last executing test programs: 18m53.886124651s ago: executing program 1 (id=2): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000080)=0x6, 0x4) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000000540)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m53.677795865s ago: executing program 1 (id=6): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) (async) r0 = getpid() (async) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r6], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000"], 0x48) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @remote}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0xd6c, 0x3a5e21d1, 0x4, 0x40000, r7, 0x800, '\x00', r10, r11, 0x2, 0x4}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) write$midi(0xffffffffffffffff, &(0x7f0000000240)="5c3ab34ecdd9ecbc81fa2813638d9b2b235cd70ce5e495804d4974284b3eb3074830384b21cebc29d02d082c190624a8b8efaba4de89216f55be039f6aafba3fd8b1353f868d9111c5196cb1617e833a46df553f498597878c8068", 0x5b) (async) ioctl$PPPIOCGCHAN(r9, 0x80047437, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) 18m52.846565871s ago: executing program 1 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 18m52.605187298s ago: executing program 32 (id=7): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7m43.566343697s ago: executing program 3 (id=2790): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x400}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f0000000040)='./file1\x00', r3, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x64, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x7, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x9, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) listen(r5, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000723000/0x4000)=nil, 0x4000, 0x200000c, 0x50, r3, 0x0) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}, {&(0x7f00000004c0)="a27996190162232c7e264aac5d3b1c9c1951d3ba4f3cde38ae6acbdf1a6e975b476b6add3d11f1", 0x27}, {&(0x7f00000005c0)}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000000500)="191d8ca1dbc1b0f61dce17d879b7b570e64ddaf21d1ed5646e784d21a95ce4ddf86e4895627279239ec6cf4915981fd9c69d295659a65f29e6d0e1757efd37d50b9795e93f30cdeef11f5dd9f6efab415fe9", 0x52}, {&(0x7f0000000680)="3040905fb8440fd2ee0b0ec8cfccd0bdc7448df49e37c5fdd258b00d07f3f271d2bda70c9d49cac29e60f547e2277c506c71", 0x32}], 0x6) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) 7m41.384491545s ago: executing program 3 (id=2799): r0 = socket$kcm(0x10, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/24, 0x18) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000007c0)=@hci={0x1f, 0x5863, 0x31}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000f40)="b8b28225cc772f31e7e8c7", 0xb}, {&(0x7f0000000300)="ed9788fb", 0x4}], 0x2}, 0x44000) connect$rose(0xffffffffffffffff, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffd, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x800) (fail_nth: 5) 7m40.834059606s ago: executing program 3 (id=2802): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1}}], 0x1, 0x4000041) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="91") 7m39.466399876s ago: executing program 3 (id=2809): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="3593b30d409a075946b8cfc11305ffe0e589ed1258", @ANYRES64=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x2a200) io_uring_setup(0x17ce, &(0x7f0000000040)={0x0, 0x2df0, 0x4000, 0xfffffffe, 0x2b2}) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r2, 0x80089203, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x5) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=r4, 0x4f4b406747aafd0a, 0x0, 0x7, &(0x7f0000000040), 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0}, 0xffffffffffffff6f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, 0x0, 0x25, 0x1f, @val=@netkit={@void, @value=r4, @void, @void, r6}}, 0x1c) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r7}, &(0x7f0000000200), &(0x7f0000000280), 0xc00}, 0x20) 7m36.342411053s ago: executing program 3 (id=2825): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000380)="ca091cc2e088", 0xffe3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r3}, 0x18) bpf$BPF_LINK_CREATE_XDP(0xffffffffffffff8e, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x2], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 7m36.234061153s ago: executing program 3 (id=2826): syz_open_dev$dri(&(0x7f0000000080), 0x8000, 0x38400) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422715d0e0788924d51"], 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x7f8b, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x3, 0x3a0}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x3da}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0xb, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) io_uring_enter(r2, 0x37b0, 0x3e80, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2043, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7m20.892665133s ago: executing program 33 (id=2826): syz_open_dev$dri(&(0x7f0000000080), 0x8000, 0x38400) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422715d0e0788924d51"], 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x7f8b, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x3, 0x3a0}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x3da}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0xb, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) io_uring_enter(r2, 0x37b0, 0x3e80, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2043, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x94}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2m18.810716202s ago: executing program 5 (id=3929): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000180)={r2}) 2m18.601781964s ago: executing program 5 (id=3930): r0 = socket(0x2, 0x800, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x111, 0x5, 0x800}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_open_dev$usbmon(0x0, 0x0, 0x200400) openat$sequencer(0xffffff9c, &(0x7f00000001c0), 0x200440, 0x0) (async) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) gettid() (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="687567cb53616c7761797353ef1137da90991541a17f524be0a360cd6aa3d3e99456a3c51bf9582d56a28981ac5da036e118ff50f470100cd45dcb18d4a6cae48ffb6b5e95ea7ec8131c9dc7e512070da3bafd895cb1876675dce2f32c1c37032e7554ebed85169cc40d863fe205c9703d7bec"]) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x4c591000) (async) madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) recvmmsg(r3, &(0x7f0000002c00), 0x0, 0x20000, 0x0) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) timer_create(0x2, &(0x7f0000000080)={0x0, 0x39, 0x0, @thr={0x0, &(0x7f00000007c0)="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"}}, 0x0) (async) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) 2m18.361687107s ago: executing program 5 (id=3931): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xbd, &(0x7f0000000140)={@remote, @multicast, @void, {@mpls_uc={0x8847, {[{0x621, 0x0, 0x1}, {0xcf5e}, {0x3}], @llc={@llc={0x0, 0x0, "7385", "c5e1d39ade684c282dda23eebcb17751b62a6778aa3cc26d32d289ce4a53c8ec94b8448554701ceef3af27488cb029c18cf1fed126fceb8796e8374010f585ad24d3b995786864a0712d86de26d8a6d54379f53c9ec5d8554fe2046674f43adcebd270a641f76c2d7aed3b9b5fd9de30470c9d74fbf3bcfde03d6efa093cd819c889fd23c30290b0bd4d34912c2b6b2b155288eb756c09414b8a1c374a65d7"}}}}}}, &(0x7f0000000200)={0x0, 0x1, [0xd4f, 0x929, 0xfba, 0x8e3]}) syz_extract_tcp_res(&(0x7f0000000100), 0x6, 0x8001) syz_emit_ethernet(0xab, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x75, 0x6, 0x0, @mcast1, @local, {[], {{0xfffe, 0x4001, 0x41424344, r0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x3}, @mss={0x2, 0x4, 0x400}, @md5sig={0x13, 0x12, "10d3149f4ed4bd7f00"}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x10, 0x1}]}}, {"eb1208d8b0e9bd0ed35255bc9e30b153d19083faa5f972907d74436204bdb42ffd4570cfe47c2470171b0f732d2110c9557c17ad2c385b19e9"}}}}}}}, 0x0) 2m18.330157834s ago: executing program 5 (id=3932): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x11e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xc) mkdirat(r0, &(0x7f0000000000)='./file1\x00', 0x81) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_xen(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200002, &(0x7f0000000300)={'trans=xen,', {[{@privport}, {@cache_readahead}, {@directio}, {@noxattr}, {@access_uid={'access', 0x3d, r2}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '{$+&'}}]}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x8, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x3966, 0x2, 0x6000, 0x0, r5, r6, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x203d) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x9, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, {0x400000, 0x9, 0x0, 0x3ff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x1, {0x1, 0x400000, 0x1000000, 0x105, 0x3fa, 0x3, {0x6, 0x10003, 0x0, 0xfe2b25d, 0xffffffffffffffff, 0xfffffffffffffff7, 0x2, 0x5, 0xfffffffd, 0x8000, 0x2000007, r9, 0x0, 0x28, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000180), &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000280), 0x1, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@uid_lt={'uid<', r9}}]}}) getdents64(r0, 0x0, 0x0) 2m17.427429303s ago: executing program 5 (id=3941): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1}}], 0x1, 0x4000041) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="91") 2m17.014818777s ago: executing program 5 (id=3947): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/180, 0xb4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) syz_usb_disconnect(r0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = io_uring_setup(0x6c4, &(0x7f0000000400)={0x0, 0x4075, 0x18, 0x2, 0x172}) io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) (async) writev(r9, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40005}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="00008130760f7577f29a030400000000000000b7", @ANYRES32=r10, @ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="00008130760f7577f29a030400000000000000b7", @ANYRES32=r10, @ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$isdn(0x22, 0x3, 0x2) (async) socket$isdn(0x22, 0x3, 0x2) 2m15.848023686s ago: executing program 34 (id=3947): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/180, 0xb4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xffffffffffffff9c, &(0x7f0000002100)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) syz_usb_disconnect(r0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x3, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = io_uring_setup(0x6c4, &(0x7f0000000400)={0x0, 0x4075, 0x18, 0x2, 0x172}) io_uring_register$IORING_REGISTER_FILES2(r8, 0xd, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f00000001c0)) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r9, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) (async) writev(r9, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x40005}, 0x40) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="00008130760f7577f29a030400000000000000b7", @ANYRES32=r10, @ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r10, @ANYBLOB="00008130760f7577f29a030400000000000000b7", @ANYRES32=r10, @ANYRESDEC], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$isdn(0x22, 0x3, 0x2) (async) socket$isdn(0x22, 0x3, 0x2) 11.433240493s ago: executing program 0 (id=4412): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000008000000080482", @ANYBLOB="433cf7552c99d1b2fe393b8fc1cbf3d01093358935f1ad6983fd2519f6bf47a0e591a0c52fac97d36149eb2747973936505e09186fa62aadb1c6de4d11e86d9468a8046fbd81cbe78af467878d3f8a9ff350946bbe89b6fd9019f311bb67dcc886d2ca8dbb02f37c4e742e52867a0d501c9d04e958a511ab7b6f5668a144c2572385431705679a13705bdc61d4e8fbd6db577cd83de6010b2e3103075813c5931b411a57fd3065f6bd872dc88bb9d44d9d83e88abd060c88e2aa0d2f3c9ea5e3845678a8e0cb6bdaa8f4730967495f052d25ab552f4336bbdfe18f45c92b1a4d"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)="91") r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x1d, 0x193, &(0x7f0000000400)="d34dd696c22d61b89a17de24c676c58e97e218d2f56a9be25709db78da9dc930287ecf8672b1f81224134e84569f21eda0816ab4070a92c47a6e5b81d178d9f7122dcf60f55c9e60e1346861fa5b2450d163793ce4f538aac3b8034f492c95b72937b280746f1818e9a5deb7b7c3399bbaa1d920d4010bc41fb0ef661c89c02033e1b572c80ff12572d57eae797bb5f8f9acdea3ad9453b5d924aabe1b174dc3651be6611e759f10e9db0dae0d12c6d02f651acc5b357d5d04fdc66f2935aa5d5bbd330d7d97eb7c9aa75cba227c2af5afad9d8f248c4160d8c01668c8fb6f0337e2e2d198e40734708794b4643c098490796686381022df3ac2282bc30e8a8e6f0a7f21184b03f37d95c3f2ab6eac8d129ee904b160b1e2dc831b14daaec98ad75d0593fbd3e00e2fd7560e82b2e273a2c7be6a67b5edef6851ac203755d85c7d614d5d85189ec84db06009eb5475ff1008ec1600dbed3f2610e1ff355ba4107718fab272345341c2335f2dfdfbf274053a1f1f14dd181c88a626a99e41b7a02348e163bfc751a030dd39a663aca3b331ee48923b4fe1bbb32ed8722bc8f0e44a7f27ecf3ca31579f31cabb699786a42c075fa8b841fae327ef43a8c17d6ea232034d16a3378cf93642e4c77a5867ad64b3d0f9a099d805d397d7c2b0df0358bd3b6672ddc10f29eb96c623f0aba57c32748187b51c3a7fdd5052ff8f0c317c8ef7c2c58b6636cd346a065fe7a2f019d33835996ff6e09927ee7fa9a12287442da1b32cbe8bb16ba87728ff1c7a964d20b4aae9e71b589231834a0bb7027ef9a5ed921cef67ff5f9441b5f484891d68758592f6bb4f9ee633df5a33f456a0494de79faf44629488560435a776faea3cf290ebf01c0e16ab4a9dab3acac62b1af2d4c092d00df03c30d62b7c48c02f57228dfce96d528bcc0e8b5f0b1e3da3b5e0014f3eeedaafc2ef1b8fd2cd4f18c147c4bb0be12b74f50fa28014e7ff4fb0dbde87d417d05ae48806a6fa6bfb1929440b242217aefcacaa26a800513b789a8e1a26990891be4bdb5146513d66d8fc059cde13063077e84e9554e23b3e6e0b9718d59ffd552c245aebfe601255dd60e2a9c31efb09c43acbfad9309591ff4bd70745b3315a727a4184a9a225cc1736f1cb30d7b8ffec8a2cbee0f0fb8b7ece30028642cdee4fc81ac538af48c1860e720b73cb2d12463a21bc6d78020f178c73f5a6aa41be421b7cf6d205a2a1e3b3e736ec500ff644700b71180f554084c299f723e6c3fd1d4582a1ab2decad39cde2b13f2747befd588ddcf763d1211cacb96fea81010c1ad97c6f954b5f943db4becd175019dc19d5d3d01bc42e715f90da42762e40356d36286fcf7e0fda7354eafbfe9bb12fede28baeb0453c229b3c71256fe4e9694f2c89e4cc0cadf4efaa89d7ac61e8ea4d717ab3c471192d4b23"}) 11.360587769s ago: executing program 2 (id=4413): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000140)={0x8000000}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x0, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x1f4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000180)={r4}) 10.387435701s ago: executing program 2 (id=4417): socket$kcm(0x10, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r0}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0xa, 0x3, 0x3a) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/82, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000600)={0x17}) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000000)={0x2198, &(0x7f0000000040)}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x14, 0x3e, 0x229, 0x0, 0x0, {0xa, 0x0, 0xa6}}, 0x14}}, 0x0) 8.928992846s ago: executing program 7 (id=4422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000050000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 8.73103183s ago: executing program 0 (id=4423): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="522ecb95a092", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) 8.651898447s ago: executing program 0 (id=4425): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r5, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x2, 0x0, 0xd}, 0x10) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100", @ANYRES8], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x10}, 0x5}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}], 0x78) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x4, 0x7, 0x7, 0xc, 0x7, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x8, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x2, 0xfffffffffffff8f6, 0x6, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x400000000000008, 0x9, 0x8, 0x6, 0x828, 0x8, 0x5, 0xfffffffffffffffa, 0xb, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb4, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x9, 0x4, 0x53, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x48d, 0x2, 0x7, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0x6, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x1, 0x3]}) socket$nl_route(0x10, 0x3, 0x0) 8.526214469s ago: executing program 7 (id=4426): r0 = fsopen(&(0x7f0000000000)='efivarfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='#]$\x00', &(0x7f0000000080)='\\\x00', 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc4}, &(0x7f0000000140)={0x0, "8596430e5d406f9bfa641672900c1ac7601d0b038d8bc2ac6157003cbc1182ed6625d053a72f0b1eb0ae35826c370c52b67d85e6c207ae18b7755c8f5d72d345", 0x11}, 0x48, 0x0) (async) r3 = request_key(&(0x7f0000000200)='trusted\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='efivarfs\x00', 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='user\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r3}) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000006c0)={0x8, 0x0, [{0xdddd1000, 0x4f, &(0x7f0000000300)=""/79}, {0x3000, 0x44, &(0x7f0000000380)=""/68}, {0x80a0000, 0x3e, &(0x7f0000000400)=""/62}, {0x0, 0x80, &(0x7f0000000440)=""/128}, {0x0, 0x55, &(0x7f00000004c0)=""/85}, {0xf000, 0x5a, &(0x7f0000000540)=""/90}, {0x80a0000, 0x1, &(0x7f00000005c0)=""/1}, {0x1000, 0x87, &(0x7f0000000600)=""/135}]}) (async) keyctl$instantiate(0xc, r2, &(0x7f0000000800)=@encrypted_new={'new ', 'default', 0x20, 'user:', '!', 0x20, 0x6}, 0x28, 0xfffffffffffffff8) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000840)={r0, 0x3, 0x5, 0x17}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000880)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000008c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, 0x1404, 0x400, 0x9, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40001) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000a80)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000b00)={0x10, 0x0, r7}) (async) fcntl$notify(r4, 0x402, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000b80)) (async) fchmodat(r4, &(0x7f0000000bc0)='./file0\x00', 0x64) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000c00)={0xf000, 0x0, 0x400, 0x0, 0x4}) sendmsg$rds(r4, &(0x7f00000014c0)={&(0x7f0000000c40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/48, 0x30}, {&(0x7f0000000cc0)=""/43, 0x2b}], 0x2, &(0x7f0000001200)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000d40)=""/180, 0xb4}, &(0x7f0000000e00), 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x1}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x6}, &(0x7f0000000e40)=0x7, &(0x7f0000000e80), 0x3, 0x7f, 0x5, 0x10000, 0x285eac85ec5a71b, 0x8001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x4, 0x9}, &(0x7f0000000ec0)=0x28d, &(0x7f0000000f00)=0x8, 0x3ff, 0x45d, 0x5, 0xbb4, 0x8, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000f40)=""/102, 0x66}, &(0x7f0000000fc0), 0x6}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x7}, &(0x7f0000001000)=0x38bf2771, &(0x7f0000001040)=0xd29, 0xe678, 0x91, 0x8000000000000001, 0x80000001, 0x65, 0x4eb}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x3}, &(0x7f0000001080)=0x7f, &(0x7f00000010c0)=0x8, 0x400, 0x2a, 0x4, 0x9, 0x0, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x200}}, @cswp={0x58, 0x114, 0x7, {{0x32b, 0x800}, &(0x7f0000001100)=0x5, &(0x7f0000001140)=0x891, 0x1ff, 0x1, 0x6, 0x3, 0x46, 0xfffffffffffffe00}}, @cswp={0x58, 0x114, 0x7, {{0x6}, &(0x7f0000001180)=0x10000, &(0x7f00000011c0)=0x1, 0x8, 0x7, 0x3, 0x2, 0x44, 0x200}}], 0x2a0, 0x4000}, 0x2000c045) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000001500)={0x0, 0x100, 0x2, [0x3, 0xff]}, &(0x7f0000001540)=0xc) (async) add_key$user(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x0}, &(0x7f0000001600)="fb4f7ce7e7ff392a515979454faff4556c739ece4842af722a492243832cd771b9fce4bf7f3fbdd49d2649d031", 0x2d, 0xfffffffffffffff8) (async) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000001640)={0x8, 0x5, 0x1, 0x3ff, 0x7, 0x0, [{0x1, 