0.2680" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 822.367510][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.402408][T11658] usb 3-1: Using ep0 maxpacket: 8 [ 822.419779][T11658] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 822.428327][T11658] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 822.444095][T11658] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 822.453913][T11658] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 822.462927][T17287] kernel read not supported for file /!se÷ih,i¬PælNnuxselinux (pid: 17287 comm: syz.0.2681) [ 822.464648][T11658] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 822.476328][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 822.491100][T11658] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 822.512976][ T30] audit: type=1800 audit(1751665431.582:5714): pid=17287 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2681" name=217365F769682C1769AC50E66C4E6E757873656C696E7578 dev="mqueue" ino=44605 res=0 errno=0 [ 822.537645][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.540365][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.546340][T11658] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.587552][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 248 [ 822.610283][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 822.610376][T17293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 822.624175][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 822.642371][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.669312][ T10] usb 6-1: config 0 descriptor?? [ 822.674903][T17265] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 822.680094][ T49] smc: removing ib device syz2 [ 822.694038][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.705476][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.731462][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.773577][T11658] usb 3-1: usb_control_msg returned -32 [ 822.792388][T11658] usbtmc 3-1:16.0: can't read capabilities [ 822.871127][ T5818] Bluetooth: hci0: command tx timeout [ 822.939032][T11658] usb 6-1: USB disconnect, device number 61 [ 823.083516][T16941] hsr_slave_0: entered promiscuous mode [ 823.104074][T16941] hsr_slave_1: entered promiscuous mode [ 823.160212][T16941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 823.168536][T16941] Cannot create hsr debugfs directory [ 823.346026][ T5972] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 823.728428][ T5972] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 823.811492][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.824258][ T5972] usb 5-1: Product: syz [ 823.828578][ T5972] usb 5-1: Manufacturer: syz [ 823.833510][ T5972] usb 5-1: SerialNumber: syz [ 823.846429][ T5972] usb 5-1: config 0 descriptor?? [ 824.375912][ T10] usb 5-1: USB disconnect, device number 48 [ 824.511961][T16941] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 824.533338][T16941] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 824.600875][T16941] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 824.617456][T16941] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 824.794133][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.876028][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.992059][ T5818] Bluetooth: hci0: command tx timeout [ 824.999154][ T5866] usb 3-1: USB disconnect, device number 81 [ 825.023593][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.030772][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.269403][ T5924] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 825.532620][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 825.539718][ T30] audit: type=1400 audit(1751665434.622:5715): avc: denied { setattr } for pid=17482 comm="syz.2.2689" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 825.588704][ T13] IPVS: stop unused estimator thread 0... [ 825.593623][ T5924] usb 1-1: config 0 has no interfaces? [ 825.600946][ T30] audit: type=1400 audit(1751665434.632:5716): avc: denied { write } for pid=17482 comm="syz.2.2689" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 825.600988][ T30] audit: type=1400 audit(1751665434.632:5717): avc: denied { open } for pid=17482 comm="syz.2.2689" path="/534/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 825.634325][ T6576] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.651257][ T6576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.728224][ T30] audit: type=1400 audit(1751665434.812:5718): avc: denied { checkpoint_restore } for pid=17493 comm="syz.4.2690" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 825.785606][ T5924] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 825.805331][ T5924] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 825.814400][ T5924] usb 1-1: Manufacturer: syz [ 825.822050][ T5924] usb 1-1: config 0 descriptor?? [ 825.949467][ T5866] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 826.043368][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.238872][ T5924] usb 1-1: USB disconnect, device number 85 [ 826.610650][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.627714][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.638114][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 826.659607][ T5866] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 826.676922][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.795519][T17536] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2694'. [ 826.829421][ T5866] usb 3-1: config 0 descriptor?? [ 827.288666][ T5866] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 827.345769][ T5866] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 827.431829][T16941] veth0_vlan: entered promiscuous mode [ 827.448982][T16941] veth1_vlan: entered promiscuous mode [ 827.519249][T16941] veth0_macvtap: entered promiscuous mode [ 827.537612][T16941] veth1_macvtap: entered promiscuous mode [ 827.567148][T16941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.606504][T16941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.623547][T16941] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.635199][T16941] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.644568][T16941] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.655311][T16941] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.669978][ T5866] usb 3-1: USB disconnect, device number 82 [ 827.800949][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.816553][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 827.858368][ T5992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.870522][ T5992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.283163][ T30] audit: type=1400 audit(1751665437.372:5719): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 828.303421][ C0] vkms_vblank_simulate: vblank timer overrun [ 828.652443][ T30] audit: type=1400 audit(1751665437.742:5720): avc: denied { read write } for pid=17599 comm="syz.2.2701" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 828.900553][ T30] audit: type=1400 audit(1751665437.742:5721): avc: denied { open } for pid=17599 comm="syz.2.2701" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 829.649722][ T30] audit: type=1400 audit(1751665437.792:5722): avc: denied { append } for pid=17601 comm="syz.6.2702" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 829.672609][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.961248][ T30] audit: type=1400 