0x2, 0xfffffffffffffbff, '\x00', 0x8}, {0x7, 0x2, 0x3, '\x00', 0xa00}, {0x6, 0x3cf8f9f9, 0x9, '\x00', 0x2000}, {0x9, 0x3, 0x39dcb9c0, '\x00', 0x200}, {0x50c7b925, 0x3, 0x2, '\x00', 0x2000}, {0x4, 0x0, 0x3}, {0x4, 0x0, 0x8000, '\x00', 0x2403}]}) (async) bind$unix(r9, &(0x7f0000001800)=@file={0x0, './file0/file0\x00'}, 0x6e) (async) r10 = accept4$x25(r4, &(0x7f0000001880), &(0x7f00000018c0)=0x12, 0x0) bind$x25(r10, &(0x7f0000001900)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) (async) ioctl$SIOCX25SCUDMATCHLEN(r10, 0x89e7, &(0x7f0000001940)={0x1e}) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000001980)={0x0, 0x1ff, [0x5, 0x8, 0x5, 0x8, 0x8, 0x1]}) 8.435648983s ago: executing program 7 (id=4428): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 7.994503238s ago: executing program 2 (id=4430): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x800) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d0000000706010800000000000000000000000005"], 0x1c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x400087, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000}, 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0xffb9}, 0x48) 7.289701303s ago: executing program 7 (id=4431): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 7.097170656s ago: executing program 7 (id=4433): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000001e00)={0x2, @sdr={0x32314d54, 0x7}}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="31f4ab74", 0x4, 0xfffffffffffffffd) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600aa96413a7bf7", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100040008010400440008004b000100000018004c000bac0f0001ac0f000fac0f0014ac0f000dac0f0004001e013400fe005b4b2efefbd21e89ebe44fed4ccafef683d6d2b615eaae470d346b912171f3b7964aa23b2b1cebf9b5e719d408580a7b08004b000100000008004c0013ac0f002400fe001c239bb7fafedd4381bff31d77124bfb354d84"], 0xe8}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) r8 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5603, 0x10000000000004) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r9) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="030427bd7000fcdbdf258800000008000300dc7665b90abaf2ad91af83e3d8816f279c2a1bd6e7687c91348f4a72b88f301fb625bd2c2b6ced224df8362bbe26b2cb04cafc79e7b1dc96b5b24f840e1c8ff302dae27e178e5a03ab1628284cd9a79da081d6fad11c8ac617b6f0123de07abd557fdc66fadb6474423feb869f327515ae979e6a103dff419423bb5b6f88ef65424971c0e5d5", @ANYRES32=r11, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) 7.036140729s ago: executing program 6 (id=4434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000adc000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x5352c000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xa39, 0x0, 0x0, 0x0) setfsgid(0xee00) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000100)='stack\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 5.930754926s ago: executing program 4 (id=4435): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="522ecb95a092", 0x6) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) 5.886347369s ago: executing program 7 (id=4436): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="f3", 0xf000}], 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x73a, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioperm(0x4, 0x3, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x12b001) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000400)={"524ebce3", 0x3, 0x5, 0x81, 0x3, 0x16dc, "8f220c1e7e0600a2da94f3c207ed25", "2eb4fea5", "44b4dd9e", "ad2e21d3", ["d4150c57d062e240fbe214a9", "85f03c04d42a166156600360", "82621ecad17be13010ccc10d", "6631cbd8c92f5461e2ea90f9"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c7"], 0x50) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000003c0)={0x0, 0xfffffffffffffffe, 0x1, 0x6, 0xe30, 0x7fffffff, "c2a0da871813beebb98f6cd3d5e10363", 0x0, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfc}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r5}, 0x18) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8bd6095d4dd1d71160d96070200001ea89de2b7fb0000e60080b8785d960001000000000000d100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r7) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7ff, &(0x7f0000000280)=0x1) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x9, 0x5}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) 5.870205916s ago: executing program 6 (id=4437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000120000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 5.778584731s ago: executing program 4 (id=4438): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x200000000) write$vhost_msg(r1, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, 0x0, &(0x7f00000003c0)='jfs\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x20000004) getsockname$packet(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x41, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$SIOCAX25GETINFOOLD(r6, 0x89e9, &(0x7f0000000000)) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000000000)=0xc2fc) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) writev(r5, &(0x7f0000000080)=[{0x0}], 0x1) write$vhost_msg(r1, &(0x7f0000000340)={0x1, {&(0x7f0000003900)=""/4103, 0x1007, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r1, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) r7 = socket(0x4820b8db12589bc7, 0x5, 0x7) bind$alg(r7, &(0x7f00000001c0)={0x1e, 'skcipher\x00', 0x0, 0x0, 'fpu(pcbc(aes))\x00'}, 0x58) 5.4823223s ago: executing program 0 (id=4439): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x8) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x3, 0x1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000800)=@urb_type_iso={0x0, {0x2}, 0x5, 0x5, &(0x7f0000000140)="af1a80677f62826bd21069616fdc60994e99c3fdf4c0636bf631c36079c82aa72db9dea3ba1dfc71d30760df8e11809a8bd9235c546bcb4b9044a8eba21622020a97dde126151cf4f1e90d8c6a9688c195758ad6a9b3679f9b06aa0c7d1d06d66fd628f8c6234ba5d4de481224f105450dbc0589a596f932a020f0d7eeec4d32f6108e6e0f3707277dc6e7e6ccab792644c0b67288d52b214abc5d73bfc23f186789d2ff9b404bc7e81d0df5a500746c778de15b2f9c6e3cae9523d6a184571d5fbed564544c4fb436bc5ac4e0235db6e6e61612765c2f", 0xd7, 0x7f, 0x2, 0x66, 0x9, 0x5, &(0x7f0000000240)="5e9b8592e75bc1db9e4f572e124568b4190db2b1f2fa2c934beb1c8e934308596a379342b17e389e266a7d713b46457a673b5a2e7bc035a9e15247464d2b35d9a7e327d29635d662df13", [{0x6, 0x6, 0xffff15b2}, {0xc00, 0x3, 0xf}, {0xffa, 0x0, 0x5}, {0x8, 0x5}, {0xfffff245, 0x5, 0xfffffff9}, {0x6, 0x2, 0x3}, {0x3ff, 0x670c, 0x5}, {0x1, 0xfff, 0x5}, {0x6, 0xdf87, 0x8000}, {0xd62d, 0x7, 0x3}, {0xfffffffb, 0x3, 0x8}, {0x9497, 0x0, 0x4}, {0x7, 0xfffffff7, 0x10000}, {0x3, 0x5, 0x7}, {0x9, 0xb4a0, 0x4}, {0x8, 0xab, 0xfff}, {0x6, 0xb71}, {0x7, 0x4, 0x5}, {0x0, 0x50, 0x10010000}, {0xffffffff, 0x6, 0x6d15418}, {0x3, 0x14e, 0x7}, {0xc0, 0x7, 0xfffffffb}, {0x8, 0x0, 0x81}, {0x6, 0x7, 0x9}, {0x8, 0x9, 0x7fffffff}, {0x5, 0xffffff80, 0x8}, {0xfffffff7, 0x7f, 0x7fffffff}, {0x5, 0x6, 0x4}, {0xfffffffc, 0x2, 0xc9}, {0x4, 0x8}, {0x5, 0xffff, 0x8}, {0xd, 0xff, 0xffffff7f}, {0x0, 0x8, 0x80000000}, {0x4, 0x0, 0x1}, {0x4, 0x40000000, 0x3}, {0x5, 0x10000, 0x5}, {0x9, 0x3ff, 0x1082}, {0x2807, 0x5, 0x400}, {0x3, 0xff}, {0x10001, 0xfffffc00, 0x718f}, {0x3, 0x9, 0x1}, {0x8, 0x1, 0x40}, {0x0, 0xfffffffe, 0x9}, {0x5, 0xa, 0xe}, {0x1, 0x0, 0x5}, {0xe, 0x4, 0x2}, {0x8001, 0x4, 0x8}, {0x5, 0x5}, {0x1, 0x7fffffff, 0x7d8}, {0x3, 0x2, 0x100}, {0x1ff, 0x93, 0x5}, {0x8, 0x4, 0x7fffffff}, {0xff, 0x2, 0x1}, {0x1, 0x7, 0xbf08}, {0x10001, 0x6e, 0x1}, {0x9, 0x4, 0x5}, {0x10, 0x0, 0xc55e}, {0x6, 0x7ff, 0x2}, {0x9, 0x10000, 0x4}, {0x0, 0x9, 0x7}, {0x2, 0x350, 0xd}, {0x4384, 0x3e, 0xe}, {0x4, 0x994, 0xfff}, {0x9b6, 0x40, 0xc}, {0xfffff97e, 0x0, 0x4}, {0x2, 0x610, 0x2}, {0x664, 0x468, 0x3ff}, {0xfffff800, 0x5, 0x6}, {0x7fff, 0x7ff, 0x7e9}, {0x2f, 0x2, 0xf5eb}, {0x8, 0x3800, 0x1}, {0x0, 0x7, 0x7fff}, {0x6, 0x7ff, 0xfffffffe}, {0x8, 0x2, 0x6}, {0x5, 0x8000, 0x4}, {0x5, 0x7, 0x5440}, {0x100, 0x9, 0x1}, {0x3, 0x10}, {0x8, 0x8}, {0x7972, 0x2, 0x7}, {0x6, 0x4}, {0x7, 0x9, 0x88}, {0x2, 0x9, 0xe2}, {0xfffffffa, 0x81, 0x80000000}, {0x5, 0x8, 0x3}, {0x5, 0x8, 0x6}, {0x3d9, 0x100, 0x8}, {0x9, 0x488b, 0x80}, {0x8, 0xfffffffe, 0x9}, {0x1, 0x296, 0xfffffffa}, {0xe, 0x8d, 0x5}, {0x7, 0x54, 0x7fffffff}, {0x80, 0x3, 0x9}, {0x2, 0x8e, 0x7}, {0x9, 0x1, 0xffffffff}, {0x8, 0x4, 0xfffffff2}, {0x5, 0x2a4, 0x8}, {0x1, 0x3, 0x1}, {0x3, 0x4, 0x7}, {0x9, 0x8001, 0xfff}, {0x101, 0x2dab2665, 0xffff}, {0x5, 0x5, 0x7e3a}]}) close_range(r2, r2, 0x5d087ffe9e21e8ae) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000002c0)={&(0x7f0000000040)=[{0xa04d, 0x8000, 0xfe, &(0x7f0000000700)="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"}], 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0131efc336df28fa4c5b6e730100000000002c0012800e00010069703665727370616e00000018cdc47a74b9c20a00042212000500160001000000000000"], 0x4c}}, 0x0) 5.05672542s ago: executing program 4 (id=4440): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_UIE_ON(r5, 0x7003) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) 5.04181714s ago: executing program 6 (id=4441): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000440)=""/113, 0x71}], 0x1, 0x401, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3}, 0x10) (async) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x800}, 0x10) syz_emit_ethernet(0xe73, &(0x7f0000001180)=ANY=[], 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_extract_tcp_res(0x0, 0x10000, 0x9) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) (async) sendto$packet(r5, 0x0, 0x0, 0x1, 0x0, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) fchdir(r6) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}, {0x0}], 0x2}, 0x0) 4.782062909s ago: executing program 4 (id=4442): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 4.344092521s ago: executing program 6 (id=4443): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x6}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 4.055798995s ago: executing program 2 (id=4444): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb10000000010200090502", @ANYRES32], 0x0) (async) syz_usb_connect$uac1(0x4, 0x7a, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x2, 0xd0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xb, 0x4, 0x2, {0x7, 0x25, 0x1, 0x1, 0xf1, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0x0, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0xca, 0x1, {0x7, 0x25, 0x1, 0x87, 0xa, 0x7}}}}}}}]}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r2, 0x4c1dad3e3d6a7499, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x2400c000) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 3.822247361s ago: executing program 6 (id=4445): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x1}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x4}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000007f0cdbb511488597f8cd71806a6b00fc14b191f8b11921ac55a102e33098acc5352589b2eb9a059f7e5e15974a0c4585c464a148af22fdb211cebcf299cc4cb4b16d776c8e8b5bd7617dfb3bf0839f166644350a8e0732f21760fdfc2596e3e520ffb4fa8b5d4983cf3d03b4f4862df6f353e7f2912e2272551f20a8e5e09b5aaa92f73d29d35cd4a353f0048b4e5ffa1a1e435e25d07c0a8e8063bc7bd0d58bb3de198c8b3e3689ff74000200000000000089ef07179b67bc59c71ab895e6468c6ab310165c51ddfa1ef8df1f7879aea4af1228f3190c73f1a299d9b40bfa"], 0x38}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xf4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4044084}, 0x40080) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r4 = dup(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xfffffffffffffee1, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3.437226347s ago: executing program 4 (id=4446): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x101080) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000440)={r3, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x5}, &(0x7f0000000300)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006380)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0x7, {{0x7, 0x5, 0x2, r7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r9, 0x5, &(0x7f0000000200)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8993, &(0x7f0000000040)={'pim6reg\x00', @random="18faff000020"}) 3.233242261s ago: executing program 2 (id=4447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x41) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000adc000/0x3000)=nil, 0x3000, 0x0, 0x10010, r0, 0x5352c000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0xa39, 0x0, 0x0, 0x0) setfsgid(0xee00) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000100)='stack\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.396367243s ago: executing program 2 (id=4448): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) rt_sigaction(0x40, &(0x7f00000000c0)={&(0x7f0000000000)="f30f1efc66450f283246dd598dc4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a425ef006e3d12957b28000007660f15b128050000", 0xc8000002, 0x0, {[0xb]}}, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000a40)={0x14, &(0x7f00000009c0)={0x0, 0xe, 0x1f, {0x1f, 0xd, "e017bf3597b1c5b872d919c9ca72f61f0e2a7cd991856f35b566383360"}}, &(0x7f0000000a00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d00)={0x44, &(0x7f0000000a80)={0x0, 0x13, 0x7d, "f095a62432c4415bb4e531dd88d44e36194e37ac02f219bb70eb304c6dfa607df70a214f88fc0f9c2e6f3fb680d6296c3996b2f85a02cf23a11600aed1757439ff7aa7aa582ecb80a92ac24b1f44ddc5a2338028d0ef02cf31b17d8e7ee980b0f7a1e3480b02bb900f3b9c3d0c3af2e23d769b5b88ccdd27b56730f771"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000bc0)={0x20, 0x80, 0x1c, {0x0, 0xb6f, 0x3, 0x2d, 0x7, 0xf3, 0x6, 0x80, 0x8000, 0x3, 0x3ff, 0x3}}, &(0x7f0000000c00)={0x20, 0x85, 0x4, 0xe2a}, &(0x7f0000000c40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000c80)={0x20, 0x87, 0x2, 0x8ab}, &(0x7f0000000cc0)={0x20, 0x89, 0x2, 0x1}}) syz_usb_control_io$printer(r3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) 2.266704043s ago: executing program 0 (id=4449): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000002400), 0x4000, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x40) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0004000000000000000000000000000040d28dbce0a3be00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000003800000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000000)="ca02016eba2d52b5f2ac03cc9f38f9d9", 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000018, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) syz_open_dev$sndmidi(&(0x7f0000000140), 0xfffffffffffffffa, 0x18000) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) write$UHID_CREATE(r0, &(0x7f0000000000)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0xfffc, 0x4, 0x4000, 0x0, 0xc08}}, 0x120) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) 133.636157ms ago: executing program 0 (id=4450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2078}}) (fail_nth: 5) 2.538159ms ago: executing program 4 (id=4451): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB, @ANYBLOB, @ANYRES8], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000140), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0xa8e41, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000001e80)={'sit0\x00', &(0x7f0000001e40)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f, 0x20}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r5}, 0x38) 0s ago: executing program 6 (id=4452): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xc0902) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000400)={0xf, r1, 0x23, {0x3, 0x8}, 0xc}, 0x1) io_setup(0x7, &(0x7f0000000140)=0x0) mknodat(0xffffffffffffffff, 0x0, 0x22f6c0948578f7ce, 0xaa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x800000bc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4001) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) write(r4, &(0x7f0000000540)="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", 0x175) syz_io_uring_setup(0x781e, &(0x7f0000000440)={0x0, 0x40cb, 0x300, 0x4, 0x260}, &(0x7f00000003c0), &(0x7f0000000500)) io_submit(r2, 0xfffffeb3, 0x0) bind$phonet(r0, &(0x7f00000000c0)={0x23, 0x2, 0xd5, 0x57}, 0x10) ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0xd0ff}) ioctl$SIOCPNDELRESOURCE(r0, 0x89ee, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x22) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x40) syz_emit_vhci(0x0, 0x7) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="03c80000cf23e81988e568b2b7300af66c2c7ba860f885f248587da15eefa71b9aff40967a8bd7f176ec74455a6717b3de4d78c6e45a0e34324801"], 0x4) r6 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0x1, 0xaed1, 0xfb, 0x3, 0xdaff}) kernel console output (not intermixed with test programs): : probe with driver usbhid failed with error -71 [ 1068.184805][ T5895] usb 7-1: USB disconnect, device number 54 [ 1068.218840][T20977] overlayfs: failed lookup in lower (newroot/334, name='file1', err=-40): overlapping layers [ 1068.352538][T12732] Bluetooth: hci3: command 0x0405 tx timeout [ 1068.444377][T20978] tipc: Started in network mode [ 1068.449347][T20978] tipc: Node identity 9a3658184165, cluster identity 4711 [ 1068.456958][T20978] tipc: Enabled bearer , priority 0 [ 1068.463912][T20982] netlink: 'syz.0.3935': attribute type 10 has an invalid length. [ 1068.531116][T20988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.541542][T20988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.734317][ T5895] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1068.802221][ T5843] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1068.804883][T13740] overlayfs: failed lookup in lower (newroot/334, name='bus', err=-40): overlapping layers [ 1068.854053][T13740] overlayfs: failed lookup in lower (newroot/334, name='bus', err=-40): overlapping layers [ 1068.889863][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1068.889878][ T30] audit: type=1400 audit(1758910020.478:2525): avc: denied { ioctl } for pid=21002 comm="syz.6.3942" path="socket:[96687]" dev="sockfs" ino=96687 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1068.948042][ T5895] usb 3-1: Using ep0 maxpacket: 16 [ 1068.980089][ T5895] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1068.992311][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.000389][ T5895] usb 3-1: Product: syz [ 1069.070317][T21008] netlink: 'syz.4.3943': attribute type 1 has an invalid length. [ 1069.108036][T21008] gretap1: entered promiscuous mode [ 1069.138871][ T5895] usb 3-1: Manufacturer: syz [ 1069.155968][ T5895] usb 3-1: SerialNumber: syz [ 1069.162023][ T5895] usb 3-1: config 0 descriptor?? [ 1069.208942][ T5895] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1069.410597][T21018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3946'. [ 1069.527666][ T6150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.572533][ T5952] tipc: Node number set to 3679672344 [ 1070.277615][ T6150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.404787][ T6150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.511244][T21032] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1070.511244][T21032] The task syz.6.3951 (21032) triggered the difference, watch for misbehavior. [ 1070.539078][T20983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.569998][T20983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.610879][ T6150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.636014][ T5895] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110 [ 1070.665663][T20985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.682462][T20985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.718699][T13935] usb 3-1: USB disconnect, device number 30 [ 1070.892169][ T5843] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1071.134542][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.137372][T21043] 9pnet_virtio: no channels available for device syz [ 1071.176308][T12732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1071.182170][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.202292][ T5843] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1071.202541][T12732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1071.211369][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.223487][ T5843] usb 7-1: config 0 descriptor?? [ 1071.243556][T12732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1071.261250][T12732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1071.272326][T12732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1071.412892][ T30] audit: type=1326 audit(1758910022.998:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3db8eec9 code=0x7ffc0000 [ 1071.492186][ T30] audit: type=1326 audit(1758910022.998:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3db8eec9 code=0x7ffc0000 [ 1071.515707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1071.693441][ T30] audit: type=1326 audit(1758910022.998:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3db8eec9 code=0x7ffc0000 [ 1071.744241][ T30] audit: type=1326 audit(1758910022.998:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3db8eec9 code=0x7ffc0000 [ 1072.261727][ T30] audit: type=1326 audit(1758910022.998:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3db8eec9 code=0x7ffc0000 [ 1072.332193][ T30] audit: type=1326 audit(1758910023.008:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd3db90de7 code=0x7ffc0000 [ 1072.392179][ T30] audit: type=1326 audit(1758910023.008:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdd3db90d5c code=0x7ffc0000 [ 1072.471471][ T30] audit: type=1326 audit(1758910023.008:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3db90c94 code=0x7ffc0000 [ 1072.515804][ T30] audit: type=1326 audit(1758910023.008:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21036 comm="syz.4.3953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdd3db90c94 code=0x7ffc0000 [ 1072.682191][ T6150] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 1072.690181][ T6150] vcan1: left promiscuous mode [ 1072.698775][ T6150] bond0 (unregistering): Released all slaves [ 1072.720914][T21047] pim6reg: entered allmulticast mode [ 1072.726883][T21047] pim6reg: left allmulticast mode [ 1072.804883][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3955'. [ 1072.871263][ T6150] tipc: Left network mode [ 1073.284094][ T3091] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1073.322371][ T5170] Bluetooth: hci0: command tx timeout [ 1073.427448][T13777] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1073.462467][ T3091] usb 3-1: Using ep0 maxpacket: 8 [ 1073.475694][ T3091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1073.493550][T21088] netlink: 384 bytes leftover after parsing attributes in process `syz.4.3958'. [ 1073.510568][ T3091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1073.553588][ T5843] usbhid 7-1:0.0: can't add hid device: -71 [ 1073.568525][ T5843] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1073.581406][ T3091] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1073.606372][T13777] usb 1-1: Using ep0 maxpacket: 16 [ 1073.615444][ T5843] usb 7-1: USB disconnect, device number 55 [ 1073.636520][ T3091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1073.648202][T13777] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.660050][ T6150] hsr_slave_0: left promiscuous mode [ 1073.707414][ T6150] hsr_slave_1: left promiscuous mode [ 1073.707428][T13777] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1073.728031][ T3091] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1073.739834][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.741321][ T3091] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1073.882458][T13777] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.891902][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.933060][T13777] usb 1-1: config 0 descriptor?? [ 1073.941960][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.968533][ T3091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.971109][ T6150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.104196][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 1074.112648][ T3091] usb 3-1: config 0 descriptor?? [ 1074.125844][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 1074.128216][ T6150] veth1_macvtap: left promiscuous mode [ 1074.133848][T21071] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1074.285502][ T6150] veth0_macvtap: left promiscuous mode [ 1074.317405][ T6150] veth1_vlan: left promiscuous mode [ 1074.344718][ T6150] veth0_vlan: left promiscuous mode [ 1074.544517][ T3091] libceph: connect (1)[c::]:6789 error -101 [ 1074.557728][ T3091] libceph: mon0 (1)[c::]:6789 connect error [ 1074.589047][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1074.589065][ T30] audit: type=1400 audit(1758910026.178:2576): avc: denied { write } for pid=21068 comm="syz.2.3956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1074.807174][T13777] usbhid 1-1:0.0: can't add hid device: -71 [ 1074.819780][T13777] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1074.870905][T13777] usb 1-1: USB disconnect, device number 22 [ 1074.920384][T21102] ceph: No mds server is up or the cluster is laggy [ 1075.242300][ T5843] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 1075.395518][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.396433][T12732] Bluetooth: hci0: command tx timeout [ 1075.424281][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1075.448086][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 1075.459623][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1075.477048][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1075.505596][ T5843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1075.514221][ T5843] usb 5-1: Manufacturer: syz [ 1075.527992][ T5843] usb 5-1: config 0 descriptor?? [ 1075.572473][ T5895] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 1075.750070][ T5895] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1075.851962][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.006293][ T5895] usb 7-1: Product: syz [ 1076.057316][ T5895] usb 7-1: Manufacturer: syz [ 1076.095838][ T5895] usb 7-1: SerialNumber: syz [ 1076.131527][ T5895] usb 7-1: config 0 descriptor?? [ 1076.282436][ T5843] rc_core: IR keymap rc-hauppauge not found [ 1076.290436][ T5843] Registered IR keymap rc-empty [ 1076.301112][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.336728][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.363025][ T5170] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1076.374086][ T5843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1076.388173][ T5843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input62 [ 1076.409391][ T6150] team0 (unregistering): Port device team_slave_1 removed [ 1076.439766][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.481235][ T6150] team0 (unregistering): Port device team_slave_0 removed [ 1076.483316][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.510222][T21126] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=21126 comm=syz.4.3962 [ 1076.523456][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.543259][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.568051][ T5895] airspy 7-1:0.0: Board ID: 00 [ 1076.572331][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.574805][ T5895] airspy 7-1:0.0: Firmware version: [ 1076.608875][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.675088][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.703072][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.795379][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.824478][ T5843] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1076.969924][ T5843] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1076.983195][ T5843] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1077.295853][T21130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3964'. [ 1077.304663][ T30] audit: type=1400 audit(1758910028.888:2577): avc: denied { read append } for pid=21128 comm="syz.0.3967" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1077.330616][ T30] audit: type=1400 audit(1758910028.918:2578): avc: denied { open } for pid=21128 comm="syz.0.3967" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1077.489885][ T5170] Bluetooth: hci0: command tx timeout [ 1078.345028][ T5895] airspy 7-1:0.0: usb_control_msg() failed -110 request 12 [ 1078.370707][ T5895] airspy 7-1:0.0: Registered as swradio24 [ 1078.376599][ T5895] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1078.692228][ T3091] infiniband syz1: ib_query_port failed (-19) [ 1078.702288][T21130] bridge0: port 3(syz_tun) entered disabled state [ 1078.719234][T21130] bridge_slave_1: left allmulticast mode [ 1078.748008][ T5895] usb 3-1: USB disconnect, device number 31 [ 1078.755476][T21130] bridge_slave_1: left promiscuous mode [ 1078.761316][T21130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.788435][T21130] bridge_slave_0: left allmulticast mode [ 1078.802054][T21130] bridge_slave_0: left promiscuous mode [ 1078.808659][T21130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.885426][ T5843] usb 5-1: USB disconnect, device number 27 [ 1079.541139][T21044] chnl_net:caif_netlink_parms(): no params data found [ 1079.552994][ T5170] Bluetooth: hci0: command tx timeout [ 1079.753341][ T5170] Bluetooth: hci1: unexpected event for opcode 0x100c [ 1079.966760][T13935] usb 7-1: USB disconnect, device number 56 [ 1080.198666][T21044] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.207561][T21044] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.227778][T21044] bridge_slave_0: entered allmulticast mode [ 1080.243446][T21044] bridge_slave_0: entered promiscuous mode [ 1080.312442][ T5952] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1080.344603][T21044] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.368462][T21044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.405159][T21044] bridge_slave_1: entered allmulticast mode [ 1080.422063][T21044] bridge_slave_1: entered promiscuous mode [ 1080.472755][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 1080.506578][T21044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.525416][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.552925][ T6150] IPVS: stop unused estimator thread 0... [ 1080.563625][T21044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.572315][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.745233][ T5952] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1081.059976][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.075891][T21044] team0: Port device team_slave_0 added [ 1081.088135][ T5952] usb 5-1: config 0 descriptor?? [ 1081.106181][ T5952] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1081.198173][T21044] team0: Port device team_slave_1 added [ 1081.287097][T21044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.314740][T21044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.418350][T21044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.522300][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1081.707093][T21044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.726479][T21044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.801806][T21044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.899064][ T24] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1081.922176][ T24] usb 1-1: config 0 has no interface number 0 [ 1081.928287][ T24] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1081.956183][T21044] hsr_slave_0: entered promiscuous mode [ 1081.961187][ T24] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1081.981112][T21205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3983'. [ 1081.993159][T21044] hsr_slave_1: entered promiscuous mode [ 1081.999597][ T24] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1081.999700][T21044] debugfs: 'hsr0' already exists in 'hsr' [ 1082.014037][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.019323][T21044] Cannot create hsr debugfs directory [ 1082.044370][ T24] usb 1-1: Product: syz [ 1082.055096][ T24] usb 1-1: Manufacturer: syz [ 1082.061903][ T24] usb 1-1: SerialNumber: syz [ 1082.089763][ T24] usb 1-1: config 0 descriptor?? [ 1082.099811][T21213] sctp: [Deprecated]: syz.2.3984 (pid 21213) Use of int in maxseg socket option. [ 1082.099811][T21213] Use struct sctp_assoc_value instead [ 1082.125143][T21187] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1082.138351][ T24] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1082.155319][T21213] sctp: [Deprecated]: syz.2.3984 (pid 21213) Use of int in maxseg socket option. [ 1082.155319][T21213] Use struct sctp_assoc_value instead [ 1082.194198][ T24] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1082.584994][T21044] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1082.640537][T21044] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1082.674832][T21044] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1082.705419][T21044] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1082.780935][T21240] Sensor B: ================= START STATUS ================= [ 1082.805382][T21240] Sensor B: Test Pattern: 75% Colorbar [ 1082.814794][T21240] Sensor B: Show Information: All [ 1082.820016][T21240] Sensor B: Vertical Flip: false [ 1082.829150][T21240] Sensor B: Horizontal Flip: false [ 1082.852043][T21044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.856398][T21240] Sensor B: Brightness: 128 [ 1082.866130][T21240] Sensor B: Contrast: 128 [ 1082.884848][T21240] Sensor B: Hue: 0 [ 1082.888774][T21240] Sensor B: Saturation: 128 [ 1082.895531][T21240] Sensor B: ================== END STATUS ================== [ 1082.906967][T21044] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.952475][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.959607][ T8003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.983059][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.990145][ T8003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.093211][ T3091] usb 5-1: USB disconnect, device number 28 [ 1083.783385][T21044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.106862][ T24] usb 1-1: USB disconnect, device number 23 [ 1084.134543][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1084.188701][ T24] cyberjack 1-1:0.69: device disconnected [ 1084.255360][T21044] veth0_vlan: entered promiscuous mode [ 1084.563012][T21044] veth1_vlan: entered promiscuous mode [ 1084.732449][T21278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3993'. [ 1084.801275][T21279] netdevsim netdevsim2: Direct firmware load for lookup_extent_enter failed with error -2 [ 1084.820485][T21044] veth0_macvtap: entered promiscuous mode [ 1084.828009][T21279] netdevsim netdevsim2: Falling back to sysfs fallback for: lookup_extent_enter [ 1084.844594][T21044] veth1_macvtap: entered promiscuous mode [ 1084.870092][T21044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.897417][T21044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.905363][ T30] audit: type=1400 audit(1758910036.421:2579): avc: denied { firmware_load } for pid=21264 comm="syz.2.3992" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1084.981208][ T8003] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.025622][ T8003] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.069236][ T8003] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.148374][ T8003] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.249411][T21286] netlink: 'syz.4.3995': attribute type 10 has an invalid length. [ 1085.292246][T21286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1085.333856][T21286] team0: Port device geneve0 added [ 1085.339755][ T49] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.368073][ T49] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.407625][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.463116][ T49] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.473492][T21291] program syz.0.3998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.473996][ T30] audit: type=1400 audit(1758910037.061:2580): avc: denied { write } for pid=21290 comm="syz.0.3998" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1085.510450][ T6150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.531375][ T6150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.921967][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.945382][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.972196][ T24] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1086.162558][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1086.176783][ T24] usb 7-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1086.190510][T19089] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1086.298447][ T24] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1086.384776][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1086.442152][T19089] usb 5-1: Using ep0 maxpacket: 16 [ 1086.449731][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.466548][ T24] usb 7-1: Product: 曔Ᏻ춢ද Ᏺꑶ責绻䘽翈臅褋ᄳ潈 [ 1086.477261][T19089] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1086.486392][ T24] usb 7-1: Manufacturer: 㫻뼊뉂ꂲ濧翠㙋谜ꝳ黆 [ 1086.486413][ T24] usb 7-1: SerialNumber: 칠 [ 1086.520056][T19089] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.537881][T19089] usb 5-1: Product: syz [ 1086.548729][T19089] usb 5-1: Manufacturer: syz [ 1086.557868][T19089] usb 5-1: SerialNumber: syz [ 1086.582895][T19089] usb 5-1: config 0 descriptor?? [ 1086.595025][T19089] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1086.615216][T19089] usb 5-1: Detected FT-X [ 1086.712636][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.722545][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.734312][T21298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.744087][T21298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1086.811714][T21300] veth3: entered promiscuous mode [ 1086.817059][ T30] audit: type=1400 audit(1758910038.391:2581): avc: denied { ioctl } for pid=21297 comm="syz.6.3999" path="socket:[97728]" dev="sockfs" ino=97728 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1086.950507][ T24] usb 7-1: USB disconnect, device number 57 [ 1087.340825][ T30] audit: type=1400 audit(1758910038.921:2582): avc: denied { lock } for pid=21322 comm="syz.0.4005" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1087.456792][T19089] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1087.483558][T19089] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1087.672551][T19089] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 1087.701902][T19089] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1087.734915][T19089] usb 5-1: USB disconnect, device number 29 [ 1087.780874][T19089] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1087.792537][T19089] ftdi_sio 5-1:0.0: device disconnected [ 1088.281870][T21346] block nbd4: Attempted send on invalid socket [ 1088.289318][T21346] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1088.312815][T21341] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4010'. [ 1088.382893][T21346] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 1088.747891][T21355] netlink: zone id is out of range [ 1088.844731][ T30] audit: type=1400 audit(1758910040.431:2583): avc: denied { write } for pid=21354 comm="syz.0.4015" path="socket:[97870]" dev="sockfs" ino=97870 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1088.848880][T21355] netlink: set zone limit has 4 unknown bytes [ 1089.181526][ T30] audit: type=1400 audit(1758910040.761:2584): avc: denied { connect } for pid=21354 comm="syz.0.4015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1089.202002][T21360] netlink: zone id is out of range [ 1089.207170][T21360] netlink: zone id is out of range [ 1089.212546][T21360] netlink: del zone limit has 4 unknown bytes [ 1090.752667][ T5843] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1090.947964][ T5843] usb 7-1: Using ep0 maxpacket: 16 [ 1090.968291][ T5843] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1090.985110][T21388] FAULT_INJECTION: forcing a failure. [ 1090.985110][T21388] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.987838][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.000884][T21388] CPU: 0 UID: 0 PID: 21388 Comm: syz.0.4021 Not tainted syzkaller #0 PREEMPT(full) [ 1091.000905][T21388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1091.000915][T21388] Call Trace: [ 1091.000921][T21388] [ 1091.000927][T21388] dump_stack_lvl+0x16c/0x1f0 [ 1091.000953][T21388] should_fail_ex+0x512/0x640 [ 1091.000972][T21388] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1091.000992][T21388] should_failslab+0xc2/0x120 [ 1091.001011][T21388] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1091.001028][T21388] ? copy_process+0x4b6/0x7690 [ 1091.001050][T21388] ? _raw_spin_unlock_irq+0x23/0x50 [ 1091.001070][T21388] copy_process+0x4b6/0x7690 [ 1091.001101][T21388] ? __pfx_copy_process+0x10/0x10 [ 1091.001126][T21388] ? lockdep_init_map_type+0x5c/0x280 [ 1091.001144][T21388] ? lockdep_init_map_type+0x5c/0x280 [ 1091.001160][T21388] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1091.001186][T21388] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1091.001207][T21388] vhost_task_create+0x1d2/0x370 [ 1091.001224][T21388] ? __pfx_vhost_task_create+0x10/0x10 [ 1091.001246][T21388] ? __pfx_vhost_task_fn+0x10/0x10 [ 1091.001273][T21388] kvm_mmu_post_init_vm+0x1b7/0x380 [ 1091.001293][T21388] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 1091.001315][T21388] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1091.001339][T21388] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1091.001362][T21388] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1091.001383][T21388] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1091.001403][T21388] ? do_vfs_ioctl+0x128/0x14f0 [ 1091.001427][T21388] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1091.001451][T21388] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1091.001485][T21388] ? hook_file_ioctl_common+0x145/0x410 [ 1091.001508][T21388] ? selinux_file_ioctl+0x180/0x270 [ 1091.001529][T21388] ? selinux_file_ioctl+0xb4/0x270 [ 1091.001552][T21388] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1091.001573][T21388] __x64_sys_ioctl+0x18b/0x210 [ 1091.001598][T21388] do_syscall_64+0xcd/0x4e0 [ 1091.001620][T21388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.001636][T21388] RIP: 0033:0x7f97b178eec9 [ 1091.001650][T21388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.001665][T21388] RSP: 002b:00007f97b2619038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1091.001681][T21388] RAX: ffffffffffffffda RBX: 00007f97b19e5fa0 RCX: 00007f97b178eec9 [ 1091.001692][T21388] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1091.001701][T21388] RBP: 00007f97b2619090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.001711][T21388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.001720][T21388] R13: 00007f97b19e6038 R14: 00007f97b19e5fa0 R15: 00007fffd4ea1478 [ 1091.001742][T21388] [ 1091.280448][ T5843] usb 7-1: config 0 has no interface number 0 [ 1091.374466][ T5843] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 1091.383837][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 1091.391880][ T5843] usb 7-1: Product: syz [ 1091.397263][ T5843] usb 7-1: SerialNumber: syz [ 1091.415153][ T5843] usb 7-1: config 0 descriptor?? [ 1091.858790][ T5843] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1091.868331][ T5843] usb 7-1: No valid video chain found. [ 1091.934836][ T30] audit: type=1400 audit(1758910043.521:2585): avc: denied { append } for pid=21389 comm="syz.2.4022" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1092.140278][T21376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.352473][T21376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.384794][ T5843] usb 7-1: USB disconnect, device number 58 [ 1092.431755][ T30] audit: type=1400 audit(1758910044.011:2586): avc: denied { ioctl } for pid=21404 comm="syz.4.4027" path="socket:[98009]" dev="sockfs" ino=98009 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1092.487755][T21409] bond0: entered promiscuous mode [ 1092.502494][T21409] bond_slave_0: entered promiscuous mode [ 1092.508320][T21409] bond_slave_1: entered promiscuous mode [ 1092.515052][ T30] audit: type=1400 audit(1758910044.051:2587): avc: denied { setopt } for pid=21407 comm="syz.7.4026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1092.538255][T21409] batadv0: entered promiscuous mode [ 1092.546055][T21409] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1092.756369][ T30] audit: type=1400 audit(1758910044.281:2588): avc: denied { ioctl } for pid=21410 comm="syz.2.4029" path="socket:[98023]" dev="sockfs" ino=98023 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1093.263852][T21420] tmpfs: Unknown parameter '^u' [ 1093.298734][T21420] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4031'. [ 1094.209228][T21440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4033'. [ 1094.218632][ T30] audit: type=1400 audit(1758910045.791:2589): avc: denied { nlmsg_read } for pid=21426 comm="syz.0.4033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1094.678386][T21439] ptrace attach of "./syz-executor exec"[21044] was attempted by "./syz-executor exec"[21439] [ 1094.751900][T21447] FAULT_INJECTION: forcing a failure. [ 1094.751900][T21447] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.751946][T21447] CPU: 0 UID: 0 PID: 21447 Comm: syz.4.4036 Not tainted syzkaller #0 PREEMPT(full) [ 1094.751959][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1094.751966][T21447] Call Trace: [ 1094.751970][T21447] [ 1094.751974][T21447] dump_stack_lvl+0x16c/0x1f0 [ 1094.751992][T21447] should_fail_ex+0x512/0x640 [ 1094.752007][T21447] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1094.752020][T21447] should_failslab+0xc2/0x120 [ 1094.752033][T21447] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1094.752045][T21447] ? __get_vm_area_node+0x101/0x330 [ 1094.752071][T21447] __get_vm_area_node+0x101/0x330 [ 1094.752097][T21447] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1094.752121][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.752133][T21447] ? local_lock_release+0x99/0x140 [ 1094.752151][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.752162][T21447] ? rcu_read_unlock+0x17/0x60 [ 1094.752177][T21447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1094.752199][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.752209][T21447] __vmalloc_node_noprof+0xad/0xf0 [ 1094.752226][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.752238][T21447] copy_process+0x2c70/0x7690 [ 1094.752261][T21447] ? __pfx_copy_process+0x10/0x10 [ 1094.752278][T21447] ? lockdep_init_map_type+0x5c/0x280 [ 1094.752291][T21447] ? lockdep_init_map_type+0x5c/0x280 [ 1094.752301][T21447] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1094.752320][T21447] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1094.752336][T21447] vhost_task_create+0x1d2/0x370 [ 1094.752347][T21447] ? __pfx_vhost_task_create+0x10/0x10 [ 1094.752362][T21447] ? __pfx_vhost_task_fn+0x10/0x10 [ 1094.752380][T21447] kvm_mmu_post_init_vm+0x1b7/0x380 [ 1094.752395][T21447] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 1094.752411][T21447] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1094.752430][T21447] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1094.752446][T21447] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1094.752461][T21447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1094.752476][T21447] ? do_vfs_ioctl+0x128/0x14f0 [ 1094.752494][T21447] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1094.752511][T21447] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1094.752534][T21447] ? hook_file_ioctl_common+0x145/0x410 [ 1094.752550][T21447] ? selinux_file_ioctl+0x180/0x270 [ 1094.752565][T21447] ? selinux_file_ioctl+0xb4/0x270 [ 1094.752582][T21447] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1094.752597][T21447] __x64_sys_ioctl+0x18b/0x210 [ 1094.752616][T21447] do_syscall_64+0xcd/0x4e0 [ 1094.752632][T21447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.752643][T21447] RIP: 0033:0x7fdd3db8eec9 [ 1094.752653][T21447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.752664][T21447] RSP: 002b:00007fdd3e994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.752675][T21447] RAX: ffffffffffffffda RBX: 00007fdd3dde5fa0 RCX: 00007fdd3db8eec9 [ 1094.752683][T21447] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1094.752689][T21447] RBP: 00007fdd3e994090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.752695][T21447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.752702][T21447] R13: 00007fdd3dde6038 R14: 00007fdd3dde5fa0 R15: 00007ffec9d658b8 [ 1094.752716][T21447] [ 1094.760165][T21447] syz.4.4036: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1094.760258][T21447] CPU: 0 UID: 0 PID: 21447 Comm: syz.4.4036 Not tainted syzkaller #0 PREEMPT(full) [ 1094.760271][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1094.760278][T21447] Call Trace: [ 1094.760281][T21447] [ 1094.760285][T21447] dump_stack_lvl+0x16c/0x1f0 [ 1094.760302][T21447] warn_alloc+0x248/0x3a0 [ 1094.760315][T21447] ? __pfx_warn_alloc+0x10/0x10 [ 1094.760327][T21447] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1094.760341][T21447] ? __kasan_kmalloc+0x8a/0xb0 [ 1094.760353][T21447] ? __get_vm_area_node+0x208/0x330 [ 1094.760371][T21447] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1094.760388][T21447] ? local_lock_release+0x99/0x140 [ 1094.760405][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.760417][T21447] ? rcu_read_unlock+0x17/0x60 [ 1094.760432][T21447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1094.760454][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.760464][T21447] __vmalloc_node_noprof+0xad/0xf0 [ 1094.760484][T21447] ? vhost_task_create+0x1d2/0x370 [ 1094.760496][T21447] copy_process+0x2c70/0x7690 [ 1094.760518][T21447] ? __pfx_copy_process+0x10/0x10 [ 1094.760536][T21447] ? lockdep_init_map_type+0x5c/0x280 [ 1094.760548][T21447] ? lockdep_init_map_type+0x5c/0x280 [ 1094.760558][T21447] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1094.760577][T21447] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1094.760593][T21447] vhost_task_create+0x1d2/0x370 [ 1094.760604][T21447] ? __pfx_vhost_task_create+0x10/0x10 [ 1094.760619][T21447] ? __pfx_vhost_task_fn+0x10/0x10 [ 1094.760637][T21447] kvm_mmu_post_init_vm+0x1b7/0x380 [ 1094.760651][T21447] kvm_arch_vcpu_ioctl_run+0x66/0x1980 [ 1094.760668][T21447] ? kvm_vcpu_ioctl+0x14c6/0x1690 [ 1094.760685][T21447] kvm_vcpu_ioctl+0x5eb/0x1690 [ 1094.760702][T21447] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1094.760717][T21447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1094.760733][T21447] ? do_vfs_ioctl+0x128/0x14f0 [ 1094.760759][T21447] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1094.760785][T21447] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1094.760815][T21447] ? hook_file_ioctl_common+0x145/0x410 [ 1094.760832][T21447] ? selinux_file_ioctl+0x180/0x270 [ 1094.760847][T21447] ? selinux_file_ioctl+0xb4/0x270 [ 1094.760864][T21447] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1094.760879][T21447] __x64_sys_ioctl+0x18b/0x210 [ 1094.760897][T21447] do_syscall_64+0xcd/0x4e0 [ 1094.760913][T21447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.760925][T21447] RIP: 0033:0x7fdd3db8eec9 [ 1094.760934][T21447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.760944][T21447] RSP: 002b:00007fdd3e994038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.760954][T21447] RAX: ffffffffffffffda RBX: 00007fdd3dde5fa0 RCX: 00007fdd3db8eec9 [ 1094.760961][T21447] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1094.760968][T21447] RBP: 00007fdd3e994090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.760974][T21447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.760980][T21447] R13: 00007fdd3dde6038 R14: 00007fdd3dde5fa0 R15: 00007ffec9d658b8 [ 1094.760994][T21447] [ 1094.762195][T21447] Mem-Info: [ 1094.762203][T21447] active_anon:27413 inactive_anon:0 isolated_anon:0 [ 1094.762203][T21447] active_file:18929 inactive_file:40899 isolated_file:0 [ 1094.762203][T21447] unevictable:768 dirty:386 writeback:0 [ 1094.762203][T21447] slab_reclaimable:8024 slab_unreclaimable:122186 [ 1094.762203][T21447] mapped:44539 shmem:11773 pagetables:1845 [ 1094.762203][T21447] sec_pagetables:0 bounce:0 [ 1094.762203][T21447] kernel_misc_reclaimable:0 [ 1094.762203][T21447] free:1260379 free_pcp:13292 free_cma:0 [ 1094.762231][T21447] Node 0 active_anon:109652kB inactive_anon:0kB active_file:75708kB inactive_file:163464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178148kB dirty:1544kB writeback:0kB shmem:45556kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13544kB pagetables:7224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1094.762259][T21447] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1094.762285][T21447] Node 0 DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 1094.762317][T21447] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 1094.762339][T21447] Node 0 DMA32 free:1134984kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109644kB inactive_anon:0kB active_file:75708kB inactive_file:162120kB unevictable:1536kB writepending:1544kB present:3129332kB managed:2539304kB mlocked:0kB bounce:0kB free_pcp:25680kB local_pcp:16484kB free_cma:0kB [ 1094.762371][T21447] lowmem_reserve[]: 0 0 1 1 1 [ 1094.762392][T21447] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:1344kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1094.762422][T21447] lowmem_reserve[]: 0 0 0 0 0 [ 1094.762443][T21447] Node 1 Normal free:3891168kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27456kB local_pcp:19896kB free_cma:0kB [ 1094.762488][T21447] lowmem_reserve[]: 0 0 0 0 0 [ 1094.762508][T21447] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 1094.762616][T21447] Node 0 DMA32: 398*4kB (UE) 148*8kB (UME) 47*16kB (UME) 36*32kB (UME) 69*64kB (UME) 72*128kB (UME) 80*256kB (UME) 51*512kB (UME) 49*1024kB (UME) 12*2048kB (UME) 243*4096kB (UM) = 1134984kB [ 1094.762710][T21447] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1094.762773][T21447] Node 1 Normal: 198*4kB (UME) 57*8kB (UME) 38*16kB (UME) 133*32kB (UME) 38*64kB (UME) 11*128kB (UME) 9*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3891168kB [ 1094.762866][T21447] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.762876][T21447] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1094.762885][T21447] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1094.762894][T21447] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1094.762903][T21447] 71597 total pagecache pages [ 1094.762907][T21447] 0 pages in swap cache [ 1094.762911][T21447] Free swap = 124996kB [ 1094.762916][T21447] Total swap = 124996kB [ 1094.762920][T21447] 2097051 pages RAM [ 1094.762924][T21447] 0 pages HighMem/MovableOnly [ 1094.762928][T21447] 430263 pages reserved [ 1094.762932][T21447] 0 pages cma reserved [ 1095.946151][T21457] befs: (nbd7): No write support. Marking filesystem read-only [ 1095.955096][T21457] block nbd7: Attempted send on invalid socket [ 1095.961361][T21457] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1095.972447][T21457] befs: (nbd7): unable to read superblock [ 1096.123806][T21439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1096.611512][T19089] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1096.993489][T19089] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 64 [ 1097.036233][T19089] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1097.129025][T19089] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1097.146532][T19089] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.210025][ T30] audit: type=1400 audit(1758910048.791:2590): avc: denied { ioctl } for pid=21470 comm="syz.4.4040" path="socket:[98218]" dev="sockfs" ino=98218 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1097.226366][T19089] usb 7-1: Product: syz [ 1097.411154][T19089] usb 7-1: Manufacturer: syz [ 1097.416255][T19089] usb 7-1: SerialNumber: syz [ 1097.426886][ T30] audit: type=1400 audit(1758910048.831:2591): avc: denied { ioctl } for pid=21476 comm="syz.7.4041" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1097.487191][T21454] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1098.818903][T19089] usb 7-1: USB disconnect, device number 59 [ 1100.012457][ T5952] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1100.193705][ T5952] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 1100.212178][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.256583][ T5952] usb 1-1: config 0 descriptor?? [ 1100.720636][ T5952] ath6kl: Unsupported hardware version: 0x0 [ 1100.738134][ T5952] ath6kl: Failed to init ath6kl core: -22 [ 1100.763174][ T5952] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1100.975921][ T10] usb 1-1: USB disconnect, device number 24 [ 1101.002797][ T30] audit: type=1400 audit(1758910052.581:2592): avc: denied { shutdown } for pid=21560 comm="syz.6.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1101.051835][ T5952] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1101.232139][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 1101.253253][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1101.265592][ T5952] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1101.291517][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.314745][ T5952] usb 3-1: config 0 descriptor?? [ 1101.798449][ T5952] mcp2221 0003:04D8:00DD.0036: unknown main item tag 0x0 [ 1101.806830][ T5952] mcp2221 0003:04D8:00DD.0036: unknown main item tag 0x0 [ 1101.852201][ T5952] mcp2221 0003:04D8:00DD.0036: unknown main item tag 0x0 [ 1101.869751][ T5952] mcp2221 0003:04D8:00DD.0036: unknown main item tag 0x0 [ 1102.271032][ T5952] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1102.395793][ T5952] usb 3-1: USB disconnect, device number 32 [ 1103.268543][T21608] block nbd6: Attempted send on invalid socket [ 1103.280679][T21608] I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1103.303268][T21608] gfs2: error -5 reading superblock [ 1104.048436][ T5170] block nbd0: Receive control failed (result -11) [ 1104.223141][ T30] audit: type=1400 audit(1758910055.801:2593): avc: denied { map } for pid=21614 comm="syz.6.4066" path="pipe:[100250]" dev="pipefs" ino=100250 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1106.449429][T21642] syz_tun: entered allmulticast mode [ 1106.821705][T21641] syz_tun: left allmulticast mode [ 1107.662159][ T5170] Bluetooth: hci3: command 0x0405 tx timeout [ 1107.672902][ T5952] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1107.882187][ T5952] usb 1-1: device descriptor read/64, error -71 [ 1108.122152][ T5952] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1108.288964][ T5952] usb 1-1: device descriptor read/64, error -71 [ 1108.402571][ T5952] usb usb1-port1: attempt power cycle [ 1108.720861][ T30] audit: type=1400 audit(1758910060.251:2594): avc: denied { bind } for pid=21679 comm="syz.7.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1108.740399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1108.894431][ T5952] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1109.063207][ T5952] usb 1-1: device descriptor read/8, error -71 [ 1109.084770][T21680] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.204538][T21689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.328492][ T30] audit: type=1400 audit(1758910060.881:2595): avc: denied { create } for pid=21682 comm="syz.4.4085" name="#182" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1109.505536][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4083'. [ 1109.531250][ T30] audit: type=1400 audit(1758910060.891:2596): avc: denied { link } for pid=21682 comm="syz.4.4085" name="#182" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1109.555014][ T5952] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1109.584066][ T30] audit: type=1400 audit(1758910060.891:2597): avc: denied { rename } for pid=21682 comm="syz.4.4085" name="#183" dev="tmpfs" ino=829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1109.606512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1109.616354][ T5952] usb 1-1: device descriptor read/8, error -71 [ 1109.733696][ T5952] usb usb1-port1: unable to enumerate USB device [ 1111.210260][ T30] audit: type=1400 audit(1758910062.791:2598): avc: denied { bind } for pid=21712 comm="syz.2.