audit(1751665438.792:5723): avc: denied { write } for pid=17613 comm="syz.2.2704" path="socket:[45242]" dev="sockfs" ino=45242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 829.984669][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.243219][T17626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2707'. [ 831.079197][ T10] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 831.178314][ T30] audit: type=1326 audit(1751665440.262:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17645 comm="syz.4.2712" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7ef98e929 code=0x0 [ 831.201237][ C0] vkms_vblank_simulate: vblank timer overrun [ 831.505525][ T10] usb 1-1: device descriptor read/64, error -71 [ 831.551716][ T30] audit: type=1400 audit(1751665440.642:5725): avc: denied { create } for pid=17664 comm="syz.2.2715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 831.709287][ T5924] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 831.823247][ T10] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 831.863554][ T5924] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 831.872725][ T5924] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.881452][ T5924] usb 7-1: Product: syz [ 831.886127][ T5924] usb 7-1: Manufacturer: syz [ 831.893182][ T5924] usb 7-1: SerialNumber: syz [ 831.909874][ T5924] usb 7-1: config 0 descriptor?? [ 831.942827][T17670] --map-set only usable from mangle table [ 832.359725][ T5924] usb 7-1: USB disconnect, device number 2 [ 832.389331][ T10] usb 1-1: device descriptor read/64, error -71 [ 832.509614][ T10] usb usb1-port1: attempt power cycle [ 832.619282][ T5972] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 832.769197][ T5972] usb 5-1: device descriptor read/64, error -71 [ 832.909218][ T10] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 832.929678][ T10] usb 1-1: device descriptor read/8, error -71 [ 833.009202][ T5972] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 833.144113][ T5972] usb 5-1: device descriptor read/64, error -71 [ 833.193047][ T10] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 833.231295][T17700] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2719'. [ 833.429700][ T10] usb 1-1: device descriptor read/8, error -71 [ 833.504040][T17702] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.2720'. [ 833.529443][ T5972] usb usb5-port1: attempt power cycle [ 833.541515][ T10] usb usb1-port1: unable to enumerate USB device [ 833.549691][T17702] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 833.557961][T17702] openvswitch: netlink: Duplicate key (type 0). [ 833.628722][ T30] audit: type=1400 audit(1751665442.712:5726): avc: denied { open } for pid=17711 comm="syz.6.2723" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 833.652433][ C0] vkms_vblank_simulate: vblank timer overrun [ 833.718378][ T30] audit: type=1400 audit(1751665442.752:5727): avc: denied { ioctl } for pid=17711 comm="syz.6.2723" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x4b36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 833.774363][T17715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.042175][ T5972] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 834.272695][ T5972] usb 5-1: device descriptor read/8, error -71 [ 834.821895][ T24] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 834.829977][ T5972] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 834.859839][ T5972] usb 5-1: device descriptor read/8, error -71 [ 834.973052][ T5972] usb usb5-port1: unable to enumerate USB device [ 834.994728][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 835.192274][ T24] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 835.270396][ T24] usb 3-1: config 0 has no interface number 0 [ 835.312643][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 835.327765][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.336225][ T24] usb 3-1: Product: syz [ 835.342694][ T24] usb 3-1: Manufacturer: syz [ 835.347412][ T24] usb 3-1: SerialNumber: syz [ 835.353599][ T24] usb 3-1: config 0 descriptor?? [ 835.360283][ T974] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 835.519218][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 835.531748][ T974] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 835.570321][ T974] usb 1-1: config 0 has no interface number 0 [ 835.577232][ T974] usb 1-1: config 0 interface 184 has no altsetting 0 [ 835.586833][ T974] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 835.602095][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.610217][ T974] usb 1-1: Product: syz [ 835.614831][ T974] usb 1-1: Manufacturer: syz [ 835.621571][ T974] usb 1-1: SerialNumber: syz [ 835.630099][ T974] usb 1-1: config 0 descriptor?? [ 835.642917][ T974] smsc75xx v1.0.0 [ 836.416956][T17761] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2731'. [ 836.965972][ T24] usb 3-1: USB disconnect, device number 83 [ 836.972497][ T24] f81534a_ctrl 3-1:0.88: failed to set register 0x116: -19 [ 836.985855][ T24] f81534a_ctrl 3-1:0.88: failed to enable ports: -19 [ 837.069174][T17776] mkiss: ax0: crc mode is auto. [ 837.102897][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 837.114319][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 837.123977][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 837.135591][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 837.145351][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 837.156171][ T974] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 837.166766][ T974] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 837.177972][ T974] usb 1-1: USB disconnect, device number 90 [ 837.371048][ T24] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 837.529179][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 837.543546][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 837.569552][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.578738][ T24] usb 3-1: Product: syz [ 837.584064][ T24] usb 3-1: Manufacturer: syz [ 837.589012][ T24] usb 3-1: SerialNumber: syz [ 837.608826][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 837.625653][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 838.009195][ T974] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 838.150884][T17814] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 838.190638][ T974] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 838.214977][ T974] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 838.245858][ T5889] r8152-cfgselector 3-1: USB disconnect, device number 84 [ 838.253826][ T974] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 838.734274][ T974] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 838.747494][ T974] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 838.760985][ T974] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 838.793450][ T974] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 838.807147][ T974] usb 7-1: Product: syz [ 838.811592][ T974] usb 7-1: Manufacturer: syz [ 838.826149][ T974] cdc_wdm 7-1:1.0: skipping garbage [ 838.835814][ T974] cdc_wdm 7-1:1.0: skipping garbage [ 838.844760][ T974] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 838.851355][ T974] cdc_wdm 7-1:1.0: Unknown control protocol [ 839.193936][T17843] binder: 17839:17843 ioctl c0306201 200000000080 returned -14 [ 839.466743][T17846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2743'. [ 839.743856][T17848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 839.757815][T17848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.810912][T17853] netlink: 'syz.4.2744': attribute type 1 has an invalid length. [ 839.830110][T11658] usb 7-1: USB disconnect, device number 3 [ 839.852357][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2745'. [ 839.902809][T17855] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2745'. [ 840.056598][T17907] binder: 17904:17907 unknown command 1635022949 [ 840.089089][T17907] binder: 17904:17907 ioctl c0306201 200000000080 returned -22 [ 841.131276][T17926] 9pnet_fd: Insufficient options for proto=fd [ 841.141432][ T30] audit: type=1400 audit(1751665449.892:5728): avc: denied { setopt } for pid=17922 comm="syz.0.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 841.295866][ T30] audit: type=1400 audit(1751665450.382:5729): avc: denied { ioctl } for pid=17922 comm="syz.0.2751" path="socket:[46315]" dev="sockfs" ino=46315 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 841.597636][T17938] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2756'. [ 841.616149][ T30] audit: type=1400 audit(1751665450.682:5730): avc: denied { write } for pid=17935 comm="syz.6.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 841.636704][ T30] audit: type=1400 audit(1751665450.682:5731): avc: denied { ioctl } for pid=17935 comm="syz.6.2756" path="socket:[46321]" dev="sockfs" ino=46321 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 841.662192][ C1] vkms_vblank_simulate: vblank timer overrun [ 841.917657][ T5889] IPVS: starting estimator thread 0... [ 842.039354][T17944] IPVS: using max 50 ests per chain, 120000 per kthread [ 842.289410][ T30] audit: type=1400 audit(1751665451.372:5732): avc: denied { read } for pid=17957 comm="syz.6.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 842.527378][ T5972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 842.690489][ T5972] usb 7-1: Using ep0 maxpacket: 32 [ 842.702925][ T5972] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 842.753091][ T5972] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 842.769347][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 842.797792][ T5972] usb 7-1: Product: syz [ 842.802999][ T5972] usb 7-1: Manufacturer: syz [ 842.807652][ T5972] usb 7-1: SerialNumber: syz [ 842.855491][ T5972] usb 7-1: config 0 descriptor?? [ 842.870691][T17959] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 842.894814][ T5972] hub 7-1:0.0: bad descriptor, ignoring hub [ 843.040733][T17991] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 843.048262][ T5972] hub 7-1:0.0: probe with driver hub failed with error -5 [ 843.129331][ T30] audit: type=1400 audit(1751665452.202:5733): avc: denied { create } for pid=17983 comm="syz.0.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 843.521703][ T30] audit: type=1400 audit(1751665452.612:5734): avc: denied { create } for pid=17998 comm="syz.4.2770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 843.541709][ C1] vkms_vblank_simulate: vblank timer overrun [ 843.729700][ T5889] usb 7-1: USB disconnect, device number 4 [ 844.333684][ T30] audit: type=1400 audit(1751665453.422:5735): avc: denied { accept } for pid=17957 comm="syz.6.2761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 844.377889][T18020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2772'. [ 844.549286][ T5972] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 844.759335][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 844.772531][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 844.791969][ T5972] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 844.812385][ T5972] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 844.841195][ T5972] usb 1-1: can't read configurations, error -61 [ 844.999291][ T5972] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 845.239315][ T5972] usb 1-1: Using ep0 maxpacket: 8 [ 845.562529][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 845.585046][ T5972] usb 1-1: too many configurations: 31, using maximum allowed: 8 [ 845.594814][ T5972] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 845.628902][ T5972] usb 1-1: can't read configurations, error -61 [ 845.984841][ T5972] usb usb1-port1: attempt power cycle [ 846.330952][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2778'. [ 846.567436][ T5972] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 848.159380][ T5972] usb 1-1: device not accepting address 93, error -71 [ 848.350829][ T30] audit: type=1400 audit(1751665457.372:5736): avc: denied { create } for pid=18050 comm="syz.6.2780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 848.364667][ T5818] Bluetooth: hci0: ACL packet too small [ 848.537983][ T30] audit: type=1400 audit(1751665457.442:5737): avc: denied { write } for pid=18050 comm="syz.6.2780" path="socket:[46599]" dev="sockfs" ino=46599 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 848.604979][T18079] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.2783'. [ 848.639026][T18079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 848.966209][ T30] audit: type=1326 audit(1751665458.052:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18083 comm="syz.5.2785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d4178e929 code=0x0 [ 849.313911][ T30] audit: type=1400 audit(1751665458.402:5739): avc: denied { ioctl } for pid=18098 comm="syz.2.2788" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 849.404615][T18055] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2780'. [ 849.415529][T18055] netlink: 'syz.6.2780': attribute type 5 has an invalid length. [ 849.429442][ T5972] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 849.589223][ T5972] usb 1-1: Using ep0 maxpacket: 16 [ 849.604100][ T5972] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 849.616545][T18055] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2780'. [ 849.628307][ T5972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.787015][T18055] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 849.795893][T18055] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 849.801087][ T30] audit: type=1400 audit(1751665458.882:5740): avc: denied { append } for pid=18117 comm="syz.5.2790" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 849.829321][ T5889] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 849.830243][ T5972] usb 1-1: config 0 has no interface number 0 [ 849.837980][T18055] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 849.988852][T18055] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 849.998050][T18055] geneve2: entered promiscuous mode [ 850.019668][ T5972] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 850.028775][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.453285][ T5889] usb 5-1: device descriptor read/64, error -71 [ 850.482951][ T5972] usb 1-1: Product: syz [ 850.488977][T18055] geneve2: entered allmulticast mode [ 850.491299][ T5972] usb 1-1: Manufacturer: syz [ 850.505110][ T5972] usb 1-1: SerialNumber: syz [ 850.518062][ T5972] usb 1-1: config 0 descriptor?? [ 850.526854][T18132] netlink: 'syz.5.2792': attribute type 12 has an invalid length. [ 850.534111][ T5972] usb 1-1: Found UVC 0.00 device syz (046c:14e8) [ 850.548651][ T5972] usb 1-1: No valid video chain found. [ 850.699306][ T5889] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 850.737202][T18139] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 850.759712][ T5972] usb 