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1111.466805][T21717] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 1111.521982][T21716] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 1111.523754][T21717] team0: Port device dummy0 added [ 1111.950371][T21716] team0: Port device dummy0 removed [ 1111.998372][T21716] dummy0: entered promiscuous mode [ 1112.021478][T21716] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1112.044952][T21723] [U] v3f"S/4:XTzWtlW= [ 1112.339449][T21737] rdma_op ffff888028c7b1f0 conn xmit_rdma 0000000000000000 [ 1112.344364][T21736] rdma_op ffff888034ac99f0 conn xmit_rdma 0000000000000000 [ 1112.677963][ T5952] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1112.717703][T21718] [U] J"e:" [ 1113.172139][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 1113.194300][ T5952] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1113.204664][ T5952] usb 7-1: config 0 has no interface number 1 [ 1113.210776][ T5952] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1113.226901][ T5952] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1113.238814][ T5952] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 1113.282170][ T5952] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1113.306081][ T5952] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.400467][ T5952] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1113.443614][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1113.487961][ T5952] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1113.535329][ T5952] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1113.585507][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.620154][ T5952] usb 7-1: Product: syz [ 1113.629637][ T5952] usb 7-1: Manufacturer: syz [ 1113.642228][ T5952] usb 7-1: SerialNumber: syz [ 1113.678229][ T5952] usb 7-1: config 0 descriptor?? [ 1113.694363][T21736] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1113.707039][ T5952] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.753102][ T5952] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.918089][T21757] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1113.963026][T21757] I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.071379][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1114.147452][T21757] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.171128][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1114.184505][T21757] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1114.194651][T21757] UDF-fs: Scanning with blocksize 512 failed [ 1114.206270][T21757] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.216061][T21757] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.229448][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1114.240112][T21757] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.270310][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1114.288067][T21757] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1114.296448][T21757] UDF-fs: Scanning with blocksize 1024 failed [ 1114.304067][ T30] audit: type=1400 audit(1758910065.891:2599): avc: denied { create } for pid=21766 comm="syz.4.4103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1114.327188][T21757] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.337179][T21757] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.349919][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1114.360106][T21757] I/O error, dev loop0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.376170][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1114.387512][T21757] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1114.399929][T21757] UDF-fs: Scanning with blocksize 2048 failed [ 1114.409358][T21757] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1114.420923][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1114.447033][T21757] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1114.456756][T21757] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1114.464805][T21757] UDF-fs: Scanning with blocksize 4096 failed [ 1114.470960][T21757] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1114.969934][T21770] sp0: Synchronizing with TNC [ 1115.030950][ T30] audit: type=1400 audit(1758971449.613:2600): avc: denied { name_bind } for pid=21775 comm="syz.2.4105" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1115.266641][T19089] usb 7-1: USB disconnect, device number 60 [ 1115.352471][T13777] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1115.702731][T13777] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1115.716924][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.746399][T13777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.769886][T13777] usb 1-1: Product: syz [ 1115.776245][T13777] usb 1-1: Manufacturer: syz [ 1115.822183][T13777] usb 1-1: SerialNumber: syz [ 1115.832386][T13777] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1115.932984][ T3091] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1116.676163][T21799] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4111'. [ 1116.698076][T21779] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4106'. [ 1116.759798][T19089] usb 1-1: USB disconnect, device number 29 [ 1116.816888][ T30] audit: type=1400 audit(1758971451.393:2601): avc: denied { map } for pid=21794 comm="syz.7.4111" path="socket:[101298]" dev="sockfs" ino=101298 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1117.019763][ T3091] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1117.036943][ T3091] ath9k_htc: Failed to initialize the device [ 1117.045660][T19089] usb 1-1: ath9k_htc: USB layer deinitialized [ 1117.235398][ T5956] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1118.002373][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.139313][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.178047][ T5956] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1118.192009][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.232214][ T5956] usb 5-1: config 0 descriptor?? [ 1118.687512][ T30] audit: type=1326 audit(1758971453.273:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1118.692547][ T5956] logitech 0003:046D:CA04.0037: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0 [ 1118.992123][T21806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.006233][T21806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.066193][ T30] audit: type=1326 audit(1758971453.313:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1119.190023][ T30] audit: type=1326 audit(1758971453.353:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1119.216009][ T5956] logitech 0003:046D:CA04.0037: no inputs found [ 1119.256491][ T30] audit: type=1326 audit(1758971453.353:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1119.342173][T13777] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1119.384921][ T30] audit: type=1326 audit(1758971453.353:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1119.555008][T13777] usb 3-1: Using ep0 maxpacket: 16 [ 1119.594642][T13777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1119.607493][T13777] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1119.630653][T13777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.661128][ T30] audit: type=1326 audit(1758971453.353:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1119.782974][ T30] audit: type=1326 audit(1758971453.353:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1119.785192][T13777] usb 3-1: config 0 descriptor?? [ 1119.808504][ T30] audit: type=1326 audit(1758971453.353:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21829 comm="syz.7.4120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb5df8eec9 code=0x7ffc0000 [ 1120.274807][T13777] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1120.285408][T13777] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1120.328205][ T5956] usb 5-1: USB disconnect, device number 30 [ 1120.367775][T13777] mcp2221 0003:04D8:00DD.0038: unknown main item tag 0x0 [ 1120.395053][T13777] mcp2221 0003:04D8:00DD.0038: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1120.473405][ C1] usb 3-1: input irq status -75 received [ 1120.547271][T21856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4125'. [ 1120.697756][T13777] usb 3-1: USB disconnect, device number 33 [ 1121.530481][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1121.530496][ T30] audit: type=1400 audit(1758971456.113:2622): avc: denied { ioctl } for pid=21858 comm="syz.0.4127" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1122.069552][T21872] ptrace attach of "./syz-executor exec"[18515] was attempted by "./syz-executor exec"[21872] [ 1122.185112][T21877] befs: (nbd4): No write support. Marking filesystem read-only [ 1122.185263][T21877] block nbd4: Attempted send on invalid socket [ 1122.185285][T21877] blk_print_req_error: 2 callbacks suppressed [ 1122.185292][T21877] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1122.185343][T21877] befs: (nbd4): unable to read superblock [ 1122.367015][T21877] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1123.815223][T21872] tty tty29: ldisc open failed (-12), clearing slot 28 [ 1123.834284][T21884] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1123.925814][T21894] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.4134'. [ 1124.072724][ T30] audit: type=1326 audit(1758971458.663:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1124.114711][ T30] audit: type=1326 audit(1758971458.663:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1124.660549][ T30] audit: type=1326 audit(1758971458.693:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1125.003877][ T30] audit: type=1326 audit(1758971458.693:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1125.100323][ T30] audit: type=1326 audit(1758971458.693:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1125.788385][ T30] audit: type=1326 audit(1758971458.733:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1125.812345][ T30] audit: type=1326 audit(1758971458.733:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1125.836824][ T30] audit: type=1326 audit(1758971458.733:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21897 comm="syz.2.4136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1125.886189][ T30] audit: type=1400 audit(1758971458.733:2631): avc: denied { bind } for pid=21899 comm="syz.6.4137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1127.204231][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1127.224490][T21933] netlink: 'syz.6.4145': attribute type 20 has an invalid length. [ 1127.250336][T21933] netlink: 'syz.6.4145': attribute type 21 has an invalid length. [ 1127.632134][T13777] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1127.804230][T13777] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.814785][T13777] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1127.881904][T13777] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1127.919401][T13777] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1127.937974][T13777] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.992179][ T5956] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1128.182364][T13777] usb 7-1: Product: syz [ 1128.186553][T13777] usb 7-1: Manufacturer: syz [ 1128.191144][T13777] usb 7-1: SerialNumber: syz [ 1128.288119][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1128.288135][ T30] audit: type=1400 audit(1758971462.873:2647): avc: denied { write } for pid=21943 comm="syz.7.4149" path="socket:[103493]" dev="sockfs" ino=103493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1128.342271][ T5956] usb 1-1: Using ep0 maxpacket: 16 [ 1128.355837][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.377044][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.410849][ T5956] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1128.440302][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.770651][ T5956] usb 1-1: config 0 descriptor?? [ 1128.781585][T13777] usb 7-1: Found UVC 0.00 device syz (8086:0b07) [ 1128.883132][T13777] usb 7-1: No valid video chain found. [ 1128.952433][T13777] usb 7-1: USB disconnect, device number 61 [ 1129.147825][T21954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4151'. [ 1129.182335][ T30] audit: type=1400 audit(1758971463.723:2648): avc: denied { setopt } for pid=21949 comm="syz.2.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1129.249910][ T30] audit: type=1400 audit(1758971463.733:2649): avc: denied { setopt } for pid=21949 comm="syz.2.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1129.353852][ T5956] mcp2221 0003:04D8:00DD.0039: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1129.368648][T21958] ptrace attach of "./syz-executor exec"[18515] was attempted by "./syz-executor exec"[21958] [ 1129.386266][ T30] audit: type=1400 audit(1758971463.733:2650): avc: denied { append } for pid=21949 comm="syz.2.4151" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1129.440899][T21958] befs: (nbd4): No write support. Marking filesystem read-only [ 1129.448645][T21958] block nbd4: Attempted send on invalid socket [ 1129.454859][T21958] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1129.463976][T21958] befs: (nbd4): unable to read superblock [ 1129.488168][ T5956] usb 1-1: USB disconnect, device number 30 [ 1129.593714][T21962] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1129.615039][T21964] FAULT_INJECTION: forcing a failure. [ 1129.615039][T21964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.640046][T21964] CPU: 1 UID: 0 PID: 21964 Comm: syz.6.4154 Not tainted syzkaller #0 PREEMPT(full) [ 1129.640070][T21964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1129.640080][T21964] Call Trace: [ 1129.640086][T21964] [ 1129.640093][T21964] dump_stack_lvl+0x16c/0x1f0 [ 1129.640120][T21964] should_fail_ex+0x512/0x640 [ 1129.640144][T21964] _copy_from_user+0x2e/0xd0 [ 1129.640168][T21964] __x64_sys_sendfile64+0x120/0x220 [ 1129.640190][T21964] ? ksys_write+0x1ac/0x250 [ 1129.640207][T21964] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1129.640235][T21964] do_syscall_64+0xcd/0x4e0 [ 1129.640259][T21964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.640275][T21964] RIP: 0033:0x7f21b858eec9 [ 1129.640290][T21964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.640307][T21964] RSP: 002b:00007f21b946c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1129.640323][T21964] RAX: ffffffffffffffda RBX: 00007f21b87e6090 RCX: 00007f21b858eec9 [ 1129.640334][T21964] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 1129.640345][T21964] RBP: 00007f21b946c090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.640354][T21964] R10: 0000000000007f04 R11: 0000000000000246 R12: 0000000000000001 [ 1129.640364][T21964] R13: 00007f21b87e6128 R14: 00007f21b87e6090 R15: 00007fff15288208 [ 1129.640386][T21964] [ 1129.782122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1130.420345][ T30] audit: type=1400 audit(1758971464.953:2651): avc: denied { bind } for pid=21969 comm="syz.4.4157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1130.542230][ T5956] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1130.672222][ T5956] usb 1-1: device descriptor read/64, error -71 [ 1130.829337][ T30] audit: type=1400 audit(1758971465.403:2652): avc: denied { append } for pid=21979 comm="syz.4.4159" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1130.942339][ T5956] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1131.072552][T21114] Bluetooth: hci0: command 0x0405 tx timeout [ 1131.085116][ T5956] usb 1-1: device descriptor read/64, error -71 [ 1131.108591][T21988] delete_channel: no stack [ 1131.208920][ T5956] usb usb1-port1: attempt power cycle [ 1131.562291][ T5956] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1131.623269][ T5956] usb 1-1: device descriptor read/8, error -71 [ 1132.087651][ T30] audit: type=1326 audit(1758971466.653:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21996 comm="syz.2.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1132.286712][ T5956] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1132.315747][ T30] audit: type=1326 audit(1758971466.653:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21996 comm="syz.2.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1132.343661][ T5956] usb 1-1: device descriptor read/8, error -71 [ 1132.346090][ T3091] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1132.357547][ T30] audit: type=1326 audit(1758971466.653:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21996 comm="syz.2.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1132.357595][ T30] audit: type=1326 audit(1758971466.663:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21996 comm="syz.2.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08fbb8eec9 code=0x7ffc0000 [ 1132.381418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.452702][ T5956] usb usb1-port1: unable to enumerate USB device [ 1132.592283][ T3091] usb 7-1: Using ep0 maxpacket: 8 [ 1132.623545][ T3091] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1132.643588][ T3091] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1132.681771][ T3091] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1132.695388][T22014] smc: net device bond0 applied user defined pnetid SYZ2 [ 1132.714111][ T3091] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1132.808695][ T3091] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1132.818262][ T3091] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.826484][ T3091] usb 7-1: Product: syz [ 1132.830755][ T3091] usb 7-1: Manufacturer: syz [ 1132.835829][ T3091] usb 7-1: SerialNumber: syz [ 1132.852637][ T3091] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 1132.862875][ T3091] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 1132.874510][ T3091] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 1132.932550][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1133.082139][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1133.176041][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1133.208822][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1133.655058][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1133.664284][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.676639][ T24] usb 3-1: Product: syz [ 1133.680822][ T24] usb 3-1: Manufacturer: syz [ 1133.692369][ T24] usb 3-1: SerialNumber: syz [ 1133.698046][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1133.698062][ T30] audit: type=1400 audit(1758971468.273:2669): avc: denied { mount } for pid=22019 comm="syz.0.4168" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1133.728277][ T24] usb 3-1: config 0 descriptor?? [ 1133.755921][ T30] audit: type=1400 audit(1758971468.323:2670): avc: denied { remount } for pid=22019 comm="syz.0.4168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1133.867149][ T24] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1133.904831][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1134.014947][ T30] audit: type=1400 audit(1758971468.593:2671): avc: denied { unmount } for pid=17580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1134.450339][T19089] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 1134.482601][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1134.494716][ T24] em28xx 3-1:0.0: Config register raw data: 0xee [ 1134.529632][ T24] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1134.553023][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 1134.704224][T19089] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1134.722958][T19089] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1134.755282][T19089] usb 1-1: config 0 has no interface number 0 [ 1134.794830][ T3091] usb 7-1: USB disconnect, device number 62 [ 1134.980559][T19089] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 