1-1: USB disconnect, device number 95 [ 850.779391][ T5866] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 850.839253][ T5889] usb 5-1: device descriptor read/64, error -71 [ 851.005466][ T5889] usb usb5-port1: attempt power cycle [ 851.100583][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 851.349311][ T5889] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 851.379905][ T5889] usb 5-1: device descriptor read/8, error -71 [ 851.619186][ T5889] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 851.745798][ T5889] usb 5-1: device descriptor read/8, error -71 [ 851.829270][ T974] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 851.859562][ T5889] usb usb5-port1: unable to enumerate USB device [ 852.127761][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'. [ 852.310220][ T1338] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 852.571580][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.585987][ T6405] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.605867][T18166] kvm: kvm [18165]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 852.670154][ T974] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 852.931288][ T5972] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 853.436043][ T974] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 853.649814][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.675505][ T5972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.686529][ T5972] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 853.696152][ T5972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.710449][ T5972] usb 1-1: config 0 descriptor?? [ 853.799234][ T974] usb 5-1: device descriptor read/64, error -71 [ 854.039511][ T974] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 854.189825][ T974] usb 5-1: device descriptor read/64, error -71 [ 854.362077][ T974] usb usb5-port1: attempt power cycle [ 854.684573][ T5972] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 854.725666][ T5972] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 854.741339][ T974] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 854.789847][ T5972] cp2112 0003:10C4:EA90.0015: error requesting version [ 854.800931][ T5972] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -5 [ 854.850869][ T974] usb 5-1: device descriptor read/8, error -71 [ 855.102171][ T974] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 855.150020][ T974] usb 5-1: device descriptor read/8, error -71 [ 855.479309][ T974] usb usb5-port1: unable to enumerate USB device [ 855.834117][T18254] tmpfs: Bad value for 'mpol' [ 856.090749][T18265] geneve2: entered promiscuous mode [ 856.096012][T18265] geneve2: entered allmulticast mode [ 856.549289][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.584983][ T30] audit: type=1326 audit(1751665465.672:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18274 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4178e929 code=0x7ffc0000 [ 856.609647][ T30] audit: type=1326 audit(1751665465.672:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18274 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d4178e929 code=0x7ffc0000 [ 856.634713][ T30] audit: type=1326 audit(1751665465.672:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18274 comm="syz.5.2815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9d4178e929 code=0x7ffc0000 [ 856.961652][ T974] usb 1-1: USB disconnect, device number 96 [ 857.307457][ T30] audit: type=1400 audit(1751665466.392:5744): avc: denied { write } for pid=18341 comm="syz.6.2818" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 857.581462][T18352] vxcan1: tx address claim with dlc 0 [ 857.586895][ T30] audit: type=1400 audit(1751665466.672:5745): avc: denied { write } for pid=18351 comm="syz.6.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 857.716108][ T5972] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 857.718456][T18358] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2822'. [ 857.928002][ T5972] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.063547][ T5972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 858.084641][ T5972] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 858.107740][ T5972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.115904][ T5972] usb 6-1: Product: syz [ 858.120184][ T5972] usb 6-1: Manufacturer: syz [ 858.124783][ T5972] usb 6-1: SerialNumber: syz [ 858.221475][T18369] netlink: 'syz.0.2824': attribute type 12 has an invalid length. [ 858.253290][T18369] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2824'. [ 858.309187][ T5889] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 858.318695][T18371] syz.6.2825: attempt to access beyond end of device [ 858.318695][T18371] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 858.339062][T18371] vxfs: unable to read disk superblock at 1 [ 858.346469][T18371] syz.6.2825: attempt to access beyond end of device [ 858.346469][T18371] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 858.359820][T18371] vxfs: unable to read disk superblock at 8 [ 858.365901][T18371] vxfs: can't find superblock. [ 858.472913][ T5889] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 858.482325][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.504847][ T5889] usb 3-1: config 0 descriptor?? [ 858.589430][ T5972] usb 6-1: 0:2 : does not exist [ 858.669187][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 858.899180][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 858.906625][ T24] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 858.915597][ T24] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 858.924326][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 858.933455][ T24] usb 5-1: config 1 has no interface number 0 [ 858.939955][ T24] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 859.016058][ T24] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 859.045564][T18395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2828'. [ 859.046560][T11658] usb 6-1: USB disconnect, device number 62 [ 859.076719][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 859.089130][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.098118][T18395] netlink: 'syz.0.2828': attribute type 6 has an invalid length. [ 859.129344][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 859.153579][ T5889] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 859.163754][ T5889] asix 3-1:0.0: probe with driver asix failed with error -61 [ 859.356053][ T24] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 859.773391][ T5889] usb 5-1: USB disconnect, device number 61 [ 859.792477][ T5889] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 860.253142][T18440] sp0: Synchronizing with TNC [ 861.220435][ T5866] usb 3-1: USB disconnect, device number 85 [ 861.264746][T18467] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 861.279431][ T5889] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 861.897239][ T5889] usb 1-1: device descriptor read/64, error -71 [ 861.927870][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2838'. [ 861.949203][ T974] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 862.079202][ T974] usb 6-1: device descriptor read/64, error -71 [ 862.139274][ T5889] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 862.229686][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 862.270729][ T30] audit: type=1400 audit(1751665471.362:5746): avc: denied { mounton } for pid=18497 comm="syz.4.2842" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 862.308770][ T30] audit: type=1326 audit(1751665471.392:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.4.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 862.332663][ T30] audit: type=1326 audit(1751665471.392:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.4.2842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 862.340554][ T974] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 862.364014][ T5889] usb 1-1: device descriptor read/64, error -71 [ 862.410838][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 862.425210][ T24] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66 [ 862.449849][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.479448][ T5889] usb usb1-port1: attempt power cycle [ 862.490036][ T24] usb 7-1: config 0 descriptor?? [ 862.499179][ T974] usb 6-1: device descriptor read/64, error -71 [ 862.516128][ T24] usb 7-1: invalid MIDI EP [ 862.531987][ T24] usb 7-1: snd-bcd2000: error during probing [ 862.550312][ T24] snd-bcd2000 7-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 862.629470][ T974] usb usb6-port1: attempt power cycle [ 862.635433][T18519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.655973][ T30] audit: type=1400 audit(1751665471.742:5749): avc: denied { unmount } for pid=18518 comm="syz.2.2848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 862.715266][T18477] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2838'. [ 862.829185][ T5889] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 863.039187][ T24] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 863.195511][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 863.207016][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.244568][ T24] usb 3-1: config 0 descriptor?? [ 863.269878][ T5889] usb 1-1: device descriptor read/8, error -71 [ 863.361886][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2851'. [ 863.489217][ T974] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 863.914525][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 863.926196][ T24] asix 3-1:0.0: probe with driver asix failed with error -61 [ 864.199212][ T5889] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 864.207585][ T974] usb 6-1: device descriptor read/8, error -71 [ 864.238030][ T24] usb 7-1: USB disconnect, device number 5 [ 864.469349][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 865.096645][ T5889] usb 1-1: device not accepting address 100, error -71 [ 865.378932][ T5889] usb usb1-port1: unable to enumerate USB device [ 865.834006][T18600] syz.6.2859: attempt to access beyond end of device [ 865.834006][T18600] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 865.854417][T18600] vxfs: unable to read disk superblock at 1 [ 865.865467][T18600] syz.6.2859: attempt to access beyond end of device [ 865.865467][T18600] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 865.885750][T18600] vxfs: unable to read disk superblock at 8 [ 865.891913][T18600] vxfs: can't find superblock. [ 865.927102][T11658] usb 3-1: USB disconnect, device number 86 [ 866.819867][ T974] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 867.065313][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2865'. [ 867.489440][ T974] usb 6-1: Using ep0 maxpacket: 8 [ 867.515511][ T974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 867.556941][ T974] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 867.573168][ T974] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 867.583631][T18627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2866'. [ 867.589354][ T974] usb 6-1: Product: syz [ 867.601483][ T974] usb 6-1: Manufacturer: syz [ 867.610900][ T974] usb 6-1: SerialNumber: syz [ 868.402821][ T974] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 868.416178][ T974] visor 6-1:1.0: probe with driver visor failed with error -110 [ 869.421373][ T30] audit: type=1400 audit(1751665478.512:5750): avc: denied { setopt } for pid=18642 comm="syz.0.2869" lport=37382 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 869.421679][T18644] sctp: [Deprecated]: syz.0.2869 (pid 18644) Use of int in maxseg socket option. [ 869.421679][T18644] Use struct sctp_assoc_value instead [ 870.237177][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.243632][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.389998][ T5889] usb 6-1: USB disconnect, device number 67 [ 871.180586][ T30] audit: type=1400 audit(1751665480.142:5751): avc: denied { firmware_load } for pid=18669 comm="syz.5.2874" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 872.804473][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2883'. [ 873.327727][T18754] ip6t_srh: unknown srh invflags 7863 [ 873.961880][T11658] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 874.199212][T11658] usb 3-1: Using ep0 maxpacket: 8 [ 874.273443][T11658] usb 3-1: unable to get BOS descriptor or descriptor too short [ 874.625342][T11658] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 874.638117][T11658] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 874.652819][T11658] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 874.666920][T11658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.677438][T11658] usb 3-1: Product: syz [ 874.682748][T11658] usb 3-1: Manufacturer: syz [ 874.687390][T11658] usb 3-1: SerialNumber: syz [ 874.897704][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2885'. [ 875.456290][ T30] audit: type=1400 audit(1751665483.982:5752): avc: denied { connect } for pid=18753 comm="syz.2.2885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 875.773142][T11658] usb 3-1: USB disconnect, device number 87 [ 875.829189][ T5889] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 875.875916][ T30] audit: type=1326 audit(1751665484.962:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 875.927586][ T30] audit: type=1326 audit(1751665484.992:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 875.989969][ T5889] usb 1-1: Using ep0 maxpacket: 32 [ 876.019309][ T5889] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 876.035373][ T5889] usb 1-1: config 0 has no interface number 0 [ 876.056955][ T30] audit: type=1326 audit(1751665484.992:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 876.127704][T18806] syz.5.2893: attempt to access beyond end of device [ 876.127704][T18806] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 876.144954][ T5889] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 876.157235][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.165577][ T5889] usb 1-1: Product: syz [ 876.170941][T18806] vxfs: unable to read disk superblock at 1 [ 876.178446][ T5889] usb 1-1: Manufacturer: syz [ 876.185369][ T5889] usb 1-1: SerialNumber: syz [ 876.193746][T18806] syz.5.2893: attempt to access beyond end of device [ 876.193746][T18806] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 876.209891][ T5889] usb 1-1: config 0 descriptor?? [ 876.215201][T18806] vxfs: unable to read disk superblock at 8 [ 876.224862][T18806] vxfs: can't find superblock. [ 876.231223][ T5889] smsc95xx v2.0.0 [ 876.234956][ T5889] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 876.250981][ T5889] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 876.294617][ T30] audit: type=1326 audit(1751665485.362:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 876.366952][ T30] audit: type=1326 audit(1751665485.362:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18803 comm="syz.4.