1134.991518][T19089] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1135.002365][T19089] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1135.027492][ T30] audit: type=1400 audit(1758971469.613:2672): avc: denied { ioctl } for pid=22011 comm="syz.2.4166" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1135.062606][T19089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.081242][T19089] usb 1-1: config 0 descriptor?? [ 1135.284020][ T30] audit: type=1400 audit(1758971469.873:2673): avc: denied { write } for pid=22042 comm="syz.7.4174" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1135.376323][ T30] audit: type=1400 audit(1758971469.953:2674): avc: denied { block_suspend } for pid=22042 comm="syz.7.4174" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1135.402949][ T3091] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1135.557882][ T3091] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1135.569823][ T3091] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1135.581579][ T3091] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1135.594469][ T3091] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1135.603863][ T3091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.635244][T22041] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1135.744080][T19089] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input64 [ 1135.785659][T19089] input: failed to attach handler kbd to device input64, error: -5 [ 1136.190093][ T5170] Bluetooth: hci1: unexpected subevent 0x0a length: 99 > 30 [ 1136.208614][T22031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.220541][T22031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.244179][ T24] usb 1-1: USB disconnect, device number 35 [ 1137.066880][T22056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1137.768817][T22041] tipc: Enabling not permitted [ 1137.785008][T22041] tipc: Enabling of bearer rejected, failed to enable media [ 1137.811611][ T3091] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1137.830418][ T3091] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input65 [ 1137.859452][ T3091] usb 7-1: USB disconnect, device number 63 [ 1137.859494][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1138.000876][ T30] audit: type=1400 audit(1758971472.583:2675): avc: denied { watch watch_reads } for pid=22068 comm="syz.4.4180" path="/161" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1138.272193][ T5170] Bluetooth: hci1: command 0x0405 tx timeout [ 1138.597768][ T30] audit: type=1400 audit(1758971473.183:2676): avc: denied { load_policy } for pid=22081 comm="syz.0.4184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1138.662599][T22082] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 1138.772279][T22082] SELinux: failed to load policy [ 1138.848720][T22091] UBIFS error (pid: 22091): cannot open "c:::", error -22 [ 1138.853445][T22091] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4186'. [ 1139.622756][T22095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1140.131558][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4188'. [ 1140.279745][T22106] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4191'. [ 1140.317282][T22109] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.4191'. [ 1140.873938][ T30] audit: type=1326 audit(1758971475.443:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1140.987797][ T30] audit: type=1326 audit(1758971475.443:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.452183][ T30] audit: type=1326 audit(1758971475.443:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.475651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1141.500953][T22124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.540166][ T30] audit: type=1326 audit(1758971475.443:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.566910][ T30] audit: type=1326 audit(1758971475.443:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.622762][ T30] audit: type=1326 audit(1758971475.443:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.649214][ T30] audit: type=1326 audit(1758971475.443:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.673383][ T30] audit: type=1326 audit(1758971475.443:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.698760][T22125] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1141.748845][ T30] audit: type=1326 audit(1758971475.443:2685): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1141.923644][T22139] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 1141.932406][T22139] netlink: 'syz.2.4199': attribute type 4 has an invalid length. [ 1141.942324][T22139] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4199'. [ 1141.964000][ T30] audit: type=1326 audit(1758971475.443:2686): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22115 comm="syz.0.4194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97b178eec9 code=0x7ffc0000 [ 1142.121795][T22142] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 1142.201932][T22142] netlink: 'syz.2.4199': attribute type 4 has an invalid length. [ 1142.209787][T22139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12577 sclass=netlink_route_socket pid=22139 comm=syz.2.4199 [ 1142.228735][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1142.312218][T22142] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4199'. [ 1143.011178][T22134] team0 (unregistering): Port device team_slave_0 removed [ 1143.020897][T22134] team0 (unregistering): Port device team_slave_1 removed [ 1145.542157][ T5956] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1145.712839][ T5956] usb 5-1: Using ep0 maxpacket: 16 [ 1145.719592][ T5956] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.768399][ T5956] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1145.797816][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.870188][T22205] netlink: 'syz.7.4216': attribute type 2 has an invalid length. [ 1145.870586][ T5956] usb 5-1: config 0 descriptor?? [ 1145.910375][T22205] netlink: 'syz.7.4216': attribute type 1 has an invalid length. [ 1146.407372][T22216] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4217'. [ 1146.772526][ T5956] mcp2221 0003:04D8:00DD.003A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1147.083324][ T3091] usb 5-1: USB disconnect, device number 31 [ 1148.088503][T22244] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4223'. [ 1148.855866][T22249] atomic_op ffff8880357c7198 conn xmit_atomic 0000000000000000 [ 1150.734122][T22290] 9pnet_fd: p9_fd_create_unix (22290): problem connecting socket: ./cgroup: -111 [ 1151.059251][T22309] fuse: Bad value for 'rootmode' [ 1151.194934][T22318] netlink: 'syz.2.4239': attribute type 3 has an invalid length. [ 1151.221903][T22318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4239'. [ 1151.231118][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1151.231132][ T30] audit: type=1400 audit(1758971485.803:2715): avc: denied { setopt } for pid=22317 comm="syz.0.4244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1151.271295][ T30] audit: type=1400 audit(1758971485.853:2716): avc: denied { bind } for pid=22299 comm="syz.2.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1151.493665][ T10] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1152.074922][ T30] audit: type=1400 audit(1758971486.253:2717): avc: denied { watch watch_reads } for pid=22324 comm="syz.0.4246" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1152.103261][ C1] vkms_vblank_simulate: vblank timer overrun [ 1152.151388][ T10] usb 5-1: device descriptor read/64, error -71 [ 1152.357487][T22335] delete_channel: no stack [ 1152.475534][ T10] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1153.032268][ T10] usb 5-1: device descriptor read/64, error -71 [ 1153.153635][ T10] usb usb5-port1: attempt power cycle [ 1153.218633][ T30] audit: type=1400 audit(1758971487.733:2718): avc: denied { bind } for pid=22338 comm="syz.6.4250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1153.662479][ T10] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1153.682606][ T10] usb 5-1: device descriptor read/8, error -71 [ 1154.326592][T22362] overlayfs: failed to resolve './file1': -2 [ 1154.609902][T22376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.665727][T22376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.725495][T22378] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4260'. [ 1154.835404][ T30] audit: type=1400 audit(1758971489.423:2719): avc: denied { append } for pid=22382 comm="syz.6.4262" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1155.142157][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1155.212978][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1155.262173][ T5956] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1155.311548][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1155.406496][ T10] usb 5-1: config 0 has no interface number 0 [ 1155.426591][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1155.436632][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.445138][ T10] usb 5-1: Product: syz [ 1155.462276][ T10] usb 5-1: Manufacturer: syz [ 1155.475244][ T10] usb 5-1: SerialNumber: syz [ 1155.582613][ T10] usb 5-1: config 0 descriptor?? [ 1155.594206][ T5956] usb 7-1: Using ep0 maxpacket: 16 [ 1155.603600][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1155.625179][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.641184][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1155.659277][ T5956] usb 7-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1155.746141][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.915611][ T5956] usb 7-1: config 0 descriptor?? [ 1156.414538][ T5956] pantherlord 0003:0F30:0111.003B: collection stack underflow [ 1156.439942][ T5956] pantherlord 0003:0F30:0111.003B: item 0 0 0 12 parsing failed [ 1156.583636][T22404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.593101][T22404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.654481][ T30] audit: type=1400 audit(1758971491.243:2720): avc: denied { create } for pid=22401 comm="syz.0.4268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1156.662938][ T5956] pantherlord 0003:0F30:0111.003B: parse failed [ 1157.410946][ T5956] pantherlord 0003:0F30:0111.003B: probe with driver pantherlord failed with error -22 [ 1157.469805][ T30] audit: type=1400 audit(1758971491.243:2721): avc: denied { ioctl } for pid=22401 comm="syz.0.4268" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1158.052736][ T10] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1158.092882][ T10] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 1158.114224][ T10] usb 5-1: USB disconnect, device number 35 [ 1158.876900][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1158.987172][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1158.993489][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1159.030745][T22440] input: syz1 as /devices/virtual/input/input66 [ 1159.083934][ T10] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 1159.215522][ T10] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1159.262382][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1159.268543][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1159.715573][ T30] audit: type=1400 audit(1758971494.303:2722): avc: denied { setopt } for pid=22433 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1159.731113][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.736617][ T30] audit: type=1400 audit(1758971494.303:2723): avc: denied { read } for pid=22433 comm="syz.4.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1159.749963][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.780665][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.793417][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1159.802402][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1159.811695][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.824908][ T30] audit: type=1400 audit(1758971494.413:2724): avc: denied { relabelfrom } for pid=22462 comm="syz.2.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1159.846288][ T30] audit: type=1400 audit(1758971494.413:2725): avc: denied { relabelto } for pid=22462 comm="syz.2.4282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1159.849177][T22434] ceph: No mds server is up or the cluster is laggy [ 1160.450481][T22474] ptrace attach of "./syz-executor exec"[17580] was attempted by "./syz-executor exec"[22474] [ 1160.591108][T22476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.599795][T22476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.698255][T22474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1161.075911][T22485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.084805][T22485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.606009][T22491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4291'. [ 1161.731031][T22491] team_slave_0: left promiscuous mode [ 1161.736801][T22491] team_slave_0: left allmulticast mode [ 1161.744154][T22491] team0 (unregistering): Port device team_slave_0 removed [ 1161.751474][T22491] team_slave_1: left promiscuous mode [ 1161.758054][T22491] team_slave_1: left allmulticast mode [ 1161.764981][T22491] team0 (unregistering): Port device team_slave_1 removed [ 1161.947960][T22506] netlink: 'syz.0.4295': attribute type 1 has an invalid length. [ 1161.989814][T22506] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1162.003109][T22506] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1162.050042][T22510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.052495][T22507] gretap1: entered promiscuous mode [ 1162.064815][T22514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.066658][T22507] bond1: (slave gretap1): making interface the new active one [ 1162.084049][T22507] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1162.087476][T22510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.094509][T22514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.109232][T22506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1162.109232][T22507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1162.139728][ T30] audit: type=1400 audit(1758971496.713:2726): avc: denied { map } for pid=22513 comm="syz.2.4297" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1162.177584][ T30] audit: type=1400 audit(1758971496.713:2727): avc: denied { execute } for pid=22513 comm="syz.2.4297" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1162.203317][T22510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1162.212231][T22510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1162.234733][T22511] macvlan2: entered promiscuous mode [ 1162.240120][T22511] macvlan2: entered allmulticast mode [ 1162.246311][T22511] bond1: entered promiscuous mode [ 1162.252237][T22511] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1162.261869][T22511] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 1162.276605][T22511] bond1: left promiscuous mode [ 1162.469358][T22521] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1162.980007][ T30] audit: type=1400 audit(1758971497.563:2728): avc: denied { append } for pid=22544 comm="syz.6.4305" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1163.582223][ T30] audit: type=1400 audit(1758971498.093:2729): avc: denied { connect } for pid=22544 comm="syz.6.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1163.727243][ T30] audit: type=1400 audit(1758971498.093:2730): avc: denied { listen } for pid=22544 comm="syz.6.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1163.875600][T22551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4307'. [ 1164.602217][ T3091] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1164.860340][ T3091] usb 1-1: Using ep0 maxpacket: 8 [ 1165.082847][ T3091] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1165.133868][ T3091] usb 1-1: config 0 has no interface number 0 [ 1165.170459][ T3091] usb 1-1: config 0 interface 122 has no altsetting 0 [ 1165.195239][ T3091] usb 1-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=c3.88 [ 1165.234829][ T3091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.257065][ T3091] usb 1-1: Product: syz [ 1165.261378][ T3091] usb 1-1: Manufacturer: syz [ 1165.266334][ T3091] usb 1-1: SerialNumber: syz [ 1165.288052][ T3091] usb 1-1: config 0 descriptor?? [ 1165.499473][T22575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.530857][T22575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.756562][T22575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.766347][T22575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1165.770878][ T3091] pegasus 1-1:0.122: probe with driver pegasus failed with error -71 [ 1165.778825][T22581] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 1165.791082][ T3091] usb 1-1: USB disconnect, device number 36 [ 1166.120128][T22581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1167.227016][T22591] mkiss: ax0: crc mode is auto. [ 1167.312146][ T30] audit: type=1400 audit(1758971501.883:2731): avc: denied { setopt } for pid=22589 comm="syz.7.4318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1167.460076][T22601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.469152][T22601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.670554][T22608] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1167.677007][T22608] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1168.140954][T22606] ISOFS: Unable to identify CD-ROM format. [ 1170.485719][T22622] Can't find ip_set type bitmap:ip [ 1171.122347][ T5952] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1171.808070][ T5952] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1171.817171][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.826734][ T5952] usb 5-1: Product: syz [ 1171.830896][ T5952] usb 5-1: Manufacturer: syz [ 1171.953328][ T5952] usb 5-1: SerialNumber: syz [ 1171.969175][ T5952] usb 5-1: config 0 descriptor?? [ 1172.066973][ T5952] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 036 [ 1172.159269][T22651] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1172.343069][T22655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.374510][T22655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.987378][ T5952] i2c i2c-1: connected i2c-tiny-usb device [ 1173.017738][ T24] usb 5-1: USB disconnect, device number 36 [ 1173.386297][T22660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.413472][T22660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.674482][T22670] ptrace attach of "./syz-executor exec"[18515] was attempted by "./syz-executor exec"[22670] [ 1173.797204][T22670] befs: (nbd4): No write support. Marking filesystem read-only [ 1173.806569][T22670] block nbd4: Attempted send on invalid socket [ 1173.812989][T22670] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1173.823391][T22670] befs: (nbd4): unable to read superblock [ 1173.931655][T22670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1176.389501][T22699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.398024][ T5952] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1176.408794][T22699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.447036][T22698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.459006][T22698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1176.577319][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 1176.583932][ T5952] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1176.607201][ T5952] usb 5-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1176.620524][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1176.627256][ T5952] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1176.636540][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.653223][ T5952] usb 5-1: config 0 descriptor?? [ 1176.670093][ T5952] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1177.330023][T22716] sp0: Synchronizing with TNC [ 1177.540302][T22709] [U] [ 