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ef98e929 code=0x7ffc0000 [ 876.390812][T18841] FAULT_INJECTION: forcing a failure. [ 876.390812][T18841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.404545][T18841] CPU: 0 UID: 0 PID: 18841 Comm: syz.6.2896 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 876.404569][T18841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 876.404579][T18841] Call Trace: [ 876.404584][T18841] [ 876.404589][T18841] dump_stack_lvl+0x16c/0x1f0 [ 876.404611][T18841] should_fail_ex+0x512/0x640 [ 876.404628][T18841] _copy_from_user+0x2e/0xd0 [ 876.404644][T18841] copy_msghdr_from_user+0x98/0x160 [ 876.404660][T18841] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 876.404682][T18841] ___sys_sendmsg+0xfe/0x1d0 [ 876.404697][T18841] ? __pfx____sys_sendmsg+0x10/0x10 [ 876.404711][T18841] ? __lock_acquire+0x622/0x1c90 [ 876.404744][T18841] __sys_sendmsg+0x16d/0x220 [ 876.404761][T18841] ? __pfx___sys_sendmsg+0x10/0x10 [ 876.404785][T18841] do_syscall_64+0xcd/0x4c0 [ 876.404801][T18841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.404814][T18841] RIP: 0033:0x7fb40bb8e929 [ 876.404823][T18841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.404834][T18841] RSP: 002b:00007fb40c93a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.404844][T18841] RAX: ffffffffffffffda RBX: 00007fb40bdb6080 RCX: 00007fb40bb8e929 [ 876.404851][T18841] RDX: 0000000000004084 RSI: 0000200000001000 RDI: 0000000000000005 [ 876.404857][T18841] RBP: 00007fb40c93a090 R08: 0000000000000000 R09: 0000000000000000 [ 876.404863][T18841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.404870][T18841] R13: 0000000000000000 R14: 00007fb40bdb6080 R15: 00007fffee0ce2a8 [ 876.404883][T18841] [ 876.995556][ T5889] usb 1-1: USB disconnect, device number 101 [ 877.926786][T18867] --map-set only usable from mangle table [ 878.072846][T18869] syz.4.2901 (18869): /proc/18865/oom_adj is deprecated, please use /proc/18865/oom_score_adj instead. [ 879.829477][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 880.239422][ T5889] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 880.389710][ T5889] usb 3-1: device descriptor read/64, error -71 [ 880.549500][ T974] usb 6-1: new low-speed USB device number 68 using dummy_hcd [ 880.639501][ T5889] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 880.679150][ T10] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 880.732793][ T974] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 880.767077][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.822138][ T974] usb 6-1: config 0 descriptor?? [ 880.859240][ T5889] usb 3-1: device descriptor read/64, error -71 [ 880.889189][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 880.896903][ T10] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 880.915474][ T10] usb 1-1: config 0 has no interface number 0 [ 880.932662][ T10] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 880.943877][ T10] usb 1-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 880.983604][ T5889] usb usb3-port1: attempt power cycle [ 880.995937][ T10] usb 1-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 881.013859][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.023903][ T10] usb 1-1: Product: syz [ 881.032738][ T10] usb 1-1: Manufacturer: syz [ 881.038401][ T10] usb 1-1: SerialNumber: syz [ 881.045657][T18945] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 881.062910][ T10] usb 1-1: config 0 descriptor?? [ 881.084799][T18940] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 881.092094][T18940] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 881.101692][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 881.110650][ T5924] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 881.232275][T18974] syz.6.2920: attempt to access beyond end of device [ 881.232275][T18974] nbd6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 881.246210][T18974] vxfs: unable to read disk superblock at 1 [ 881.254365][T18974] syz.6.2920: attempt to access beyond end of device [ 881.254365][T18974] nbd6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 881.267644][T18974] vxfs: unable to read disk superblock at 8 [ 881.273756][T18974] vxfs: can't find superblock. [ 881.285505][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.298306][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.339308][ T5889] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 881.347131][ T5924] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 881.357524][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.374967][ T5889] usb 3-1: device descriptor read/8, error -71 [ 881.385555][ T5972] usb 1-1: USB disconnect, device number 102 [ 881.394459][ T5924] usb 5-1: config 0 descriptor?? [ 881.629360][ T5889] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 881.659900][ T5889] usb 3-1: device descriptor read/8, error -71 [ 881.776252][ T30] audit: type=1400 audit(1751665490.862:5758): avc: denied { read } for pid=18995 comm="syz.6.2921" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 881.784085][ T5889] usb usb3-port1: unable to enumerate USB device [ 881.812092][ T30] audit: type=1400 audit(1751665490.862:5759): avc: denied { open } for pid=18995 comm="syz.6.2921" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 881.838440][ T5924] arvo 0003:1E7D:30D4.0016: unknown main item tag 0x0 [ 881.847303][ T5924] arvo 0003:1E7D:30D4.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 881.945188][ T30] audit: type=1400 audit(1751665491.032:5760): avc: denied { block_suspend } for pid=19000 comm="syz.0.2922" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 882.026605][ T30] audit: type=1400 audit(1751665491.112:5761): avc: denied { getopt } for pid=19008 comm="syz.0.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 882.605299][T18996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 882.613576][T18996] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 882.625742][T18996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 882.631847][T18996] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 882.639439][T18996] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 882.645410][T18996] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 882.653236][T18996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 882.659514][T18996] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 882.670367][T18996] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 882.678038][T18996] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 882.684227][T18996] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 882.693688][T18996] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 882.706238][ T5889] usb 5-1: USB disconnect, device number 62 [ 882.781098][ T30] audit: type=1400 audit(1751665491.872:5762): avc: denied { setopt } for pid=19038 comm="syz.6.2925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 882.800697][ C0] vkms_vblank_simulate: vblank timer overrun [ 883.218883][ T974] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 883.232092][ T974] asix 6-1:0.0: probe with driver asix failed with error -71 [ 883.242240][ T974] usb 6-1: USB disconnect, device number 68 [ 883.531440][T19068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2929'. [ 883.542555][T19068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2929'. [ 884.001144][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 884.356032][ T987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 885.358640][ T5825] Bluetooth: hci0: command 0x0c1a tx timeout [ 885.364785][ T5825] Bluetooth: hci1: command 0x0405 tx timeout [ 885.370814][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 885.372575][T12705] Bluetooth: hci5: command 0x0406 tx timeout [ 885.523936][ T30] audit: type=1400 audit(1751665494.602:5763): avc: denied { create } for pid=19084 comm="syz.5.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 885.611404][ T30] audit: type=1400 audit(1751665494.702:5764): avc: denied { ioctl } for pid=19084 comm="syz.5.2934" path="socket:[48075]" dev="sockfs" ino=48075 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 885.636170][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.766255][ T30] audit: type=1400 audit(1751665494.861:5765): avc: denied { bind } for pid=19095 comm="syz.6.2936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 885.786168][ C0] vkms_vblank_simulate: vblank timer overrun [ 885.821769][ T974] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 885.979916][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'. [ 886.020954][ T974] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 886.042758][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.087966][ T974] usb 5-1: Product: syz [ 886.106524][ T974] usb 5-1: Manufacturer: syz [ 886.114716][ T974] usb 5-1: SerialNumber: syz [ 886.189257][T12705] Bluetooth: hci2: command 0x0406 tx timeout [ 886.241973][ T974] usb 5-1: config 0 descriptor?? [ 886.448237][T19117] PKCS7: Unknown OID: [4] 0.38.11253.7578(bad) [ 886.459538][T19117] PKCS7: Only support pkcs7_signedData type [ 886.488360][T19117] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2938'. [ 887.181892][T11658] usb 5-1: USB disconnect, device number 63 [ 887.429277][T19083] Bluetooth: hci4: command 0x0405 tx timeout [ 887.430330][ T5818] Bluetooth: hci1: command 0x0405 tx timeout [ 887.435535][T19083] Bluetooth: hci0: command 0x0c1a tx timeout [ 887.447404][T12705] Bluetooth: hci5: command 0x0406 tx timeout [ 888.269215][T11658] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 888.290273][ T5924] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 888.420529][T11658] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 888.428903][T11658] usb 5-1: config 0 has no interface number 0 [ 888.435969][T19165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2944'. [ 888.439328][T11658] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 888.455103][T11658] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.463736][T11658] usb 5-1: Product: syz [ 888.468074][T11658] usb 5-1: Manufacturer: syz [ 888.481159][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short [ 888.502485][T11658] usb 5-1: SerialNumber: syz [ 888.515247][ T5924] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 888.536575][T11658] usb 5-1: config 0 descriptor?? [ 888.561923][ T5924] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 888.598476][ T5924] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 993.619058][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 993.626035][ C1] rcu: 0-...!: (0 ticks this GP) idle=c264/1/0x4000000000000000 softirq=84747/84747 fqs=1 [ 993.637189][ C1] rcu: (detected by 1, t=10502 jiffies, g=67693, q=92 ncpus=2) [ 993.644825][ C1] Sending NMI from CPU 1 to CPUs 0: [ 993.644853][ C0] NMI backtrace for cpu 0 [ 993.644866][ C0] CPU: 0 UID: 0 PID: 55 Comm: kworker/0:1H Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 993.644884][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 993.644894][ C0] Workqueue: events_highpri snd_vmidi_output_work [ 993.644920][ C0] RIP: 0010:debug_smp_processor_id+0x0/0x20 [ 993.644943][ C0] Code: e8 f5 0a 1a f6 e8 c0 4c f4 ff 90 65 ff 0d 78 fb 4b 08 e9 40 ff ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 c7 c6 60 7e 15 8c 48 c7 c7 a0 7e 15 8c e9 f9 fe ff [ 993.644955][ C0] RSP: 0018:ffffc90000007cd0 EFLAGS: 00000083 [ 993.644966][ C0] RAX: 0000000000000000 RBX: ffffffff9afc9ac8 RCX: 0000000000000002 [ 993.644975][ C0] RDX: ffffffff9afc9ab0 RSI: ffffffff84e2257c RDI: ffffffff9afc9ac8 [ 993.644984][ C0] RBP: 0000000000000002 R08: 0000000000000001 R09: fffff52000000f98 [ 993.644993][ C0] R10: 0000000000000003 R11: 0000000000000001 R12: ffffffff84e2257c [ 993.645001][ C0] R13: dffffc0000000000 R14: ffff8880597fb340 R15: 1ffff92000000fac [ 993.645011][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 993.645025][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 993.645035][ C0] CR2: 0000200000006000 CR3: 0000000051a67000 CR4: 00000000003526f0 [ 993.645044][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 993.645052][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 993.645061][ C0] Call Trace: [ 993.645067][ C0] [ 993.645072][ C0] rcu_is_watching+0x12/0xc0 [ 993.645092][ C0] lock_release+0x201/0x2f0 [ 993.645113][ C0] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 993.645136][ C0] debug_object_deactivate+0x1ec/0x3a0 [ 993.645158][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 993.645171][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 993.645193][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 993.645211][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 993.645230][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 993.645244][ C0] ? read_tsc+0x9/0x20 [ 993.645262][ C0] hrtimer_interrupt+0x397/0x8e0 [ 993.645282][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 993.645308][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 993.645327][ C0] [ 993.645331][ C0] [ 993.645337][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 993.645352][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 993.645369][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 00 15 f6 48 89 df e8 1e 54 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 74 05 f6 65 8b 05 4e 6a 49 08 85 c0 74 16 5b [ 993.645382][ C0] RSP: 0018:ffffc9000130f7c0 EFLAGS: 00000246 [ 993.645393][ C0] RAX: 0000000000000006 RBX: ffffffff90228460 RCX: 0000000000000007 [ 993.645402][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a526 RDI: ffffffff8c157ee0 [ 993.645410][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 993.645419][ C0] R10: ffffffff90a81657 R11: 0000000000000001 R12: 0000000000000005 [ 993.645427][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888030fa0800 [ 993.645442][ C0] find_slot+0x15c/0x1d0 [ 993.645458][ C0] snd_seq_oss_midi_input+0x10a/0xa20 [ 993.645476][ C0] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 993.645493][ C0] ? lock_acquire+0x179/0x350 [ 993.645513][ C0] ? find_held_lock+0x2b/0x80 [ 993.645530][ C0] snd_seq_oss_event_input+0x182/0x250 [ 993.645544][ C0] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 993.645559][ C0] __snd_seq_deliver_single_event+0x124/0x1c0 [ 993.645582][ C0] snd_seq_deliver_single_event+0x58c/0x720 [ 993.645604][ C0] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 993.645625][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 993.645641][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 993.645659][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 993.645676][ C0] ? snd_seq_timer_get_cur_tick+0x60/0x80 [ 993.645697][ C0] snd_seq_deliver_event+0x2c8/0x850 [ 993.645719][ C0] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 993.645740][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 