1177.593974][T22722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.613142][T22722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.730162][T22726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1177.738693][T13777] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1177.908953][T22726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.922171][T13777] usb 1-1: Using ep0 maxpacket: 16 [ 1177.930735][T13777] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1177.941267][T13777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.399551][T13777] usb 1-1: Product: syz [ 1178.601423][ T30] audit: type=1400 audit(1758971512.993:2732): avc: denied { setattr } for pid=22723 comm="syz.2.4353" name="file0" dev="tmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1178.689961][T13777] usb 1-1: Manufacturer: syz [ 1178.797805][T13777] usb 1-1: SerialNumber: syz [ 1178.813701][T22736] netlink: 'syz.6.4355': attribute type 1 has an invalid length. [ 1178.854915][ T30] audit: type=1400 audit(1758971513.433:2733): avc: denied { read write } for pid=22738 comm="syz.7.4357" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1178.899433][T13777] usb 1-1: config 0 descriptor?? [ 1178.928712][ T30] audit: type=1400 audit(1758971513.433:2734): avc: denied { open } for pid=22738 comm="syz.7.4357" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1178.934682][T13777] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1178.999578][ T3091] usb 5-1: USB disconnect, device number 37 [ 1179.617864][T22756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.640721][T22756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.663626][T22756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1179.676036][T22756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.269618][T22714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.308390][T13777] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1180.318215][ T30] audit: type=1400 audit(1758971514.753:2735): avc: denied { bind } for pid=22766 comm="syz.2.4363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1180.377903][T22714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.568290][T13777] usb 1-1: USB disconnect, device number 37 [ 1180.680906][ T30] audit: type=1400 audit(1758971514.773:2736): avc: denied { name_bind } for pid=22766 comm="syz.2.4363" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1181.016263][ T30] audit: type=1400 audit(1758971514.773:2737): avc: denied { node_bind } for pid=22766 comm="syz.2.4363" saddr=172.20.20.187 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1181.050930][ T30] audit: type=1400 audit(1758971514.943:2738): avc: denied { shutdown } for pid=22768 comm="syz.6.4365" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1181.521211][ T30] audit: type=1400 audit(1758971515.143:2739): avc: denied { listen } for pid=22771 comm="syz.4.4364" lport=52440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1181.556485][T22786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1181.565896][T22786] ip6gre0: Master is either lo or non-ether device [ 1181.603566][T22786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4368'. [ 1181.612145][ T30] audit: type=1400 audit(1758971515.143:2740): avc: denied { accept } for pid=22771 comm="syz.4.4364" lport=52440 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1181.786603][T22791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.797835][T22791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.956390][ T30] audit: type=1400 audit(1758971515.593:2741): avc: denied { write } for pid=22779 comm="syz.7.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1182.332092][T22805] fuse: Unknown parameter '4nteީt˼ @~_1Ͽ<;5< oo"wU8TǟR_sMu*l%u+ߣ5z/' [ 1183.695687][T22817] libceph: resolve '4' (ret=-3): failed [ 1184.010915][T22821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1184.873688][T19089] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1185.093202][T19089] usb 1-1: Using ep0 maxpacket: 16 [ 1185.144387][T22841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.225825][T19089] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1185.238474][T19089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.248836][T19089] usb 1-1: Product: syz [ 1185.251016][T22841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.254201][T19089] usb 1-1: Manufacturer: syz [ 1185.265682][T19089] usb 1-1: SerialNumber: syz [ 1185.273652][T19089] usb 1-1: config 0 descriptor?? [ 1185.283376][T19089] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1185.324293][T22841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4383'. [ 1185.585835][T22849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1185.624176][T22849] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1185.626618][ T6150] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.722132][ T5952] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1185.745560][ T6150] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.763108][ T6150] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.782649][ T6150] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1185.802571][T19089] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1185.872328][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 1185.879186][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.933937][T22849] bridge_slave_0: left allmulticast mode [ 1185.939588][T22849] bridge_slave_0: left promiscuous mode [ 1185.969634][ T5952] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1185.978839][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.989673][ T5952] usb 5-1: config 0 descriptor?? [ 1186.050557][T22849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.050785][T22852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1186.326906][T22849] bridge_slave_1: left allmulticast mode [ 1186.510209][ T5952] mcp2221 0003:04D8:00DD.003D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1186.515225][T22849] bridge_slave_1: left promiscuous mode [ 1186.568300][T22849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.024808][ T5952] usb 5-1: USB disconnect, device number 38 [ 1187.168855][T22849] bond0: (slave bond_slave_0): Releasing backup interface [ 1187.193695][T22849] bond_slave_0: left promiscuous mode [ 1187.222267][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1187.222287][ T30] audit: type=1400 audit(1758971521.803:2743): avc: denied { write } for pid=22853 comm="syz.2.4387" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1187.253613][T22849] bond0: (slave bond_slave_1): Releasing backup interface [ 1187.413728][T22849] bond_slave_1: left promiscuous mode [ 1187.469129][ T30] audit: type=1400 audit(1758971521.803:2744): avc: denied { open } for pid=22853 comm="syz.2.4387" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1187.569407][ T30] audit: type=1400 audit(1758971521.843:2745): avc: denied { read } for pid=22853 comm="syz.2.4387" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1187.607741][T22849] team0: Port device team_slave_0 removed [ 1187.744633][T22849] team0: Port device team_slave_1 removed [ 1187.764307][T22849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.782683][T22849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.853118][ T3091] usb 1-1: USB disconnect, device number 38 [ 1187.922009][T22849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.929561][T22849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1188.168121][ T30] audit: type=1800 audit(1758971522.753:2746): pid=22858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.4387" name="/" dev="9p" ino=2 res=0 errno=0 [ 1188.271467][T22852] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4386'. [ 1188.691806][T22872] netlink: 456 bytes leftover after parsing attributes in process `syz.0.4389'. [ 1189.112384][ T3091] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1189.514581][ T3091] usb 5-1: Using ep0 maxpacket: 16 [ 1189.550356][ T3091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.572385][ T3091] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1189.581470][ T3091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.604354][ T3091] usb 5-1: config 0 descriptor?? [ 1189.857278][T22878] ptrace attach of "./syz-executor exec"[18010] was attempted by "./syz-executor exec"[22878] [ 1189.962098][T22883] befs: (nbd2): No write support. Marking filesystem read-only [ 1189.973602][T22883] block nbd2: Attempted send on invalid socket [ 1189.979836][T22883] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1189.990766][T22883] befs: (nbd2): unable to read superblock [ 1190.273579][T22887] input: syz1 as /devices/virtual/input/input67 [ 1190.596979][T21114] Bluetooth: hci4: sending frame failed (-49) [ 1190.606384][ T5170] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 1190.703787][T22883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1191.362709][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1191.534080][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.559577][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1191.570708][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.591813][ T24] usb 1-1: config 0 descriptor?? [ 1192.097174][ T3091] usbhid 5-1:0.0: can't add hid device: -71 [ 1192.113960][ T3091] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1192.165987][ T3091] usb 5-1: USB disconnect, device number 39 [ 1192.177596][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 1192.199638][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1192.230392][ T30] audit: type=1400 audit(1758971526.803:2747): avc: denied { write } for pid=22910 comm="syz.4.4401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1192.267614][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 1192.483524][T22890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.492372][T22890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.511365][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 1192.603362][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 1192.612279][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 1192.619090][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 1192.635175][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 1192.660343][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 1192.675677][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 1192.682984][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 1192.694237][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 1192.704096][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 1192.719281][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 1192.744150][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 1192.752658][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 1192.808238][T22920] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1193.078163][ T24] pwc: Registered as video103. [ 1193.116261][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input68 [ 1193.194618][ T24] usb 1-1: USB disconnect, device number 39 [ 1193.291577][T22928] cgroup: noprefix used incorrectly [ 1193.895086][T22936] mmap: syz.2.4408 (22936): VmData 25841664 exceed data ulimit 98. Update limits or use boot option ignore_rlimit_data. [ 1194.096592][T22942] FAULT_INJECTION: forcing a failure. [ 1194.096592][T22942] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.383368][T22942] CPU: 0 UID: 0 PID: 22942 Comm: syz.2.4410 Not tainted syzkaller #0 PREEMPT(full) [ 1194.383385][T22942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1194.383392][T22942] Call Trace: [ 1194.383396][T22942] [ 1194.383401][T22942] dump_stack_lvl+0x16c/0x1f0 [ 1194.383420][T22942] should_fail_ex+0x512/0x640 [ 1194.383437][T22942] ? __kmalloc_noprof+0xbf/0x510 [ 1194.383451][T22942] ? iter_file_splice_write+0x1cc/0x12e0 [ 1194.383463][T22942] should_failslab+0xc2/0x120 [ 1194.383476][T22942] __kmalloc_noprof+0xd2/0x510 [ 1194.383486][T22942] ? filemap_splice_read+0x962/0xd60 [ 1194.383504][T22942] iter_file_splice_write+0x1cc/0x12e0 [ 1194.383518][T22942] ? __pfx_filemap_splice_read+0x10/0x10 [ 1194.383538][T22942] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1194.383550][T22942] ? __lock_acquire+0xb97/0x1ce0 [ 1194.383578][T22942] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1194.383592][T22942] direct_splice_actor+0x18f/0x6c0 [ 1194.383606][T22942] splice_direct_to_actor+0x345/0xa30 [ 1194.383620][T22942] ? __pfx_direct_splice_actor+0x10/0x10 [ 1194.383635][T22942] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1194.383646][T22942] ? get_pid_task+0xfc/0x250 [ 1194.383660][T22942] do_splice_direct+0x174/0x240 [ 1194.383673][T22942] ? __pfx_do_splice_direct+0x10/0x10 [ 1194.383685][T22942] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1194.383699][T22942] ? rw_verify_area+0xcf/0x6c0 [ 1194.383718][T22942] do_sendfile+0xb06/0xe50 [ 1194.383731][T22942] ? __pfx_do_sendfile+0x10/0x10 [ 1194.383751][T22942] __x64_sys_sendfile64+0x154/0x220 [ 1194.383767][T22942] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1194.383785][T22942] do_syscall_64+0xcd/0x4e0 [ 1194.383803][T22942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.383814][T22942] RIP: 0033:0x7f08fbb8eec9 [ 1194.383824][T22942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.383835][T22942] RSP: 002b:00007f08fca85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1194.383845][T22942] RAX: ffffffffffffffda RBX: 00007f08fbde6090 RCX: 00007f08fbb8eec9 [ 1194.383853][T22942] RDX: 0000200000000080 RSI: 0000000000000005 RDI: 0000000000000005 [ 1194.383859][T22942] RBP: 00007f08fca85090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.383866][T22942] R10: 0000000000007f04 R11: 0000000000000246 R12: 0000000000000002 [ 1194.383872][T22942] R13: 00007f08fbde6128 R14: 00007f08fbde6090 R15: 00007fff760483f8 [ 1194.383886][T22942] [ 1195.083806][T22952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.093272][T22952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.102557][T19089] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1195.282244][T19089] usb 1-1: Using ep0 maxpacket: 16 [ 1195.296598][T19089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.386008][ T30] audit: type=1400 audit(1758971529.923:2748): avc: denied { write } for pid=22948 comm="syz.2.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1195.465787][T19089] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1195.539179][T19089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.556919][T19089] usb 1-1: config 0 descriptor?? [ 1195.698387][T22959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1195.707682][T22959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.003329][T19089] mcp2221 0003:04D8:00DD.003E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1196.182326][ T3091] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1196.347655][ T3091] usb 5-1: Using ep0 maxpacket: 16 [ 1196.357574][ T3091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.472888][ T24] usb 1-1: USB disconnect, device number 40 [ 1196.504441][ T3091] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1196.989267][ T3091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.015935][ T3091] usb 5-1: config 0 descriptor?? [ 1198.067018][ T30] audit: type=1400 audit(1758971532.613:2749): avc: denied { read } for pid=22987 comm="syz.0.4425" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1198.098254][ T3091] usbhid 5-1:0.0: can't add hid device: -71 [ 1198.112719][ T3091] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1198.222885][ T3091] usb 5-1: USB disconnect, device number 40 [ 1199.045220][ T30] audit: type=1400 audit(1758971533.633:2750): avc: denied { ioctl } for pid=23018 comm="syz.4.4432" path="socket:[108351]" dev="sockfs" ino=108351 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1199.070364][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.571781][ T30] audit: type=1400 audit(1758971535.113:2751): avc: denied { write } for pid=23035 comm="syz.7.4436" name="mouse0" dev="devtmpfs" ino=987 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1200.888110][T23046] syz.4.4438 uses old SIOCAX25GETINFO [ 1201.422169][ T30] audit: type=1400 audit(1758971535.943:2752): avc: denied { mount } for pid=23048 comm="syz.4.4440" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1201.482354][ T3091] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1201.702193][ T3091] usb 1-1: Using ep0 maxpacket: 32 [ 1201.753775][ T3091] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1201.809413][ T30] audit: type=1400 audit(1758971536.033:2753): avc: denied { unmount } for pid=18515 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1201.902091][ T3091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.951186][ T3091] usb 1-1: config 0 descriptor?? [ 1202.087849][ T30] audit: type=1400 audit(1758971536.673:2754): avc: denied { create } for pid=23060 comm="syz.6.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1202.119299][T23061] netlink: 'syz.6.4443': attribute type 1 has an invalid length. [ 1202.170120][ T30] audit: type=1400 audit(1758971536.703:2755): avc: denied { write } for pid=23060 comm="syz.6.4443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1202.231957][T23066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.246631][T23066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.264060][T23063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1202.277253][ T3091] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1202.277796][T23063] bond2: (slave bond3): making interface the new active one [ 1202.296763][T23063] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1202.306588][ T3091] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1202.315256][T23061] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 1202.329750][T23063] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4443'. [ 1202.340645][T23063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1202.364398][ T3091] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1202.395938][ T3091] usb 1-1: media controller created [ 1202.440285][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1202.452808][ T3091] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1202.533054][T23072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4439'. [ 1202.730842][ T3091] DVB: Unable to find symbol dib7000p_attach() [ 1202.812214][ T3091] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1202.924272][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1203.029916][T23074] bond0: (slave bond_slave_0): Releasing backup interface [ 1203.056379][ T3091] rc_core: IR keymap rc-dib0700-rc5 not found [ 1203.095121][ T3091] Registered IR keymap rc-empty [ 1203.106077][T23074] bond_slave_0: left promiscuous mode [ 1203.304752][ T3091] dvb-usb: could not initialize remote control. [ 1203.311089][ T3091] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1203.342930][T23079] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4445'. [ 1203.376434][ T3091] usb 1-1: USB disconnect, device number 41 [ 1203.444845][T23074] bond_slave_0: left allmulticast mode [ 1203.631308][ T3091] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1203.728680][T23074] bond0: (slave bond_slave_1): Releasing backup interface [ 1203.836642][T23074] bond_slave_1: left promiscuous mode [ 1203.861966][T23074] bond_slave_1: left allmulticast mode [ 1203.967799][T23074] bond2: (slave bond3): Releasing backup interface [ 1204.000311][T23074] bond2: (slave bond3): the permanent HWaddr of slave - d2:32:ea:6f:dc:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1204.055540][T23074] bond2: (slave gretap1): making interface the new active one [ 1204.267057][T23093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.345301][T23093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.917342][T23074] bond2: (slave gretap1): Releasing backup interface [ 1205.940542][T23093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.970423][T23093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.984915][ T49] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.004930][ T49] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.045300][T23094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1206.233317][ T49] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.305075][ T49] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1206.321223][T23099] FAULT_INJECTION: forcing a failure. [ 1206.321223][T23099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1206.323148][T23099] [ 1206.323155][T23099] ====================================================== [ 1206.323162][T23099] WARNING: possible circular locking dependency detected [ 1206.323168][T23099] syzkaller #0 Not tainted [ 1206.323177][T23099] ------------------------------------------------------ [ 1206.323183][T23099] syz.0.4450/23099 is trying to acquire lock: [ 1206.323192][T23099] ffffffff8e4cebc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1206.323236][T23099] [ 1206.323236][T23099] but task is already holding lock: [ 1206.323241][T23099] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1206.323279][T23099] [ 1206.323279][T23099] which lock already depends on the new lock. [ 1206.323279][T23099] [ 1206.323284][T23099] [ 1206.323284][T23099] the existing dependency chain (in reverse order) is: [ 1206.323290][T23099] [ 1206.323290][T23099] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 1206.323310][T23099] _raw_spin_lock_nested+0x31/0x40 [ 1206.323329][T23099] raw_spin_rq_lock_nested+0x29/0x130 [ 1206.323348][T23099] task_rq_lock+0xcf/0x490 [ 1206.323367][T23099] cgroup_move_task+0x81/0x2a0 [ 1206.323389][T23099] css_set_move_task+0x288/0x5f0 [ 1206.323404][T23099] cgroup_post_fork+0x201/0x9e0 [ 1206.323423][T23099] copy_process+0x5cfa/0x7690 [ 1206.323445][T23099] kernel_clone+0xfc/0x930 [ 1206.323466][T23099] user_mode_thread+0xc7/0x110 [ 1206.323487][T23099] rest_init+0x23/0x2b0 [ 1206.323500][T23099] start_kernel+0x3ee/0x4d0 [ 1206.323519][T23099] x86_64_start_reservations+0x18/0x30 [ 1206.323539][T23099] x86_64_start_kernel+0x130/0x190 [ 1206.323558][T23099] common_startup_64+0x13e/0x148 [ 1206.323576][T23099] [ 1206.323576][T23099] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 1206.323596][T23099] _raw_spin_lock_irqsave+0x3a/0x60 [ 1206.323613][T23099] try_to_wake_up+0xb7/0x1870 [ 1206.323632][T23099] __wake_up_common+0x135/0x1f0 [ 1206.323663][T23099] __wake_up+0x31/0x60 [ 1206.323683][T23099] tty_port_default_wakeup+0x2a/0x40 [ 1206.323705][T23099] serial8250_tx_chars+0x68e/0x860 [ 1206.323727][T23099] serial8250_handle_irq+0x761/0xcb0 [ 1206.323749][T23099] serial8250_default_handle_irq+0x9a/0x250 [ 1206.323773][T23099] serial8250_interrupt+0xf5/0x1b0 [ 1206.323797][T23099] __handle_irq_event_percpu+0x22c/0x7d0 [ 1206.323817][T23099] handle_irq_event+0xab/0x1e0 [ 1206.323835][T23099] handle_edge_irq+0x3ca/0x9e0 [ 1206.323853][T23099] __common_interrupt+0xcd/0x2f0 [ 1206.323875][T23099] common_interrupt+0xba/0xe0 [ 1206.323890][T23099] asm_common_interrupt+0x26/0x40 [ 1206.323905][T23099] pv_native_safe_halt+0xf/0x20 [ 1206.323923][T23099] default_idle+0x13/0x20 [ 1206.323946][T23099] default_idle_call+0x6d/0xb0 [ 1206.323968][T23099] do_idle+0x391/0x510 [ 1206.323987][T23099] cpu_startup_entry+0x4f/0x60 [ 1206.324005][T23099] start_secondary+0x21d/0x2b0 [ 1206.324030][T23099] common_startup_64+0x13e/0x148 [ 1206.324046][T23099] [ 1206.324046][T23099] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 1206.324067][T23099] _raw_spin_lock_irqsave+0x3a/0x60 [ 1206.324084][T23099] __wake_up+0x1c/0x60 [ 1206.324104][T23099] tty_port_default_wakeup+0x2a/0x40 [ 1206.324125][T23099] serial8250_tx_chars+0x68e/0x860 [ 1206.324146][T23099] serial8250_handle_irq+0x761/0xcb0 [ 1206.324169][T23099] serial8250_default_handle_irq+0x9a/0x250 [ 1206.324192][T23099] serial8250_interrupt+0xf5/0x1b0 [ 1206.324216][T23099] __handle_irq_event_percpu+0x22c/0x7d0 [ 1206.324235][T23099] handle_irq_event+0xab/0x1e0 [ 1206.324253][T23099] handle_edge_irq+0x3ca/0x9e0 [ 1206.324271][T23099] __common_interrupt+0xcd/0x2f0 [ 1206.324292][T23099] common_interrupt+0xba/0xe0 [ 1206.324305][T23099] asm_common_interrupt+0x26/0x40 [ 1206.324320][T23099] pv_native_safe_halt+0xf/0x20 [ 1206.324338][T23099] default_idle+0x13/0x20 [ 1206.324359][T23099] default_idle_call+0x6d/0xb0 [ 1206.324382][T23099] do_idle+0x391/0x510 [ 1206.324400][T23099] cpu_startup_entry+0x4f/0x60 [ 1206.324419][T23099] start_secondary+0x21d/0x2b0 [ 1206.324442][T23099] common_startup_64+0x13e/0x148 [ 1206.324459][T23099] [ 1206.324459][T23099] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1206.324480][T23099] _raw_spin_lock_irqsave+0x3a/0x60 [ 1206.324497][T23099] serial8250_console_write+0x181/0x1890 [ 1206.324520][T23099] console_flush_all+0x801/0xc60 [ 1206.324539][T23099] console_unlock+0xd8/0x210 [ 1206.324556][T23099] vprintk_emit+0x418/0x6d0 [ 1206.324575][T23099] _printk+0xc7/0x100 [ 1206.324588][T23099] register_console+0xc2d/0x11b0 [ 1206.324607][T23099] univ8250_console_init+0x5f/0x90 [ 1206.324628][T23099] console_init+0x14f/0x680 [ 1206.324652][T23099] start_kernel+0x29f/0x4d0 [ 1206.324670][T23099] x86_64_start_reservations+0x18/0x30 [ 1206.324689][T23099] x86_64_start_kernel+0x130/0x190 [ 1206.324708][T23099] common_startup_64+0x13e/0x148 [ 1206.324725][T23099] [ 1206.324725][T23099] -> #0 (console_owner){-.-.}-{0:0}: [ 1206.324745][T23099] __lock_acquire+0x12a6/0x1ce0 [ 1206.324769][T23099] lock_acquire+0x179/0x350 [ 1206.324782][T23099] console_lock_spinning_enable+0xb0/0xd0 [ 1206.324800][T23099] console_flush_all+0x7aa/0xc60 [ 1206.324819][T23099] console_unlock+0xd8/0x210 [ 1206.324837][T23099] vprintk_emit+0x418/0x6d0 [ 1206.324856][T23099] _printk+0xc7/0x100 [ 1206.324869][T23099] should_fail_ex+0x4e7/0x640 [ 1206.324890][T23099] strncpy_from_user+0x3b/0x2e0 [ 1206.324906][T23099] strncpy_from_user_nofault+0x7f/0x180 [ 1206.324926][T23099] bpf_bprintf_prepare+0xe90/0x13f0 [ 1206.324951][T23099] bpf_trace_printk+0xda/0x190 [ 1206.324966][T23099] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1206.324980][T23099] bpf_trace_run2+0x236/0x590 [ 1206.324996][T23099] __bpf_trace_contention_begin+0xc9/0x110 [ 1206.325021][T23099] trace_contention_begin.constprop.0+0xde/0x160 [ 1206.325039][T23099] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1206.325061][T23099] do_raw_spin_lock+0x20e/0x2b0 [ 1206.325077][T23099] raw_spin_rq_lock_nested+0x7e/0x130 [ 1206.325096][T23099] __schedule+0x307/0x5de0 [ 1206.325113][T23099] preempt_schedule_irq+0x51/0x90 [ 1206.325132][T23099] irqentry_exit+0x36/0x90 [ 1206.325151][T23099] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1206.325167][T23099] write_comp_data+0x11/0x90 [ 1206.325182][T23099] tomoyo_check_acl+0x2ff/0x410 [ 1206.325200][T23099] tomoyo_path_number_perm+0x34b/0x580 [ 1206.325219][T23099] security_file_ioctl+0x9b/0x240 [ 1206.325242][T23099] __x64_sys_ioctl+0xb7/0x210 [ 1206.325266][T23099] do_syscall_64+0xcd/0x4e0 [ 1206.325287][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.325303][T23099] [ 1206.325303][T23099] other info that might help us debug this: [ 1206.325303][T23099] [ 1206.325308][T23099] Chain exists of: [ 1206.325308][T23099] console_owner --> &p->pi_lock --> &rq->__lock [ 1206.325308][T23099] [ 1206.325333][T23099] Possible unsafe locking scenario: [ 1206.325333][T23099] [ 1206.325337][T23099] CPU0 CPU1 [ 1206.325342][T23099] ---- ---- [ 1206.325347][T23099] lock(&rq->__lock); [ 1206.325357][T23099] lock(&p->pi_lock); [ 1206.325368][T23099] lock(&rq->__lock); [ 1206.325379][T23099] lock(console_owner); [ 1206.325389][T23099] [ 1206.325389][T23099] *** DEADLOCK *** [ 1206.325389][T23099] [ 1206.325393][T23099] 5 locks held by syz.0.4450/23099: [ 1206.325403][T23099] #0: ffffffff8f05ccf0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x237/0x580 [ 1206.325444][T23099] #1: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1206.325486][T23099] #2: ffffffff8e5c15a0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 1206.325525][T23099] #3: ffffffff8e5af000 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1206.325560][T23099] #4: ffffffff8e5af070 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1206.325600][T23099] [ 1206.325600][T23099] stack backtrace: [ 1206.325608][T23099] CPU: 0 UID: 0 PID: 23099 Comm: syz.0.4450 Not tainted syzkaller #0 PREEMPT(full) [ 1206.325627][T23099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1206.325638][T23099] Call Trace: [ 1206.325648][T23099] [ 1206.325655][T23099] dump_stack_lvl+0x116/0x1f0 [ 1206.325679][T23099] print_circular_bug+0x275/0x350 [ 1206.325704][T23099] check_noncircular+0x14c/0x170 [ 1206.325732][T23099] __lock_acquire+0x12a6/0x1ce0 [ 1206.325761][T23099] lock_acquire+0x179/0x350 [ 1206.325776][T23099] ? console_lock_spinning_enable+0x9f/0xd0 [ 1206.325797][T23099] ? console_lock_spinning_enable+0x88/0xd0 [ 1206.325819][T23099] console_lock_spinning_enable+0xb0/0xd0 [ 1206.325839][T23099] ? console_lock_spinning_enable+0x9f/0xd0 [ 1206.325860][T23099] console_flush_all+0x7aa/0xc60 [ 1206.325882][T23099] ? __pfx_console_flush_all+0x10/0x10 [ 1206.325905][T23099] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1206.325929][T23099] console_unlock+0xd8/0x210 [ 1206.325949][T23099] ? __pfx_console_unlock+0x10/0x10 [ 1206.325969][T23099] ? do_raw_spin_unlock+0x160/0x230 [ 1206.325988][T23099] ? _printk+0xc7/0x100 [ 1206.326002][T23099] ? __down_trylock_console_sem+0xb0/0x140 [ 1206.326021][T23099] vprintk_emit+0x418/0x6d0 [ 1206.326042][T23099] ? __pfx_vprintk_emit+0x10/0x10 [ 1206.326063][T23099] ? __bpf_trace_contention_begin+0xc9/0x110 [ 1206.326089][T23099] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1206.326119][T23099] _printk+0xc7/0x100 [ 1206.326134][T23099] ? __pfx__printk+0x10/0x10 [ 1206.326151][T23099] ? __pfx____ratelimit+0x10/0x10 [ 1206.326173][T23099] should_fail_ex+0x4e7/0x640 [ 1206.326195][T23099] strncpy_from_user+0x3b/0x2e0 [ 1206.326215][T23099] strncpy_from_user_nofault+0x7f/0x180 [ 1206.326236][T23099] bpf_bprintf_prepare+0xe90/0x13f0 [ 1206.326264][T23099] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1206.326290][T23099] ? rcu_is_watching+0x12/0xc0 [ 1206.326311][T23099] ? trace_sched_exit_tp+0xd1/0x120 [ 1206.326332][T23099] ? bpf_trace_run2+0x3e1/0x590 [ 1206.326349][T23099] bpf_trace_printk+0xda/0x190 [ 1206.326365][T23099] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1206.326384][T23099] ? bpf_trace_run2+0x3e1/0x590 [ 1206.326405][T23099] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1206.326419][T23099] bpf_trace_run2+0x236/0x590 [ 1206.326437][T23099] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1206.326456][T23099] ? __lock_acquire+0x62e/0x1ce0 [ 1206.326483][T23099] __bpf_trace_contention_begin+0xc9/0x110 [ 1206.326509][T23099] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1206.326538][T23099] ? find_held_lock+0x2b/0x80 [ 1206.326559][T23099] trace_contention_begin.constprop.0+0xde/0x160 [ 1206.326579][T23099] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1206.326603][T23099] ? __lock_acquire+0xb97/0x1ce0 [ 1206.326629][T23099] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1206.326660][T23099] do_raw_spin_lock+0x20e/0x2b0 [ 1206.326679][T23099] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1206.326697][T23099] ? rcu_qs+0x2b/0xe0 [ 1206.326716][T23099] ? rcu_note_context_switch+0x192/0x1e00 [ 1206.326739][T23099] raw_spin_rq_lock_nested+0x7e/0x130 [ 1206.326760][T23099] ? preempt_schedule_irq+0x51/0x90 [ 1206.326779][T23099] __schedule+0x307/0x5de0 [ 1206.326797][T23099] ? security_file_ioctl+0x9b/0x240 [ 1206.326820][T23099] ? __x64_sys_ioctl+0xb7/0x210 [ 1206.326844][T23099] ? do_syscall_64+0xcd/0x4e0 [ 1206.326865][T23099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.326887][T23099] ? __pfx___schedule+0x10/0x10 [ 1206.326910][T23099] ? mark_held_locks+0x49/0x80 [ 1206.326936][T23099] preempt_schedule_irq+0x51/0x90 [ 1206.326956][T23099] irqentry_exit+0x36/0x90 [ 1206.326976][T23099] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1206.326994][T23099] RIP: 0010:write_comp_data+0x11/0x90 [ 1206.327012][T23099] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 c7 47 1b 12 <65> 8b 05 d8 47 1b 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 1206.327028][T23099] RSP: 0018:ffffc9000c057be8 EFLAGS: 00000246 [ 1206.327041][T23099] RAX: 0000000000000040 RBX: 000000000000003f RCX: ffffffff84a1728f [ 1206.327053][T23099] RDX: ffff88802a210000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1206.327064][T23099] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1206.327075][T23099] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000c057cb0 [ 1206.327085][T23099] R13: ffff888021ad44b0 R14: 000000000000003f R15: 0000000000000000 [ 1206.327099][T23099] ? tomoyo_check_acl+0x2ff/0x410 [ 1206.327119][T23099] tomoyo_check_acl+0x2ff/0x410 [ 1206.327136][T23099] ? __pfx_tomoyo_check_path_number_acl+0x10/0x10 [ 1206.327160][T23099] tomoyo_path_number_perm+0x34b/0x580 [ 1206.327182][T23099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1206.327205][T23099] ? find_held_lock+0x2b/0x80 [ 1206.327234][T23099] ? find_held_lock+0x2b/0x80 [ 1206.327254][T23099] ? hook_file_ioctl_common+0x145/0x410 [ 1206.327274][T23099] ? __fget_files+0x20e/0x3c0 [ 1206.327295][T23099] security_file_ioctl+0x9b/0x240 [ 1206.327319][T23099] __x64_sys_ioctl+0xb7/0x210 [ 1206.327345][T23099] do_syscall_64+0xcd/0x4e0 [ 1206.327368][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.327385][T23099] RIP: 0033:0x7f97b178eec9 [ 1206.327397][T23099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.327413][T23099] RSP: 002b:00007f97b25d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.327427][T23099] RAX: ffffffffffffffda RBX: 00007f97b19e6180 RCX: 00007f97b178eec9 [ 1206.327438][T23099] RDX: 0000200000000040 RSI: 0000000040345410 RDI: 0000000000000005 [ 1206.327449][T23099] RBP: 00007f97b25d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.327459][T23099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.327469][T23099] R13: 00007f97b19e6218 R14: 00007f97b19e6180 R15: 00007fffd4ea1478 [ 1206.327486][T23099] [ 1207.678120][T23099] CPU: 0 UID: 0 PID: 23099 Comm: syz.0.4450 Not tainted syzkaller #0 PREEMPT(full) [ 1207.678141][T23099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1207.678151][T23099] Call Trace: [ 1207.678156][T23099] [ 1207.678161][T23099] dump_stack_lvl+0x116/0x1f0 [ 1207.678184][T23099] should_fail_ex+0x512/0x640 [ 1207.678203][T23099] strncpy_from_user+0x3b/0x2e0 [ 1207.678220][T23099] strncpy_from_user_nofault+0x7f/0x180 [ 1207.678237][T23099] bpf_bprintf_prepare+0xe90/0x13f0 [ 1207.678261][T23099] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 1207.678282][T23099] ? rcu_is_watching+0x12/0xc0 [ 1207.678300][T23099] ? trace_sched_exit_tp+0xd1/0x120 [ 1207.678318][T23099] ? bpf_trace_run2+0x3e1/0x590 [ 1207.678333][T23099] bpf_trace_printk+0xda/0x190 [ 1207.678346][T23099] ? __pfx_bpf_trace_printk+0x10/0x10 [ 1207.678361][T23099] ? bpf_trace_run2+0x3e1/0x590 [ 1207.678377][T23099] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 1207.678389][T23099] bpf_trace_run2+0x236/0x590 [ 1207.678402][T23099] ? __pfx_bpf_trace_run2+0x10/0x10 [ 1207.678418][T23099] ? __lock_acquire+0x62e/0x1ce0 [ 1207.678440][T23099] __bpf_trace_contention_begin+0xc9/0x110 [ 1207.678463][T23099] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 1207.678487][T23099] ? find_held_lock+0x2b/0x80 [ 1207.678504][T23099] trace_contention_begin.constprop.0+0xde/0x160 [ 1207.678520][T23099] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 1207.678540][T23099] ? __lock_acquire+0xb97/0x1ce0 [ 1207.678561][T23099] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 1207.678582][T23099] do_raw_spin_lock+0x20e/0x2b0 [ 1207.678602][T23099] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1207.678617][T23099] ? rcu_qs+0x2b/0xe0 [ 1207.678632][T23099] ? rcu_note_context_switch+0x192/0x1e00 [ 1207.678650][T23099] raw_spin_rq_lock_nested+0x7e/0x130 [ 1207.678667][T23099] ? preempt_schedule_irq+0x51/0x90 [ 1207.678683][T23099] __schedule+0x307/0x5de0 [ 1207.678698][T23099] ? security_file_ioctl+0x9b/0x240 [ 1207.678717][T23099] ? __x64_sys_ioctl+0xb7/0x210 [ 1207.678738][T23099] ? do_syscall_64+0xcd/0x4e0 [ 1207.678756][T23099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.678774][T23099] ? __pfx___schedule+0x10/0x10 [ 1207.678792][T23099] ? mark_held_locks+0x49/0x80 [ 1207.678814][T23099] preempt_schedule_irq+0x51/0x90 [ 1207.678830][T23099] irqentry_exit+0x36/0x90 [ 1207.678847][T23099] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1207.678862][T23099] RIP: 0010:write_comp_data+0x11/0x90 [ 1207.678878][T23099] Code: cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 c7 47 1b 12 <65> 8b 05 d8 47 1b 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 [ 1207.678892][T23099] RSP: 0018:ffffc9000c057be8 EFLAGS: 00000246 [ 1207.678904][T23099] RAX: 0000000000000040 RBX: 000000000000003f RCX: ffffffff84a1728f [ 1207.678913][T23099] RDX: ffff88802a210000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1207.678922][T23099] RBP: dffffc0000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1207.678931][T23099] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000c057cb0 [ 1207.678939][T23099] R13: ffff888021ad44b0 R14: 000000000000003f R15: 0000000000000000 [ 1207.678950][T23099] ? tomoyo_check_acl+0x2ff/0x410 [ 1207.678968][T23099] tomoyo_check_acl+0x2ff/0x410 [ 1207.678982][T23099] ? __pfx_tomoyo_check_path_number_acl+0x10/0x10 [ 1207.679002][T23099] tomoyo_path_number_perm+0x34b/0x580 [ 1207.679021][T23099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1207.679040][T23099] ? find_held_lock+0x2b/0x80 [ 1207.679062][T23099] ? find_held_lock+0x2b/0x80 [ 1207.679078][T23099] ? hook_file_ioctl_common+0x145/0x410 [ 1207.679094][T23099] ? __fget_files+0x20e/0x3c0 [ 1207.679112][T23099] security_file_ioctl+0x9b/0x240 [ 1207.679132][T23099] __x64_sys_ioctl+0xb7/0x210 [ 1207.679154][T23099] do_syscall_64+0xcd/0x4e0 [ 1207.679172][T23099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.679186][T23099] RIP: 0033:0x7f97b178eec9 [ 1207.679197][T23099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.679210][T23099] RSP: 002b:00007f97b25d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.679223][T23099] RAX: ffffffffffffffda RBX: 00007f97b19e6180 RCX: 00007f97b178eec9 [ 1207.679232][T23099] RDX: 0000200000000040 RSI: 0000000040345410 RDI: 0000000000000005 [ 1207.679241][T23099] RBP: 00007f97b25d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.679250][T23099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.679258][T23099] R13: 00007f97b19e6218 R14: 00007f97b19e6180 R15: 00007fffd4ea1478 [ 1207.679271][T23099] [ 1208.464394][T21114] Bluetooth: hci5: SCO packet for unknown connection handle 200 [ 1208.811767][T20984] tipc: Resetting bearer [ 1208.852806][T20984] tipc: Disabling bearer [ 1208.934905][ T49] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1208.995471][ T49] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.078184][ T49] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.174579][ T49] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1209.267502][ T49] bridge_slave_1: left allmulticast mode [ 1209.273603][ T49] bridge_slave_1: left promiscuous mode [ 1209.279253][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.287438][ T49] bridge_slave_0: left allmulticast mode [ 1209.293116][ T49] bridge_slave_0: left promiscuous mode [ 1209.298766][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.454053][ T49] team0: Port device geneve0 removed [ 1209.613286][ T49] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1209.621484][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.633395][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.643271][ T49] bond0 (unregistering): Released all slaves [ 1209.764102][ T49] bond1 (unregistering): Released all slaves [ 1209.883238][ T49] bond2 (unregistering): Released all slaves [ 1211.533136][ T49] tipc: Left network mode [ 1211.749245][ T49] hsr_slave_0: left promiscuous mode [ 1211.755718][ T49] hsr_slave_1: left promiscuous mode [ 1211.761317][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.770547][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1212.018389][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1212.056182][ T49] team0 (unregistering): Port device team_slave_0 removed