993.645758][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 993.645777][ C0] snd_seq_kernel_client_dispatch+0x14f/0x180 [ 993.645799][ C0] snd_vmidi_output_work+0x1d1/0x390 [ 993.645820][ C0] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 993.645841][ C0] ? rcu_is_watching+0x12/0xc0 [ 993.645858][ C0] process_one_work+0x9cc/0x1b70 [ 993.645877][ C0] ? __pfx_process_one_work+0x10/0x10 [ 993.645894][ C0] ? assign_work+0x1a0/0x250 [ 993.645915][ C0] worker_thread+0x6c8/0xf10 [ 993.645933][ C0] ? __kthread_parkme+0x19e/0x250 [ 993.645951][ C0] ? __pfx_worker_thread+0x10/0x10 [ 993.645965][ C0] kthread+0x3c2/0x780 [ 993.645977][ C0] ? __pfx_kthread+0x10/0x10 [ 993.645990][ C0] ? rcu_is_watching+0x12/0xc0 [ 993.646006][ C0] ? __pfx_kthread+0x10/0x10 [ 993.646018][ C0] ret_from_fork+0x5d4/0x6f0 [ 993.646037][ C0] ? __pfx_kthread+0x10/0x10 [ 993.646049][ C0] ret_from_fork_asm+0x1a/0x30 [ 993.646069][ C0] [ 993.646847][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g67693 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 994.150433][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 994.160397][ C1] rcu: RCU grace-period kthread stack dump: [ 994.166287][ C1] task:rcu_preempt state:R running task stack:27784 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 994.179781][ C1] Call Trace: [ 994.183052][ C1] [ 994.185986][ C1] __schedule+0x116a/0x5de0 [ 994.190509][ C1] ? __lock_acquire+0x622/0x1c90 [ 994.195455][ C1] ? __pfx___schedule+0x10/0x10 [ 994.200312][ C1] ? find_held_lock+0x2b/0x80 [ 994.204997][ C1] ? schedule+0x2d7/0x3a0 [ 994.209336][ C1] schedule+0xe7/0x3a0 [ 994.213409][ C1] schedule_timeout+0x123/0x290 [ 994.218258][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 994.223627][ C1] ? __pfx_process_timeout+0x10/0x10 [ 994.228916][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 994.234720][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 994.240186][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 994.244964][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 994.250252][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 994.255453][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 994.260391][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 994.265250][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 994.271064][ C1] rcu_gp_kthread+0x270/0x380 [ 994.275734][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.280932][ C1] ? rcu_is_watching+0x12/0xc0 [ 994.285704][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 994.290904][ C1] ? __kthread_parkme+0x19e/0x250 [ 994.295930][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 994.301121][ C1] kthread+0x3c2/0x780 [ 994.305191][ C1] ? __pfx_kthread+0x10/0x10 [ 994.309776][ C1] ? rcu_is_watching+0x12/0xc0 [ 994.314540][ C1] ? __pfx_kthread+0x10/0x10 [ 994.319128][ C1] ret_from_fork+0x5d4/0x6f0 [ 994.323717][ C1] ? __pfx_kthread+0x10/0x10 [ 994.328304][ C1] ret_from_fork_asm+0x1a/0x30 [ 994.333080][ C1] [ 994.336095][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 994.342415][ C1] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 994.354387][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 994.364433][ C1] Workqueue: events_unbound toggle_allocation_gate [ 994.370941][ C1] RIP: 0010:handle_softirqs+0x1dd/0x8e0 [ 994.376484][ C1] Code: 88 6c 24 26 4c 89 7c 24 18 48 c7 c7 20 a1 ab 8b e8 a8 09 04 0a 65 66 c7 05 d6 04 50 12 00 00 e8 b9 15 47 00 fb bb ff ff ff ff <49> c7 c7 c0 c0 20 8e 41 0f bc dc 83 c3 01 0f 85 a4 00 00 00 e9 b1 [ 994.396086][ C1] RSP: 0000:ffffc90000a08f28 EFLAGS: 00000212 [ 994.402169][ C1] RAX: 00000000016cae20 RBX: 00000000ffffffff RCX: 0000000000000002 [ 994.410150][ C1] RDX: 0000000000000000 RSI: ffffffff8de1a526 RDI: ffffffff8c157ee0 [ 994.418135][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 994.426109][ C1] R10: ffffffff90a81657 R11: 0000000000000001 R12: 0000000000000100 [ 994.434080][ C1] R13: 000000000000000a R14: 1ffff920001411ed R15: ffffed10041d6488 [ 994.442050][ C1] FS: 0000000000000000(0000) GS:ffff888124852000(0000) knlGS:0000000000000000 [ 994.450981][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 994.457566][ C1] CR2: 000000110c298fd0 CR3: 000000000e382000 CR4: 00000000003526f0 [ 994.465536][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 994.473500][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 994.481465][ C1] Call Trace: [ 994.484742][ C1] [ 994.487581][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 994.492881][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 994.498172][ C1] __irq_exit_rcu+0x109/0x170 [ 994.502853][ C1] irq_exit_rcu+0x9/0x30 [ 994.507090][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 994.512726][ C1] [ 994.515652][ C1] [ 994.518577][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 994.524553][ C1] RIP: 0010:smp_call_function_many_cond+0xd7b/0x1510 [ 994.531229][ C1] Code: e8 2a 1a 0c 00 45 85 ed 74 46 48 8b 14 24 49 89 d6 49 89 d5 49 c1 ee 03 41 83 e5 07 4d 01 e6 41 83 c5 03 e8 c7 1e 0c 00 f3 90 <41> 0f b6 06 41 38 c5 7c 08 84 c0 0f 85 6f 05 00 00 8b 43 08 31 ff [ 994.550848][ C1] RSP: 0000:ffffc9000210f8a0 EFLAGS: 00000293 [ 994.556938][ C1] RAX: 0000000000000000 RBX: ffff8880b84421e0 RCX: ffffffff81b001cd [ 994.564917][ C1] RDX: ffff888020eb2440 RSI: ffffffff81b001a9 RDI: 0000000000000005 [ 994.572893][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 994.580859][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 994.588832][ C1] R13: 0000000000000003 R14: ffffed101708843d R15: ffff8880b853b580 [ 994.596805][ C1] ? smp_call_function_many_cond+0xd9d/0x1510 [ 994.602895][ C1] ? smp_call_function_many_cond+0xd79/0x1510 [ 994.608979][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 994.614010][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 994.620347][ C1] ? __pfx___text_poke+0x10/0x10 [ 994.625290][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 994.630316][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 994.635439][ C1] ? __kmalloc_node_track_caller_noprof+0xeb/0x510 [ 994.641947][ C1] smp_text_poke_batch_finish+0x27b/0xdb0 [ 994.647670][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 994.652700][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 994.658940][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 994.665177][ C1] ? find_held_lock+0x2b/0x80 [ 994.669860][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 994.675838][ C1] jump_label_update+0x376/0x550 [ 994.680778][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 994.686668][ C1] static_key_enable+0x1a/0x20 [ 994.691429][ C1] toggle_allocation_gate+0xfa/0x280 [ 994.696717][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 994.702612][ C1] ? rcu_is_watching+0x12/0xc0 [ 994.707378][ C1] process_one_work+0x9cc/0x1b70 [ 994.712318][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 994.717694][ C1] ? __pfx_process_one_work+0x10/0x10 [ 994.723069][ C1] ? assign_work+0x1a0/0x250 [ 994.727664][ C1] worker_thread+0x6c8/0xf10 [ 994.732260][ C1] ? __kthread_parkme+0x19e/0x250 [ 994.737461][ C1] ? __pfx_worker_thread+0x10/0x10 [ 994.742570][ C1] kthread+0x3c2/0x780 [ 994.746636][ C1] ? __pfx_kthread+0x10/0x10 [ 994.751220][ C1] ? rcu_is_watching+0x12/0xc0 [ 994.755981][ C1] ? __pfx_kthread+0x10/0x10 [ 994.760566][ C1] ret_from_fork+0x5d4/0x6f0 [ 994.765156][ C1] ? __pfx_kthread+0x10/0x10 [ 994.769739][ C1] ret_from_fork_asm+0x1a/0x30 [ 994.774514][ C1]